firefox.settings.services.mozilla.com/v1/
143.204.55.36200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.36:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 15 Sep 2022 20:10:33 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: P2VaPLbFDN1L5EmW2NS68eJYEiOta88Ntqcfh7lNR2SceU-8MY3tqw==
Age: 1018
r3.o.lencr.org/
23.36.76.225200 OK 503 B IP 23.36.76.225:0
ASN #20940 Akamai International B.V.
Hash be88d3e043e3b95b52e41812e50fb634
0318ba1ce487817ea7cba61dd9413bed29213800
b5f178d23e633283f226cca7a9ae79b01e6cab2299ff7065c980d3a9953212fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5F178D23E633283F226CCA7A9AE79B01E6CAB2299FF7065C980D3A9953212FD"
Last-Modified: Tue, 13 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5491
Expires: Thu, 15 Sep 2022 21:59:02 GMT
Date: Thu, 15 Sep 2022 20:27:31 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.110200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.110:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 15 Sep 2022 04:35:16 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bd2H9qleUDobe3kankShpcqCKr3Z5HYgrykTiSLDaM2dVZwmlYHYug==
age: 57137
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 20:27:32 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.6.3/css/font-awesome.min.css
104.18.11.207200 OK 7.4 kB URL HTTP/1.1 maxcdn.bootstrapcdn.com/font-awesome/4.6.3/css/font-awesome.min.css
IP 104.18.11.207:0
File type ASCII text, with very long lines (28900)
Hash 70073221d10a213f81fae0c863806dd8
2172a64103a4b41488447842ebaa59a07344e2e5
49b64d002ae60c4d8f981fb84ab87ef225623294b34f4981f91e391e17027e89
GET /font-awesome/4.6.3/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 20:27:32 GMT
Content-Type: text/css; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
CDN-PullZone: 252412
CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74
CDN-RequestCountryCode: DE
CDN-EdgeStorageId: 632, 617, 617
Last-Modified: Mon, 25 Jan 2021 22:04:55 GMT
CDN-CachedAt: 2021-06-08 21:31:13
CDN-RequestPullSuccess: True
CDN-RequestPullCode: 200
Cache-Control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
CDN-RequestId: 5bb5196854d77b3b0bd1d55200ac7249
Content-Encoding: gzip
CDN-Status: 200
CDN-Cache: HIT
CF-Cache-Status: HIT
Age: 8452902
Server: cloudflare
CF-RAY: 74b41a86b90ab51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
fonts.googleapis.com/css?family=Baskerville:400,700
142.250.74.10400 Bad Request 779 B URL HTTP/1.1 fonts.googleapis.com/css?family=Baskerville:400,700
IP 142.250.74.10:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (533)
Hash dcd75e50b73828c87a046ad5f1fc56ed
913ed8ff3fff127fa80b02a90126c3ad761c0796
5374fef99048276544dfe7e0281df0c6ac229a13c2bd2a8a0d236b5b5d41e8dd
GET /css?family=Baskerville:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
HTTP/1.1 400 Bad Request
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 15 Sep 2022 20:27:32 GMT
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
fonts.googleapis.com/css?family=Playfair%20Display:300,400,700,900
142.250.74.10200 OK 503 B URL HTTP/1.1 fonts.googleapis.com/css?family=Playfair%20Display:300,400,700,900
IP 142.250.74.10:0
Hash 06fd7db8177280602dfa8dc4e63cc872
4530c0fecd9e47fb2beb6c3572a86d9291fa5fc4
bcf97d91d92ce3357bde40ee6ae360dee3fa6c023d4d3434d60a5f6fb5771232
GET /css?family=Playfair%20Display:300,400,700,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Thu, 15 Sep 2022 20:27:32 GMT
Date: Thu, 15 Sep 2022 20:27:32 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c86fc6649c7c512abb52fcd62d51ee26
bf241d6c1779668447df444a239d715b6ed46f6d
822cb499ea058f2c40ce4942048528575fadc172d3669007f5f34fae41c7ea49
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a.mailmunch.co/app/v1/site.js
143.204.55.29200 OK 8.4 kB URL HTTP/1.1 a.mailmunch.co/app/v1/site.js
IP 143.204.55.29:0
File type ASCII text, with very long lines (26047), with no line terminators
Hash f6c0188175ee3580fb80ab03f263f1e6
ce808659ca7e929199b5d65ea1a54171b0d06db3
2aca41d4457b82eabf66e8bea8a7b54d498efb21b5bf31bf5cb81e087b07a690
GET /app/v1/site.js HTTP/1.1
Host: a.mailmunch.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 8416
Connection: keep-alive
Date: Wed, 14 Sep 2022 19:21:12 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, POST, PUT, DELETE
Access-Control-Expose-Headers: ETag
Access-Control-Max-Age: 3000
Last-Modified: Wed, 14 Sep 2022 07:18:28 GMT
ETag: "f6c0188175ee3580fb80ab03f263f1e6"
Cache-Control: max-age=172800
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: lFWxaDJMZkPLolMpXJR3yt5-vn52rHgDq8vsMx1Gf82k7gGE8Gn4fQ==
Age: 90381
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash ee256b7ce0ba8310b3bbe239218b7a69
f14ff579194c66806637e7054eb4a59bc9bb4893
45a741224496e9f3c0abf3f3fb12e445054a92bf040a68c8838aec67d0f0131c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
216.58.207.201200 OK 7.8 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
IP 216.58.207.201:0
File type ASCII text, with very long lines (35959)
Hash 5aa2d3297bdc86bc81322aedecbb5e79
1c0a3c007e41726e167e79b70ddea76198650884
feae1fac625d0f30b5f10fa00b62df1a5600cd2178062c427e55f289b29cc630
GET /static/v1/widgets/2975350028-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Sep 2022 08:13:04 GMT
expires: Sat, 09 Sep 2023 08:13:04 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 08 Sep 2022 15:01:24 GMT
content-type: text/css
age: 562468
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 2e8e3b8dcfc70035468cee19fa0ce164
8abd549de54a56c4d8866642803817e1d411ad88
9f8702221570464be855f0cf42d77a90b745fbf6c60d5d437218d45f9603fd19
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js
216.58.211.10200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js
IP 216.58.211.10:0
File type ASCII text, with very long lines (32047)
Hash 7a83c39ee44cf30d4e6d9a8d5c74276e
175f5e717c0fd96485d4371234d4c54355753c2b
ab02740b3bd7f47ad3a0ebc2571a67e1d00dfef34bb04e87adb08b0b61381d8e
GET /ajax/libs/jquery/1.11.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33495
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Sep 2022 03:07:58 GMT
expires: Wed, 13 Sep 2023 03:07:58 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 235174
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash eb7bdebc4efb819b8d1328fe619264c8
1a614dd3ce7a62d8f589eead279b612ace503d1c
1157349779c0920a0a105e0551dadfd42e554a982dafb216a5a982c45b91248d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 7975b33417f675d21a178b997288d616
1d2e957c46d45d6cb2f44389f3dcc66c880b6065
daffff63daade8bb0c2fd63570229df8502c563dd079b4da4103f6ee89fa67e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 2e8e3b8dcfc70035468cee19fa0ce164
8abd549de54a56c4d8866642803817e1d411ad88
9f8702221570464be855f0cf42d77a90b745fbf6c60d5d437218d45f9603fd19
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.anniesbeautyhouse.de/
142.250.74.179200 OK 81 kB URL HTTP/1.1 www.anniesbeautyhouse.de/
IP 142.250.74.179:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (689)
Hash 5979dc8f3a6e6c9b8f268e9617387e3d
18026ed80ee70aad94ae8cfe983213776b6d739d
67b935b52314306e5bdff8204369f7bfe0a14043cd078220669f4f90f012edf2
GET / HTTP/1.1
Host: www.anniesbeautyhouse.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Thu, 15 Sep 2022 20:27:32 GMT
Date: Thu, 15 Sep 2022 20:27:32 GMT
Cache-Control: private, max-age=0
Last-Modified: Sun, 28 Aug 2022 13:45:52 GMT
ETag: W/"ff74053c07f81e1aa8d99267574fd21fe1f66dc290d81bf1901ce7325e7229c5"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 80635
Server: GSE
www.anniesbeautyhouse.de/js/cookienotice.js
142.250.74.179200 OK 2.0 kB URL HTTP/1.1 www.anniesbeautyhouse.de/js/cookienotice.js
IP 142.250.74.179:0
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
GET /js/cookienotice.js HTTP/1.1
Host: www.anniesbeautyhouse.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Thu, 15 Sep 2022 20:27:32 GMT
Expires: Thu, 22 Sep 2022 20:27:32 GMT
Cache-Control: public, max-age=604800
Last-Modified: Thu, 15 Sep 2022 17:55:41 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 21dff4be7a54275d6fa2d1e8abe81e54
ff9ac400cdc9a1dbc2c778397caaf3fbbafb5e87
a5a45aeea3e30c56305cb9bf85e87741d5fca77fb9262ac489882597482cb20e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 21dff4be7a54275d6fa2d1e8abe81e54
ff9ac400cdc9a1dbc2c778397caaf3fbbafb5e87
a5a45aeea3e30c56305cb9bf85e87741d5fca77fb9262ac489882597482cb20e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 21dff4be7a54275d6fa2d1e8abe81e54
ff9ac400cdc9a1dbc2c778397caaf3fbbafb5e87
a5a45aeea3e30c56305cb9bf85e87741d5fca77fb9262ac489882597482cb20e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 21dff4be7a54275d6fa2d1e8abe81e54
ff9ac400cdc9a1dbc2c778397caaf3fbbafb5e87
a5a45aeea3e30c56305cb9bf85e87741d5fca77fb9262ac489882597482cb20e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 21dff4be7a54275d6fa2d1e8abe81e54
ff9ac400cdc9a1dbc2c778397caaf3fbbafb5e87
a5a45aeea3e30c56305cb9bf85e87741d5fca77fb9262ac489882597482cb20e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4.bp.blogspot.com/-wbsHtVmM36E/WpHuSsKqMjI/AAAAAAAA7Qk/nB-8EADgsIEBFKOtF1snZ4Uo0pKqv0DvwCK4BGAYYCw/s1600/Header_ANNIES.png
142.250.74.161200 OK 21 kB URL HTTP/1.1 4.bp.blogspot.com/-wbsHtVmM36E/WpHuSsKqMjI/AAAAAAAA7Qk/nB-8EADgsIEBFKOtF1snZ4Uo0pKqv0DvwCK4BGAYYCw/s1600/Header_ANNIES.png
IP 142.250.74.161:0
File type PNG image data, 1600 x 337, 8-bit/color RGBA, non-interlaced\012- data
Hash 0289a868413858f8346bcb07201d1747
da2f1ec38e2f9848a03af105ec46fab634b01dc8
45363eb8cba763e2db1fc2ef0ca1d527c3f2ec327fc5e15a4480bf2ea7b66c43
GET /-wbsHtVmM36E/WpHuSsKqMjI/AAAAAAAA7Qk/nB-8EADgsIEBFKOtF1snZ4Uo0pKqv0DvwCK4BGAYYCw/s1600/Header_ANNIES.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "ved0a"
Expires: Fri, 16 Sep 2022 20:27:32 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Header_ANNIES.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 15 Sep 2022 20:27:32 GMT
Server: fife
Content-Length: 20836
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 7df27d4646e6e1cd358f0997ad604ea9
bf0c3feb55312e00ed8aa718458cc1e932903ac2
ba7ebd5b66156d280c46a2e492c5830f67e114711498b405b4e57ee1f45f4905
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2
142.250.74.163200 OK 36 kB URL HTTP/2 fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 35764, version 1.0\012- data
Hash 60f23230f1a8d5c3b7d25b73f5b5ce23
ed08ada85d017893b9bcb8224e99154c6708f5d2
22b6cdc450204c1cb32b31e679d812fea1c17ac506a7b78daeb12bd0ab25fde8
GET /s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.anniesbeautyhouse.de
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35764
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Sep 2022 21:14:36 GMT
expires: Tue, 12 Sep 2023 21:14:36 GMT
cache-control: public, max-age=31536000
age: 256376
last-modified: Mon, 18 Jul 2022 19:06:36 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 6e669093dc2c285ce41d74ad82e5c3d2
1e65ded94e2b8c575979da362ce8dc2e304c5d5f
5a3c12851ee84e69a6ff8f0707d036d36827c77011af12aeabc187220e0fc79c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yourjavascript.com/1144119834/fitvids.js
5.189.183.184200 OK 1.0 kB URL HTTP/1.1 yourjavascript.com/1144119834/fitvids.js
IP 5.189.183.184:0
File type HTML document, ASCII text, with CRLF, LF line terminators
Hash daf9a227e5083b338a8fda36ee87ffbe
365f06707216d5fa91801f4026c4354244aeb298
eb3c6c624bce0122e0a9155199e510d4a8a5aba4ceeceff05f5b8e3334bf914a
Analyzer Verdict Alert fortinet Malware
GET /1144119834/fitvids.js HTTP/1.1
Host: yourjavascript.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 15 Sep 2022 20:27:32 GMT
Content-Type: text/javascript; charset: UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
Vary: Accept-Encoding
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
www.awin1.com/cshow.php?s=2196671&v=11590&q=341221&r=416285
2.21.192.211302 Moved Temporarily 0 B URL HTTP/1.1 www.awin1.com/cshow.php?s=2196671&v=11590&q=341221&r=416285
IP 2.21.192.211:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cshow.php?s=2196671&v=11590&q=341221&r=416285 HTTP/1.1
Host: www.awin1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Location: https://fstracking.com/affiliate/breuninger/banner/HW21_Damen_300x250.gif
Node: Helix
P3P: policyref="http://www.awin1.com/w3c/p3p.xml", CP="NOI NID CURa ADMa PSAa HISa OUR IND UNI PUR COM NAV"
Date: Thu, 15 Sep 2022 20:27:32 GMT
Connection: keep-alive
Set-Cookie: AWSESS=341221:2196671;domain=.awin1.com;path=/;Secure;SameSite=None
Strict-Transport-Security: max-age=86400
Awin-Akamai-Rule-Set: default
www.awin1.com/cshow.php?s=2207707&v=12381&q=336054&r=416285
2.21.192.211302 Moved Temporarily 0 B URL HTTP/1.1 www.awin1.com/cshow.php?s=2207707&v=12381&q=336054&r=416285
IP 2.21.192.211:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cshow.php?s=2207707&v=12381&q=336054&r=416285 HTTP/1.1
Host: www.awin1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Location: https://d2a54pfih9ionq.cloudfront.net/blank/gif/300/250
Node: Helix
P3P: policyref="http://www.awin1.com/w3c/p3p.xml", CP="NOI NID CURa ADMa PSAa HISa OUR IND UNI PUR COM NAV"
Date: Thu, 15 Sep 2022 20:27:32 GMT
Connection: keep-alive
Set-Cookie: AWSESS=336054:2207707;domain=.awin1.com;path=/;Secure;SameSite=None
Strict-Transport-Security: max-age=86400
Awin-Akamai-Rule-Set: default
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 6e669093dc2c285ce41d74ad82e5c3d2
1e65ded94e2b8c575979da362ce8dc2e304c5d5f
5a3c12851ee84e69a6ff8f0707d036d36827c77011af12aeabc187220e0fc79c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ibb.co/hF9rKHm/IMG-7338.jpg
51.210.32.106200 OK 253 kB URL HTTP/2 i.ibb.co/hF9rKHm/IMG-7338.jpg
IP 51.210.32.106:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=PhotoScape, datetime=2020:01:23 14:48:58], baseline, precision 8, 500x665, components 3\012- data
Size 253 kB (252582 bytes)
Hash 9040ccf83b52cf3154eb73374225bba2
ea77f713d22c3444b3b2c58d15074eb7124003f9
4a68e67119dfdc31ad3b9c2b2f9a6489ee32dbcdf82a1f8d220c31c61f52c559
GET /hF9rKHm/IMG-7338.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 20:27:32 GMT
content-type: image/jpeg
content-length: 252582
last-modified: Sat, 29 Feb 2020 13:41:34 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
image.ibb.co/dHjJP6/Screenshot_2018_01_15_23_40_28.png
51.210.32.106200 OK 13 kB URL HTTP/2 image.ibb.co/dHjJP6/Screenshot_2018_01_15_23_40_28.png
IP 51.210.32.106:0
File type PNG image data, 300 x 142, 8-bit/color RGBA, non-interlaced\012- data
Hash e917b470761cb6f145d0a597824d0315
f5ebd98975d983bc286b1854b3415a14e7995730
c0943115090e2a407d3f3e85e01a94cc873c8d35273a095730a20fb2487b14ab
GET /dHjJP6/Screenshot_2018_01_15_23_40_28.png HTTP/1.1
