shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
301 Moved Permanently 162 B URL HTTP/1.1 shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert fortinet Phishing
GET /cc/oc/ali1/ali/login.php?email= HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 04 Dec 2022 00:34:07 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10279
Expires: Sun, 04 Dec 2022 03:25:26 GMT
Date: Sun, 04 Dec 2022 00:34:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5099
Expires: Sun, 04 Dec 2022 01:59:06 GMT
Date: Sun, 04 Dec 2022 00:34:07 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 67e9370f1bf3e4946a01f346eeae8966
aaab391d1134302d718de7a0d5edbedf884633e6
27a8654fb14db88d4b2bb3b45c1b197fc498cd94143d4a68687742fa48a41358
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1930
Cache-Control: max-age=124155
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 00:34:07 GMT
Etag: "638b2570-1d7"
Expires: Mon, 05 Dec 2022 11:03:22 GMT
Last-Modified: Sat, 03 Dec 2022 10:31:12 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ypaGgRgEWUYEBZu/9oXc0Z7okwwwL05cYATqIUwkqfABlCrwy4YRVGvSsj74Sv1Ln0rMR+nKDk+cN7EPrp7uSA==
x-amz-request-id: B6S9RK1JWD28Z7ZT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 03 Dec 2022 23:47:19 GMT
age: 2808
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 04 Dec 2022 00:20:01 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 846
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:07 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc6e58c5f1db40631421ce45e66694a7
b7682c98decbc231305df7e30bcfa5f352f5dd27
ca8e83b739b31d8be62f2f2a183f42fda7f03698377af9ec014e8a38cc26d239
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CA8E83B739B31D8BE62F2F2A183F42FDA7F03698377AF9EC014E8A38CC26D239"
Last-Modified: Thu, 01 Dec 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21583
Expires: Sun, 04 Dec 2022 06:33:50 GMT
Date: Sun, 04 Dec 2022 00:34:07 GMT
Connection: keep-alive
shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
404 Not Found 27 kB URL HTTP/2 shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (17069)
Hash 2c43417b53c4ce5bf4fc157a708eca83
7e1e65154c95f79d0f648f2d98d5d70d92117925
cd2c8fa669f5922637033146035d4e404c78118366b6577934cb484af802b332
Analyzer Verdict Alert fortinet Phishing
GET /cc/oc/ali1/ali/login.php?email= HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
server: nginx
date: Sun, 04 Dec 2022 00:34:07 GMT
content-type: text/html; charset=UTF-8
content-length: 27213
x-powered-by: PHP/7.4.33
link: </web/cache/1620750402_380d1df0cb958be4a85052b071d1633c.css>; rel="preload"; as="style",</web/cache/1620750402_380d1df0cb958be4a85052b071d1633c.js>; rel="preload"; as="script"
x-content-digest: en61102e88273c6f287378c708bfe0667c7584c24f0eac3625d06484f160183ff8
age: 6
cache-control: no-cache, private
set-cookie: x-cache-context-hash=deleted; expires=Sun, 04-Dec-2022 00:34:07 GMT; Max-Age=0; path=/; httponly
nocache=deleted; expires=Sun, 04-Dec-2022 00:34:07 GMT; Max-Age=0; path=/; secure; httponly
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
shop.berning-fitness.de/media/image/76/69/54/Berning-Fitness-4.png
200 OK 6.4 kB URL HTTP/2 shop.berning-fitness.de/media/image/76/69/54/Berning-Fitness-4.png
IP
File type PNG image data, 456 x 147, 8-bit/color RGBA, non-interlaced\012- data
Hash bf93352e7942a04d6b697b1fe37640d9
3c662622f866c3afb90cb9e178acd6b151b941d8
17c3dc20765cac51cf042937d14e006d580617e0d41bae953ed41dae41d97efe
GET /media/image/76/69/54/Berning-Fitness-4.png HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:07 GMT
content-type: image/png
content-length: 6372
last-modified: Thu, 15 Sep 2022 20:03:25 GMT
cache-control: public
etag: "6323850d-18e4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 04 Dec 2022 00:08:58 GMT
cache-control: public,max-age=3600
age: 1509
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
shop.berning-fitness.de/web/cache/1620750402_380d1df0cb958be4a85052b071d1633c.css
