medi-buy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
213.133.105.76301 Moved Permanently 414 B URL HTTP/1.1 medi-buy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash cacb5510e6cc42f5f1b4467dd0df0355
f5d6c4af80365ef9c73743710a73f38ed4c43de4
290e7fc5596934e99d4366a693474f5968b5b3d94152951c52f78335c47cfd1f
Analyzer Verdict Alert fortinet Phishing
GET /mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ HTTP/1.1
Host: medi-buy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 28 Jan 2023 03:20:57 GMT
Server: Apache
Location: https://medi-buy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Content-Length: 414
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash a2104f935c638b4767ca5ae0d738ef23
85c6af15af749be0ceeae6de17c36925b750f166
5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9745
Expires: Sat, 28 Jan 2023 06:03:22 GMT
Date: Sat, 28 Jan 2023 03:20:57 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 81dd5c5cc5b3278876cb44dcb520a60f
c0511a59e9eccdcdda98717b87c89c5d59974808
41736c303afdb3d31e48724b107dcb22883cae02f3562308eb52d9164001a2de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41736C303AFDB3D31E48724B107DCB22883CAE02F3562308EB52D9164001A2DE"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11043
Expires: Sat, 28 Jan 2023 06:25:00 GMT
Date: Sat, 28 Jan 2023 03:20:57 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 03092d1a1bc7ac91ee342a1a7ab2a562
52db06ce1fd2c74ddd36b6a0a7aee1b5c891600a
03b8ff2629abac9fc30ebec059c2e2018fcbc41646ad5f71c965ff630fbf1ffd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "03B8FF2629ABAC9FC30EBEC059C2E2018FCBC41646AD5F71C965FF630FBF1FFD"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3639
Expires: Sat, 28 Jan 2023 04:21:36 GMT
Date: Sat, 28 Jan 2023 03:20:57 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 28 Jan 2023 02:43:03 GMT
content-type: application/json
age: 2274
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: avAXxV3BpArHOi+A95oCmAVml9hsmN0Si2ZjeQjz6uq2oDudi5htrTjexv0GYt4QMByAiw8NwaE=
x-amz-request-id: KHHJ9FR2Y110KQT3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 28 Jan 2023 03:20:49 GMT
age: 8
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
medi-buy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
213.133.105.76301 Moved Permanently 418 B URL HTTP/2 medi-buy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 0985587e19522f23893160acc59b3c18
d9d19245f1cd8b5896fc6cb27371b4b22f4d017a
4d1957f0477dcbf52402eee924c2b69ccbdab51bf4c6c5fdb607f3c4d73311d6
Analyzer Verdict Alert fortinet Phishing
GET /mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ HTTP/1.1
Host: medi-buy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
location: https://www.medibuy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
cache-control: max-age=2592000
expires: Mon, 27 Feb 2023 03:20:57 GMT
content-length: 418
content-type: text/html; charset=iso-8859-1
date: Sat, 28 Jan 2023 03:20:57 GMT
server: Apache
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 03:20:57 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
213.133.105.76200 OK 64 kB URL HTTP/2 www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 81fce090d1864ae9e7bf8fa03fa82a28
bdb8ba3b071d97aeee30278bc8a3c05e4ebbc418
19d8bd08842b87328958345941b731824ad1f2ab89292b7049dc5dcc378a8e5c