Host: image.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 20:27:32 GMT
content-type: image/png
content-length: 13097
last-modified: Mon, 15 Jan 2018 22:50:23 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.36200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.36:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 15 Sep 2022 20:03:22 GMT
Cache-Control: max-age=3600
Expires: Thu, 15 Sep 2022 20:33:11 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: yrQjkXT6ONsp2glfYZanooZP4dGay1mRxXOH6RRnpsiE16yENjAeUQ==
Age: 1450
4.bp.blogspot.com/-K3sMiwr_Lxc/Xw21FjW6acI/AAAAAAAA--w/7vs_TZ_kOa8GktZIRCDuuj1d1x-QFKl4gCK4BGAYYCw/s292/6095039.jpg
142.250.74.161200 OK 26 kB URL HTTP/1.1 4.bp.blogspot.com/-K3sMiwr_Lxc/Xw21FjW6acI/AAAAAAAA--w/7vs_TZ_kOa8GktZIRCDuuj1d1x-QFKl4gCK4BGAYYCw/s292/6095039.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 216x292, components 3\012- data
Hash e756f074e5ac797f9d21f719090c5d66
c3655afe531f25dd74da5ea88d1b14c80690da4f
28f6697e27acb9b30b5edebe8bdb6777ff7fe5087bb5acf1e940533845a22a87
GET /-K3sMiwr_Lxc/Xw21FjW6acI/AAAAAAAA--w/7vs_TZ_kOa8GktZIRCDuuj1d1x-QFKl4gCK4BGAYYCw/s292/6095039.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vfbee"
Expires: Fri, 16 Sep 2022 20:27:32 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="6095039.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 15 Sep 2022 20:27:32 GMT
Server: fife
Content-Length: 26336
X-XSS-Protection: 0
1.bp.blogspot.com/-n_R8U5K6qMQ/YILSQrhaMKI/AAAAAAAA_Wg/sKTBDU-Tw3MjBhnDOsp-pHclIfMWE-z4QCLcBGAsYHQ/s16000/pexels-javon-swaby-3279691.jpg
142.250.74.161200 OK 321 kB URL HTTP/2 1.bp.blogspot.com/-n_R8U5K6qMQ/YILSQrhaMKI/AAAAAAAA_Wg/sKTBDU-Tw3MjBhnDOsp-pHclIfMWE-z4QCLcBGAsYHQ/s16000/pexels-javon-swaby-3279691.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 2048x1365, components 3\012- data
Size 321 kB (320997 bytes)
Hash 380fdc0d6e51ddf79965a510db49b436
4d38e2ffb6beabfadce1c2202f78dc0d116005ce
df938f0424454dcdbef064ecbc363ffb6535e08b61af1511fd1321998bd36634
GET /-n_R8U5K6qMQ/YILSQrhaMKI/AAAAAAAA_Wg/sKTBDU-Tw3MjBhnDOsp-pHclIfMWE-z4QCLcBGAsYHQ/s16000/pexels-javon-swaby-3279691.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vfd69"
expires: Fri, 16 Sep 2022 20:27:32 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="pexels-javon-swaby-3279691.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:32 GMT
server: fife
content-length: 320997
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-sOYPL5OnK3c/YSajvHUKG-I/AAAAAAAA_y0/26Im0_l_ScsZKTPdbRJ1qvAqSPMPPhzogCLcBGAsYHQ/s16000/post-8e34943122365af6418e81c7d115fcf9a4f6eb0f561686733235861c.webp
142.250.74.161200 OK 188 kB URL HTTP/2 1.bp.blogspot.com/-sOYPL5OnK3c/YSajvHUKG-I/AAAAAAAA_y0/26Im0_l_ScsZKTPdbRJ1qvAqSPMPPhzogCLcBGAsYHQ/s16000/post-8e34943122365af6418e81c7d115fcf9a4f6eb0f561686733235861c.webp
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 1000x1334, components 3\012- data
Size 188 kB (188472 bytes)
Hash 7885685d5cd6b48e29597fbb7c5ab525
b4690c4e5d538e555c9013f6dc3a93146f3d2914
ba98d31adc046e2ae50165d9966dd97dfeb35f095e4f4858ecc1da1b69a7ca7a
GET /-sOYPL5OnK3c/YSajvHUKG-I/AAAAAAAA_y0/26Im0_l_ScsZKTPdbRJ1qvAqSPMPPhzogCLcBGAsYHQ/s16000/post-8e34943122365af6418e81c7d115fcf9a4f6eb0f561686733235861c.webp HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vff2e"
expires: Fri, 16 Sep 2022 20:27:32 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="post-8e34943122365af6418e81c7d115fcf9a4f6eb0f561686733235861c.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:32 GMT
server: fife
content-length: 188472
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 21dff4be7a54275d6fa2d1e8abe81e54
ff9ac400cdc9a1dbc2c778397caaf3fbbafb5e87
a5a45aeea3e30c56305cb9bf85e87741d5fca77fb9262ac489882597482cb20e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-pIHdoWiwQGY/YJ6mRK0ZJ8I/AAAAAAAA_Ww/_bOKXn_KTtUSfXofCvXSBdC8IwSSsOlzQCLcBGAsYHQ/s16000/bride-5519828_1280.jpg
142.250.74.161200 OK 133 kB URL HTTP/2 1.bp.blogspot.com/-pIHdoWiwQGY/YJ6mRK0ZJ8I/AAAAAAAA_Ww/_bOKXn_KTtUSfXofCvXSBdC8IwSSsOlzQCLcBGAsYHQ/s16000/bride-5519828_1280.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1000x666, components 3\012- data
Size 133 kB (132919 bytes)
Hash becfbd39087e69e8f86911f47a5f90bd
4dcd7bfb70a0b057e25466aa427bde28c701689e
9fc14a00227a7a62054af1df8ae6b5f544896604274523a7bb0bf76bc70c6fde
GET /-pIHdoWiwQGY/YJ6mRK0ZJ8I/AAAAAAAA_Ww/_bOKXn_KTtUSfXofCvXSBdC8IwSSsOlzQCLcBGAsYHQ/s16000/bride-5519828_1280.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vfd6d"
expires: Fri, 16 Sep 2022 20:27:32 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="bride-5519828_1280.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:32 GMT
server: fife
content-length: 132919
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Playfair%20Display:400,300,500,600,700
142.250.74.10200 OK 137 kB URL HTTP/2 fonts.googleapis.com/css?family=Playfair%20Display:400,300,500,600,700
IP 142.250.74.10:0
Size 137 kB (137131 bytes)
Hash 14bf82c5ed2b50946f0bcc418f8a76b7
f39b5131ae5853feb41e01c612dd28316fb0b534
32304dcfd364ec06949a424df47ed38bf99bec4b6388a52f4334c354f8116dcc
GET /css?family=Playfair%20Display:400,300,500,600,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 15 Sep 2022 20:27:32 GMT
date: Thu, 15 Sep 2022 20:27:32 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-Ff2nlsBxtOQ/YPBuf_Ggc6I/AAAAAAAA_m8/bpyqY3Onff0Bg3gPO3bOCN8L1lZ5u5sWACLcBGAsYHQ/s16000/altenahr-u%25CC%2588berschwemmt-durch-Hochwasser.jpg
142.250.74.161200 OK 398 kB URL HTTP/2 1.bp.blogspot.com/-Ff2nlsBxtOQ/YPBuf_Ggc6I/AAAAAAAA_m8/bpyqY3Onff0Bg3gPO3bOCN8L1lZ5u5sWACLcBGAsYHQ/s16000/altenahr-u%25CC%2588berschwemmt-durch-Hochwasser.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1280x680, components 3\012- data
Size 398 kB (398306 bytes)
Hash 3c9991e2127cb0358444f6c600c0de2d
460ebfd7cecdbc4e6035dee55caf21cb4395f733
47119640e571b730013e8b2f4988b9b871c401444a30f62df15a896f039f92fe
GET /-Ff2nlsBxtOQ/YPBuf_Ggc6I/AAAAAAAA_m8/bpyqY3Onff0Bg3gPO3bOCN8L1lZ5u5sWACLcBGAsYHQ/s16000/altenahr-u%25CC%2588berschwemmt-durch-Hochwasser.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vfe70"
expires: Fri, 16 Sep 2022 20:27:32 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="altenahr-u_berschwemmt-durch-Hochwasser.jpg";filename*=UTF-8''altenahr-u%CC%88berschwemmt-durch-Hochwasser.jpg
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:32 GMT
server: fife
content-length: 398306
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-gY--_MsGxfc/YL8fGrwXZ5I/AAAAAAAA_ZA/HLRbkAzFPLUut04ClpyLx00WwIQI9EyLACLcBGAsYHQ/s16000/BT_artikel_upcyclingkleidung.jpg
142.250.74.161200 OK 188 kB URL HTTP/2 1.bp.blogspot.com/-gY--_MsGxfc/YL8fGrwXZ5I/AAAAAAAA_ZA/HLRbkAzFPLUut04ClpyLx00WwIQI9EyLACLcBGAsYHQ/s16000/BT_artikel_upcyclingkleidung.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1000x563, components 3\012- data
Size 188 kB (188383 bytes)
Hash d0b502fc1f1dcd3b698659a6179588b8
249dcdeb7b7792340e534cea41fd048a5ae44e22
872361572bfa4ee5c304aad5ade941ea6cf07fbebf19480d1bc3bd2c1932b1d4
GET /-gY--_MsGxfc/YL8fGrwXZ5I/AAAAAAAA_ZA/HLRbkAzFPLUut04ClpyLx00WwIQI9EyLACLcBGAsYHQ/s16000/BT_artikel_upcyclingkleidung.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vfd91"
expires: Fri, 16 Sep 2022 20:27:32 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="BT_artikel_upcyclingkleidung.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:32 GMT
server: fife
content-length: 188383
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-OTSIJPTcIw8/W08DRmA1q3I/AAAAAAAA78w/RN54rhHtUdgCXRhjBKmI49OrAiWpTrDiwCK4BGAYYCw/s1600/Screenshot%2B2018-07-18%2B10.23.36.png
142.250.74.161200 OK 38 kB URL HTTP/1.1 1.bp.blogspot.com/-OTSIJPTcIw8/W08DRmA1q3I/AAAAAAAA78w/RN54rhHtUdgCXRhjBKmI49OrAiWpTrDiwCK4BGAYYCw/s1600/Screenshot%2B2018-07-18%2B10.23.36.png
IP 142.250.74.161:0
File type PNG image data, 500 x 109, 8-bit/color RGB, non-interlaced\012- data
Hash 033770d445fcc125214eebf02da0e312
67056e64816d6648a3fed8c15a0ba8e6bed104e4
267cdbb67246e0570c24eb1292adce98df27ba21b973887dcb1a000fced9eeaf
GET /-OTSIJPTcIw8/W08DRmA1q3I/AAAAAAAA78w/RN54rhHtUdgCXRhjBKmI49OrAiWpTrDiwCK4BGAYYCw/s1600/Screenshot%2B2018-07-18%2B10.23.36.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Screenshot 2018-07-18 10.23.36.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 38185
X-XSS-Protection: 0
Date: Thu, 15 Sep 2022 20:27:32 GMT
Expires: Wed, 14 Sep 2022 21:27:18 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "vefcd"
Content-Type: image/png
Age: 0
2.bp.blogspot.com/-a0dkQLJkaSY/X8Uh1PZ-IrI/AAAAAAAA_LU/94wGuTTYJT8q35FL32_z0jeTfxNmn0ldACK4BGAYYCw/s292/banner.jpg
142.250.74.161200 OK 44 kB URL HTTP/1.1 2.bp.blogspot.com/-a0dkQLJkaSY/X8Uh1PZ-IrI/AAAAAAAA_LU/94wGuTTYJT8q35FL32_z0jeTfxNmn0ldACK4BGAYYCw/s292/banner.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 292x292, components 3\012- data
Hash dbd591beb034ce64d38c8ef799c68518
a024a7bbe9c4e78c3af0f13cb4e5f602aa653533
eeb38cfd57ffac0eb09ed89e17de945198af9278225e3d4ce118658bd118fb7e
GET /-a0dkQLJkaSY/X8Uh1PZ-IrI/AAAAAAAA_LU/94wGuTTYJT8q35FL32_z0jeTfxNmn0ldACK4BGAYYCw/s292/banner.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="banner.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 43650
X-XSS-Protection: 0
Date: Thu, 15 Sep 2022 20:27:32 GMT
Expires: Wed, 14 Sep 2022 21:27:17 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "vfcb6"
Content-Type: image/jpeg
Age: 0
1.bp.blogspot.com/-vnZ7EI0-vqU/YO2Ti8HS4cI/AAAAAAAA_mY/BQg5WAnAO5YS6xc7Jvqoph9CDQKXyCVtgCLcBGAsYHQ/s16000/l_pa_summer_holiday.jpg
142.250.74.161200 OK 146 kB URL HTTP/2 1.bp.blogspot.com/-vnZ7EI0-vqU/YO2Ti8HS4cI/AAAAAAAA_mY/BQg5WAnAO5YS6xc7Jvqoph9CDQKXyCVtgCLcBGAsYHQ/s16000/l_pa_summer_holiday.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1000x328, components 3\012- data
Size 146 kB (145489 bytes)
Hash 817f2600fca142c5854f24a3e1c67335
6db8c23aa8200afca3d3a641586d25718685cfb4
c69d7dff552196d3cd1a0476e85905a8e5e24b1862582c080a29614f377fd9a6
GET /-vnZ7EI0-vqU/YO2Ti8HS4cI/AAAAAAAA_mY/BQg5WAnAO5YS6xc7Jvqoph9CDQKXyCVtgCLcBGAsYHQ/s16000/l_pa_summer_holiday.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vfe67"
expires: Fri, 16 Sep 2022 20:27:32 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="l_pa_summer_holiday.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:32 GMT
server: fife
content-length: 145489
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-R0oMand3smI/YOdHQfHOLFI/AAAAAAAA_k4/emSil2aVR-g-KXyakLeeqXZKpRaqgjEkwCLcBGAsYHQ/s16000/noname.png
142.250.74.161200 OK 319 kB URL HTTP/2 1.bp.blogspot.com/-R0oMand3smI/YOdHQfHOLFI/AAAAAAAA_k4/emSil2aVR-g-KXyakLeeqXZKpRaqgjEkwCLcBGAsYHQ/s16000/noname.png
IP 142.250.74.161:0
File type PNG image data, 1000 x 735, 8-bit/color RGB, non-interlaced\012- data
Size 319 kB (318970 bytes)
Hash 7b3289882fe0ab34d31745f099f69ebd
0f1becd216ac923de57f80e87cb7039b5d331c91
c28300239979b15d706840d91d9b7947d29691a559e8e8dda3ea86967ce23193
GET /-R0oMand3smI/YOdHQfHOLFI/AAAAAAAA_k4/emSil2aVR-g-KXyakLeeqXZKpRaqgjEkwCLcBGAsYHQ/s16000/noname.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vfe4f"
expires: Fri, 16 Sep 2022 20:27:32 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="noname.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:32 GMT
server: fife
content-length: 318970
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-Ov9NZTOh8o8/YZkCrpiFVBI/AAAAAAAA_0w/_whSlSJxAGkTymIVdpVpzBcmBswy2JxgwCLcBGAsYHQ/s16000/IMG_0597.jpeg
142.250.74.161200 OK 626 kB URL HTTP/2 1.bp.blogspot.com/-Ov9NZTOh8o8/YZkCrpiFVBI/AAAAAAAA_0w/_whSlSJxAGkTymIVdpVpzBcmBswy2JxgwCLcBGAsYHQ/s16000/IMG_0597.jpeg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1000x1333, components 3\012- data
Size 626 kB (625795 bytes)
Hash bf870e57b69a3b083321921062e6f1d7
5ba95e1c70653e40c0dace70d08b15cb8333c159
9d82bd2006455411d1b88713abfcb7e501f391448665259ec725d2fe5d06e0dd
GET /-Ov9NZTOh8o8/YZkCrpiFVBI/AAAAAAAA_0w/_whSlSJxAGkTymIVdpVpzBcmBswy2JxgwCLcBGAsYHQ/s16000/IMG_0597.jpeg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vff4d"
expires: Fri, 16 Sep 2022 20:27:32 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="IMG_0597.jpeg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:32 GMT
server: fife
content-length: 625795
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-Banok18OXjU/Wl0vboizkTI/AAAAAAAA6hs/Eb2jOivpxHQGxELECFv4P8hKeYdizcPBgCK4BGAYYCw/s1600/dvpj_250x80b.jpg
142.250.74.161200 OK 8.1 kB URL HTTP/1.1 1.bp.blogspot.com/-Banok18OXjU/Wl0vboizkTI/AAAAAAAA6hs/Eb2jOivpxHQGxELECFv4P8hKeYdizcPBgCK4BGAYYCw/s1600/dvpj_250x80b.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 292x93, components 3\012- data
Hash f46180b020036592afc9d4b042383555
360ce9bbb82732efff15e4a3ed80506e361f2de9
e3a29e94fcbbf3ef5fee767af4d98b7c18c2562ff94b6b796c0dd79cb8473970
GET /-Banok18OXjU/Wl0vboizkTI/AAAAAAAA6hs/Eb2jOivpxHQGxELECFv4P8hKeYdizcPBgCK4BGAYYCw/s1600/dvpj_250x80b.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vea1c"
Expires: Fri, 16 Sep 2022 20:27:32 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="dvpj_250x80b.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 15 Sep 2022 20:27:32 GMT
Server: fife
Content-Length: 8145
X-XSS-Protection: 0
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d597af1ab2f21a983bf0f0d105b94209
9d5dd938777abde094c89066b539141a02106b88
a614eb7f969544c8040642be7c852625341e2441e757d063d2af1ff465c8c3f4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4699
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:33 GMT
Last-Modified: Thu, 15 Sep 2022 19:09:15 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
www.anniesbeautyhouse.de/feeds/posts/default/-/Fashion?alt=json-in-script&callback=labelthumbs
142.250.74.179200 OK 116 kB URL HTTP/1.1 www.anniesbeautyhouse.de/feeds/posts/default/-/Fashion?alt=json-in-script&callback=labelthumbs
IP 142.250.74.179:0
File type Unicode text, UTF-8 text, with very long lines (65403)
Size 116 kB (115493 bytes)
Hash 811bfe9d7dff4dcebe0490d743ca7428
45c746fd4b954fef29e501edcaa2f3db27736bb1
31f49a3d6da80ff3c42b8b2fab7bb1d40099ec0ae14eb777a0b5583f795cd774
GET /feeds/posts/default/-/Fashion?alt=json-in-script&callback=labelthumbs HTTP/1.1
Host: www.anniesbeautyhouse.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"863b3aa7eae426a6b9dcc2b5ee9c503cf260c7bce50309467e6059eb7b63f99e"
Date: Thu, 15 Sep 2022 20:27:32 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Expires: Thu, 15 Sep 2022 20:27:33 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Sun, 28 Aug 2022 13:45:52 GMT
Content-Encoding: gzip
Content-Length: 115493
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.76.225200 OK 503 B IP 23.36.76.225:0
ASN #20940 Akamai International B.V.