200 OK 495 kB URL HTTP/2 shop.berning-fitness.de/web/cache/1620750402_380d1df0cb958be4a85052b071d1633c.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 495 kB (494987 bytes)
Hash 60e5aabc0bc3a2f1105841da2632357c
8667ebf1a926720a242d03b8743b043619e1a5d3
baf181732e7e45ac6de0152b441728ef0949b9c01195ea1025eaba9884ea03d2
GET /web/cache/1620750402_380d1df0cb958be4a85052b071d1633c.css HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:07 GMT
content-type: text/css
content-length: 494987
last-modified: Thu, 15 Sep 2022 20:03:29 GMT
cache-control: max-age=31536000, public
etag: "63238511-78d8b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
shop.berning-fitness.de/web/cache/1620750402_380d1df0cb958be4a85052b071d1633c.js
200 OK 549 kB URL HTTP/2 shop.berning-fitness.de/web/cache/1620750402_380d1df0cb958be4a85052b071d1633c.js
IP
File type ASCII text, with very long lines (59372)
Size 549 kB (548888 bytes)
Hash 1c32c43e097fe7313c9f27f7409b072d
ca7b49a7ef16ed16516bc9600bc3a9dccfc54187
e81ab338b0bd0ddbfd4fd4e87a94c41b01457d3f223d15c7145f91e2a0086376
Analyzer Verdict Alert fortinet Phishing
GET /web/cache/1620750402_380d1df0cb958be4a85052b071d1633c.js HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:07 GMT
content-type: text/javascript
content-length: 548888
last-modified: Thu, 15 Sep 2022 20:03:29 GMT
cache-control: max-age=31536000, public
etag: "63238511-86018"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
shop.berning-fitness.de/themes/Frontend/Responsive/frontend/_public/src/fonts/shopware.woff2?
200 OK 24 kB URL HTTP/2 shop.berning-fitness.de/themes/Frontend/Responsive/frontend/_public/src/fonts/shopware.woff2?
IP
File type Web Open Font Format (Version 2), TrueType, length 24276, version 1.0\012- data
Hash 542276b37771317f850a11ee89e0720d
20ce7199ec6a04947e871b38f691d046d2ed5220
386aa8da6da7a2e344e4011774a68ca0d7aa86366b650d7a9ccf04a86f8d87b0
GET /themes/Frontend/Responsive/frontend/_public/src/fonts/shopware.woff2? HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://shop.berning-fitness.de/web/cache/1620750402_380d1df0cb958be4a85052b071d1633c.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:08 GMT
content-type: font/woff2
content-length: 24276
last-modified: Thu, 15 Sep 2022 20:03:26 GMT
cache-control: public
etag: "6323850e-5ed4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
shop.berning-fitness.de/themes/Frontend/Responsive/frontend/_public/vendors/fonts/open-sans-fontface/Regular/OpenSans-Regular.woff2?3bc0549571c19cc56c4502faf9609222
200 OK 42 kB URL HTTP/2 shop.berning-fitness.de/themes/Frontend/Responsive/frontend/_public/vendors/fonts/open-sans-fontface/Regular/OpenSans-Regular.woff2?3bc0549571c19cc56c4502faf9609222
IP
File type Web Open Font Format (Version 2), TrueType, length 41684, version 1.6619\012- data
Hash 237aa94493d93bcf630b9a062f455d0a
3d2fab0aea06119ea018a1833cb4e52445c39b75
2da97418251121ad5b28c6e206316578aae360d47dea2262c90478536624d910
GET /themes/Frontend/Responsive/frontend/_public/vendors/fonts/open-sans-fontface/Regular/OpenSans-Regular.woff2?3bc0549571c19cc56c4502faf9609222 HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://shop.berning-fitness.de/web/cache/1620750402_380d1df0cb958be4a85052b071d1633c.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:08 GMT
content-type: font/woff2
content-length: 41684
last-modified: Thu, 15 Sep 2022 20:03:26 GMT
cache-control: max-age=31536000, public
etag: "6323850e-a2d4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
shop.berning-fitness.de/themes/Frontend/Responsive/frontend/_public/vendors/fonts/open-sans-fontface/Bold/OpenSans-Bold.woff2?a654cfa755515f37259e89737bcac0ef
200 OK 44 kB URL HTTP/2 shop.berning-fitness.de/themes/Frontend/Responsive/frontend/_public/vendors/fonts/open-sans-fontface/Bold/OpenSans-Bold.woff2?a654cfa755515f37259e89737bcac0ef
IP
File type Web Open Font Format (Version 2), TrueType, length 43524, version 1.6619\012- data
Hash b62818c54031125f5feb919cf0cb6752