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=31efb09422063ce9651504238ef839e1; csrf[frontend.store-api.proxy]=4bfe1.pJAJLCHKU-PqwiuWpRMmaJlsBMy7k38E_orc9xWHmyY.0MpHGxKHO9e9q0i7x0cXPKE7aIL-oClWqO6WjUXGzmL9835hZfgarqyJRA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 64437
accept-ranges: bytes
server: Apache
x-original-content-length: 448307
vary: Accept-Encoding
content-encoding: gzip
etag: W/"PSA-aj-IVBjQ8B2-g"
expires: Mon, 27 Feb 2023 02:48:26 GMT
cache-control: max-age=2590048, public
date: Sat, 28 Jan 2023 03:20:57 GMT
x-content-type-options: nosniff
content-type: text/css
X-Firefox-Spdy: h2
www.medibuy.de/media/f9/fb/76/1660744973/logo-medi-buy.png?width=3000
213.133.105.76200 OK 7.7 kB URL HTTP/2 www.medibuy.de/media/f9/fb/76/1660744973/logo-medi-buy.png?width=3000
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 145 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash 5b4f85e28897cbcab62d129e51104eab
28a7e923047697db3ae446ce5a51866c2355cf4e
8a382b94b3e401ae4dffb6e8d9e676d2efc3f5020bd1a09be086f3bd6cce75de
GET /media/f9/fb/76/1660744973/logo-medi-buy.png?width=3000 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=31efb09422063ce9651504238ef839e1; csrf[frontend.store-api.proxy]=4bfe1.pJAJLCHKU-PqwiuWpRMmaJlsBMy7k38E_orc9xWHmyY.0MpHGxKHO9e9q0i7x0cXPKE7aIL-oClWqO6WjUXGzmL9835hZfgarqyJRA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 7720
last-modified: Wed, 17 Aug 2022 14:02:53 GMT
accept-ranges: bytes
expires: Mon, 27 Feb 2023 02:48:26 GMT
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-W0-F4oiXy8"
date: Sat, 28 Jan 2023 03:20:57 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.medibuy.de/bundles/storefront/assets/illustration/404_error.svg?166990692510264
213.133.105.76200 OK 10 kB URL HTTP/2 www.medibuy.de/bundles/storefront/assets/illustration/404_error.svg?166990692510264
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (10264), with no line terminators
Hash 09cc03d27a1bec1834fc2557c8756de6
b99d2c4e2e65fa4a6e67a2120cc003397641b6bb
0f7438ab906cd5e913d0672ede6a7e50a4b33052522152411a83db5fd75077e1
GET /bundles/storefront/assets/illustration/404_error.svg?166990692510264 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=31efb09422063ce9651504238ef839e1; csrf[frontend.store-api.proxy]=4bfe1.pJAJLCHKU-PqwiuWpRMmaJlsBMy7k38E_orc9xWHmyY.0MpHGxKHO9e9q0i7x0cXPKE7aIL-oClWqO6WjUXGzmL9835hZfgarqyJRA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 10264
cache-control: max-age=2592000, public, s-maxage=10
expires: Mon, 27 Feb 2023 03:20:57 GMT
content-security-policy: script-src 'none'
content-type: image/svg+xml
date: Sat, 28 Jan 2023 03:20:57 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/thumbnail/a3/b9/7e/1647423562/vorkasse_400x400.png
213.133.105.76200 OK 3.4 kB URL HTTP/2 www.medibuy.de/thumbnail/a3/b9/7e/1647423562/vorkasse_400x400.png
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 296 x 59, 8-bit/color RGBA, non-interlaced\012- data
Hash acfea59e8cd875cd024cfbf3d19dd41b
69598eac7549445f211e070d2345f0d9ba676390
e4aa7abfdf0141b057516bf9bddd14be8651a0ae9fe6fc05a723240fd5a8e19a
GET /thumbnail/a3/b9/7e/1647423562/vorkasse_400x400.png HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=31efb09422063ce9651504238ef839e1; csrf[frontend.store-api.proxy]=4bfe1.pJAJLCHKU-PqwiuWpRMmaJlsBMy7k38E_orc9xWHmyY.0MpHGxKHO9e9q0i7x0cXPKE7aIL-oClWqO6WjUXGzmL9835hZfgarqyJRA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 3411
last-modified: Wed, 16 Mar 2022 09:39:22 GMT
