firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 09 Sep 2022 09:05:45 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: l361SNlr9sbPCzCcC21WvcnxeDqapcHgczJ3liSjLkU4ZMB_mUNdTQ==
Age: 2944
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4b917c742ccd05d6f430188c6d4e580c
f2ebd9e883be956e4f85b7bbee54f4e0349d25d7
df0381ca09dc6c1871979bc375176bed1ae4829418b889bb9d1ca203afdae964
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF0381CA09DC6C1871979BC375176BED1AE4829418B889BB9D1CA203AFDAE964"
Last-Modified: Wed, 07 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8266
Expires: Fri, 09 Sep 2022 12:12:35 GMT
Date: Fri, 09 Sep 2022 09:54:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f55e483f32b3fd50b1a2414aaada9b61
9d6b22edb98866e002e3b1ace44dfb0f8d00935f
4b09e1d2b887ded061e4ec5f82ec70ce699eeed428acc6b4fd3ef10ed9233c89
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4B09E1D2B887DED061E4EC5F82EC70CE699EEED428ACC6B4FD3EF10ED9233C89"
Last-Modified: Thu, 08 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10481
Expires: Fri, 09 Sep 2022 12:49:30 GMT
Date: Fri, 09 Sep 2022 09:54:49 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 09 Sep 2022 03:46:35 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kY75mhnZnI2CmI4C2db1ztfTcAYSF2tVhpCU3Q-ijVu1W7LdXBfdig==
age: 22095
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Sep 2022 09:54:49 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Fri, 09 Sep 2022 08:56:07 GMT
Expires: Fri, 09 Sep 2022 09:33:08 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Mwc9MYbwpQpRq0oDD7YJQXr96On__iizOamtbuLrMrg9tCfzKB273g==
Age: 3522
tracking.de.havamariamaszetta.social/dlogin.php
302 Found 79 B URL HTTP/1.1 tracking.de.havamariamaszetta.social/dlogin.php
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type HTML document, ASCII text, with no line terminators
Hash 9e0aff117458090f4a74c42bcb8a588c
3872f0b53cd1d0cee63ba0a61b833dbabe8e0551
26b51fde6fb0f8b652ed9f658bc060b30e65480f4b77b28a80f49edc859d831a
Analyzer Verdict Alert openphish DHL Airways, Inc.
fortinet Phishing
GET /dlogin.php HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:51 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 79
Connection: keep-alive
X-Powered-By: PHP/5.4.16
location: verfolgung/ef4664a4cca611ecaebeb178?page=
ocsp.digicert.com/
200 OK 471 B IP
Hash 042105f89c8d64b470d84e052cd412d1
a26c7e2559b3760ea2765b16a3f8d1be27f5dcf4
fadb8cdd22f4d7773d5c20d576f6400ab25e20e1efe3e3fe50d2ae39ca6f2725
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6449
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 09:54:50 GMT
Last-Modified: Fri, 09 Sep 2022 08:07:21 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: oZyTwhT69w0RIO8G8NmVbA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: L8b/ArggWOjeqw/B1JQt77XFcNY=
tracking.de.havamariamaszetta.social/verfolgung/ef4664a4cca611ecaebeb178?page=
302 Found 84 B URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/ef4664a4cca611ecaebeb178?page=
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type HTML document, ASCII text, with no line terminators
Hash 5cf9d748a2b7ece093071b32952b5cfc
1727a0a8c9a648df175a941e9bc5a362269c339a
c903ff5303ec55182aa2bb53a699f4a57d805077e1fda37977b79de1932f2cb5
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/ef4664a4cca611ecaebeb178?page= HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:52 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 84
Connection: keep-alive
X-Powered-By: PHP/5.4.16
location: tracking.php?id=ef4664a4cca611ecaebeb178&page=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13242
Expires: Fri, 09 Sep 2022 13:35:33 GMT
Date: Fri, 09 Sep 2022 09:54:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13242
Expires: Fri, 09 Sep 2022 13:35:33 GMT
Date: Fri, 09 Sep 2022 09:54:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13242
Expires: Fri, 09 Sep 2022 13:35:33 GMT
Date: Fri, 09 Sep 2022 09:54:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13242
Expires: Fri, 09 Sep 2022 13:35:33 GMT
Date: Fri, 09 Sep 2022 09:54:51 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F498f96cc-d02c-4ca3-a7e2-0be324253465.jpeg
200 OK 3.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F498f96cc-d02c-4ca3-a7e2-0be324253465.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0078c7a407144a1ede33aef6f734eecf
113393e0dbabb3aff949d19ab6517ba1082b622d
42afcaf15e45dfa9aff14f59f69d60a3de127005e35783d2d35a4cfa652b57b3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F498f96cc-d02c-4ca3-a7e2-0be324253465.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3125