Hash 96303813be31eb1ba03894083c23a0fc
d9e64bfc69ba83cb994d41dc03afb26fce63979d
27b7007ee7a18a20e09cb7c23ae25f4b86d7b42165d6dacc08ffd6f196e6a1f2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "27B7007EE7A18A20E09CB7C23AE25F4B86D7B42165D6DACC08FFD6F196E6A1F2"
Last-Modified: Tue, 13 Sep 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 16 Sep 2022 02:27:33 GMT
Date: Thu, 15 Sep 2022 20:27:33 GMT
Connection: keep-alive
maxcdn.bootstrapcdn.com/font-awesome/4.6.3/fonts/fontawesome-webfont.woff2?v=4.6.3
104.18.11.207200 OK 72 kB URL HTTP/1.1 maxcdn.bootstrapcdn.com/font-awesome/4.6.3/fonts/fontawesome-webfont.woff2?v=4.6.3
IP 104.18.11.207:0
File type Web Open Font Format (Version 2), TrueType, length 71896, version 4.393\012- data
Hash e6cf7c6ec7c2d6f670ae9d762604cb0b
97e438cc545714309882fbceadbf344fcaddcec5
7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73
GET /font-awesome/4.6.3/fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.anniesbeautyhouse.de
Connection: keep-alive
Referer: http://maxcdn.bootstrapcdn.com/
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 20:27:33 GMT
Content-Type: font/woff2
Content-Length: 71896
Connection: keep-alive
CDN-PullZone: 252412
CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74
CDN-RequestCountryCode: DE
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31919000
ETag: "e6cf7c6ec7c2d6f670ae9d762604cb0b"
Last-Modified: Mon, 25 Jan 2021 22:04:55 GMT
CDN-CachedAt: 08/20/2022 02:31:28
CDN-ProxyVer: 1.02
CDN-RequestPullCode: 200
CDN-RequestPullSuccess: True
CDN-EdgeStorageId: 632
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
X-Content-Type-Options: nosniff
CDN-Status: 200
CDN-RequestId: 8b70bcc30a0649f552340f1afbee3ca3
CDN-Cache: HIT
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74b41a8cdd6bb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
fstracking.com/affiliate/breuninger/banner/HW21_Damen_300x250.gif
134.122.64.35200 OK 52 kB URL HTTP/1.1 fstracking.com/affiliate/breuninger/banner/HW21_Damen_300x250.gif
IP 134.122.64.35:0
ASN #14061 DIGITALOCEAN-ASN
File type GIF image data, version 89a, 300 x 250\012- data
Hash cb1b794c02c41a25768d944b177b4b28
cb203ede3f68ff40711493ec08d67fdfced0130f
159bc517fb197f525181a41b01b734b825bbee816b80866a925ff353d90b26fa
GET /affiliate/breuninger/banner/HW21_Damen_300x250.gif HTTP/1.1
Host: fstracking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.anniesbeautyhouse.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 15 Sep 2022 20:27:33 GMT
Content-Type: image/gif
Content-Length: 52513
Last-Modified: Wed, 27 Apr 2022 13:32:02 GMT
Connection: keep-alive
ETag: "626945d2-cd21"
Accept-Ranges: bytes
push.services.mozilla.com/
54.187.146.10101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.187.146.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: LXqDMJkyhIQsdyu+xnlfbg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: RxN5hINA4wC8SvHO2deWfH4mjQU=
firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221663273400165%22
143.204.55.36200 OK 4.7 kB URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221663273400165%22
IP 143.204.55.36:0
File type JSON data\012- , ASCII text, with very long lines (22383), with no line terminators
Hash 037b94a848758f44dd9998d3ca343083
2fec8bd545861c5bfd587c82abe5a895c6f69de9
3be27e35185df482fee3bd5b9f008b4c4840f52946684a8fe6505f368cac6733
GET /v1/buckets/monitor/collections/changes/changeset?_expected=%221663273400165%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 15 Sep 2022 20:27:24 GMT
Expires: Thu, 15 Sep 2022 21:27:23 GMT
Last-Modified: Thu, 15 Sep 2022 20:23:20 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: br
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tBZ1jCQe5w4I7CLLgJfa3G45F6cNISC5JqYc3FUbIOBlBfiS3SIy4A==
Age: 9
www.anniesbeautyhouse.de/feeds/posts/default?max-results=6&orderby=published&alt=json-in-script&callback=labelthumbs
142.250.74.179200 OK 38 kB URL HTTP/1.1 www.anniesbeautyhouse.de/feeds/posts/default?max-results=6&orderby=published&alt=json-in-script&callback=labelthumbs
IP 142.250.74.179:0
File type Unicode text, UTF-8 text, with very long lines (65345)
Hash 8cf5e5987b29b398054f4fb3103e451b
e3e01c905475b16e0cdfa8831ed8a04fd4fa7f6a
b14969e12a97720ea07a08af066d5e86800ecc9e88b96524ef485ee73500de80
GET /feeds/posts/default?max-results=6&orderby=published&alt=json-in-script&callback=labelthumbs HTTP/1.1
Host: www.anniesbeautyhouse.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"0234d9f35a11337620f4784d3232478570ff819f27a243b7f8f611c760b050d5"
Date: Thu, 15 Sep 2022 20:27:33 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Expires: Thu, 15 Sep 2022 20:27:34 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Sun, 28 Aug 2022 13:45:52 GMT
Content-Encoding: gzip
Content-Length: 37714
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2
142.250.74.163200 OK 36 kB URL HTTP/1.1 fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 35764, version 1.0\012- data
Hash 60f23230f1a8d5c3b7d25b73f5b5ce23
ed08ada85d017893b9bcb8224e99154c6708f5d2
22b6cdc450204c1cb32b31e679d812fea1c17ac506a7b78daeb12bd0ab25fde8
GET /s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.anniesbeautyhouse.de
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 35764
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 13 Sep 2022 14:11:25 GMT
Expires: Wed, 13 Sep 2023 14:11:25 GMT
Cache-Control: public, max-age=31536000
Age: 195368
Last-Modified: Mon, 18 Jul 2022 19:06:36 GMT
Content-Type: font/woff2
badges.kaufberater.io/badge/kaufberater/blogger?type=png&year=2019
46.101.244.241200 OK 46 kB URL HTTP/2 badges.kaufberater.io/badge/kaufberater/blogger?type=png&year=2019
IP 46.101.244.241:0
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced\012- data
Hash d0d55fda0ee8ba72419aa08b489ac8f1
a7f8e5033a577ef5e3c6b66816296d2e3a0e9bd2
e9184fe74584993909795fc1fe71ae6db436c85a64de195784813a436993005b
GET /badge/kaufberater/blogger?type=png&year=2019 HTTP/1.1
Host: badges.kaufberater.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx-rc
date: Thu, 15 Sep 2022 20:27:32 GMT
content-type: image/png
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
snapwidget.com/stylesheets/embed.grid.min.4069f6f840f9102b.css
172.67.75.33200 OK 1.4 kB URL HTTP/2 snapwidget.com/stylesheets/embed.grid.min.4069f6f840f9102b.css
IP 172.67.75.33:0
File type ASCII text, with very long lines (2201), with no line terminators
Hash acc5354684a49240fec1e6ed92ff46f1
c6c2d7d34579fb1197e1b882e2329b62283d87b9
9f6cb1855cca5bbb0814d74c38fd56bbdad90e9cd6be19ee5ba40040e80921cd
GET /stylesheets/embed.grid.min.4069f6f840f9102b.css HTTP/1.1
Host: snapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/embed/776525
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 20:27:34 GMT
content-type: text/css
cf-bgj: minify
etag: W/"63034249-899"
last-modified: Mon, 22 Aug 2022 08:46:01 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1946155
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wTwePhljOsJjypz4GQ2RUhTUPq9GQ2fjzmM151%2BuwCHYaUcN2IpDkZyuQ6Z%2BT%2BK3BwVz0uhjVYvOs3es2ee40rUTBZAXJQAWWIi13xr6Vk6iFl4Z6LiZtYieijLnplGi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 74b41a928a51b527-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 3b816941816ca5fed922c0604e9da8dc
94c14ea6c512c6c262479b4299f1cd4dd99ea5cd
a05000788114487ba8b8c661ba1370b29c96a93a16275b3fab497cf75722b51d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Thu, 15 Sep 2022 18:41:12 GMT
expires: Thu, 15 Sep 2022 20:41:12 GMT
cache-control: public, max-age=7200
age: 6382
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 3b816941816ca5fed922c0604e9da8dc
94c14ea6c512c6c262479b4299f1cd4dd99ea5cd
a05000788114487ba8b8c661ba1370b29c96a93a16275b3fab497cf75722b51d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.cloudflareinsights.com/beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194
104.18.47.230200 OK 20 kB URL HTTP/2 static.cloudflareinsights.com/beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194
IP 104.18.47.230:0
File type ASCII text, with very long lines (45992)
Hash 8b2c07d821d7d613fcae8481d517ae6c
9a29f0d5292a4b7ea6233665b816c833d6f40bbb
be64d9e91bd2b62745efc87f9a937615d1cfe1204f65caab367669d0251394ca
GET /beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://snapwidget.com
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 20:27:34 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2021.12.0
last-modified: Thu, 09 Dec 2021 19:55:17 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b41a92ab001bfa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
bam.nr-data.net/1/a53393d12f?a=453137&v=1216.487a282&to=ZlNSMUNXWBcFW0FRCV8ZcQZFX1kKS3lFSDp5QkQVbXVZChBKWlQKVERDOXRbVAEAe1pWEkNZXAlURHYXDFdCbRVURHUIU1NS&rst=696&ck=1&ref=https://snapwidget.com/embed/776525&ap=93&be=440&fe=612&dc=528&af=err,xhr,stn,ins&perf=%7B%22timing%22:%7B%22of%22:1663273638296,%22n%22:0,%22f%22:1,%22dn%22:6,%22dne%22:10,%22c%22:10,%22s%22:13,%22ce%22:30,%22rq%22:31,%22rp%22:426,%22rpe%22:426,%22dl%22:430,%22di%22:466,%22ds%22:527,%22de%22:528,%22dc%22:611,%22l%22:611,%22le%22:613%7D,%22navigation%22:%7B%7D%7D&fcp=460&at=ShRRRwtNSxk%3D&jsonp=NREUM.setToken
162.247.241.14200 OK 73 B URL HTTP/1.1 bam.nr-data.net/1/a53393d12f?a=453137&v=1216.487a282&to=ZlNSMUNXWBcFW0FRCV8ZcQZFX1kKS3lFSDp5QkQVbXVZChBKWlQKVERDOXRbVAEAe1pWEkNZXAlURHYXDFdCbRVURHUIU1NS&rst=696&ck=1&ref=https://snapwidget.com/embed/776525&ap=93&be=440&fe=612&dc=528&af=err,xhr,stn,ins&perf=%7B%22timing%22:%7B%22of%22:1663273638296,%22n%22:0,%22f%22:1,%22dn%22:6,%22dne%22:10,%22c%22:10,%22s%22:13,%22ce%22:30,%22rq%22:31,%22rp%22:426,%22rpe%22:426,%22dl%22:430,%22di%22:466,%22ds%22:527,%22de%22:528,%22dc%22:611,%22l%22:611,%22le%22:613%7D,%22navigation%22:%7B%7D%7D&fcp=460&at=ShRRRwtNSxk%3D&jsonp=NREUM.setToken
IP 162.247.241.14:0
File type ASCII text, with no line terminators
Hash 516a128bb6000ca8154792678f4333fb
41d0257bea96afd36c6f3e40fcfdc9ca247f8e01
9fa62b52f24b87a40410fe842cb9be494abed114a2eac2eb406c8b4a4d372d10
GET /1/a53393d12f?a=453137&v=1216.487a282&to=ZlNSMUNXWBcFW0FRCV8ZcQZFX1kKS3lFSDp5QkQVbXVZChBKWlQKVERDOXRbVAEAe1pWEkNZXAlURHYXDFdCbRVURHUIU1NS&rst=696&ck=1&ref=https://snapwidget.com/embed/776525&ap=93&be=440&fe=612&dc=528&af=err,xhr,stn,ins&perf=%7B%22timing%22:%7B%22of%22:1663273638296,%22n%22:0,%22f%22:1,%22dn%22:6,%22dne%22:10,%22c%22:10,%22s%22:13,%22ce%22:30,%22rq%22:31,%22rp%22:426,%22rpe%22:426,%22dl%22:430,%22di%22:466,%22ds%22:527,%22de%22:528,%22dc%22:611,%22l%22:611,%22le%22:613%7D,%22navigation%22:%7B%7D%7D&fcp=460&at=ShRRRwtNSxk%3D&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 20:27:34 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 74b41a943e98b523-OSL
Access-Control-Allow-Origin: *
Set-Cookie: JSESSIONID=68d082c9b0c47b3c; Path=/; Domain=.nr-data.net; Secure; SameSite=None
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
r3.o.lencr.org/
23.36.76.225200 OK 503 B IP 23.36.76.225:0
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5945
Expires: Thu, 15 Sep 2022 22:06:39 GMT
Date: Thu, 15 Sep 2022 20:27:34 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.225200 OK 503 B IP 23.36.76.225:0
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5945
Expires: Thu, 15 Sep 2022 22:06:39 GMT
Date: Thu, 15 Sep 2022 20:27:34 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.225200 OK 503 B IP 23.36.76.225:0
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5945
Expires: Thu, 15 Sep 2022 22:06:39 GMT
Date: Thu, 15 Sep 2022 20:27:34 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb035d64b-46a7-4c49-b95b-e454aa90f817.jpeg
34.120.237.76200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb035d64b-46a7-4c49-b95b-e454aa90f817.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1633672fad0b564108cf81ad711dc881
d37ad0f40bc1f3f0022467dd0af2478980bd858a
cc7176a297f6009f07074fb9af796132b4452833be675bf378cc950fe81a582a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb035d64b-46a7-4c49-b95b-e454aa90f817.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9071
x-amzn-requestid: b450f7cf-6cc7-4d1f-aef3-4496f0971727
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeIxuEq6oAMF9jQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632254d7-6912ef8731d81fa43b805e5b;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 22:25:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 6LDUuDX1W8-Q88pDJma0xCAd5QuJ0YV-VpJ_8LVyDHX9YN1k0fQZ8Q==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 22:36:39 GMT
etag: "d37ad0f40bc1f3f0022467dd0af2478980bd858a"
content-type: image/jpeg
age: 78655
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86bf6a5e-a3e5-479d-a052-fa843c45a3d9.jpeg
34.120.237.76200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86bf6a5e-a3e5-479d-a052-fa843c45a3d9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4833535b1650b0ac875704023b650e66
96ab8cd8e14350f730d26731f3445710324e24e2
d2b5a51e39a4890ba56e819d4d5d1d57d4d3cfc50dde42efdf23b8e9be17d1c7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86bf6a5e-a3e5-479d-a052-fa843c45a3d9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9400
x-amzn-requestid: 8cf35176-18a1-427b-870c-bdae465060c8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YYM18E-iIAMFcmg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ff4f2-427bc0ff6593e71e25b91589;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 03:11:46 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 9ybN4lIqGCbpld1PvmjrIpnYNgHGTSgg6Qc0o8xg-ttlTvX1uNa9dQ==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 20:21:39 GMT
age: 355
etag: "96ab8cd8e14350f730d26731f3445710324e24e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg
34.120.237.76200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f2157f7cfbdeb607f28ae51eb090f2c3
33d0dcadaa42179b2eae914c8ad16c9c088afbc9
135cd89c2c82f0f5e53d2612d5eac868c175b28a567a07e63a2073942e36a066
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6078