accept-ranges: bytes
expires: Mon, 27 Feb 2023 02:48:26 GMT
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-rP6lnozYdc"
date: Sat, 28 Jan 2023 03:20:57 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.medibuy.de/media/c7/93/b8/1647424094/rechnung.png
213.133.105.76200 OK 3.8 kB URL HTTP/2 www.medibuy.de/media/c7/93/b8/1647424094/rechnung.png
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 296 x 59, 8-bit/color RGBA, non-interlaced\012- data
Hash 8db2ae36a06c30c951bc5b07d7bc9148
8a309d77ae76de9ada1ba397dddb42b19b10d365
066098bde82e26620fd48cae563e63c82300403f1471d3b1daa3423032874855
GET /media/c7/93/b8/1647424094/rechnung.png HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=31efb09422063ce9651504238ef839e1; csrf[frontend.store-api.proxy]=4bfe1.pJAJLCHKU-PqwiuWpRMmaJlsBMy7k38E_orc9xWHmyY.0MpHGxKHO9e9q0i7x0cXPKE7aIL-oClWqO6WjUXGzmL9835hZfgarqyJRA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 3769
last-modified: Wed, 16 Mar 2022 09:48:14 GMT
accept-ranges: bytes
expires: Mon, 27 Feb 2023 02:48:26 GMT
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-jbKuNqBsMM"
date: Sat, 28 Jan 2023 03:20:57 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.medibuy.de/media/66/fd/63/1647424374/visa_mastercard.png
213.133.105.76200 OK 5.0 kB URL HTTP/2 www.medibuy.de/media/66/fd/63/1647424374/visa_mastercard.png
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 380 x 180, 8-bit colormap, non-interlaced\012- data
Hash b436b228c185dd1694ee7dc90276a241
16f6d028dcb2ceed023e582620dc6b05792b9e53
00fe369484d1f2ffdcb4e94429c9f197b69ebd3baa6b1de2136b19ffc959f0b7
GET /media/66/fd/63/1647424374/visa_mastercard.png HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=31efb09422063ce9651504238ef839e1; csrf[frontend.store-api.proxy]=4bfe1.pJAJLCHKU-PqwiuWpRMmaJlsBMy7k38E_orc9xWHmyY.0MpHGxKHO9e9q0i7x0cXPKE7aIL-oClWqO6WjUXGzmL9835hZfgarqyJRA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 4999
last-modified: Wed, 16 Mar 2022 09:52:54 GMT
accept-ranges: bytes
expires: Mon, 27 Feb 2023 02:48:26 GMT
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-tDayKMGF3R"
date: Sat, 28 Jan 2023 03:20:57 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.medibuy.de/media/0b/db/27/1647424306/PayPal.png
213.133.105.76200 OK 1.2 kB URL HTTP/2 www.medibuy.de/media/0b/db/27/1647424306/PayPal.png
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 52 x 13, 8-bit/color RGBA, non-interlaced\012- data
Hash 10e74d7f9c80fa575a82d281d59b07d7
ab28ead6cfd04169bcbb9abe0b72cc6114fdcd04
87c23da20335fef912b5f73054479da28932b7150964dd00f04621f7d66cb88b
GET /media/0b/db/27/1647424306/PayPal.png HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=31efb09422063ce9651504238ef839e1; csrf[frontend.store-api.proxy]=4bfe1.pJAJLCHKU-PqwiuWpRMmaJlsBMy7k38E_orc9xWHmyY.0MpHGxKHO9e9q0i7x0cXPKE7aIL-oClWqO6WjUXGzmL9835hZfgarqyJRA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 1209
last-modified: Wed, 16 Mar 2022 09:51:46 GMT
accept-ranges: bytes
expires: Mon, 27 Feb 2023 02:48:26 GMT
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-EOdNf5yA-l"
date: Sat, 28 Jan 2023 03:20:57 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.medibuy.de/media/2d/d3/21/1647427612/UPS.svg
213.133.105.76200 OK 9.8 kB URL HTTP/2 www.medibuy.de/media/2d/d3/21/1647427612/UPS.svg
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (9839), with no line terminators
Hash 7d431787d0670bbfed25042f31765950