x-amzn-requestid: 5820e798-6469-40f9-8d70-ee71f1a163b9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YLM5GGQAoAMF8eQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ac1d3-3a0e9db848ea7ab145f1cffa;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 04:32:19 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: eZaKpjBYe3Qn7vs3zF52Cxob-xu3LMFs8esQAu6Lp6bzM0aOEHoXVg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1352c0a623ff0601dd16439f3f225f70.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 04:32:54 GMT
etag: "113393e0dbabb3aff949d19ab6517ba1082b622d"
content-type: image/jpeg
age: 19317
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c7c5434-1873-4130-a7ce-78209ce54bf0.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c7c5434-1873-4130-a7ce-78209ce54bf0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 15249f3dafdd1690bc87ebb4fa6d518d
f930fcb22325e28592bc39b0b1974f5197c19afd
a0b9e88c78e85a037363e0b0e4e03478718f8715fe69e72bfd159922eca28301
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c7c5434-1873-4130-a7ce-78209ce54bf0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10950
x-amzn-requestid: 435fc2f4-fbcb-4eec-81d8-a23154dcec61
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YFUwZEfvIAMFjCQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63186802-2348a4000430702d4e9ea132;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 09:44:34 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ORlM8dFTc_iThvJghFakY86D3ToJ5TCmP8Ip2PcvXCCkSKKHpWQ0Zw==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 22:02:59 GMT
age: 42712
etag: "f930fcb22325e28592bc39b0b1974f5197c19afd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9258cc3-ebbf-4d4c-85d1-6bc185623583.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9258cc3-ebbf-4d4c-85d1-6bc185623583.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7afe346e3b24ea4388913b449d1ffc42
f5348ba99fb8966dded580409108316f4e4e1237
1d1cafc3e99c20b23212679838567d4d5fc98c45cf902188e44b25ff2982c8ad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9258cc3-ebbf-4d4c-85d1-6bc185623583.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8354
x-amzn-requestid: e7ec7e84-0924-4f5f-b289-4c750ea99567
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKQgHHnNIAMFlrQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a6133-49565105361ec7f76cb818e0;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:40:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: DvCs6zEt1p58iwZaXfuF9YFA-fieE5Y974E07YMNYPiaGbR5iuXK-A==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 79880188a81becf1687ba18c0e064230.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 21:45:51 GMT
age: 43740
etag: "f5348ba99fb8966dded580409108316f4e4e1237"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F793f20c6-757e-47e5-8ab6-4d73ceae75af.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F793f20c6-757e-47e5-8ab6-4d73ceae75af.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9590b525c8b07a297c8784f02b161a1
cec8428d159a5bde29e89c64cfb04146f759d52b
d309772ce79d36f7b1df0a3ea85a01f8278db2909c860721d105b772efed82ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F793f20c6-757e-47e5-8ab6-4d73ceae75af.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4002
x-amzn-requestid: ea2f5309-e220-4b7e-b718-9339b9444cc2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKQ6hHM8IAMFeJQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a61dc-7d45fd9253b7b7fa732b6f8d;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:42:52 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: VD7SlrM2RwFk5cfQvul2bTJA__GPYd5_UPY0D0_5NGLHoBj3yur7PA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 5abfab33f248090bb0f31ca137ce9464.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 22:05:15 GMT
age: 42576
etag: "cec8428d159a5bde29e89c64cfb04146f759d52b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe94f950b-af66-4803-868a-b00031195100.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe94f950b-af66-4803-868a-b00031195100.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7d3752fb9bfaa323218e5a7b93aa5c6
08b4d519a099b04a9f1515377d02e51575f3321f
fa33f2240aea7395b0be62683743523beb1f0f11cb390f4d532e3474610a812c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe94f950b-af66-4803-868a-b00031195100.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7646
x-amzn-requestid: a1a8ac97-ed7f-4eb3-b704-b553d53f9279