x-amzn-requestid: e09c099f-5a2d-49d7-b6ab-e16f09c28bd0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YavJEEM5IAMFreQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f8a0-0fbb7b3d0cd6fbfa04f5a5d2;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:39:44 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: VZ88wGjWdv9DOhonVamk_UnGmavT535eEa4o2sfgskmE0x3QX5iBIg==
via: 1.1 9b21fd56256eda6d1379e32829c4c446.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 20:21:13 GMT
age: 381
etag: "33d0dcadaa42179b2eae914c8ad16c9c088afbc9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1266c973-1bdd-4969-82ca-1106689fe929.jpeg
34.120.237.76200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1266c973-1bdd-4969-82ca-1106689fe929.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f50c34bc30a732593e8fe465055a44ff
af100925cba1be716fd2200715d6136bd7f0c5bc
703049736ccc8815945d69634059c4cd39533417e0969107d460c36a6787c761
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1266c973-1bdd-4969-82ca-1106689fe929.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5078
x-amzn-requestid: 6f825856-ec1a-464c-b8ef-f15de0d4017f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeINiGs6IAMFk7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632253f0-647208bf01fe44904b3352f0;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 22:21:36 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: SJGy4ZhoAlHiv-yUCAnGWG9o2qnl8xhdHhxiwmSvaSP9fdDYOVu_-g==
via: 1.1 efcf7b9d0f917f9ebf314db03e52d9b6.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 20:22:02 GMT
age: 332
etag: "af100925cba1be716fd2200715d6136bd7f0c5bc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafb10f81-8409-401c-bd62-3ec01954600c.jpeg
34.120.237.76200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafb10f81-8409-401c-bd62-3ec01954600c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2e5f57ba37fac4e6047a9a321a8ec084
f6b742549ea35a4b1345cffb937a8bbcceee08ef
f8c67c54806e47089b9ba297599e3e4cde1fd2e2e38b76acc9e8de0e99d7b77e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafb10f81-8409-401c-bd62-3ec01954600c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6770
x-amzn-requestid: b7c9513c-b8ba-41c7-9f9a-0a9d2266172d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X7FlpEVRIAMFygA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63144fbd-7a4408363cdc46c9355a9f47;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 07:11:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: fqj5PljprRruE1jwYAVwKoHkjys-RakUjzuV67_Ued6T4et99JPxPg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 21:45:05 GMT
age: 81749
etag: "f6b742549ea35a4b1345cffb937a8bbcceee08ef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F706eea65-3ba8-43f4-85c3-967026936660.jpeg
34.120.237.76200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F706eea65-3ba8-43f4-85c3-967026936660.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3ef9865421a37eae9a4df04083d27485
c7cf1f6a259cece60a34261ec83ee00736e1d72b
723b65ba660f22281f85d6caceea23e9cd932ee9084dc905a08a585746c4c4cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F706eea65-3ba8-43f4-85c3-967026936660.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9922
x-amzn-requestid: de1e3e45-74ff-41b2-986f-e78473cb6d98
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YVc1SGM7IAMFw0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631edb54-2099524d6f2c338b41eea101;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 07:10:12 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MtgQUzYMa3mT0lxPhQ5ZCp9XVVyBH8T0dlx_0wSLMZlaFEiCikTXMw==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 22:25:51 GMT
age: 79303
etag: "c7cf1f6a259cece60a34261ec83ee00736e1d72b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.anniesbeautyhouse.de/feeds/posts/summary?alt=json-in-script&callback=showpageCount&max-results=99999
142.250.74.179200 OK 69 kB URL HTTP/1.1 www.anniesbeautyhouse.de/feeds/posts/summary?alt=json-in-script&callback=showpageCount&max-results=99999
IP 142.250.74.179:0
File type Unicode text, UTF-8 text, with very long lines (65268)
Hash 188c878b6ac426bbee13a575d5e0d36c
b0ac53d6ea2c998335f447823327a4b234d68d70
88bd00e714e3e5f31af5f8e969019f52a744c87139ab2a119cd7366e9b612355
GET /feeds/posts/summary?alt=json-in-script&callback=showpageCount&max-results=99999 HTTP/1.1
Host: www.anniesbeautyhouse.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"59f6ef30d4d56017d3fb0c141efc0d3ab7acbcf5ed22488b637327321b5c759f"
Date: Thu, 15 Sep 2022 20:27:33 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Expires: Thu, 15 Sep 2022 20:27:34 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Sun, 28 Aug 2022 13:45:52 GMT
Content-Encoding: gzip
Content-Length: 69351
X-Frame-Options: SAMEORIGIN
assets.pinterest.com/js/pinit.js
151.101.84.84200 OK 290 B URL HTTP/1.1 assets.pinterest.com/js/pinit.js
IP 151.101.84.84:0
File type ASCII text, with very long lines (361), with no line terminators
Hash 82bfd941d2c9b3b9e0650a27c9d11737
2eb742a101e79067c9df4d15b518bde85e8eeb2e
3f6e9b85ad3ee165ec6c9587d98d2a43588f7ba0f63d31ad019a0d4cbfd3f3d1
GET /js/pinit.js HTTP/1.1
Host: assets.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
HTTP/1.1 200 OK
ETag: "82bfd941d2c9b3b9e0650a27c9d11737"
Content-Encoding: gzip
Content-Type: application/javascript; charset=utf-8
Content-Length: 290
Connection: keep-alive
X-CDN: fastly
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 86400
Access-Control-Expose-Headers: X-CDN
Vary: Accept-Encoding, Origin
Cache-Control: max-age=300
connect.facebook.net/de_DE/sdk.js
31.13.72.12200 OK 1.7 kB URL HTTP/1.1 connect.facebook.net/de_DE/sdk.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (1961)
Hash 3c4a82ac2d72ea7be1999ade272e15dc
1bb8b67d69c51d4a2d114f55b3943cea5e3bbadb
99cd2f7a66dc5162b16fa4f7fa100113ec53e3c4ccf3b0a5e65a9108622379ec
GET /de_DE/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
HTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: 164b024e8a21d5673a817c5261c8de6e
ETag: "ab6605d7689e92130b01985dda912841"
Content-Type: application/x-javascript; charset=utf-8
timing-allow-origin: *
Access-Control-Allow-Origin: *
cross-origin-resource-policy: cross-origin
Expires: Thu, 15 Sep 2022 20:45:35 GMT
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
X-Content-Type-Options: nosniff
x-fb-rlafr: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
Content-MD5: PEqCrC1y6nvhmZreJy4V3A==
X-FB-Debug: +aU1jEjOcSGN/E7GfqFnOU8y3KUQUk2BkwX4Al3fQSz2OtwoENid1vQ1KY0SGu33jFNYtvBXyE6fUuRl4l+4NQ==
Priority: u=3,i
X-FB-TRIP-ID: 1904183273
Date: Thu, 15 Sep 2022 20:27:34 GMT
Alt-Svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
Connection: keep-alive
Content-Length: 1686
d2a54pfih9ionq.cloudfront.net/blank/gif/300/250
54.230.111.17200 OK 790 B URL HTTP/2 d2a54pfih9ionq.cloudfront.net/blank/gif/300/250
IP 54.230.111.17:0
File type PNG image data, 300 x 250, 8-bit/color RGB, non-interlaced\012- data
Hash 98e865e8ac02b4fe35ef59f78adc759d
acdc81477a78b58e03d966876127ba7d8e5feb96
2253f0f78b128489c46028a2ff487669a793a4bf4f8b1ad1c28c351dbf009427
GET /blank/gif/300/250 HTTP/1.1
Host: d2a54pfih9ionq.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.anniesbeautyhouse.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 790
server: CloudFront
date: Wed, 31 Aug 2022 06:50:55 GMT
access-control-allow-origin: *
cache-control: max-age=86400
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: C1nBs2FxRxFqsE-KZsQ5kDqbYYc2enlitdLeidmkR-PokG-iw_QCOg==
age: 1344999
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 20ae50d0df52817906a88b07b3c08138
0f999020f07959636477be4178d238d4dd460464
26eb9c5ac69c9144425fb15a481336487c1923bb141685aea110b0e3dfc20171
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 20ae50d0df52817906a88b07b3c08138
0f999020f07959636477be4178d238d4dd460464
26eb9c5ac69c9144425fb15a481336487c1923bb141685aea110b0e3dfc20171
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
scontent.cdnsnapwidget.com/vp/5814dfabbe7d6089b63842fbfc6a9e37/5C29B427/t51.2885-15/e35/s320x320/39665460_718957431791647_7729914953443835904_n.jpg
104.26.14.172200 OK 33 kB URL HTTP/2 scontent.cdnsnapwidget.com/vp/5814dfabbe7d6089b63842fbfc6a9e37/5C29B427/t51.2885-15/e35/s320x320/39665460_718957431791647_7729914953443835904_n.jpg
IP 104.26.14.172:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x320, components 3\012- data
Hash 7cf564b397c75118d7586205289620e7
e42d2867a4521d932b183c0f3006e9e2b5436602
2cbf0353ec84dddb7fa412a70a3963ebea8893fa3481db2fffc9d54ecb62260a
GET /vp/5814dfabbe7d6089b63842fbfc6a9e37/5C29B427/t51.2885-15/e35/s320x320/39665460_718957431791647_7729914953443835904_n.jpg HTTP/1.1
Host: scontent.cdnsnapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 20:27:34 GMT
content-type: image/jpeg
content-length: 32607
x-amz-id-2: e2U/n4mCyE9VMiRtc/EuOcCLk8r8KTozHzitcKz8xKtUNLdzZFdxEHzDR5mSSyxmW44hVeHAcvg=
x-amz-request-id: WP19SXS4S0D789X0
last-modified: Thu, 06 Sep 2018 11:23:36 GMT
etag: "7cf564b397c75118d7586205289620e7"
cache-control: max-age=86400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KvAtuSdp9KFqZgNkWTfoG7tGhyw%2BRROQydxDY5DxjYab1Pw9dqUwiQgF27cW9B1RBKFOXZ5pA3WgNkfvPyN8eM6x%2Ft6s8mPK0lVYLTKkEX3ro0RgTem%2FRiwXzBOoYALJ32HIwzNq7MnX56Gp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b41a94ff33b4f4-OSL
X-Firefox-Spdy: h2
scontent.cdnsnapwidget.com/vp/115fa7271172460979b60b01e7040175/5C31F41A/t51.2885-15/e35/s320x320/40256720_517810802019128_6096166723268902912_n.jpg
104.26.14.172200 OK 21 kB URL HTTP/2 scontent.cdnsnapwidget.com/vp/115fa7271172460979b60b01e7040175/5C31F41A/t51.2885-15/e35/s320x320/40256720_517810802019128_6096166723268902912_n.jpg
IP 104.26.14.172:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x320, components 3\012- data
Hash 2d64547b063e08ca3528c01b1289942a
37d08047d181340ba7c5cf223fe43e432ac75ec9
89fda89d2f287c8e246343baa10b89c6cd47e0cbefe157f205f6882285a50628
GET /vp/115fa7271172460979b60b01e7040175/5C31F41A/t51.2885-15/e35/s320x320/40256720_517810802019128_6096166723268902912_n.jpg HTTP/1.1
Host: scontent.cdnsnapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 20:27:34 GMT
content-type: image/jpeg
content-length: 21051
x-amz-id-2: sKqDE0QkqJyneHHzcV2sYg7iIDCxPEeRBuvV5w3fn3nKnW8eX8O3Gg7MOMrTN0/ioYIK+E/0eBk=
x-amz-request-id: WP17KHZJ3PFMFXYR
last-modified: Thu, 06 Sep 2018 11:23:31 GMT
etag: "2d64547b063e08ca3528c01b1289942a"
cache-control: max-age=86400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lmXKDLuvXUSjz9Ie2bFcvmjyqB5lhK2xWl0bxYOn6%2F7CL2EjC473tyeZGZt0WcNjzrgQsQ9TEF1DPJrCNibyV%2B%2BSEX%2FDf%2Ba5xkkQaOucJQlHkmDXfPLppzFwfbWu9XRQ6GLFsViMhWNJo7vy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b41a94ff59b4f4-OSL
X-Firefox-Spdy: h2
scontent.cdnsnapwidget.com/vp/f29c89bcb76f930f02c87169e37198ed/5BDEAB14/t51.2885-15/e35/s320x320/35999398_201303660588839_1404741016333844480_n.jpg
104.26.14.172200 OK 23 kB URL HTTP/2 scontent.cdnsnapwidget.com/vp/f29c89bcb76f930f02c87169e37198ed/5BDEAB14/t51.2885-15/e35/s320x320/35999398_201303660588839_1404741016333844480_n.jpg
IP 104.26.14.172:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x320, components 3\012- data
Hash 3a89380c2412531d8e14cf3cc33dc550
cf348a0a6c2de9acf01bdefda6a09044912341d6
451c6e3d2e58a931264475786fd04eb4e8730b1a9deafc14f5c341a7a54b9915
GET /vp/f29c89bcb76f930f02c87169e37198ed/5BDEAB14/t51.2885-15/e35/s320x320/35999398_201303660588839_1404741016333844480_n.jpg HTTP/1.1
Host: scontent.cdnsnapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 20:27:34 GMT
content-type: image/jpeg
content-length: 23137
x-amz-id-2: GvHhdgTbVN+V8ecA1n/ZI8HaVQxUoFUm8Atmj/8XPs9xJjKugcS0e04l6sAC2wViz9RegIZmmcg=
x-amz-request-id: WP17JBPB7PWT2XN1
last-modified: Fri, 13 Jul 2018 00:02:23 GMT
etag: "3a89380c2412531d8e14cf3cc33dc550"
cache-control: max-age=86400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ivN%2B7BzQ3tu4x4E9bt7dHaH0X0hv8slC8XQsknVHSxV1Gc0VmmMhoguVvzt7cbzzecbNghd5OS4tw7E4eZT67TxPBYFw8H82yuk3ex1OX%2FrJOPLbW10GSbbH%2FKKVrFVS9we0pHeTgs24znIL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b41a94ff23b4f4-OSL
X-Firefox-Spdy: h2
s-media-cache-ak0.pinimg.com/originals/a1/a7/24/a1a724677ee12fa5430c15807c093074.png
151.101.84.84301 Moved Permanently 0 B URL HTTP/2 s-media-cache-ak0.pinimg.com/originals/a1/a7/24/a1a724677ee12fa5430c15807c093074.png
IP 151.101.84.84:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /originals/a1/a7/24/a1a724677ee12fa5430c15807c093074.png HTTP/1.1
Host: s-media-cache-ak0.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
retry-after: 0
location: https://i.pinimg.com/originals/a1/a7/24/a1a724677ee12fa5430c15807c093074.png
accept-ranges: bytes
date: Thu, 15 Sep 2022 20:27:34 GMT
vary: Origin
x-cdn: fastly
content-length: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 20ae50d0df52817906a88b07b3c08138
0f999020f07959636477be4178d238d4dd460464
26eb9c5ac69c9144425fb15a481336487c1923bb141685aea110b0e3dfc20171
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 20ae50d0df52817906a88b07b3c08138
0f999020f07959636477be4178d238d4dd460464
26eb9c5ac69c9144425fb15a481336487c1923bb141685aea110b0e3dfc20171
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a.mailmunch.co/app/v1/styles.css
143.204.55.29200 OK 2.3 kB URL HTTP/1.1 a.mailmunch.co/app/v1/styles.css
IP 143.204.55.29:0
File type ASCII text, with very long lines (21666), with no line terminators
Hash 8bde8c669566502ced26fc415723b990
329476ec7160563489487d0d7518281e281521da
11ad1805ed2135c3fdaf56a607f22154138e9995062ac5d0bbabce65f49ab860
GET /app/v1/styles.css HTTP/1.1
Host: a.mailmunch.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 2274
Connection: keep-alive
Date: Tue, 13 Sep 2022 21:03:25 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, POST, PUT, DELETE
Access-Control-Expose-Headers: ETag
Access-Control-Max-Age: 3000
Last-Modified: Fri, 09 Sep 2022 07:28:17 GMT
ETag: "8bde8c669566502ced26fc415723b990"
Cache-Control: max-age=172800