7806b1cbd22e59454e0db311a57a0dc6f4c95044
be5355d455d0f806217d793bf05c06583a7e8fae0868f5ce5234dfc9a742c7df
GET /media/2d/d3/21/1647427612/UPS.svg HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=31efb09422063ce9651504238ef839e1; csrf[frontend.store-api.proxy]=4bfe1.pJAJLCHKU-PqwiuWpRMmaJlsBMy7k38E_orc9xWHmyY.0MpHGxKHO9e9q0i7x0cXPKE7aIL-oClWqO6WjUXGzmL9835hZfgarqyJRA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 10:46:52 GMT
accept-ranges: bytes
content-length: 9839
cache-control: max-age=2592000, public, s-maxage=10
expires: Mon, 27 Feb 2023 03:20:57 GMT
content-security-policy: script-src 'none'
content-type: image/svg+xml
date: Sat, 28 Jan 2023 03:20:57 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/de/61/51/1647427683/DPD.svg
213.133.105.76200 OK 1.8 kB URL HTTP/2 www.medibuy.de/media/de/61/51/1647427683/DPD.svg
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1784), with no line terminators
Hash dd28c0a5daef8ea0fa5b4fdfb922e642
6835ab6acdc420dd3cfcc5bc65db9c68e9a1e3c7
8234e24e56d28f50892e97f85b54c48ef8da0605a59dd5e82de53112ff4117ed
GET /media/de/61/51/1647427683/DPD.svg HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=31efb09422063ce9651504238ef839e1; csrf[frontend.store-api.proxy]=4bfe1.pJAJLCHKU-PqwiuWpRMmaJlsBMy7k38E_orc9xWHmyY.0MpHGxKHO9e9q0i7x0cXPKE7aIL-oClWqO6WjUXGzmL9835hZfgarqyJRA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 10:48:03 GMT
accept-ranges: bytes
content-length: 1784
cache-control: max-age=2592000, public, s-maxage=10
expires: Mon, 27 Feb 2023 03:20:57 GMT
content-security-policy: script-src 'none'
content-type: image/svg+xml
date: Sat, 28 Jan 2023 03:20:57 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/82/e2/a0/1647426572/Hermes.svg
213.133.105.76200 OK 9.4 kB URL HTTP/2 www.medibuy.de/media/82/e2/a0/1647426572/Hermes.svg
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (9350), with no line terminators
Hash 5f5624b00ef137c75797afa4cca2ad88
55e72269cfd7e4690830fe00fdffdcae157d5894
166ab49b3471568a0e08af48c9f41a260397eec8032a2b1774d22f2edb830d3c
GET /media/82/e2/a0/1647426572/Hermes.svg HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=31efb09422063ce9651504238ef839e1; csrf[frontend.store-api.proxy]=4bfe1.pJAJLCHKU-PqwiuWpRMmaJlsBMy7k38E_orc9xWHmyY.0MpHGxKHO9e9q0i7x0cXPKE7aIL-oClWqO6WjUXGzmL9835hZfgarqyJRA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 10:29:32 GMT
accept-ranges: bytes
content-length: 9350
cache-control: max-age=2592000, public, s-maxage=10
expires: Mon, 27 Feb 2023 03:20:57 GMT
content-security-policy: script-src 'none'
content-type: image/svg+xml
date: Sat, 28 Jan 2023 03:20:57 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/90/e1/80/1647434313/dhl.png
213.133.105.76200 OK 23 kB URL HTTP/2 www.medibuy.de/media/90/e1/80/1647434313/dhl.png
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 892 x 660, 8-bit/color RGBA, non-interlaced\012- data
Hash f701ba545c40d9022dc97668c7400a43
91c4cad7ae63f5f751dff1bc0a2ebede2e64d908
f97e17aa330ea80f47c7f90e46af5cbea114e31d835d4bb39956a8ff2379e9f6
GET /media/90/e1/80/1647434313/dhl.png HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=31efb09422063ce9651504238ef839e1; csrf[frontend.store-api.proxy]=4bfe1.pJAJLCHKU-PqwiuWpRMmaJlsBMy7k38E_orc9xWHmyY.0MpHGxKHO9e9q0i7x0cXPKE7aIL-oClWqO6WjUXGzmL9835hZfgarqyJRA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 23109
last-modified: Wed, 16 Mar 2022 12:38:33 GMT