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YEaEoHoAoAMFkwg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63180a1d-34dbcab50e2f495d4acfec54;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 03:03:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: EL9_xDX27FFKUXhp2GUBHaED9grsbgCwxFZWM-O8mNChPPfvdX_2bg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 05:02:31 GMT
age: 17540
etag: "08b4d519a099b04a9f1515377d02e51575f3321f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ee79a10-bae9-4fae-b19f-8beb6d75a42c.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ee79a10-bae9-4fae-b19f-8beb6d75a42c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 706c7ceb40056f848425ca7d994cedc8
b9b1bf8291b6a66f260f82947966fa01ca78c61f
739205893d17a123d2fac165f468314de14a99dc56c9e5b0ac79434f7c38b558
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ee79a10-bae9-4fae-b19f-8beb6d75a42c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7139
x-amzn-requestid: 5125cc11-410a-4a86-a0cf-68950433b602
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YFBoyHycIAMFxcw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6318496b-5579dee14390c1b63e97e0fc;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 07:34:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: 1_B0YRYqe6d5Tkoj4JvvTTArO1I5XfWVMUqFAY3rtPl2T0UenSeaeQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 f62c9ca47e35df5c65764381977823a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 22:02:44 GMT
age: 80164
etag: "b9b1bf8291b6a66f260f82947966fa01ca78c61f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
200 OK 267 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (23535), with CRLF line terminators
Size 267 kB (266776 bytes)
Hash 77ec1d88c57f6e40fba606e7cdd1cfa0
00fae29e84c8065ee03132b0d5091d9f2991d2d5
9bdd20c04c3cd5e5c67b49b0189e712110714884f5b95eb71767ba979c00b0ca
GET /verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page= HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:53 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.16
tracking.de.havamariamaszetta.social/verfolgung/index_files/route-couponseteditorversenden-shared-component-map.css
200 OK 167 B URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/index_files/route-couponseteditorversenden-shared-component-map.css
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type ASCII text, with no line terminators
Hash 5c766de662693bd4cce7edc83b30215f
7a6c46e624ef56ba28b80fe1d00de625c3e19c89
70938e0b389de40dca6c4ede63501ed5cf9cea96f411e80fde3b73971e9117ab
GET /verfolgung/index_files/route-couponseteditorversenden-shared-component-map.css HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:54 GMT
Content-Type: text/css
Content-Length: 167
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "a7-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/index_files/erkennen.css
200 OK 22 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/index_files/erkennen.css
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type ASCII text, with very long lines (2457)
Hash e4790aa32e8074e21c4e538fc4368850
a68f534150f06eed9898ef3ca01c80a11e8d46e1
1561c6fe5d4667cfe7664d0c6fcfb8158be79d1de395fea4104dffd393efeea8
GET /verfolgung/index_files/erkennen.css HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:54 GMT
Content-Type: text/css
Content-Length: 21496
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "53f8-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/index_files/versenden-shared-component-map.css
200 OK 80 B URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/index_files/versenden-shared-component-map.css
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type ASCII text, with no line terminators
Hash 3a801f7d92f3608ee2ae8415bed5deb5
c3b81cffb5484bc5935694021fdb6ff880a8165f
663cba05914ba896049aba54ba68bb3a6980b7a840ad083efba000684fac5d3f
GET /verfolgung/index_files/versenden-shared-component-map.css HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:54 GMT
Content-Type: text/css
Content-Length: 80
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "50-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/index_files/vendorsroute-shipmenteditor-addressinputroute-shipmenteditor.css
200 OK 2.1 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/index_files/vendorsroute-shipmenteditor-addressinputroute-shipmenteditor.css
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type ASCII text, with very long lines (2056), with no line terminators
Hash 6e32473f5201e9173886136114e41f93
040e446a44cc1199c337a3f823a48dbeeff3ebac
8f2ded31c4e2510d9c757de6d6c10ffb8e17ad4220fe8065a2c81947dac554f5
GET /verfolgung/index_files/vendorsroute-shipmenteditor-addressinputroute-shipmenteditor.css HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:54 GMT