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: TJPOdzZeBR5lAnFmh89mdquIxRlPPqhwfthj45lLV5ai8e7WCwCppg==
Age: 170650
scontent.cdnsnapwidget.com/vp/d33802faa1545b37c014632a415f7601/5BCB7C44/t51.2885-15/e35/s320x320/36085627_235844297238962_1285759229549871104_n.jpg
104.26.14.172200 OK 15 kB URL HTTP/2 scontent.cdnsnapwidget.com/vp/d33802faa1545b37c014632a415f7601/5BCB7C44/t51.2885-15/e35/s320x320/36085627_235844297238962_1285759229549871104_n.jpg
IP 104.26.14.172:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x320, components 3\012- data
Hash 798e23e4af75cffc0b6a93b4bc060eff
44e44e0c724ed4d10dbd1ae7bd0e3fb4fe92b1b2
269e9e92b338afc160834c59b58a96ec629ea1c14983128bf024ce5643be6e76
GET /vp/d33802faa1545b37c014632a415f7601/5BCB7C44/t51.2885-15/e35/s320x320/36085627_235844297238962_1285759229549871104_n.jpg HTTP/1.1
Host: scontent.cdnsnapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 20:27:34 GMT
content-type: image/jpeg
content-length: 15428
x-amz-id-2: hg7wqwniFabvBHTGzZZnZLyVpmcRiSJHHmVd/8hphP+9Ei9k8c96rj8vrpChBkoL4FdrQKHrNI0=
x-amz-request-id: WP15M5S73Y442DG4
last-modified: Fri, 13 Jul 2018 00:02:22 GMT
etag: "798e23e4af75cffc0b6a93b4bc060eff"
cache-control: max-age=86400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=veIWGGxOR%2BmRCIMaxvl2z%2BHOCR2Qa2Q6cx1zdKLouhMdck5pxj%2BbRjw7gbkoavCgT4jyczLAkM36wmnW1CTHZN8Ze913kmVWsR6PjxTnqRjCF1c84DsQOTtDN9CgJd0mHx5xarP%2Bxi4Mschk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b41a950f6cb4f4-OSL
X-Firefox-Spdy: h2
scontent.cdnsnapwidget.com/vp/229ebd6a3ecb01d632fbf803c291f4dc/5C2880E3/t51.2885-15/e35/s320x320/39675408_2167156456878851_8625778280223473664_n.jpg
104.26.14.172200 OK 26 kB URL HTTP/2 scontent.cdnsnapwidget.com/vp/229ebd6a3ecb01d632fbf803c291f4dc/5C2880E3/t51.2885-15/e35/s320x320/39675408_2167156456878851_8625778280223473664_n.jpg
IP 104.26.14.172:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x320, components 3\012- data
Hash 806dc08f99f147eb0c646ce0cd208fd9
58faad9743e9785dbd1f99dddd79587b9894a38b
e086467c58526ddd45fd142249bcddd6e112b14ccdb91905b3c0fb862fc94977
GET /vp/229ebd6a3ecb01d632fbf803c291f4dc/5C2880E3/t51.2885-15/e35/s320x320/39675408_2167156456878851_8625778280223473664_n.jpg HTTP/1.1
Host: scontent.cdnsnapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 20:27:34 GMT
content-type: image/jpeg
content-length: 26366
x-amz-id-2: 4wrMaDgAi/o7HdigzWeVJU282d0dCa2Asduu0pRIUiFDGgzszCHFAubHD94PDq5K1FN8ErrYkFE=
x-amz-request-id: WP19T4HNJ6YZHKAG
last-modified: Thu, 06 Sep 2018 11:23:34 GMT
etag: "806dc08f99f147eb0c646ce0cd208fd9"
cache-control: max-age=86400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7Wzs%2BN8VK1sIPOcfaboTwFfVlvMw96BYt1OdLcmmbnFu98xRlxHf%2F5rytK4TeXRpVJT9aO5xQrAfn6fLf6AK6bqZcGENbEz0vvu25HIN2TD%2B%2Bni4EpqnwjZyPlreKs%2FiVeVISvOt9zgIucEc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b41a94ff57b4f4-OSL
X-Firefox-Spdy: h2
scontent.cdnsnapwidget.com/vp/6bc63831230b73d01d4b63e859c04861/5BD756FA/t51.2885-15/e35/s320x320/36086426_2120856184859936_8116715370204626944_n.jpg
104.26.14.172200 OK 22 kB URL HTTP/2 scontent.cdnsnapwidget.com/vp/6bc63831230b73d01d4b63e859c04861/5BD756FA/t51.2885-15/e35/s320x320/36086426_2120856184859936_8116715370204626944_n.jpg
IP 104.26.14.172:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x320, components 3\012- data
Hash babd4f1da3173b2d20c377c27e3b0bc4
450d7fcdcfa15e82524fc01b40620e53368d4425
0bf3d68ecb539bd649f0ac7cb029dcedbda1bf47b4b699304b7c541cb1723a63
GET /vp/6bc63831230b73d01d4b63e859c04861/5BD756FA/t51.2885-15/e35/s320x320/36086426_2120856184859936_8116715370204626944_n.jpg HTTP/1.1
Host: scontent.cdnsnapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 20:27:34 GMT
content-type: image/jpeg
content-length: 21964
x-amz-id-2: mJ5G1mEhRjjMCmNMGAtNnSzyrtMHP3mqtb6WvPIOIswXmsu+gfH98vodTGhecSDHpU4koM5PVPU=
x-amz-request-id: WP1DF5JBEGSTS3HN
last-modified: Fri, 13 Jul 2018 00:02:21 GMT
etag: "babd4f1da3173b2d20c377c27e3b0bc4"
cache-control: max-age=86400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DitycPFGt58wjKn0xo7TmipvL8RIL%2BLxlqnq3%2FmW6nVYV3nfzXsQBP6wR%2B%2Fhry1g1mxopzNWP157Y61q4sgvCyR%2BnHAfjQ6j58HeEYWSNK1eMkVpHSx6vHoXeo46srQ%2BGygr18bcCGp926vf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b41a951f7cb4f4-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 3ed195833c99f569a87401cea2ec6b45
bdaefc42925f3de3986588548feee0795c7601ec
2186d0ee50c879beab843bdf1fd3216ca76eefda0452a6eaa61a5b20e6291d13
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5513
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:34 GMT
Last-Modified: Thu, 15 Sep 2022 18:55:41 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
scontent.cdnsnapwidget.com/vp/a024c76e3fed54fed6f52efd22ba7c7e/5C3973CF/t51.2885-15/e35/s320x320/39978072_491632054651007_4641907130603929600_n.jpg
104.26.14.172200 OK 14 kB URL HTTP/2 scontent.cdnsnapwidget.com/vp/a024c76e3fed54fed6f52efd22ba7c7e/5C3973CF/t51.2885-15/e35/s320x320/39978072_491632054651007_4641907130603929600_n.jpg
IP 104.26.14.172:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x320, components 3\012- data
Hash 5ea86ab6c9e9a2e7ceee066b10627a9c
81350cd2d1765a64e9ce59b4c9760b8eddbd1945
e9fc963e4f103092d33547442dd7d4d8ff6946e4f1702ad379ede5d703d42571
GET /vp/a024c76e3fed54fed6f52efd22ba7c7e/5C3973CF/t51.2885-15/e35/s320x320/39978072_491632054651007_4641907130603929600_n.jpg HTTP/1.1
Host: scontent.cdnsnapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 20:27:34 GMT
content-type: image/jpeg
content-length: 14535
x-amz-id-2: wW+55T3uAk897OKPUeb6FLytppUJYc1t+/j/pmGmSCrT26pxiLlCMiFZfkw+Iqc/EIzRBd1zzIQ=
x-amz-request-id: WP18XTF4VR4H48F7
last-modified: Thu, 06 Sep 2018 11:23:38 GMT
etag: "5ea86ab6c9e9a2e7ceee066b10627a9c"
cache-control: max-age=86400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TyNopJ057w1sC9JNHtt8707kA6V5D1wLFIjVtlqoZ0jo5FkDsCBBpcooyOzpn56rlUGRPal1DhIbeHOtCXPPPIN9Txjwbl%2BMzCpoJnK9nsZRDa0VE0wLbys66lXqBMva%2F0YxOmrzVhtKx0D2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b41a94ff2eb4f4-OSL
X-Firefox-Spdy: h2
scontent.cdnsnapwidget.com/vp/7c79a5b0ce338f8f3b817e6a2f5fa594/5C35591B/t51.2885-15/e35/s320x320/40307523_2340814159267980_3567055714687909888_n.jpg
104.26.14.172200 OK 19 kB URL HTTP/2 scontent.cdnsnapwidget.com/vp/7c79a5b0ce338f8f3b817e6a2f5fa594/5C35591B/t51.2885-15/e35/s320x320/40307523_2340814159267980_3567055714687909888_n.jpg
IP 104.26.14.172:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x320, components 3\012- data
Hash d3caf341cbbe758583199666fcd286c2
87866b2247eab394baaab00ce51b9895069cfce6
b2e28412318e4297d5f09777f2fc190522fbd905b597eed8b7b7acb7a0474b2a
GET /vp/7c79a5b0ce338f8f3b817e6a2f5fa594/5C35591B/t51.2885-15/e35/s320x320/40307523_2340814159267980_3567055714687909888_n.jpg HTTP/1.1
Host: scontent.cdnsnapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 20:27:34 GMT
content-type: image/jpeg
content-length: 18554
x-amz-id-2: 1d4biHI1DKDAhntEL3ARwtPP4WMdpgQPHTTwiwXwoYRP9jAKLXhIUti0Wc/vmZ5pQlGCCO7u+OA=
x-amz-request-id: WP10836MPK9FP6SQ
last-modified: Thu, 06 Sep 2018 11:23:40 GMT
etag: "d3caf341cbbe758583199666fcd286c2"
cache-control: max-age=86400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GeQZy50E7RJMKkHdzPVtYH%2BsSKHC7D2SAWHsg%2Fvaz4mlDbQ%2F4nos5O0tWHe2WIIvSIaO46ng3IrEYEZhm%2B0VpeD%2F66%2BIsTEoFtp6mL6Bk99ao9pJirq5nAXWlT4yKpl9m2SSKsNVvO67gxRX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b41a94ff29b4f4-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7dff4bc87dbee6fd33e0d7a3dc5ed3bd
59878d4dd98e60b39dcf7ac288e77bb262afab5d
8c3a027cee1f48144eb0504deff1f2b9aa98c9fc3f4e3057ece6caac9f604315
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1861
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:34 GMT
Last-Modified: Thu, 15 Sep 2022 19:56:33 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
scontent.cdnsnapwidget.com/vp/a254a5e192f49405b6bee4cc763d6006/5C204ABC/t51.2885-15/e35/s320x320/39965056_235801907101536_3342192057660735488_n.jpg
104.26.14.172200 OK 27 kB URL HTTP/2 scontent.cdnsnapwidget.com/vp/a254a5e192f49405b6bee4cc763d6006/5C204ABC/t51.2885-15/e35/s320x320/39965056_235801907101536_3342192057660735488_n.jpg
IP 104.26.14.172:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x320, components 3\012- data
Hash 6ccf57cb001fb0c423c247e4327d9eae
e2f1cc898311c3bb78c000ca1bda4a615c98d4be
7b0e693308df0342a1d7146d5dd44980424149d9d06c820dad7309231f5dffef
GET /vp/a254a5e192f49405b6bee4cc763d6006/5C204ABC/t51.2885-15/e35/s320x320/39965056_235801907101536_3342192057660735488_n.jpg HTTP/1.1
Host: scontent.cdnsnapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 20:27:34 GMT
content-type: image/jpeg
content-length: 27257
x-amz-id-2: QnbgzZaPGRbzzkGSJcwN2JNiUatnfWbvpDVcdxtKdVIvZ3hv5BJ4eV54L1AmBCr98W9lzDijDyE=
x-amz-request-id: WP12PYDV33FY7NX4
last-modified: Thu, 06 Sep 2018 11:23:35 GMT
etag: "6ccf57cb001fb0c423c247e4327d9eae"
cache-control: max-age=86400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hl3Kgn29eDyzNpM%2BgLMxl64ZgnlIUDFnKxyE6SHuyLdU7tx0AYCMJbwBTJWok8%2BD63jLHtMUjPr0neW0k1VZxMGXRQc%2FwtKUbYQsG5CD3IXHlv4DfQiF9OwAn0mIP9hY0Ktv3zVSVHarrUt9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b41a94ff37b4f4-OSL
X-Firefox-Spdy: h2
widgets.getsitecontrol.com/74363/script.js
194.242.11.186200 OK 81 B URL HTTP/1.1 widgets.getsitecontrol.com/74363/script.js
IP 194.242.11.186:0
ASN #34989 ServeTheWorld AS
File type ASCII text, with no line terminators
Hash 6823d753b1ac17d369b275358cd7104e
9af872790be2706d756dcd374546f8577b2fcfc1
94b4942b8911d753fcb2fe54353251aee170469be1371ad1b35a90027bf521ed
GET /74363/script.js HTTP/1.1
Host: widgets.getsitecontrol.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 20:27:34 GMT
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: BunnyCDN-NO-830
CDN-PullZone: 44619
CDN-Uid: e3a1246b-2fdd-4153-9207-6ca707c9379d
CDN-RequestCountryCode: NO
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
Cache-Control: public, max-age=5
Content-Encoding: gzip
ETag: "6823d753b1ac17d369b275358cd7104e"
Last-Modified: Sat, 01 Jun 2019 10:10:44 GMT
CDN-CachedAt: 09/15/2022 20:27:34
x-amz-id-2: tBc+mMr1PxU780KuWhYH8rG/YiJq4tp7m/pt2Zw2OwWNzn6lZbpFtS3vw9AQZIpi5EogWENV1p8=
x-amz-request-id: 61HMPY9AVT4B32W8
CDN-ProxyVer: 1.02
CDN-RequestPullCode: 200
CDN-RequestPullSuccess: True
CDN-EdgeStorageId: 830
CDN-Status: 200
CDN-RequestId: 089a942db96a3015b6fc0b1ae20ca665
CDN-Cache: MISS
connect.facebook.net/de_DE/sdk.js?hash=b6a3f3ee00d6d084377904283e3eb7ff
31.13.72.12200 OK 88 kB URL HTTP/2 connect.facebook.net/de_DE/sdk.js?hash=b6a3f3ee00d6d084377904283e3eb7ff
IP 31.13.72.12:0
File type ASCII text, with very long lines (18570)
Hash 373f4829c8e7a89963e05cd4ffd6ed7e
dee39959975d138686cc7fd010a8183e83489dfc
92507587b243b5c359da19d6a8098b2f3daa26c33a4e53dc73419e3505c39ab3
GET /de_DE/sdk.js?hash=b6a3f3ee00d6d084377904283e3eb7ff HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.anniesbeautyhouse.de
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 90fa54ba7ec4044a6f2f4e616f286f01
etag: "0e04f211446b66d5ab07ef0acd932f36"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Fri, 15 Sep 2023 19:10:23 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: Nz9IKcjnqJlj4FzU/9btfg==
x-fb-debug: gCnWLjPxE/zKPyYsbWj0NI7V6k7X+QQVAlmHVgcZfEFojq7YhZq3IcnSdSIqioauKwyYscfcSlKBvFhFGinz9g==
content-length: 88544
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 20:27:34 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7dff4bc87dbee6fd33e0d7a3dc5ed3bd
59878d4dd98e60b39dcf7ac288e77bb262afab5d
8c3a027cee1f48144eb0504deff1f2b9aa98c9fc3f4e3057ece6caac9f604315
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1861
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:34 GMT
Last-Modified: Thu, 15 Sep 2022 19:56:33 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
www.anniesbeautyhouse.de/favicon.ico
142.250.74.179200 OK 255 B URL HTTP/1.1 www.anniesbeautyhouse.de/favicon.ico
IP 142.250.74.179:0
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash b011be2e479ed9159ba4d86b2b52e1b2
41b015e09f41a4ef8a4a87d0df6d591b85e36346
900a2435bc6ecc2ea0b739abab6a182f362ae20011b886ae734d3f3d6573625c
GET /favicon.ico HTTP/1.1
Host: www.anniesbeautyhouse.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
Expires: Thu, 15 Sep 2022 20:27:34 GMT
Date: Thu, 15 Sep 2022 20:27:34 GMT
Cache-Control: private, max-age=86400
Last-Modified: Sun, 28 Aug 2022 13:45:52 GMT
ETag: W/"ff74053c07f81e1aa8d99267574fd21fe1f66dc290d81bf1901ce7325e7229c5"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 255
Server: GSE
assets.pinterest.com/js/pinit_main.js?0.15214159846385955
151.101.84.84200 OK 19 kB URL HTTP/2 assets.pinterest.com/js/pinit_main.js?0.15214159846385955
IP 151.101.84.84:0
File type Unicode text, UTF-8 text, with very long lines (32016)
Hash 3725764cf05d1a0938de73d398772331
abdc742d760ca9c8f28c8d44ca9796d9ad6c0bc7
f8c41f2f59fc9e9d088bc9002eef583c3cf256b4cd371619b18107b4abd92812
GET /js/pinit_main.js?0.15214159846385955 HTTP/1.1
Host: assets.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "3725764cf05d1a0938de73d398772331"
content-encoding: br
content-type: application/javascript; charset=utf-8
x-cdn: fastly
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 86400
access-control-expose-headers: X-CDN
vary: Accept-Encoding, Origin
cache-control: max-age=300
date: Thu, 15 Sep 2022 20:27:35 GMT
content-length: 18679
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 20620ba615dba1de34528390492c3f53
2ca43d3a828682e10eb7638972b79b7136395e2b
12cf30cf1de58b4bab8af4a5d159b42909c554ae7b34e6f7361d9a49f1e861b7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.pinimg.com/originals/a1/a7/24/a1a724677ee12fa5430c15807c093074.png
151.101.84.84200 OK 2.7 kB URL HTTP/2 i.pinimg.com/originals/a1/a7/24/a1a724677ee12fa5430c15807c093074.png
IP 151.101.84.84:0
File type PNG image data, 80 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash e642adbe8f56a19af794d3195e84c3b2
a7ce901d470ff471a4df2b8d9feed79125d55f2f
df909d1611a790cb5fdd9859186a517fb8c2af168a7c56800dd3c8f59eeb3dda