accept-ranges: bytes
expires: Mon, 27 Feb 2023 02:48:27 GMT
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-9wG6VFxA2Q"
date: Sat, 28 Jan 2023 03:20:57 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.medibuy.de/media/0f/55/eb/1647434309/gls.jpg
213.133.105.76200 OK 21 kB URL HTTP/2 www.medibuy.de/media/0f/55/eb/1647434309/gls.jpg
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1168x657, components 3\012- data
Hash ea8c3240f3a929801f0525d005eddc25
ef6b0286016c58e8722cbf64b1e185b61e80486a
bdcbf3e1707aba9169bff1919ff05fe7f06f76ef3b9046f081534b947a041bf9
GET /media/0f/55/eb/1647434309/gls.jpg HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=31efb09422063ce9651504238ef839e1; csrf[frontend.store-api.proxy]=4bfe1.pJAJLCHKU-PqwiuWpRMmaJlsBMy7k38E_orc9xWHmyY.0MpHGxKHO9e9q0i7x0cXPKE7aIL-oClWqO6WjUXGzmL9835hZfgarqyJRA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 20730
last-modified: Wed, 16 Mar 2022 12:38:29 GMT
accept-ranges: bytes
expires: Mon, 27 Feb 2023 02:48:27 GMT
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-6owyQPOpKY"
date: Sat, 28 Jan 2023 03:20:57 GMT
x-content-type-options: nosniff
content-type: image/jpeg
X-Firefox-Spdy: h2
www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/js/all.js?1669906925946899
213.133.105.76200 OK 231 kB URL HTTP/2 www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/js/all.js?1669906925946899
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (59042)
Size 231 kB (231005 bytes)
Hash ee2d56d611bc6ee2e4de06764076c649
ddeff7ec512764dcd4315bb5ac7400552926be55
fa449a3b958ebd156bc4962929db24e30b0ebc5ff19331e4fa71dfe97db8d498
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/js/all.js?1669906925946899 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=31efb09422063ce9651504238ef839e1; csrf[frontend.store-api.proxy]=4bfe1.pJAJLCHKU-PqwiuWpRMmaJlsBMy7k38E_orc9xWHmyY.0MpHGxKHO9e9q0i7x0cXPKE7aIL-oClWqO6WjUXGzmL9835hZfgarqyJRA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 231005
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
expires: Mon, 27 Feb 2023 02:48:26 GMT
vary: Accept-Encoding
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-RM_47jDH5u"
x-original-content-length: 946899
content-encoding: gzip
date: Sat, 28 Jan 2023 03:20:57 GMT
x-content-type-options: nosniff
content-type: application/javascript
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 28 Jan 2023 02:49:03 GMT
age: 1915
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Regular.woff2
213.133.105.76200 OK 100 kB URL HTTP/2 www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Regular.woff2
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format (Version 2), TrueType, length 100088, version 1.0\012- data
Size 100 kB (100088 bytes)
Hash 77812e2fead777db0dc806b1eaabc7fd
512526689a4fd677ffca333a9dc1d412ad44caaf
77677cd3d62f53fce403b743c6ab0dfacf6109cfa5f2c511a57b0779222c76de
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Regular.woff2 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
Cookie: session-=31efb09422063ce9651504238ef839e1; csrf[frontend.store-api.proxy]=4bfe1.pJAJLCHKU-PqwiuWpRMmaJlsBMy7k38E_orc9xWHmyY.0MpHGxKHO9e9q0i7x0cXPKE7aIL-oClWqO6WjUXGzmL9835hZfgarqyJRA
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 100088
cache-control: max-age=2592000, public, s-maxage=10
expires: Mon, 27 Feb 2023 03:20:58 GMT
content-type: font/woff2