Content-Type: text/css
Content-Length: 2056
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "808-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/jquery-1.12.2.min.js
200 OK 97 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/jquery-1.12.2.min.js
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type ASCII text, with very long lines (32029)
Hash bdc2b7efb1faf219d65edfe253a103e9
4921529fc15b8133f2fe65b3bebf53d1e9ef8579
95914789b5f3307a3718679e867d61b9d4c03f749cd2e2970570331d7d6c8ed9
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/jquery-1.12.2.min.js HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:54 GMT
Content-Type: application/javascript
Content-Length: 97244
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "17bdc-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/index_files/route-shipmenteditor-productselection.css
200 OK 374 B URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/index_files/route-shipmenteditor-productselection.css
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type ASCII text, with very long lines (374), with no line terminators
Hash e3d2f5c417eb0982890a07ff4df93cb4
ed3ee4e3ed7e0f1e04efc7d165515dd8e236923c
fabba48ada17494b1653182eff94ffa0fe8dfc03cd913d169b6a96363af29be3
GET /verfolgung/index_files/route-shipmenteditor-productselection.css HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:54 GMT
Content-Type: text/css
Content-Length: 374
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "176-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/index_files/clientlibs-head.css
200 OK 551 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/index_files/clientlibs-head.css
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type ASCII text, with very long lines (1073)
Size 551 kB (550936 bytes)
Hash e11d5136ae237152dc7bca564901d136
2b39bb607e3420a57814339366fd95781c01b857
94c801fc487a8175fb5b267ef43dab0ad8d62ee82860bdc83dc361dc794b6300
GET /verfolgung/index_files/clientlibs-head.css HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:54 GMT
Content-Type: text/css
Content-Length: 550936
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "86818-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/index_files/main.css
200 OK 253 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/index_files/main.css
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type ASCII text, with very long lines (65536), with no line terminators
Size 253 kB (252938 bytes)
Hash 3f6c670df998dec0329b1bcfc7126b9a
6ebee2e0487e1ffca8b62691a9ca70254746370b
d59ebdf48dc62f36cf43feb5078cd9b5cbc9ba47e0f971c6949591e00aec2711
GET /verfolgung/index_files/main.css HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:54 GMT
Content-Type: text/css
Content-Length: 252938
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "3dc0a-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/index_files/clientlibs-head.min.9b1a4155a779d3538242d06d587c4a9f.css
200 OK 551 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/index_files/clientlibs-head.min.9b1a4155a779d3538242d06d587c4a9f.css
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type ASCII text, with very long lines (1073)
Size 551 kB (550934 bytes)
Hash 6f4fa6fa2f1111ca5a971344c47dccac
0a3a66f0615ad00a5a8c70f81ade619c4b1fcd40
1b76b428f8df201d08e3b4cc379626e0aeb6ac4c12e55c4e8d623621ffd654ce
GET /verfolgung/index_files/clientlibs-head.min.9b1a4155a779d3538242d06d587c4a9f.css HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:54 GMT
Content-Type: text/css
Content-Length: 550934
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "86816-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/index_files/main.js
200 OK 380 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/index_files/main.js
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type Unicode text, UTF-8 text, with very long lines (53172)
Size 380 kB (379833 bytes)
Hash ad18f7663d812537278306819ebbeaf4
d95c38c0e6ab99cd493f9da0143de82dfaddd4a4
1c59583ba19a24d8793d3afbb49f9207ddd2b5b949bebc98c3a24ecb4d4dfb48
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/index_files/main.js HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:54 GMT
Content-Type: application/javascript
Content-Length: 379833
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "5cbb9-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/index_files/visa.svg
200 OK 4.6 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/index_files/visa.svg
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (1577)
Hash 09d8b96a0853e0bc8cec7c677c0da93b
a6aebdb9c339cac93762338353517b67e23f1903