GET /originals/a1/a7/24/a1a724677ee12fa5430c15807c093074.png HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.anniesbeautyhouse.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "e642adbe8f56a19af794d3195e84c3b2"
content-type: image/png
cache-control: max-age=31536000, immutable
accept-ranges: bytes
vary: Origin
x-cdn: fastly
alt-svc: h3=":443";ma=600,h3-29=":443";ma=600,h3-27=":443";ma=600
date: Thu, 15 Sep 2022 20:27:35 GMT
content-length: 2719
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-33988397-1&cid=1992262529.1663273639&jid=439201314&gjid=1789976845&_gid=80704355.1663273639&_u=IEDAAEABAAAAAC~&z=27376332
142.251.1.156200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-33988397-1&cid=1992262529.1663273639&jid=439201314&gjid=1789976845&_gid=80704355.1663273639&_u=IEDAAEABAAAAAC~&z=27376332
IP 142.251.1.156:0
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-33988397-1&cid=1992262529.1663273639&jid=439201314&gjid=1789976845&_gid=80704355.1663273639&_u=IEDAAEABAAAAAC~&z=27376332 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.anniesbeautyhouse.de
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://www.anniesbeautyhouse.de
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 15 Sep 2022 20:27:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 3ba9ea0b924b8c3f93a852c85b2af141
8d6c0e4ec91dfd10c4feac3938b1c07975843504
650c27e00e261ae2f661aa96a14e6cf2563cd7ed4e6de055539eba6307096649
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6358
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:35 GMT
Last-Modified: Thu, 15 Sep 2022 18:41:38 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
forms.mailmunch.co/sites/162946
54.157.58.70200 OK 130 B URL HTTP/1.1 forms.mailmunch.co/sites/162946
IP 54.157.58.70:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 08c2e1565ace1661b31ff162b1f8c4fd
ef635b52badc5133b18be6c17083e3e565fd72ae
6955fbf92d6119db3abdcd7b2b40eaff6d81d3704d988dd3ae6a5376f4e04200
GET /sites/162946 HTTP/1.1
Host: forms.mailmunch.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://www.anniesbeautyhouse.de
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
HTTP/1.1 200 OK
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, X-MM-Form-Tool, X-MM-Coupons
Access-Control-Expose-Headers: X-MM-Comp-Tracking, X-MM-EU-Continent, X-MM-T
Content-Type: application/json; charset=utf-8
Content-Length: 130
Etag: W/"82-72NbUrrcUTOxi+bBcIPj5WX9cq4"
Vary: Accept-Encoding
Date: Thu, 15 Sep 2022 20:27:35 GMT
Via: 1.1 vegur
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 848674a3bc6b0d4d6cba22b140c574bc
ec95f08f3a5b022c3753f78e30f71d03e2895d78
069aaae82ec20e5bbcc694f9603bded464798891e5e2abc27baadeace22f6a05
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a.mailmunch.co/forms-cache/162946/settings-1663252978.json
143.204.55.29200 OK 755 B URL HTTP/1.1 a.mailmunch.co/forms-cache/162946/settings-1663252978.json
IP 143.204.55.29:0
File type JSON data\012- , ASCII text, with very long lines (1402), with no line terminators
Hash 0c88a319536a898093a71cdf623b3b41
4a49ab2c486aa8f3e4eb167ec8bc02e7d1b9d556
cd77d50c8e96ef1f679432e0b9dc7cfffcfb2fdaacec15eda7b10c16dd72f4bd
GET /forms-cache/162946/settings-1663252978.json HTTP/1.1
Host: a.mailmunch.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://www.anniesbeautyhouse.de
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 15 Sep 2022 15:57:33 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, POST, PUT, DELETE
Access-Control-Expose-Headers: ETag
Access-Control-Max-Age: 3000
Last-Modified: Thu, 15 Sep 2022 14:43:05 GMT
ETag: W/"8285d054f05979be8352151c82f3436c"
Cache-Control: max-age=31556952
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: wK87u3G53q-fkVpHP21MbzE0uoii4YqKxM-1STVhUfZWDlcRJ8elCw==
Age: 16203
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 3ed195833c99f569a87401cea2ec6b45
bdaefc42925f3de3986588548feee0795c7601ec
2186d0ee50c879beab843bdf1fd3216ca76eefda0452a6eaa61a5b20e6291d13
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5514
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:35 GMT
Last-Modified: Thu, 15 Sep 2022 18:55:41 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6l-1KFHF6qVig7Cs6lCCmGbFP3FusfN_gieydeUghHZakiElcx_4H_XQY7AKqiTL7uwCsZ5K6yGXWG6vw98YJau1tkL3qMFzbgMr4LOEbtuGzjr807Ykvc_0R41JA32KhQlpaYIVDbHHVR1i3bMd5fIkYyUvRs7won-CZB1HMqINroAu3s7TGGpGQcg/s400-p/gettyimages-931751964.webp
142.250.74.1200 OK 52 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6l-1KFHF6qVig7Cs6lCCmGbFP3FusfN_gieydeUghHZakiElcx_4H_XQY7AKqiTL7uwCsZ5K6yGXWG6vw98YJau1tkL3qMFzbgMr4LOEbtuGzjr807Ykvc_0R41JA32KhQlpaYIVDbHHVR1i3bMd5fIkYyUvRs7won-CZB1HMqINroAu3s7TGGpGQcg/s400-p/gettyimages-931751964.webp
IP 142.250.74.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 400x400, components 3\012- data
Hash 69a327f1bb0801c1bd7612fb60fa00a9
9bb4c8a47cb04132a0bb78900c5fcf0856ba3e8d
efae7a575f95f06e42a678fc65534c6558af0f9c62598cbee51e1f6c1f57ba1e
GET /img/b/R29vZ2xl/AVvXsEj6l-1KFHF6qVig7Cs6lCCmGbFP3FusfN_gieydeUghHZakiElcx_4H_XQY7AKqiTL7uwCsZ5K6yGXWG6vw98YJau1tkL3qMFzbgMr4LOEbtuGzjr807Ykvc_0R41JA32KhQlpaYIVDbHHVR1i3bMd5fIkYyUvRs7won-CZB1HMqINroAu3s7TGGpGQcg/s400-p/gettyimages-931751964.webp HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v100bb"
expires: Fri, 16 Sep 2022 20:27:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="gettyimages-931751964.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:35 GMT
server: fife
content-length: 51649
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEg3m28_vgNkyEuzTnBAESaxFK9nWS5yt8KPoisOeJXJnn8soov1iJ-8i5MHuoXCwa2LkvHfDdH7NGxlY8wwzpnEAHdFqmgfonePnv0l6hSBRbgnZqu5dsBZh46O88v6cfqeJmAPRP-iVFrEeOWNmaa-6W55ZW0wcd31QONypP-7M4rm8tIk4_6-kwt20A=s16000
142.250.74.1200 OK 121 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEg3m28_vgNkyEuzTnBAESaxFK9nWS5yt8KPoisOeJXJnn8soov1iJ-8i5MHuoXCwa2LkvHfDdH7NGxlY8wwzpnEAHdFqmgfonePnv0l6hSBRbgnZqu5dsBZh46O88v6cfqeJmAPRP-iVFrEeOWNmaa-6W55ZW0wcd31QONypP-7M4rm8tIk4_6-kwt20A=s16000
IP 142.250.74.1:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1000x563, components 3\012- data
Size 121 kB (120616 bytes)
Hash 81d37858d07ff05c05a0633527316b8b
ae4275edf59a581de1d911c96a3493c5823a892c
3a0ed1bf6df92d6fd5d799c734cade409c9feaedd623f1bcc069c23a6592d474
GET /img/a/AVvXsEg3m28_vgNkyEuzTnBAESaxFK9nWS5yt8KPoisOeJXJnn8soov1iJ-8i5MHuoXCwa2LkvHfDdH7NGxlY8wwzpnEAHdFqmgfonePnv0l6hSBRbgnZqu5dsBZh46O88v6cfqeJmAPRP-iVFrEeOWNmaa-6W55ZW0wcd31QONypP-7M4rm8tIk4_6-kwt20A=s16000 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vffa5"
expires: Fri, 16 Sep 2022 20:27:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="mutze.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:35 GMT
server: fife
content-length: 120616
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6l-1KFHF6qVig7Cs6lCCmGbFP3FusfN_gieydeUghHZakiElcx_4H_XQY7AKqiTL7uwCsZ5K6yGXWG6vw98YJau1tkL3qMFzbgMr4LOEbtuGzjr807Ykvc_0R41JA32KhQlpaYIVDbHHVR1i3bMd5fIkYyUvRs7won-CZB1HMqINroAu3s7TGGpGQcg/s16000/gettyimages-931751964.webp
142.250.74.1200 OK 131 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6l-1KFHF6qVig7Cs6lCCmGbFP3FusfN_gieydeUghHZakiElcx_4H_XQY7AKqiTL7uwCsZ5K6yGXWG6vw98YJau1tkL3qMFzbgMr4LOEbtuGzjr807Ykvc_0R41JA32KhQlpaYIVDbHHVR1i3bMd5fIkYyUvRs7won-CZB1HMqINroAu3s7TGGpGQcg/s16000/gettyimages-931751964.webp
IP 142.250.74.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 1000x751, components 3\012- data
Size 131 kB (130574 bytes)
Hash cf62449a236c5c801b09104132bfb143
56cb9fd0edc974e9b1dde0898b4a3adb47be11a0
e673eb961bacf49f4ccff36e69d00948e11ea2895b556258bdc28ea2d6285cf4
GET /img/b/R29vZ2xl/AVvXsEj6l-1KFHF6qVig7Cs6lCCmGbFP3FusfN_gieydeUghHZakiElcx_4H_XQY7AKqiTL7uwCsZ5K6yGXWG6vw98YJau1tkL3qMFzbgMr4LOEbtuGzjr807Ykvc_0R41JA32KhQlpaYIVDbHHVR1i3bMd5fIkYyUvRs7won-CZB1HMqINroAu3s7TGGpGQcg/s16000/gettyimages-931751964.webp HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v100bb"
expires: Fri, 16 Sep 2022 20:27:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="gettyimages-931751964.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:35 GMT
server: fife
content-length: 130574
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgcLcRUpqKuYXxAAxtBlEfYWqMrdiGw6Sm7iQ_a2qwKeGNDhObSEKY8oVokPXU51QkCVctDNVOyLrzYrawp8u3swCm5ES0C31T5idHpFFxFShe3gcR5wSBqsGWcN1OXMXA6cJ4cNqbvF3IEULpFZlUn4ZKKrUu1JeuYUjowVbL_EPXyTI9C9zV4omWaQg/s16000/MaisonBaum_MainPicture.png
142.250.74.1200 OK 1.0 MB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgcLcRUpqKuYXxAAxtBlEfYWqMrdiGw6Sm7iQ_a2qwKeGNDhObSEKY8oVokPXU51QkCVctDNVOyLrzYrawp8u3swCm5ES0C31T5idHpFFxFShe3gcR5wSBqsGWcN1OXMXA6cJ4cNqbvF3IEULpFZlUn4ZKKrUu1JeuYUjowVbL_EPXyTI9C9zV4omWaQg/s16000/MaisonBaum_MainPicture.png
IP 142.250.74.1:0
File type PNG image data, 1000 x 750, 8-bit/color RGB, non-interlaced\012- data
Size 1.0 MB (1018892 bytes)
Hash 5549cdbdea5d0cf060edb4b673c18cb4
356d265eca2bc228f967c5b6d3d23aff58cc0e4b
b4447dd164c60117de9343a2e5b6a1423fc578be6ed4fd18eaa5fdc2fd67616a
GET /img/b/R29vZ2xl/AVvXsEgcLcRUpqKuYXxAAxtBlEfYWqMrdiGw6Sm7iQ_a2qwKeGNDhObSEKY8oVokPXU51QkCVctDNVOyLrzYrawp8u3swCm5ES0C31T5idHpFFxFShe3gcR5wSBqsGWcN1OXMXA6cJ4cNqbvF3IEULpFZlUn4ZKKrUu1JeuYUjowVbL_EPXyTI9C9zV4omWaQg/s16000/MaisonBaum_MainPicture.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vffe5"
expires: Fri, 16 Sep 2022 20:27:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="MaisonBaum_MainPicture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:35 GMT
server: fife
content-length: 1018892
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
a.mailmunch.co/app/v1/embedded.js
143.204.55.29200 OK 1.1 kB URL HTTP/1.1 a.mailmunch.co/app/v1/embedded.js
IP 143.204.55.29:0
File type ASCII text, with very long lines (4211), with no line terminators
Hash 6f6b196b7a19dca2025f8bbed5662e5b
835b6a7c1874fa57a62a763976a93d4126201b5c
0d12c6a961849b119c11f77677fdc6ae9c2783e22ac052fb5bef3f55ace69454
GET /app/v1/embedded.js HTTP/1.1
Host: a.mailmunch.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 1097
Connection: keep-alive
Date: Thu, 15 Sep 2022 09:14:02 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, POST, PUT, DELETE
Access-Control-Expose-Headers: ETag
Access-Control-Max-Age: 3000
Last-Modified: Wed, 14 Sep 2022 07:18:28 GMT
ETag: "6f6b196b7a19dca2025f8bbed5662e5b"
Cache-Control: max-age=172800
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Qvnn3xwfCYwsWMmF6DZV73TY7bJIUvRclIMC1B87Z-eO-J6zQm8x6w==
Age: 40414
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgcLcRUpqKuYXxAAxtBlEfYWqMrdiGw6Sm7iQ_a2qwKeGNDhObSEKY8oVokPXU51QkCVctDNVOyLrzYrawp8u3swCm5ES0C31T5idHpFFxFShe3gcR5wSBqsGWcN1OXMXA6cJ4cNqbvF3IEULpFZlUn4ZKKrUu1JeuYUjowVbL_EPXyTI9C9zV4omWaQg/s400-p/MaisonBaum_MainPicture.png
142.250.74.1200 OK 250 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgcLcRUpqKuYXxAAxtBlEfYWqMrdiGw6Sm7iQ_a2qwKeGNDhObSEKY8oVokPXU51QkCVctDNVOyLrzYrawp8u3swCm5ES0C31T5idHpFFxFShe3gcR5wSBqsGWcN1OXMXA6cJ4cNqbvF3IEULpFZlUn4ZKKrUu1JeuYUjowVbL_EPXyTI9C9zV4omWaQg/s400-p/MaisonBaum_MainPicture.png
IP 142.250.74.1:0
File type PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced\012- data
Size 250 kB (249903 bytes)
Hash ca126842aca27a97de9b61a262a487ed
75b8d3bd1c43bbd55aa44d5044bb4363377e8289
526ff57ea8c6bea24614d4ad403b03724ddaa4cb389c23f769c4a2ed958653fc
GET /img/b/R29vZ2xl/AVvXsEgcLcRUpqKuYXxAAxtBlEfYWqMrdiGw6Sm7iQ_a2qwKeGNDhObSEKY8oVokPXU51QkCVctDNVOyLrzYrawp8u3swCm5ES0C31T5idHpFFxFShe3gcR5wSBqsGWcN1OXMXA6cJ4cNqbvF3IEULpFZlUn4ZKKrUu1JeuYUjowVbL_EPXyTI9C9zV4omWaQg/s400-p/MaisonBaum_MainPicture.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vffe5"
expires: Fri, 16 Sep 2022 20:27:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="MaisonBaum_MainPicture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:35 GMT
server: fife
content-length: 249903
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEg3m28_vgNkyEuzTnBAESaxFK9nWS5yt8KPoisOeJXJnn8soov1iJ-8i5MHuoXCwa2LkvHfDdH7NGxlY8wwzpnEAHdFqmgfonePnv0l6hSBRbgnZqu5dsBZh46O88v6cfqeJmAPRP-iVFrEeOWNmaa-6W55ZW0wcd31QONypP-7M4rm8tIk4_6-kwt20A=s72-c
142.250.74.1200 OK 3.2 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEg3m28_vgNkyEuzTnBAESaxFK9nWS5yt8KPoisOeJXJnn8soov1iJ-8i5MHuoXCwa2LkvHfDdH7NGxlY8wwzpnEAHdFqmgfonePnv0l6hSBRbgnZqu5dsBZh46O88v6cfqeJmAPRP-iVFrEeOWNmaa-6W55ZW0wcd31QONypP-7M4rm8tIk4_6-kwt20A=s72-c
IP 142.250.74.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash e61cec6dd246a3519c7832bd95719dcb
882f27bc6678538a9646ee18dac214c3b2bfaff3
4d67c4b6ad5835c5f6548d585c5f2b4f984d109948085419fbb541d0c27d5bb0
GET /img/a/AVvXsEg3m28_vgNkyEuzTnBAESaxFK9nWS5yt8KPoisOeJXJnn8soov1iJ-8i5MHuoXCwa2LkvHfDdH7NGxlY8wwzpnEAHdFqmgfonePnv0l6hSBRbgnZqu5dsBZh46O88v6cfqeJmAPRP-iVFrEeOWNmaa-6W55ZW0wcd31QONypP-7M4rm8tIk4_6-kwt20A=s72-c HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vffa5"
expires: Fri, 16 Sep 2022 20:27:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="mutze.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:35 GMT
server: fife
content-length: 3230
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEhNj1AlPhUcvzTjApRtatEXu0Kej3mjQMSguBMZJ5SY7koz0KcvTGMMedjnGJdxnRpJk1dEFXuNXTWotQhvRiH9AUkh_vFIUzpmVqRu1OTjj4QLOEjvSbHIZFHSf2RF6TxSGzDtNtb9E-KRby9ASgMpLGzngOTb9kG7HrHROzaBWuFsuKc_cf2_e2EZ5w=s72-c
142.250.74.1200 OK 4.8 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEhNj1AlPhUcvzTjApRtatEXu0Kej3mjQMSguBMZJ5SY7koz0KcvTGMMedjnGJdxnRpJk1dEFXuNXTWotQhvRiH9AUkh_vFIUzpmVqRu1OTjj4QLOEjvSbHIZFHSf2RF6TxSGzDtNtb9E-KRby9ASgMpLGzngOTb9kG7HrHROzaBWuFsuKc_cf2_e2EZ5w=s72-c
IP 142.250.74.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 707fec2923208f38444d0a62b7822cd3
65d498b7cc29a7c9f91c1fc22f57b4ca7e0c7f1d
7f13daf53494ea5791616823bf648c19cb74bafc09d7adb8e944c3f49316b346
GET /img/a/AVvXsEhNj1AlPhUcvzTjApRtatEXu0Kej3mjQMSguBMZJ5SY7koz0KcvTGMMedjnGJdxnRpJk1dEFXuNXTWotQhvRiH9AUkh_vFIUzpmVqRu1OTjj4QLOEjvSbHIZFHSf2RF6TxSGzDtNtb9E-KRby9ASgMpLGzngOTb9kG7HrHROzaBWuFsuKc_cf2_e2EZ5w=s72-c HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vffcc"