29520539229ea3019411dabb4ff21bb461e3dab2
3f2a2f05feb9ed38c8889ede47bd28f36014c40b5aa1573b1f1d9302eb18ed5e
GET /themes/Frontend/Responsive/frontend/_public/vendors/fonts/open-sans-fontface/Bold/OpenSans-Bold.woff2?a654cfa755515f37259e89737bcac0ef HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://shop.berning-fitness.de/web/cache/1620750402_380d1df0cb958be4a85052b071d1633c.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:08 GMT
content-type: font/woff2
content-length: 43524
last-modified: Thu, 15 Sep 2022 20:03:26 GMT
cache-control: max-age=31536000, public
etag: "6323850e-aa04"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a151c326c67e1abb747847c1427db76f
80885d30ef8ba867bf33c40b861976958a27493a
de2b573ee1c8af980e593352e0c331b2595f62bd4499300ace30821d20814760
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1970
Cache-Control: max-age=119133
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 00:34:08 GMT
Etag: "638b11ab-1d7"
Expires: Mon, 05 Dec 2022 09:39:41 GMT
Last-Modified: Sat, 03 Dec 2022 09:06:51 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
shop.berning-fitness.de/themes/Frontend/Responsive/frontend/_public/src/img/favicon.ico
200 OK 5.4 kB URL HTTP/2 shop.berning-fitness.de/themes/Frontend/Responsive/frontend/_public/src/img/favicon.ico
IP
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash a0813e9d34ab112a93e517e6062f89da
16371dc12dc2cef0a7b39e0d190e2685b366b167
b1d7d78264f9cfce0a5831642b2d93435f14f636fbb2f6689bc23e0318b487f4
GET /themes/Frontend/Responsive/frontend/_public/src/img/favicon.ico HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
Cookie: x-ua-device=desktop
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:08 GMT
content-type: image/vnd.microsoft.icon
content-length: 5430
last-modified: Thu, 15 Sep 2022 20:03:26 GMT
etag: "6323850e-1536"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
shop.berning-fitness.de/themes/Frontend/Responsive/frontend/_public/src/img/apple-touch-icon-precomposed.png
200 OK 1.1 kB URL HTTP/2 shop.berning-fitness.de/themes/Frontend/Responsive/frontend/_public/src/img/apple-touch-icon-precomposed.png
IP
File type PNG image data, 180 x 180, 8-bit colormap, non-interlaced\012- data
Hash e937bebd5492420c3737d8c7fa3bb765
8da37985437b2bba56c2e7726021b31e6f7cb26b
370f1e9044c1b1f82321cd00ab96c44b5618e46930a2b6cc3a9091979278572e
GET /themes/Frontend/Responsive/frontend/_public/src/img/apple-touch-icon-precomposed.png HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
Cookie: x-ua-device=desktop
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:08 GMT
content-type: image/png
content-length: 1127
last-modified: Thu, 15 Sep 2022 20:03:26 GMT
cache-control: public
etag: "6323850e-467"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Zs/Fa88gzp5TKsasQLelrg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: tffBd7ihC1O4G/CWv27/nzPMaCw=
shop.berning-fitness.de/widgets/index/refreshStatistic?requestPage=%2Fcc%2Foc%2Fali1%2Fali%2Flogin.php&requestController=index
200 OK 0 B URL HTTP/2 shop.berning-fitness.de/widgets/index/refreshStatistic?requestPage=%2Fcc%2Foc%2Fali1%2Fali%2Flogin.php&requestController=index
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /widgets/index/refreshStatistic?requestPage=%2Fcc%2Foc%2Fali1%2Fali%2Flogin.php&requestController=index HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
Cookie: x-ua-device=desktop
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:08 GMT
content-type: text/html; charset=UTF-8
content-length: 0
expires: Thu, 19 Nov 1981 08:52:00 GMT, -1
cache-control: no-store, no-cache, must-revalidate, private
pragma: no-cache, no-cache
x-robots-tag: noindex
x-body-eval: ESI
set-cookie: session-1=9445c550a6b62c03a8f1c3aeaa87bd9861e1f983f91c89bdae1e88a4ad4d3d2a; path=/; secure; HttpOnly
x-cache-context-hash=deleted; expires=Sat, 04-Dec-2021 00:34:07 GMT; Max-Age=0; path=/; httponly
nocache=deleted; expires=Sat, 04-Dec-2021 00:34:07 GMT; Max-Age=0; path=/; secure; httponly