a60079ce89803190740ddcf6e03eace0492b8f73ec57ffb4132b72a9736b68fe
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/index_files/visa.svg HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:55 GMT
Content-Type: image/svg+xml
Content-Length: 4586
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "11ea-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/index_files/paypal.svg
200 OK 3.4 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/index_files/paypal.svg
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3369), with no line terminators
Hash 4ac4e26be0277fab62f57835bca7ee1e
edef7e834db1d63bd5290adf1f0308522cced7e0
5e9402048b0efae8235057fc5db4276b0472c9a42c59c0b759e059ffbdafb32b
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/index_files/paypal.svg HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:55 GMT
Content-Type: image/svg+xml
Content-Length: 3369
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "d29-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/index_files/amex.svg
200 OK 734 B URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/index_files/amex.svg
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (565)
Hash 1c003076f46fc215f19de22568f3b5a1
112caa9374e6c1d0f8325cdcf2bde5b073f0f1ad
b64feafef2104c77f092f2bbfa526bad76e17fb053591284984e86a28ed721a2
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/index_files/amex.svg HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:55 GMT
Content-Type: image/svg+xml
Content-Length: 734
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "2de-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/index_files/dhl-ssl-logo.svg
200 OK 4.5 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/index_files/dhl-ssl-logo.svg
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text, with very long lines (403)
Hash f0e3cb96921af370a3ce18d1a1ded9b9
1fedecbb71184bc23dfdac38ef5b27d31da7f420
dc0fa4b8eaff05882b34c64260a6f630a3398a3a77584ef2ae6297ef10353578
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/index_files/dhl-ssl-logo.svg HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:55 GMT
Content-Type: image/svg+xml
Content-Length: 4470
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "1176-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/index_files/mastercard.svg
200 OK 15 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/index_files/mastercard.svg
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (1435)
Hash b81045f3a463d4aabc0a41fef3bc55ef
0cf6c882fac621b65b627cb39c3bbc9d669e20d3
f4551892c81a15874332cfa9639f76a41356c9ed4ca79ff682c9114aeb12563e
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/index_files/mastercard.svg HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:55 GMT
Content-Type: image/svg+xml
Content-Length: 14915
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "3a43-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/delivery-rg.woff2
200 OK 34 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/delivery-rg.woff2
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type Web Open Font Format (Version 2), TrueType, length 33580, version 1.0\012- data
Hash 1a05a4d2566dc2490cae801e9d885ec6
2fae1307a017a9afe73d351cf15932e51dc57887
2a2dc315ce559a3636bcbfaf666ee1ac382222798eceeef8d464c8d1e4e18de7
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/delivery-rg.woff2 HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:55 GMT
Content-Length: 33580
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "832c-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/static/js/vendors~offline-rendering-middleware~portal-simulator~redux-debug~route-addressbook~route-couponover~6326b2d4.abf3b9e7.chunk.js
404 Not Found 346 B URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/static/js/vendors~offline-rendering-middleware~portal-simulator~redux-debug~route-addressbook~route-couponover~6326b2d4.abf3b9e7.chunk.js
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 8f922a15017742ae670c28e6e6285450
b8cb1785f57a68160f7a6e6ee449151158989003
075bb5d3c4ec1ddb33574bacf98a070eb1d261dcf7f0437f867ab2610155ae1f
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/static/js/vendors~offline-rendering-middleware~portal-simulator~redux-debug~route-addressbook~route-couponover~6326b2d4.abf3b9e7.chunk.js HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:55 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 346
Connection: keep-alive
tracking.de.havamariamaszetta.social/verfolgung/static/js/vendors~offline-rendering-middleware~portal-simulator~route-addressbook~route-couponoverview~route-c~4c1dc5a7.802daacb.chunk.js