expires: Fri, 16 Sep 2022 20:27:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="pexels-photo-616833.jpeg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:35 GMT
server: fife
content-length: 4774
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJUgISgwsHnGvIUI8KZ-Zr1D5s0bjtpB9_rLMZTnXiCryyhflLDOi-c0LR3cSTsGFQnMkwRcjDjHc9XhUUQUEpr0LjHXdf7DXS5yUC4g51gIg6XykQGcOwGTkmgpXiOpSvjqdP6My0xZEQxXLDA9YxjeIYTVLzLQDX51WDhAl9W6nH36yXFJ70cNCG-A/s400-p/Scalp%20Micropigmentation.jpg
142.250.74.1200 OK 41 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJUgISgwsHnGvIUI8KZ-Zr1D5s0bjtpB9_rLMZTnXiCryyhflLDOi-c0LR3cSTsGFQnMkwRcjDjHc9XhUUQUEpr0LjHXdf7DXS5yUC4g51gIg6XykQGcOwGTkmgpXiOpSvjqdP6My0xZEQxXLDA9YxjeIYTVLzLQDX51WDhAl9W6nH36yXFJ70cNCG-A/s400-p/Scalp%20Micropigmentation.jpg
IP 142.250.74.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 400x400, components 3\012- data
Hash 5db7b5e914b9445d48b41968ac364cee
672ea784449f3b1ccc97a4c1cca187b8fed77b8f
f8d896f4c10496c35c7f5b98a6696e91f734a324489568f5e1ab2bb0900da38c
GET /img/b/R29vZ2xl/AVvXsEiJUgISgwsHnGvIUI8KZ-Zr1D5s0bjtpB9_rLMZTnXiCryyhflLDOi-c0LR3cSTsGFQnMkwRcjDjHc9XhUUQUEpr0LjHXdf7DXS5yUC4g51gIg6XykQGcOwGTkmgpXiOpSvjqdP6My0xZEQxXLDA9YxjeIYTVLzLQDX51WDhAl9W6nH36yXFJ70cNCG-A/s400-p/Scalp%20Micropigmentation.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v10045"
expires: Fri, 16 Sep 2022 20:27:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Scalp Micropigmentation.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:35 GMT
server: fife
content-length: 41160
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 20ae50d0df52817906a88b07b3c08138
0f999020f07959636477be4178d238d4dd460464
26eb9c5ac69c9144425fb15a481336487c1923bb141685aea110b0e3dfc20171
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 20:27:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPcDykTUkbFFBtUUlfcMQ8641BOioyflGVohsrnlfsu5SV8_Sf8bpbswrKmIf_pSHajNbo3WaN5NZyxKYVq_8JCox-kr5UvOfLSQSSY5f70X_UIz9x8Gx9apOsKH80zODQ7i_RBBM9ZaDiQ6eT0g2LOCQ40-cEawBKUfm1atgWMGri-4A2TLokHcgPMw/s400-p/Wilfa%20Power%20fuel%20Digital%20MainPicture1.jpeg
142.250.74.1200 OK 62 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPcDykTUkbFFBtUUlfcMQ8641BOioyflGVohsrnlfsu5SV8_Sf8bpbswrKmIf_pSHajNbo3WaN5NZyxKYVq_8JCox-kr5UvOfLSQSSY5f70X_UIz9x8Gx9apOsKH80zODQ7i_RBBM9ZaDiQ6eT0g2LOCQ40-cEawBKUfm1atgWMGri-4A2TLokHcgPMw/s400-p/Wilfa%20Power%20fuel%20Digital%20MainPicture1.jpeg
IP 142.250.74.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 400x400, components 3\012- data
Hash 46b2fed278efe0c191c24e1b94e07a7c
cf61d8a4732cc63ad3dee9f4f0a750123d724edd
5b5402b21df6bd17b933a360f861eaaa95ec5c63fa5a48747112523be1ce2aee
GET /img/b/R29vZ2xl/AVvXsEhPcDykTUkbFFBtUUlfcMQ8641BOioyflGVohsrnlfsu5SV8_Sf8bpbswrKmIf_pSHajNbo3WaN5NZyxKYVq_8JCox-kr5UvOfLSQSSY5f70X_UIz9x8Gx9apOsKH80zODQ7i_RBBM9ZaDiQ6eT0g2LOCQ40-cEawBKUfm1atgWMGri-4A2TLokHcgPMw/s400-p/Wilfa%20Power%20fuel%20Digital%20MainPicture1.jpeg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1001e"
expires: Fri, 16 Sep 2022 20:27:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Wilfa Power fuel Digital MainPicture1.jpeg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:35 GMT
server: fife
content-length: 61677
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqNU_3xzWeDBtfSiLxwMR2g_EvtRFBDd1xOEzMQ2PtopySLSgxgmpx4Kujg5yuUykt-S_LSi0ic0RHdmfSd_b5JLff83woUu_mgYpps1rJlzP3ydk5Y5tQRYMApmMFCmMzKS1TmiPwWcKpBGObv7EMxkeDqiBRktEF1NdKPMY3F4_Q2eKhndvfn3msvQ/s400-p/korkboden-corkettarteonussfinal-haro-jpg--61237-.jpg
142.250.74.1200 OK 53 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqNU_3xzWeDBtfSiLxwMR2g_EvtRFBDd1xOEzMQ2PtopySLSgxgmpx4Kujg5yuUykt-S_LSi0ic0RHdmfSd_b5JLff83woUu_mgYpps1rJlzP3ydk5Y5tQRYMApmMFCmMzKS1TmiPwWcKpBGObv7EMxkeDqiBRktEF1NdKPMY3F4_Q2eKhndvfn3msvQ/s400-p/korkboden-corkettarteonussfinal-haro-jpg--61237-.jpg
IP 142.250.74.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 400x400, components 3\012- data
Hash b6f3a11426c34176ce876a901c00496c
007ff659b2f2de38de290440d8b065f39c0fc744
bac2aa2570d4bd58281b42ff88458266910fc8689ccd14cdd5fc1ef9e6394f5a
GET /img/b/R29vZ2xl/AVvXsEjqNU_3xzWeDBtfSiLxwMR2g_EvtRFBDd1xOEzMQ2PtopySLSgxgmpx4Kujg5yuUykt-S_LSi0ic0RHdmfSd_b5JLff83woUu_mgYpps1rJlzP3ydk5Y5tQRYMApmMFCmMzKS1TmiPwWcKpBGObv7EMxkeDqiBRktEF1NdKPMY3F4_Q2eKhndvfn3msvQ/s400-p/korkboden-corkettarteonussfinal-haro-jpg--61237-.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v10094"
expires: Fri, 16 Sep 2022 20:27:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="korkboden-corkettarteonussfinal-haro-jpg--61237-.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:35 GMT
server: fife
content-length: 52588
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEhNj1AlPhUcvzTjApRtatEXu0Kej3mjQMSguBMZJ5SY7koz0KcvTGMMedjnGJdxnRpJk1dEFXuNXTWotQhvRiH9AUkh_vFIUzpmVqRu1OTjj4QLOEjvSbHIZFHSf2RF6TxSGzDtNtb9E-KRby9ASgMpLGzngOTb9kG7HrHROzaBWuFsuKc_cf2_e2EZ5w=s16000
142.250.74.1200 OK 258 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEhNj1AlPhUcvzTjApRtatEXu0Kej3mjQMSguBMZJ5SY7koz0KcvTGMMedjnGJdxnRpJk1dEFXuNXTWotQhvRiH9AUkh_vFIUzpmVqRu1OTjj4QLOEjvSbHIZFHSf2RF6TxSGzDtNtb9E-KRby9ASgMpLGzngOTb9kG7HrHROzaBWuFsuKc_cf2_e2EZ5w=s16000
IP 142.250.74.1:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1000x667, components 3\012- data
Size 258 kB (258070 bytes)
Hash 5d7cc01260d25d88f96f615794c65551
082cfc1e0ed375877e13dcad7e87c505f37124dd
87c340b096a9f895d65019c45a951ff7d94564588c4829d46104deac0c72ad51
GET /img/a/AVvXsEhNj1AlPhUcvzTjApRtatEXu0Kej3mjQMSguBMZJ5SY7koz0KcvTGMMedjnGJdxnRpJk1dEFXuNXTWotQhvRiH9AUkh_vFIUzpmVqRu1OTjj4QLOEjvSbHIZFHSf2RF6TxSGzDtNtb9E-KRby9ASgMpLGzngOTb9kG7HrHROzaBWuFsuKc_cf2_e2EZ5w=s16000 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vffcc"
expires: Fri, 16 Sep 2022 20:27:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="pexels-photo-616833.jpeg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:35 GMT
server: fife
content-length: 258070
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEjEcP2OYjUeDF0m8PSOWoM61auaQTa7y8q716nd-y-SpqqYSFXmHTzU-cgdpAhSfz3dDVjsaiXs5s0zI20qG3RkOpLSnb5IFdgqmPUDXzg0nXJJ6GFij9MzTn2KduG7Gj7rmmWe8xovHmVGQ3o7LjwX0wP_PlBne4OmXeGoqodB0WrjSkJCzEdxVa-3sg=s16000
142.250.74.1200 OK 115 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEjEcP2OYjUeDF0m8PSOWoM61auaQTa7y8q716nd-y-SpqqYSFXmHTzU-cgdpAhSfz3dDVjsaiXs5s0zI20qG3RkOpLSnb5IFdgqmPUDXzg0nXJJ6GFij9MzTn2KduG7Gj7rmmWe8xovHmVGQ3o7LjwX0wP_PlBne4OmXeGoqodB0WrjSkJCzEdxVa-3sg=s16000
IP 142.250.74.1:0
File type PNG image data, 1000 x 666, 8-bit/color RGB, non-interlaced\012- data
Size 115 kB (115001 bytes)
Hash 5b49d2272ced3648c63b7317d919e554
36af30c9039de1b0caa7a07c1cc7eb892e0844e6
aebf19155cfbf463b61adb1a26682ecf4dd519f70f780bb7b56d9029626f109a
GET /img/a/AVvXsEjEcP2OYjUeDF0m8PSOWoM61auaQTa7y8q716nd-y-SpqqYSFXmHTzU-cgdpAhSfz3dDVjsaiXs5s0zI20qG3RkOpLSnb5IFdgqmPUDXzg0nXJJ6GFij9MzTn2KduG7Gj7rmmWe8xovHmVGQ3o7LjwX0wP_PlBne4OmXeGoqodB0WrjSkJCzEdxVa-3sg=s16000 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vffba"
expires: Fri, 16 Sep 2022 20:27:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="for-you-2198772_1280.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:35 GMT
server: fife
content-length: 115001
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJUgISgwsHnGvIUI8KZ-Zr1D5s0bjtpB9_rLMZTnXiCryyhflLDOi-c0LR3cSTsGFQnMkwRcjDjHc9XhUUQUEpr0LjHXdf7DXS5yUC4g51gIg6XykQGcOwGTkmgpXiOpSvjqdP6My0xZEQxXLDA9YxjeIYTVLzLQDX51WDhAl9W6nH36yXFJ70cNCG-A/s16000/Scalp%20Micropigmentation.jpg
142.250.74.1200 OK 706 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJUgISgwsHnGvIUI8KZ-Zr1D5s0bjtpB9_rLMZTnXiCryyhflLDOi-c0LR3cSTsGFQnMkwRcjDjHc9XhUUQUEpr0LjHXdf7DXS5yUC4g51gIg6XykQGcOwGTkmgpXiOpSvjqdP6My0xZEQxXLDA9YxjeIYTVLzLQDX51WDhAl9W6nH36yXFJ70cNCG-A/s16000/Scalp%20Micropigmentation.jpg
IP 142.250.74.1:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1280x720, components 3\012- data
Size 706 kB (705726 bytes)
Hash 75c2bff9ad6751e9cb4946f04b75b86b
f36b1b44889a5079eca07c6ce46eac7ce897db56
496bc60c8382c2ed86853340498a8ba5a4aea93b9ea59531f7cb9f31f105f246
GET /img/b/R29vZ2xl/AVvXsEiJUgISgwsHnGvIUI8KZ-Zr1D5s0bjtpB9_rLMZTnXiCryyhflLDOi-c0LR3cSTsGFQnMkwRcjDjHc9XhUUQUEpr0LjHXdf7DXS5yUC4g51gIg6XykQGcOwGTkmgpXiOpSvjqdP6My0xZEQxXLDA9YxjeIYTVLzLQDX51WDhAl9W6nH36yXFJ70cNCG-A/s16000/Scalp%20Micropigmentation.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v10045"
expires: Fri, 16 Sep 2022 20:27:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Scalp Micropigmentation.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:35 GMT
server: fife
content-length: 705726
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqNU_3xzWeDBtfSiLxwMR2g_EvtRFBDd1xOEzMQ2PtopySLSgxgmpx4Kujg5yuUykt-S_LSi0ic0RHdmfSd_b5JLff83woUu_mgYpps1rJlzP3ydk5Y5tQRYMApmMFCmMzKS1TmiPwWcKpBGObv7EMxkeDqiBRktEF1NdKPMY3F4_Q2eKhndvfn3msvQ/s16000/korkboden-corkettarteonussfinal-haro-jpg--61237-.jpg
142.250.74.1200 OK 527 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqNU_3xzWeDBtfSiLxwMR2g_EvtRFBDd1xOEzMQ2PtopySLSgxgmpx4Kujg5yuUykt-S_LSi0ic0RHdmfSd_b5JLff83woUu_mgYpps1rJlzP3ydk5Y5tQRYMApmMFCmMzKS1TmiPwWcKpBGObv7EMxkeDqiBRktEF1NdKPMY3F4_Q2eKhndvfn3msvQ/s16000/korkboden-corkettarteonussfinal-haro-jpg--61237-.jpg
IP 142.250.74.1:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1000x685, components 3\012- data
Size 527 kB (527438 bytes)
Hash 59c0d68f937f325b1efe5678922f0e6a
c41712c1649f01770bc454a9415b4c222d0e1650
1d4e055303541cd97b29751ca4c4c5825c9360be61a4eb494ce1a7ab9a8d508f
GET /img/b/R29vZ2xl/AVvXsEjqNU_3xzWeDBtfSiLxwMR2g_EvtRFBDd1xOEzMQ2PtopySLSgxgmpx4Kujg5yuUykt-S_LSi0ic0RHdmfSd_b5JLff83woUu_mgYpps1rJlzP3ydk5Y5tQRYMApmMFCmMzKS1TmiPwWcKpBGObv7EMxkeDqiBRktEF1NdKPMY3F4_Q2eKhndvfn3msvQ/s16000/korkboden-corkettarteonussfinal-haro-jpg--61237-.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v10094"
expires: Fri, 16 Sep 2022 20:27:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="korkboden-corkettarteonussfinal-haro-jpg--61237-.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:35 GMT
server: fife
content-length: 527438
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPcDykTUkbFFBtUUlfcMQ8641BOioyflGVohsrnlfsu5SV8_Sf8bpbswrKmIf_pSHajNbo3WaN5NZyxKYVq_8JCox-kr5UvOfLSQSSY5f70X_UIz9x8Gx9apOsKH80zODQ7i_RBBM9ZaDiQ6eT0g2LOCQ40-cEawBKUfm1atgWMGri-4A2TLokHcgPMw/s16000/Wilfa%20Power%20fuel%20Digital%20MainPicture1.jpeg
142.250.74.1200 OK 700 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPcDykTUkbFFBtUUlfcMQ8641BOioyflGVohsrnlfsu5SV8_Sf8bpbswrKmIf_pSHajNbo3WaN5NZyxKYVq_8JCox-kr5UvOfLSQSSY5f70X_UIz9x8Gx9apOsKH80zODQ7i_RBBM9ZaDiQ6eT0g2LOCQ40-cEawBKUfm1atgWMGri-4A2TLokHcgPMw/s16000/Wilfa%20Power%20fuel%20Digital%20MainPicture1.jpeg
IP 142.250.74.1:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1080x912, components 3\012- data
Size 700 kB (700343 bytes)
Hash 0256d2d30d144eb2cf96a3e69494c23d
62a120cf78167b2010b9ff1eff5bd929ade74d1c
0552c417211019df62c3c342773c735c876392a9c3595547e6b1f79141a411a4
GET /img/b/R29vZ2xl/AVvXsEhPcDykTUkbFFBtUUlfcMQ8641BOioyflGVohsrnlfsu5SV8_Sf8bpbswrKmIf_pSHajNbo3WaN5NZyxKYVq_8JCox-kr5UvOfLSQSSY5f70X_UIz9x8Gx9apOsKH80zODQ7i_RBBM9ZaDiQ6eT0g2LOCQ40-cEawBKUfm1atgWMGri-4A2TLokHcgPMw/s16000/Wilfa%20Power%20fuel%20Digital%20MainPicture1.jpeg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1001e"
expires: Fri, 16 Sep 2022 20:27:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Wilfa Power fuel Digital MainPicture1.jpeg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:35 GMT
server: fife
content-length: 700343
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEhj9xcZvR6WwCSsXcvD3fLar_C7qMk_kWTbbYOi2BLLNrF2mAIR71Ua2cIflSFaFNhogqAemguz4O_IaVDgDAa9S4m1hl_w8aKIQ5Zrj4B5Qcx7gvk00NuwoZ2o8v2N7HXHrx6qfZhpsXIcv836QWIB9HSCYDctrkDgmojZBhTm_apE5MsqDR_5-uTbdA=s292
142.250.74.1200 OK 19 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEhj9xcZvR6WwCSsXcvD3fLar_C7qMk_kWTbbYOi2BLLNrF2mAIR71Ua2cIflSFaFNhogqAemguz4O_IaVDgDAa9S4m1hl_w8aKIQ5Zrj4B5Qcx7gvk00NuwoZ2o8v2N7HXHrx6qfZhpsXIcv836QWIB9HSCYDctrkDgmojZBhTm_apE5MsqDR_5-uTbdA=s292
IP 142.250.74.1:0
File type PNG image data, 292 x 207, 8-bit/color RGB, non-interlaced\012- data
Hash 1352ef7d58c2fec5b92ae2289f3a092b
8c5251b0e093d08a0ef5579ed21ed2b5a2dabd4d
117d10be9dc075d0f8e7a23fef4ed26f6017f4b0a7a35fadf00bce28d0a86787
GET /img/a/AVvXsEhj9xcZvR6WwCSsXcvD3fLar_C7qMk_kWTbbYOi2BLLNrF2mAIR71Ua2cIflSFaFNhogqAemguz4O_IaVDgDAa9S4m1hl_w8aKIQ5Zrj4B5Qcx7gvk00NuwoZ2o8v2N7HXHrx6qfZhpsXIcv836QWIB9HSCYDctrkDgmojZBhTm_apE5MsqDR_5-uTbdA=s292 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v100b0"
expires: Fri, 16 Sep 2022 20:27:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:35 GMT
server: fife
content-length: 19183
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEhDAK4j-VRwxjG8NBYMY19DfJqDXIsPhlCa6zFKQ31stXRt4X66A0RJ73NECmi_tzWvque4P2S5Fvcua26N262n7It0i9Y-4xZfYxIDQOfysyZAC44ifI8WegB2tMKLMHJc_mAAsKi5W96dufhE5lLQsXMfnyJNZZ1V6KVuFny29-iliHJuMGNi6WdDaA=s16000
142.250.74.1200 OK 118 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEhDAK4j-VRwxjG8NBYMY19DfJqDXIsPhlCa6zFKQ31stXRt4X66A0RJ73NECmi_tzWvque4P2S5Fvcua26N262n7It0i9Y-4xZfYxIDQOfysyZAC44ifI8WegB2tMKLMHJc_mAAsKi5W96dufhE5lLQsXMfnyJNZZ1V6KVuFny29-iliHJuMGNi6WdDaA=s16000
IP 142.250.74.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 1000x581, components 3\012- data
Size 118 kB (117745 bytes)
Hash b507c1cf0eebb2b0919a10d3813fb099
f38bed7ad901b7e645b3c4c8d9d0847d08fba48b
b366cda395381e75816b2ece9bae3879867b50d9b49d82f8da40bcbe2d979cf5
GET /img/a/AVvXsEhDAK4j-VRwxjG8NBYMY19DfJqDXIsPhlCa6zFKQ31stXRt4X66A0RJ73NECmi_tzWvque4P2S5Fvcua26N262n7It0i9Y-4xZfYxIDQOfysyZAC44ifI8WegB2tMKLMHJc_mAAsKi5W96dufhE5lLQsXMfnyJNZZ1V6KVuFny29-iliHJuMGNi6WdDaA=s16000 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vffb8"
expires: Fri, 16 Sep 2022 20:27:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="photo-1600494603989-9650cf6ddd3d.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:35 GMT
server: fife
content-length: 117745