x-frame-options: SAMEORIGIN
x-powered-by: PHP/7.4.33, PleskLin
X-Firefox-Spdy: h2
shop.berning-fitness.de/csrftoken
200 OK 0 B URL HTTP/2 shop.berning-fitness.de/csrftoken
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /csrftoken HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
Cookie: x-ua-device=desktop
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:08 GMT
content-type: text/html; charset=UTF-8
content-length: 0
expires: Thu, 19 Nov 1981 08:52:00 GMT, -1
cache-control: no-store, no-cache, must-revalidate, no-cache, private
pragma: no-cache, no-cache
x-csrf-token: 623idrr5wemGcKinGpZ9PdXnuatHIJ
set-cookie: session-1=74a6aa8a479cd306e49c946d15cc1ad1fafc22c09e9710c99addef5607af03a3; path=/; secure; HttpOnly
x-cache-context-hash=deleted; expires=Sat, 04-Dec-2021 00:34:07 GMT; Max-Age=0; path=/; httponly
nocache=deleted; expires=Sat, 04-Dec-2021 00:34:07 GMT; Max-Age=0; path=/; secure; httponly
x-frame-options: SAMEORIGIN
x-powered-by: PHP/7.4.33, PleskLin
X-Firefox-Spdy: h2
shop.berning-fitness.de/widgets/emotion/index/emotionId/2/secret//controllerName/index
200 OK 4.0 kB URL HTTP/2 shop.berning-fitness.de/widgets/emotion/index/emotionId/2/secret//controllerName/index
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (28705), with no line terminators
Hash 328c12ef676f19e6116e130916f55ae9
6d037b5ee9413637d5b0b7ce9f331e5dfaecdf43
15b59327fc4353048733d7561f42fbe74e84ee2a67a564f729e6fa893521b9e0
Analyzer Verdict Alert fortinet Phishing
GET /widgets/emotion/index/emotionId/2/secret//controllerName/index HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
Cookie: x-ua-device=desktop
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:08 GMT
content-type: text/html; charset=UTF-8
content-length: 4047
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, no-cache, private
pragma: no-cache
x-content-digest: ena752d20dd66abaaa897a623f34a9ae668f405ea5fdb0fae24e0372d668a1ba07
age: 0
set-cookie: session-1=626ce461b78431f6851768a3c215c61bf7c50e6ce67f7eb91129a0f9c1927df9; path=/; secure; HttpOnly
x-cache-context-hash=deleted; expires=Sat, 04-Dec-2021 00:34:07 GMT; Max-Age=0; path=/; httponly
nocache=deleted; expires=Sat, 04-Dec-2021 00:34:07 GMT; Max-Age=0; path=/; secure; httponly
vary: Accept-Encoding
content-encoding: gzip
x-frame-options: SAMEORIGIN
x-powered-by: PHP/7.4.33, PleskLin
X-Firefox-Spdy: h2
shop.berning-fitness.de/media/image/d5/9c/ec/20190904_1821084hnOEMPGeklrf_1280x1280.jpg
200 OK 357 kB URL HTTP/2 shop.berning-fitness.de/media/image/d5/9c/ec/20190904_1821084hnOEMPGeklrf_1280x1280.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 1280x720, components 3\012- data
Size 357 kB (357331 bytes)
Hash 85e7a7a0c2129a79c159a53456bab6c5
3d263c1af9ba188552d29f45a3a76512e2a24e01
537abca2b735bce7429734eed6624cff3e59c4e4d78e565a29d6142508f86992
GET /media/image/d5/9c/ec/20190904_1821084hnOEMPGeklrf_1280x1280.jpg HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
Cookie: x-ua-device=desktop; session-1=626ce461b78431f6851768a3c215c61bf7c50e6ce67f7eb91129a0f9c1927df9; __csrf_token-1=623idrr5wemGcKinGpZ9PdXnuatHIJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:08 GMT
content-type: image/jpeg
content-length: 357331
last-modified: Thu, 15 Sep 2022 20:03:25 GMT
cache-control: public
etag: "6323850d-573d3"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
shop.berning-fitness.de/media/image/29/18/be/Springseil_pink_einzelnd2_200x200.jpg
200 OK 7.5 kB URL HTTP/2 shop.berning-fitness.de/media/image/29/18/be/Springseil_pink_einzelnd2_200x200.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 200x133, components 3\012- data
Hash f41f08a576efdc243100f260dd95e19c
21ae3d51ce1c4c8e63a22f0f39f45de4fc64a1b0
82146bb8fc0c9c7b50b56893e770524b286e5244e48c6ee292d6baee21c9b425
GET /media/image/29/18/be/Springseil_pink_einzelnd2_200x200.jpg HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