404 Not Found 346 B URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/static/js/vendors~offline-rendering-middleware~portal-simulator~route-addressbook~route-couponoverview~route-c~4c1dc5a7.802daacb.chunk.js
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 8c1431991922d5aa58eb23681788e1ab
8b5090a928e7c0df052898c90c7e8e28b2675ba1
7bb3a830eb4a30417ed6e228b4266cccf57956c55b45c06ceaddb3c1436b2136
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/static/js/vendors~offline-rendering-middleware~portal-simulator~route-addressbook~route-couponoverview~route-c~4c1dc5a7.802daacb.chunk.js HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:55 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 346
Connection: keep-alive
tracking.de.havamariamaszetta.social/verfolgung/static/js/route-couponseteditor~versenden-shared-component-map.5f228fed.chunk.js
404 Not Found 289 B URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/static/js/route-couponseteditor~versenden-shared-component-map.5f228fed.chunk.js
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 7201493c80b1532e96cdda2397a81a92
15339bb8593d3758d957480d20fcad317bc3ebba
3e718c6d00a343b018927b5be601427462706b663a2a61f134dd0f8435abb420
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/static/js/route-couponseteditor~versenden-shared-component-map.5f228fed.chunk.js HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:55 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 289
Connection: keep-alive
tracking.de.havamariamaszetta.social/verfolgung/static/css/route-couponseteditor~versenden-shared-component-map.f4860661.css
404 Not Found 285 B URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/static/css/route-couponseteditor~versenden-shared-component-map.f4860661.css
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e4f86230c610e14678b249c3faf583e9
1e5e0df8ff79b6800c2b431b602e65a3c660144d
e5a3d70da3ed0a110ee86e349d445b336cf1d29c740a5bfc13a2cf5b9d2f8522
GET /verfolgung/static/css/route-couponseteditor~versenden-shared-component-map.f4860661.css HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:55 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 285
Connection: keep-alive
tracking.de.havamariamaszetta.social/verfolgung/static/css/versenden-shared-component-map.8c4d90da.css
404 Not Found 263 B URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/static/css/versenden-shared-component-map.8c4d90da.css
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 642275402ff01d56c5b232c0c8d2d8b4
25da142fa4cd25c87d32b8da4e25b21b455882d6
4d461f4d4c9447d93f816320b233dae6f04308ed58a2da75f948a2c3f81cc5d8
GET /verfolgung/static/css/versenden-shared-component-map.8c4d90da.css HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:55 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 263
Connection: keep-alive
tracking.de.havamariamaszetta.social/verfolgung/static/js/versenden-shared-component-map.382cc72d.chunk.js
404 Not Found 267 B URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/static/js/versenden-shared-component-map.382cc72d.chunk.js
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash dc2bd81acb0fe847c1fabba0d009c5d4
0aa02a52b8f74507e3d2e341495de1dc4d6f23f4
62c8dec78215bcf93d340f6db335e95a4e9b555125924af00b4f1a69c3f2c1ad
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/static/js/versenden-shared-component-map.382cc72d.chunk.js HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:55 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 267
Connection: keep-alive
tracking.de.havamariamaszetta.social/i18n/mapForLanguage?language=de&version=1662717285110
404 Not Found 217 B URL HTTP/1.1 tracking.de.havamariamaszetta.social/i18n/mapForLanguage?language=de&version=1662717285110
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d2f533c8a125cd113079c893801fd5a4
3c189574bcbe5ef2d4549345f712a6a2675f657b
128eb7ea599955cd2886aca8814c746d659b904e2a8629ae28ea01f16e37fafa
GET /i18n/mapForLanguage?language=de&version=1662717285110 HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: de
Accept-Encoding: gzip, deflate, br
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:56 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 217
Connection: keep-alive
tracking.de.havamariamaszetta.social/verfolgung/delivery-bd.woff2
200 OK 34 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/delivery-bd.woff2
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type Web Open Font Format (Version 2), TrueType, length 33840, version 1.0\012- data
Hash 682ea1d6962cd47974cd715fa3b80b4a
94a563948862a70f4d1be0a3aebc3a9f7aa800a6