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEgxRKz87FHU_UfbiS9o7oKnLYagCH4EoJFkj9Py7XfE3OPzdl8By0xLvHbJ_W9igRgmHG7sHFAw-GUTeU7ZtvBlmq7wXmR2gkB-SCER116VHi4lHc2bThmWS_h0BVI3rn39rxISFz0XlqHsA2jDGSPLneZ-5TQTLLseitzPDHjRyXTWXHyHLjfrrisoHw=s16000
142.250.74.1200 OK 86 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEgxRKz87FHU_UfbiS9o7oKnLYagCH4EoJFkj9Py7XfE3OPzdl8By0xLvHbJ_W9igRgmHG7sHFAw-GUTeU7ZtvBlmq7wXmR2gkB-SCER116VHi4lHc2bThmWS_h0BVI3rn39rxISFz0XlqHsA2jDGSPLneZ-5TQTLLseitzPDHjRyXTWXHyHLjfrrisoHw=s16000
IP 142.250.74.1:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1000x667, components 3\012- data
Hash 6fceb2d572663b79412782b33654d66b
b0eba1b5d422d14d0c8cf9c0d6fefed2b9fd271a
8d83aff29048289763b1fa05ff33d5e2122d7e5960c168015a46fea6cd7e98df
GET /img/a/AVvXsEgxRKz87FHU_UfbiS9o7oKnLYagCH4EoJFkj9Py7XfE3OPzdl8By0xLvHbJ_W9igRgmHG7sHFAw-GUTeU7ZtvBlmq7wXmR2gkB-SCER116VHi4lHc2bThmWS_h0BVI3rn39rxISFz0XlqHsA2jDGSPLneZ-5TQTLLseitzPDHjRyXTWXHyHLjfrrisoHw=s16000 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vff75"
expires: Fri, 16 Sep 2022 20:27:35 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="pexels-photo-3554241.jpeg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 20:27:35 GMT
server: fife
content-length: 85545
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
api.instagram.com/v1/users/1472880665/media/recent?access_token=1472880665.1677ed0.de8718598f3145b99262998c013592e3&count=16&callback=instafeedCachedd91f9cb92ee3001.parse
31.13.72.53404 Not Found 39 kB URL HTTP/2 api.instagram.com/v1/users/1472880665/media/recent?access_token=1472880665.1677ed0.de8718598f3145b99262998c013592e3&count=16&callback=instafeedCachedd91f9cb92ee3001.parse
IP 31.13.72.53:0
Hash c5910f85d3f3b2b0b743935ef425ba46
a26397cc57d6d568b7acbe5cc15347a2210d5bd2
502ad608e22965f9beadba67ec0d4beb7277ec0faca8a607f2a1e86ccbfb76e7
GET /v1/users/1472880665/media/recent?access_token=1472880665.1677ed0.de8718598f3145b99262998c013592e3&count=16&callback=instafeedCachedd91f9cb92ee3001.parse HTTP/1.1
Host: api.instagram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
content-type: text/html; charset=utf-8
vary: Accept-Language, Cookie
content-language: en
date: Thu, 15 Sep 2022 20:27:35 GMT
strict-transport-security: max-age=31536000
cache-control: private, no-cache, no-store, must-revalidate
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-frame-options: SAMEORIGIN
content-security-policy: report-uri https://www.instagram.com/security/csp_report/; default-src 'self' https://www.instagram.com; img-src data: blob: https://*.fbcdn.net https://*.instagram.com https://*.cdninstagram.com https://*.facebook.com https://*.fbsbx.com; font-src data: https://*.fbcdn.net https://*.instagram.com https://*.cdninstagram.com; media-src 'self' blob: https://www.instagram.com https://*.cdninstagram.com https://*.fbcdn.net; manifest-src 'self' https://www.instagram.com; script-src 'self' https://instagram.com https://www.instagram.com https://*.www.instagram.com https://*.cdninstagram.com wss://www.instagram.com https://*.facebook.com https://*.fbcdn.net https://*.facebook.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' https://*.www.instagram.com https://www.instagram.com 'unsafe-inline'; connect-src 'self' https://instagram.com https://www.instagram.com https://*.www.instagram.com https://graph.instagram.com https://*.graph.instagram.com https://i.instagram.com/graphql_www https://graphql.instagram.com https://*.cdninstagram.com https://api.instagram.com https://i.instagram.com https://*.i.instagram.com https://*.od.instagram.com wss://www.instagram.com wss://edge-chat.instagram.com https://*.facebook.com https://*.fbcdn.net https://*.facebook.net chrome-extension://boadgeojelhgndaghljhdicfkmllpafd blob:; worker-src 'self' blob: https://www.instagram.com; frame-src 'self' https://instagram.com https://www.instagram.com https://*.instagram.com https://staticxx.facebook.com https://www.facebook.com https://web.facebook.com https://connect.facebook.net https://m.facebook.com https://*.fbsbx.com; object-src 'none'; upgrade-insecure-requests
cross-origin-embedder-policy-report-only: require-corp;report-to="coep"
report-to: {"group": "coep", "max_age": 86400, "endpoints": [{"url": "/security/coep_report/"}]},{"group": "coop", "max_age": 86400, "endpoints": [{"url": "/security/coop_report/"}]}
origin-trial: AuqWincgAuXeuu3KypEMnrrFEJHySaesyJS3EaIH40zvafzrU0Irhb7+5QwZpOqMZrPTjgvFl7Z5jJgy1dNAcQMAAAB6eyJvcmlnaW4iOiJodHRwczovL2luc3RhZ3JhbS5jb206NDQzIiwiZmVhdHVyZSI6IkNyb3NzT3JpZ2luT3BlbmVyUG9saWN5UmVwb3J0aW5nIiwiZXhwaXJ5IjoxNjEzNDExNjYyLCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
cross-origin-opener-policy: same-origin-allow-popups;report-to="coop"
x-content-type-options: nosniff
x-xss-protection: 0
x-ig-push-state: c2
x-aed: 69
access-control-expose-headers: X-IG-Set-WWW-Claim
x-ig-request-elapsed-time-ms: 207
x-ig-peak-time: 0
content-length: 114717
x-ig-origin-region: rva
x-fb-trip-id: 1512268381
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/v2.8/plugins/page.php?adapt_container_width=true&app_id=1731260523830461&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Dfb334adbd00a9a%26domain%3Dwww.anniesbeautyhouse.de%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.anniesbeautyhouse.de%252Ff3488dc5e92f33a%26relation%3Dparent.parent&container_width=304&hide_cover=false&href=https%3A%2F%2Fwww.facebook.com%2FAnniesBeautyHouse%2F&locale=de_DE&sdk=joey&show_facepile=false&small_header=false
31.13.72.36200 OK 20 kB URL HTTP/2 www.facebook.com/v2.8/plugins/page.php?adapt_container_width=true&app_id=1731260523830461&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Dfb334adbd00a9a%26domain%3Dwww.anniesbeautyhouse.de%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.anniesbeautyhouse.de%252Ff3488dc5e92f33a%26relation%3Dparent.parent&container_width=304&hide_cover=false&href=https%3A%2F%2Fwww.facebook.com%2FAnniesBeautyHouse%2F&locale=de_DE&sdk=joey&show_facepile=false&small_header=false
IP 31.13.72.36:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (22152)
Hash f05524e5145b9420d18644932f0b8d36
301c9229af350d0b17b8daf88d6089b8ec9251d9
f28554234335cde5081190f8aa9c1ec62f04993eb813312e0ba44f5c4120a1b3
GET /v2.8/plugins/page.php?adapt_container_width=true&app_id=1731260523830461&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Dfb334adbd00a9a%26domain%3Dwww.anniesbeautyhouse.de%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.anniesbeautyhouse.de%252Ff3488dc5e92f33a%26relation%3Dparent.parent&container_width=304&hide_cover=false&href=https%3A%2F%2Fwww.facebook.com%2FAnniesBeautyHouse%2F&locale=de_DE&sdk=joey&show_facepile=false&small_header=false HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
facebook-api-version: v8.0
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: dMR1EKkBF6/KhXSC7VJ3FQQvhDrIeYHF3330IhQFyZzlXjjiMCegQxrxhTLnIadjkPP6QTj/UOPq9tvo74sEZw==
date: Thu, 15 Sep 2022 20:27:36 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 827 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (724)
Hash 29973cf3b0ef9f16fe31ed981b2f6573
f22eb80b89b5e0ae9ace854aab6676d56eaef6a1
476822c80e0a0ee078edb7a74db59378f8b1d43d2de844e28a9e9c2f68a4c8d8
GET /rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 08 Sep 2023 16:41:06 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: KZc887Dvnxb+Me2YGy9lcw==
x-fb-debug: F/Ks6L/ODrGWpooL/ydi60V2ddMBtGP2Q6SkRGsN0DyBdQzqhFy78deSITTx40Qox5sSGo1JLYKucRRUBb7stQ==
priority: u=3,i
content-length: 827
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 20:27:36 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y0/r/4bxt0IX69HT.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 91 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y0/r/4bxt0IX69HT.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (18537)
Hash 4b73ab5afcda5dd1bdb7836eef76d95d
478b61687291763395c26732ce524f5213f90c1a
24828be530ccd514b677efddcdd60313ad3e96aaf162954b2a68aeffb4e1fa86
GET /rsrc.php/v3/y0/r/4bxt0IX69HT.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Sep 2023 06:03:03 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: S3OrWvzaXdG9t4Nu73bZXQ==
x-fb-debug: tgAYKCCgFh44qAZVbds9oE49VBIZ6b8fw6zfLQL6uPU97uydL9fi7kY83j6kddcaMrX6P7vL8YxOApo7Hw0Rrw==
priority: u=3,i
content-length: 91220
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 20:27:36 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yG/r/A6jHkjFD25T.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 12 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yG/r/A6jHkjFD25T.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (5297)
Hash d0048c469ad4b188ddc4ebb9bd7373ea
3c2be70ede32813b7071f82f3fc973e460bace72
bb508f686e750c92ecc335cdedbdb3a5e6b62895b71c4b91255faccf91af6e40
GET /rsrc.php/v3/yG/r/A6jHkjFD25T.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Sep 2023 01:16:28 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 0ASMRprUsYjdxOu5vXNz6g==
x-fb-debug: Txade6qfRGhvGCC9k43gCAQtsrgUJxMo1lhrNS0QwbzdWhjC1eOGo7XpUoZ/rPdMoeGgsBpnjt/oJHfiCudwYQ==
priority: u=3,i
content-length: 12220
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 20:27:36 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y2/r/2v3YktoK84u.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 16 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y2/r/2v3YktoK84u.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type C source, ASCII text, with very long lines (7335)
Hash cc9dc524764f2664cfb1ada75f08fb20
4daef2f323bc6ca85a909ae229e90ea3aceedcf0
b03eb68a8a8ee0e2979a6c8686ecf8d0ed53dd8918a53fc093eb8163db3975f1
GET /rsrc.php/v3/y2/r/2v3YktoK84u.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Sep 2023 01:16:28 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: zJ3FJHZPJmTPsa2nXwj7IA==
x-fb-debug: 6iwGd7bYt8I2pntubtU8Iyos+XtMUV1Bk0MDMDVF3OZWl/ea3QOniOuGeQWQAuwMCGB98digIVsZsUKuI3QSvg==
priority: u=3,i
content-length: 15927
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 20:27:36 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iAxA4/yn/l/de_DE/Cvm1ASjcHJt.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 24 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iAxA4/yn/l/de_DE/Cvm1ASjcHJt.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (42117)
Hash 55bca46918aae825e558685a88db4836
1d4dac8a7e246848f59cb315f5b1e8754265b015
24cb0b31ab8f80663361d90a8ff1a322c949210379c5cd729c81ae0c7b90be18
GET /rsrc.php/v3iAxA4/yn/l/de_DE/Cvm1ASjcHJt.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Sep 2023 07:41:33 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: VbykaRiq6CXlWGhaiNtINg==
x-fb-debug: naRmnfAhSVB9+T01NcGZmCmFCsmivyhUiWotOFBu+2d6RntRvaVzTwWuoYxVLWRJL9nCIHvOp7U4rUQMhwbTGw==
content-length: 23450
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 20:27:36 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
snapwidget.com/stylesheets/embed.style.min.307799cd3bc5b2ee.css
172.67.75.33200 OK 0 B URL HTTP/2 snapwidget.com/stylesheets/embed.style.min.307799cd3bc5b2ee.css
IP 172.67.75.33:0
GET /stylesheets/embed.style.min.307799cd3bc5b2ee.css HTTP/1.1
Host: snapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/embed/776525
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 20:27:34 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=15975
etag: W/"62f0b6a9-3e67"
last-modified: Mon, 08 Aug 2022 07:09:29 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1946176
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fwZc4Dd5qhz8%2B62tRTmZZ7A3cNHfF3AwxAVehXrl%2FpZwPzxXr6f%2FTTeDk4QPppgehniXNEGFuV0EvLBXClARJAUKy7z98W6OOO6NqYLN0wUTgNBaig7p4HgKSG%2Fp1oAm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 74b41a928a4bb527-OSL
content-encoding: br
X-Firefox-Spdy: h2
snapwidget.com/embed/776525
172.67.75.33200 OK 0 B URL HTTP/2 snapwidget.com/embed/776525
IP 172.67.75.33:0
GET /embed/776525 HTTP/1.1
Host: snapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.anniesbeautyhouse.de/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 20:27:34 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: public, max-age=300
expires: Thu, 15 Sep 2022 20:29:33 GMT
x-robots-tag: all
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
last-modified: Thu, 15 Sep 2022 18:48:49 GMT
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hz%2BdtKkykyF78LfxnyKYbJ0vddz2tZ81kVJGEjMsccLxC1rLKPX%2BRaDW0DvH1WOUsjvr1jnNTQ1TThctBa1mIoLVv6PP6%2Fl2UAt9anzN%2FADcLNXQxy2qik41eeyhjlFE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 74b41a8ffeb1b527-OSL
content-encoding: br
X-Firefox-Spdy: h2
snapwidget.com/cdn-cgi/rum?
172.67.75.33200 OK 0 B URL HTTP/2 snapwidget.com/cdn-cgi/rum?
IP 172.67.75.33:0
POST /cdn-cgi/rum? HTTP/1.1
Host: snapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 384
Origin: https://snapwidget.com
Connection: keep-alive
Referer: https://snapwidget.com/embed/776525
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 20:27:41 GMT
content-type: text/plain
access-control-allow-origin: https://snapwidget.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 74b41abe9b65b527-OSL
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
snapwidget.com/js/embed.main.min.b61fafc5de1ae792.js
172.67.75.33200 OK 0 B URL HTTP/2 snapwidget.com/js/embed.main.min.b61fafc5de1ae792.js
IP 172.67.75.33:0
GET /js/embed.main.min.b61fafc5de1ae792.js HTTP/1.1
Host: snapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/embed/776525
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 20:27:34 GMT
content-type: application/javascript; charset=utf-8
cf-bgj: minify
etag: W/"63034249-b2e"
last-modified: Mon, 22 Aug 2022 08:46:01 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1479288
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7VrAwFFJ1uynuinqHCiOOuGLYyHF%2F8OUcBVFalg4x8AYKeBK4CBQIC5D8LgMAi%2FhPOQ9ojNG6nEELpRg0dswOsCVsHxhkJZ1pH5nC2lFRT%2FokhX0Ypaf7ZfUjFF%2Fjzky"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 74b41a928a56b527-OSL
content-encoding: br
X-Firefox-Spdy: h2