Cookie: x-ua-device=desktop; session-1=626ce461b78431f6851768a3c215c61bf7c50e6ce67f7eb91129a0f9c1927df9; __csrf_token-1=623idrr5wemGcKinGpZ9PdXnuatHIJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:08 GMT
content-type: image/jpeg
content-length: 7458
last-modified: Thu, 15 Sep 2022 20:03:25 GMT
cache-control: public
etag: "6323850d-1d22"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
shop.berning-fitness.de/media/image/d9/92/e7/Springseilset_schwarz_200x200.jpg
200 OK 7.2 kB URL HTTP/2 shop.berning-fitness.de/media/image/d9/92/e7/Springseilset_schwarz_200x200.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 200x133, components 3\012- data
Hash ce95e78300bdb985ac33303f5f4a9072
7aca6e88a345515cb253fcf40bcfe2ff1d3d856b
9596159698ef4d6edea92ec50be8e4111ab519ac2632334490e3510022cc74d3
GET /media/image/d9/92/e7/Springseilset_schwarz_200x200.jpg HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
Cookie: x-ua-device=desktop; session-1=626ce461b78431f6851768a3c215c61bf7c50e6ce67f7eb91129a0f9c1927df9; __csrf_token-1=623idrr5wemGcKinGpZ9PdXnuatHIJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:08 GMT
content-type: image/jpeg
content-length: 7231
last-modified: Thu, 15 Sep 2022 20:03:25 GMT
cache-control: public
etag: "6323850d-1c3f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
shop.berning-fitness.de/media/image/ab/7c/b2/pexels-photo-136410cB6SAnIelvdx4_800x800.jpg
200 OK 49 kB URL HTTP/2 shop.berning-fitness.de/media/image/ab/7c/b2/pexels-photo-136410cB6SAnIelvdx4_800x800.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 800x531, components 3\012- data
Hash 60e54967cd44e56f94f91583d7c645e6
33f18b10ccf7b90b5d3df3091c3491480793a7b7
ccf8d10ec14d2d1d03334093f634ff44e830be2092dfa90ad3e1f110de87c06f
GET /media/image/ab/7c/b2/pexels-photo-136410cB6SAnIelvdx4_800x800.jpg HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
Cookie: x-ua-device=desktop; session-1=626ce461b78431f6851768a3c215c61bf7c50e6ce67f7eb91129a0f9c1927df9; __csrf_token-1=623idrr5wemGcKinGpZ9PdXnuatHIJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:09 GMT
content-type: image/jpeg
content-length: 48640
last-modified: Thu, 15 Sep 2022 20:03:25 GMT
cache-control: public
etag: "6323850d-be00"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
shop.berning-fitness.de/media/image/7a/f9/20/icons8-instagram-48_800x800.png
200 OK 39 kB URL HTTP/2 shop.berning-fitness.de/media/image/7a/f9/20/icons8-instagram-48_800x800.png
IP
File type PNG image data, 480 x 480, 8-bit/color RGBA, non-interlaced\012- data
Hash e74e867b916d2c6cfb5f15b93cbb7278
f99c4264134dc0dc2e5a781c5e09702a8f23abe8
24a47ba2584adcfcfff1fccd6b54fbca556f95b07ad18df5fd00bf792c585f43
GET /media/image/7a/f9/20/icons8-instagram-48_800x800.png HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
Cookie: x-ua-device=desktop; session-1=626ce461b78431f6851768a3c215c61bf7c50e6ce67f7eb91129a0f9c1927df9; __csrf_token-1=623idrr5wemGcKinGpZ9PdXnuatHIJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:09 GMT
content-type: image/png
content-length: 38675
last-modified: Thu, 15 Sep 2022 20:03:25 GMT
cache-control: public
etag: "6323850d-9713"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
shop.berning-fitness.de/media/image/7a/3a/33/erfolg63Kueuravzelf_800x800.jpg
200 OK 99 kB URL HTTP/2 shop.berning-fitness.de/media/image/7a/3a/33/erfolg63Kueuravzelf_800x800.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 800x533, components 3\012- data
Hash 797f2354efe6d5d595de1721efe8162c
e59fc1b13c296febb2450723e69a4539c43786be
9ae6c6964300da0783e7074b3be252b4ade81062877fed69c795da9dbaa49465
GET /media/image/7a/3a/33/erfolg63Kueuravzelf_800x800.jpg HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
Cookie: x-ua-device=desktop; session-1=626ce461b78431f6851768a3c215c61bf7c50e6ce67f7eb91129a0f9c1927df9; __csrf_token-1=623idrr5wemGcKinGpZ9PdXnuatHIJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:09 GMT
content-type: image/jpeg
content-length: 98975
last-modified: Thu, 15 Sep 2022 20:03:25 GMT
cache-control: public