4d5879466a996b0bc74a71e513a743e240b69199449fa59e51d32d133b99576f
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/delivery-bd.woff2 HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:56 GMT
Content-Length: 33840
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "8430-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/sprite.svg
200 OK 41 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/sprite.svg
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (28844), with CRLF line terminators
Hash cebbc77896c22e29f2a223a9efe685e3
ab3e7dc74207c4bb1f45a712d334c3d3ef8bdce8
07908237900ec13b078abee11041a05af9a7c8930a9a0e1c7d85f2c5f8ca9425
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/sprite.svg HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:56 GMT
Content-Type: image/svg+xml
Content-Length: 41430
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "a1d6-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/icons-nepal.svg
200 OK 26 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/icons-nepal.svg
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text, with very long lines (25753), with CRLF line terminators
Hash 953dd00cb38ca1767d1145caf35a035b
8510eeee5a546b92d2cb4413f065aa5d49d0bfdb
2691d1e5392f267802498adb1ddc58e4d8a95a5fc69de8380e0d4ae7850c2e1c
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/icons-nepal.svg HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:56 GMT
Content-Type: image/svg+xml
Content-Length: 25893
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "6525-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/delivery-cdblk.woff2
200 OK 37 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/delivery-cdblk.woff2
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type Web Open Font Format (Version 2), TrueType, length 36652, version 1.0\012- data
Hash 774e0efbb9da45395efa24c9ca4248de
04eab63ba86f912514fc0ea04b025b7f2df6145b
ccdf7761ca4d7eaa78f7135627c83d85ed7324d9e12a36258f1f21a5842c27b1
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/delivery-cdblk.woff2 HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:56 GMT
Content-Length: 36652
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "8f2c-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/index_files/dhl-official.svg
200 OK 2.0 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/index_files/dhl-official.svg
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text, with very long lines (2040), with no line terminators
Hash d5a053f0005dd58489a461f599b5a508
ba71dd77800ef3d410beb8282d790642bec8193b
aeed178a287002e32c4a7767dc24b3c732a812cdd42017835055e42db4d2eae1
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/index_files/dhl-official.svg HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:56 GMT
Content-Type: image/svg+xml
Content-Length: 2040
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "7f8-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/index_files/sepapay.svg
200 OK 12 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/index_files/sepapay.svg
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (12024), with no line terminators
Hash 176e69bbf00a8da5fe4921dbff1a30eb
384bbdee655135ef9a290f1365902ed6c9316969
b1764022abfe9e716542e55a05b94b851e369cd75407474874a439c61f5bd982
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/index_files/sepapay.svg HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:56 GMT
Content-Type: image/svg+xml
Content-Length: 12024
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "2ef8-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/icon-sprite.svg
200 OK 116 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/icon-sprite.svg
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Size 116 kB (116511 bytes)
Hash a2f73421956e77814bc75b9f1ef7978c
76fff6b10243ee8b0d9f2b8c281e5023bef29816
616309a0321797f048d134f8c83c2ad6a94170f166093baa5fa6fd999461772e
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/icon-sprite.svg HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:56 GMT
Content-Type: image/svg+xml
Content-Length: 116511
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "1c71f-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/index_files/giropay.svg
200 OK 2.4 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/index_files/giropay.svg
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2396), with no line terminators
Hash 9b9e19be4be87ab5a0b96cd99754747e
edc3926e9431d362d794de7388fb4d78b156c4e8
2ef06fae9ac89777a220421e87980ef61b2a914e3eb1dec5b5c06a93531a9e38