etag: "6323850d-1829f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
shop.berning-fitness.de/media/image/84/b1/a0/1x_800x800.png
200 OK 16 kB URL HTTP/2 shop.berning-fitness.de/media/image/84/b1/a0/1x_800x800.png
IP
File type PNG image data, 560 x 315, 8-bit/color RGBA, non-interlaced\012- data
Hash ae4152ae42c20b78df24455f86be199d
5f9e5fc49cb9c58f3476a205f6efb1ee985ad2de
14a821a358a9c28905f4af71771da4c67e7cc531a147115b5d1f5a98fbb1e6a2
GET /media/image/84/b1/a0/1x_800x800.png HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
Cookie: x-ua-device=desktop; session-1=626ce461b78431f6851768a3c215c61bf7c50e6ce67f7eb91129a0f9c1927df9; __csrf_token-1=623idrr5wemGcKinGpZ9PdXnuatHIJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:09 GMT
content-type: image/png
content-length: 15867
last-modified: Thu, 15 Sep 2022 20:03:25 GMT
cache-control: public
etag: "6323850d-3dfb"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
shop.berning-fitness.de/media/image/ca/4f/f1/FITNESSLEXIKONWrkJgH6xQYUh9_800x800.png
200 OK 710 kB URL HTTP/2 shop.berning-fitness.de/media/image/ca/4f/f1/FITNESSLEXIKONWrkJgH6xQYUh9_800x800.png
IP
File type PNG image data, 800 x 671, 8-bit/color RGBA, non-interlaced\012- data
Size 710 kB (709672 bytes)
Hash 782a50be467c42b3704f4ddacdf1f13a
ccb11d0c1e548a0c27b3bc0740abb7c160bd8bbd
0bc519c3e887c7cd26f7eda87c486e4c3dafb07b4318bfa47209d8150365a87b
GET /media/image/ca/4f/f1/FITNESSLEXIKONWrkJgH6xQYUh9_800x800.png HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
Cookie: x-ua-device=desktop; session-1=626ce461b78431f6851768a3c215c61bf7c50e6ce67f7eb91129a0f9c1927df9; __csrf_token-1=623idrr5wemGcKinGpZ9PdXnuatHIJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:09 GMT
content-type: image/png
content-length: 709672
last-modified: Thu, 15 Sep 2022 20:03:25 GMT
cache-control: public
etag: "6323850d-ad428"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
shop.berning-fitness.de/media/image/fd/bf/16/icons8-facebook-480_800x800.png
200 OK 5.4 kB URL HTTP/2 shop.berning-fitness.de/media/image/fd/bf/16/icons8-facebook-480_800x800.png
IP
File type PNG image data, 480 x 480, 8-bit/color RGBA, non-interlaced\012- data
Hash 8b453647226fda16b54dd008b09e7637
b782a7b4bbe1db0604d43d38a71065b0c7cb3a46
f12b3f074011b3a1895fcccbc588f0bdd655cb99d6cd86a155d170ada6e8a33c
GET /media/image/fd/bf/16/icons8-facebook-480_800x800.png HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
Cookie: x-ua-device=desktop; session-1=626ce461b78431f6851768a3c215c61bf7c50e6ce67f7eb91129a0f9c1927df9; __csrf_token-1=623idrr5wemGcKinGpZ9PdXnuatHIJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:09 GMT
content-type: image/png
content-length: 5350
last-modified: Thu, 15 Sep 2022 20:03:26 GMT
cache-control: public
etag: "6323850e-14e6"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
shop.berning-fitness.de/media/image/47/1d/01/ZUM-SHOP_800x800.png
200 OK 901 kB URL HTTP/2 shop.berning-fitness.de/media/image/47/1d/01/ZUM-SHOP_800x800.png
IP
File type PNG image data, 800 x 671, 8-bit/color RGBA, non-interlaced\012- data
Size 901 kB (900808 bytes)
Hash 8833802175987bae98563c57b4d04fba
e87bb01879d9713daf2abc63fc5835370a8ccd81
53062ee034fb5b75933179bfbe11c6b2a442c972412d8fb9ea3e9a4050e9412f
GET /media/image/47/1d/01/ZUM-SHOP_800x800.png HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
Cookie: x-ua-device=desktop; session-1=626ce461b78431f6851768a3c215c61bf7c50e6ce67f7eb91129a0f9c1927df9; __csrf_token-1=623idrr5wemGcKinGpZ9PdXnuatHIJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:09 GMT
content-type: image/png
content-length: 900808
last-modified: Thu, 15 Sep 2022 20:03:25 GMT
cache-control: public
etag: "6323850d-dbec8"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
shop.berning-fitness.de/media/image/ac/ed/ca/Handschuhe_pink_doppelt_600x600.jpg
200 OK 28 kB URL HTTP/2 shop.berning-fitness.de/media/image/ac/ed/ca/Handschuhe_pink_doppelt_600x600.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 443x322, components 3\012- data
Hash 0a11ab15dccdf35ebca42fea34003360
3014e1cccf5d37b9aaae0dabfe85b17d6f9d74ad
953b7cbc1e4208d5e70b66b1b5a252896a579fe8289943dd30bfe9309d72278c
GET /media/image/ac/ed/ca/Handschuhe_pink_doppelt_600x600.jpg HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
Cookie: x-ua-device=desktop; session-1=626ce461b78431f6851768a3c215c61bf7c50e6ce67f7eb91129a0f9c1927df9; __csrf_token-1=623idrr5wemGcKinGpZ9PdXnuatHIJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:09 GMT
content-type: image/jpeg
content-length: 28358
last-modified: Thu, 15 Sep 2022 20:03:25 GMT
cache-control: public
etag: "6323850d-6ec6"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
shop.berning-fitness.de/media/image/cd/94/2b/Springseilset_schwarz_600x600.jpg
200 OK 34 kB URL HTTP/2 shop.berning-fitness.de/media/image/cd/94/2b/Springseilset_schwarz_600x600.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 600x400, components 3\012- data
Hash 0cb460604a6f94f71c92a1224c470448
5228d2f4806f3bc780c8f4e786f8dc1d75c6cc81
6f89ce7740bf86b539ca0a79a01efada964cc9debe008efc8ce452f7a05a2386
GET /media/image/cd/94/2b/Springseilset_schwarz_600x600.jpg HTTP/1.1
Host: shop.berning-fitness.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shop.berning-fitness.de/cc/oc/ali1/ali/login.php?email=
Cookie: x-ua-device=desktop; session-1=626ce461b78431f6851768a3c215c61bf7c50e6ce67f7eb91129a0f9c1927df9; __csrf_token-1=623idrr5wemGcKinGpZ9PdXnuatHIJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 00:34:09 GMT
content-type: image/jpeg
content-length: 33824
last-modified: Thu, 15 Sep 2022 20:03:25 GMT
cache-control: public
etag: "6323850d-8420"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10081
Expires: Sun, 04 Dec 2022 03:22:10 GMT
Date: Sun, 04 Dec 2022 00:34:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10081
Expires: Sun, 04 Dec 2022 03:22:10 GMT
Date: Sun, 04 Dec 2022 00:34:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10081
Expires: Sun, 04 Dec 2022 03:22:10 GMT
Date: Sun, 04 Dec 2022 00:34:09 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c01fe1cccdb3b672bbade6d98217ffe9
a9a529dc9894827f6243a1bf57f81caa4fe88fc2
c43da6212c79a08e22e78e04e99e8f5422e64b4b0a87f30b7907f1b4bc675c71
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4666
x-amzn-requestid: 850d341f-5ccb-453c-8adf-a8194f8fbdad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clr_-GiboAMFwww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc066-766293f2526e637235067aca;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: z5uqgjB-Bsl0U55a8aFi37cpJ65Vnbjm6bJ2GnMpaO7RXsMZsOCbPQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:44:01 GMT
age: 10208
etag: "a9a529dc9894827f6243a1bf57f81caa4fe88fc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash db1701b7b9d161a0c935bb6e10b17893
22a8c4bd58c729c1abcf794466e8f3231dfb034b
b495524a33e5b1d3ba34cfbe867ada0da956c061370b1fcde06b23a6194a9787
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8315
x-amzn-requestid: f1bcc33b-aad9-4d3b-b1f9-49282f2d4fb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAMGVboAMFfxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc067-13472a097177d4751c8f7a8c;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JuY0xcLDiERwrVhq33d4PP64liDqFfk9bc9xX1H62o0tOwrt1ek7Pg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:42:39 GMT
age: 10290
etag: "22a8c4bd58c729c1abcf794466e8f3231dfb034b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14dcca2a9c4792d835ee709bcd947402
1d702df3a64258628f4124eafd580695f2d350af
da01dcd8fef7c50bdb6f7a8a6a4955694092f479df3dba72f7fa69d7280d07b2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16143
x-amzn-requestid: dc86fad4-4e53-42c9-9b0a-5e4d2cfcd087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGyLGqmoAMFnaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851a7-0ea324b31e8c6578098b8ab9;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KHd4ajJWl-8TDH5HGbkuJXI4NL6I83IwSUBKzfq85cxpyRH_LGl6OA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 07:43:43 GMT