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/index_files/giropay.svg HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:56 GMT
Content-Type: image/svg+xml
Content-Length: 2396
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "95c-5e2f1425dea00"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/dhl-group.svg
200 OK 8.7 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/dhl-group.svg
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (724)
Hash 56ceadc8919cd52c7b19d6bfd2ed1a96
5716fe99efb512515553b02fc4ca7f858aa5c980
55de7fa1d7d120cab791bbbeadf10fe0f15783b296aceee56dc72c80896e4114
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/dhl-group.svg HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:56 GMT
Content-Type: image/svg+xml
Content-Length: 8715
Connection: keep-alive
Last-Modified: Sat, 20 Aug 2022 01:15:11 GMT
ETag: "220b-5e6a1f23165c0"
Accept-Ranges: bytes
tracking.de.havamariamaszetta.social/verfolgung/index_files/rating-play-store.svg
200 OK 904 B URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/index_files/rating-play-store.svg
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (512)
Hash 19a24c818ad0e0eab9418b77ff8e7c1c
3787691d98fd4b9f494664274a641226e33c1588
a6b35b6b7cabb9d33c2e1d6afef2d5f546a2fd3912f5f3e96495cd64218b9251
Analyzer Verdict Alert fortinet Phishing
GET /verfolgung/index_files/rating-play-store.svg HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:56 GMT
Content-Type: image/svg+xml
Content-Length: 904
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "388-5e2f1425dea00"
Accept-Ranges: bytes
www.dhl.de/etc.clientlibs/redesign/clientlibs/static/resources/favicons/android-chrome-192x192.png
200 OK 1.1 kB URL HTTP/2 www.dhl.de/etc.clientlibs/redesign/clientlibs/static/resources/favicons/android-chrome-192x192.png
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f40dea218a7cd4ed03b5daadb04b7d36
548c19b793a4af9adc647206a9e5a34866067e73
97d10bb1dd52bf50f217b414913db126771d4d2cb96439054891d0b0e08667ac
GET /etc.clientlibs/redesign/clientlibs/static/resources/favicons/android-chrome-192x192.png HTTP/1.1
Host: www.dhl.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Fri, 02 Sep 2022 14:04:06 GMT
server: Akamai Image Manager
x-serial: 1409
x-check-cacheable: YES
content-length: 1130
content-type: image/webp
cache-control: private, no-transform, max-age=43200
expires: Fri, 09 Sep 2022 21:54:55 GMT
date: Fri, 09 Sep 2022 09:54:55 GMT
set-cookie: akaalb_wwwdhldealb=~op=www_dhl_de_alb:wwwdhlde|~rv=16~m=wwwdhlde:0|~os=06f548fb0da0a4ee62020bebc018f01f~id=e9bedc9c5d4cd5c2c92ae60757db6f18; path=/; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
www.dhl.de/etc.clientlibs/redesign/clientlibs/static/resources/favicons/favicon-16x16.png
200 OK 128 B URL HTTP/2 www.dhl.de/etc.clientlibs/redesign/clientlibs/static/resources/favicons/favicon-16x16.png
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 16x16, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 08ccdeda510b580a3756d7b8c6cbd09a
30bb5c6b60d96da7a33f585b8498993a796381dd
f7ce4c35e81a5cd1ea2fa5c2d0d4fa47735f33d88812bb5af0b9c8e0d8f2355d
GET /etc.clientlibs/redesign/clientlibs/static/resources/favicons/favicon-16x16.png HTTP/1.1
Host: www.dhl.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Fri, 02 Sep 2022 14:04:07 GMT
server: Akamai Image Manager
content-length: 128
content-type: image/webp
cache-control: private, no-transform, max-age=43200
expires: Fri, 09 Sep 2022 21:54:55 GMT
date: Fri, 09 Sep 2022 09:54:55 GMT
set-cookie: akaalb_wwwdhldealb=~op=www_dhl_de_alb:wwwdhlde|~rv=26~m=wwwdhlde:0|~os=06f548fb0da0a4ee62020bebc018f01f~id=ffbee38a8905c5751ce6011e679f189e; path=/; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
tracking.de.havamariamaszetta.social/verfolgung/1.png
200 OK 108 kB URL HTTP/1.1 tracking.de.havamariamaszetta.social/verfolgung/1.png
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type PNG image data, 366 x 206, 8-bit/color RGB, non-interlaced\012- data
Size 108 kB (108508 bytes)
Hash 634c39f2a51e26d2ac85598a2103e16d
1badf4773207d7238f8808f1bd42e355dd4b3a01
afcc3febb5b047b9f7d691e6e92c2239c2feee6cdb5e56a910e8a9e62387d430
GET /verfolgung/1.png HTTP/1.1
Host: tracking.de.havamariamaszetta.social
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tracking.de.havamariamaszetta.social/verfolgung/tracking.php?id=ef4664a4cca611ecaebeb178&page=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 Sep 2022 09:54:56 GMT
Content-Type: image/png
Content-Length: 108508
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 02:11:52 GMT
ETag: "1a7dc-5e2f1425dea00"
Accept-Ranges: bytes
66.63.188.68
93.184.220.29
23.36.77.32
23.14.14.78