age: 60626
etag: "1d702df3a64258628f4124eafd580695f2d350af"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F826f887d-ca78-40db-9b7d-6c693667c155.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F826f887d-ca78-40db-9b7d-6c693667c155.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c1a6f4805f59db44f9d3520d88701a58
6a0258e8c97ce09f1723382c8a16d9682b7dc50c
ae120df5e96352c6998c24c69c709dfd2b01a7ff8a7b935d496757fd7661f2f5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F826f887d-ca78-40db-9b7d-6c693667c155.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7503
x-amzn-requestid: b096d14d-15bf-4d18-9930-5fffe561a40b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cgZwuFMcoAMFbTA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6389a337-1d3c4759652c0b314f458aa8;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 07:03:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 3jrjQkv2nL9y5cmo5g30an3DJE0wiK2ifHwkukMztymsg6nDnXWOJw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 07:23:19 GMT
age: 61850
etag: "6a0258e8c97ce09f1723382c8a16d9682b7dc50c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ef13a87-7179-4643-9f9e-199878f42764.png
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ef13a87-7179-4643-9f9e-199878f42764.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 69411fa7c0f94e7179c2cf84b716e427
188edc080e8a683c3fdc2968ee1e6aae114d75d2
713514c9afaa1953e3387aa1d1b6203fe6387e007f9fb5347558b77dd72425e9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ef13a87-7179-4643-9f9e-199878f42764.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6344
x-amzn-requestid: 1c11b153-5494-4656-ad96-33bc541f93f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cgaEAGmooAMFwlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6389a3b3-1984a9194065807d36f29532;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 07:05:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: u-fwrNiMISyKCpTg9HJ8TBjWLnM_Zg2KK1xrbzDXstjKATuex_Porg==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 14:50:20 GMT
age: 35029
etag: "188edc080e8a683c3fdc2968ee1e6aae114d75d2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43309032a892c486f9985ef520df696e
36f4682ca6a33ff80ee02129c77e6f27e996ede0
24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5681
x-amzn-requestid: 8f0d66b8-d532-48d9-9a29-74540cd6ab3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltXnEotIAMFqkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc296-27349a376ff819ab63b04a81;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:41:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vNP2rQwmWTntetjJyjonO8N_YOBqvQuZUm42BWX7c1GoX7jASOIpCg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:49:42 GMT
age: 9867
etag: "36f4682ca6a33ff80ee02129c77e6f27e996ede0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb8cb98e4-6956-416c-82e2-269c1c3a9ea7.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb8cb98e4-6956-416c-82e2-269c1c3a9ea7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 95358bd2d700ee56273f5c03bb1b0ec9
3382013402b80585d811e8df916e32c055e559b7
9bdcf882b96fbbac533a799269480cc1af0e1dd891854939e1500adf2a5d1c10
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb8cb98e4-6956-416c-82e2-269c1c3a9ea7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9447
x-amzn-requestid: 7f33035c-70b3-4efd-9bbe-0975847cb21a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltmLExfoAMFwYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc2f4-20c26c902a341f7a00b62316;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:43:16 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: PpTFuHAWhFD1MhQGFZWYpenveUsGPtRE3GkL0Dy1mSFh-EeDcUKa_w==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 22:16:34 GMT
age: 8262
etag: "3382013402b80585d811e8df916e32c055e559b7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
81.169.209.23
52.39.62.124
95.101.11.115
93.184.220.29