date: Sat, 28 Jan 2023 03:20:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-SemiBold.woff2
213.133.105.76200 OK 107 kB URL HTTP/2 www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-SemiBold.woff2
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format (Version 2), TrueType, length 107184, version 1.0\012- data
Size 107 kB (107184 bytes)
Hash 3d011804596fb2ccde4af51830a9a7d5
999e92214edfb5b102919586df4cfe16f7ddaccb
e9bb1331830a18e2504d966f1fa931e711cad726e454722f324d63534cec97d9
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-SemiBold.woff2 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
Cookie: session-=31efb09422063ce9651504238ef839e1; csrf[frontend.store-api.proxy]=4bfe1.pJAJLCHKU-PqwiuWpRMmaJlsBMy7k38E_orc9xWHmyY.0MpHGxKHO9e9q0i7x0cXPKE7aIL-oClWqO6WjUXGzmL9835hZfgarqyJRA
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 107184
cache-control: max-age=2592000, public, s-maxage=10
expires: Mon, 27 Feb 2023 03:20:58 GMT
content-type: font/woff2
date: Sat, 28 Jan 2023 03:20:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Bold.woff2
213.133.105.76200 OK 107 kB URL HTTP/2 www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Bold.woff2
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format (Version 2), TrueType, length 107300, version 1.0\012- data
Size 107 kB (107300 bytes)
Hash 741dc4163a97ffa354979f18802f6ca8
0e4b89a4a2801dd5e25364f439d7bfee47594762
20fd98b18d523471ae687971086817766649ce25f32e438d14711561a95bc9e9
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Bold.woff2 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
Cookie: session-=31efb09422063ce9651504238ef839e1; csrf[frontend.store-api.proxy]=4bfe1.pJAJLCHKU-PqwiuWpRMmaJlsBMy7k38E_orc9xWHmyY.0MpHGxKHO9e9q0i7x0cXPKE7aIL-oClWqO6WjUXGzmL9835hZfgarqyJRA
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 107300
cache-control: max-age=2592000, public, s-maxage=10
expires: Mon, 27 Feb 2023 03:20:58 GMT
content-type: font/woff2
date: Sat, 28 Jan 2023 03:20:58 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10699
Expires: Sat, 28 Jan 2023 06:19:17 GMT
Date: Sat, 28 Jan 2023 03:20:58 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 36147c185553851c38547798733a9fb2
912ec40237eae2ed558d09103c86c41f87896eca
a4fd9090983c75e1b7faf5ea9439532f51d747faf1853138ac13bdaafa490246
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 03:20:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 1eb0a2928a5a6445ea2403546c917632
c3174e2243b998ea5850bed5f26f124253a59ea4
6f6125f352a6f2271ac69946dc5985aeef83d623cd7e90bb48bb3d3a62b4bdb3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2262
Cache-Control: max-age=167768
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 03:20:58 GMT
Etag: "63d4781c-1d7"
Expires: Mon, 30 Jan 2023 01:57:06 GMT
Last-Modified: Sat, 28 Jan 2023 01:19:24 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
www.googletagmanager.com/gtm.js?id=GTM-5ZRS4MZ
142.250.74.168200 OK 59 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-5ZRS4MZ
IP 142.250.74.168:0
File type ASCII text, with very long lines (2655)
Hash 4c8e879e9147d422fc379702a4ade9f0
6077d7ac93300049dc7f9dd5d39acd58ed2e1955
1a72e806b7d5e1e1228ea2ee0ffd1778cf43287fa3921a1626c8659501d27711
GET /gtm.js?id=GTM-5ZRS4MZ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 28 Jan 2023 03:20:58 GMT
expires: Sat, 28 Jan 2023 03:20:58 GMT
cache-control: private, max-age=900
last-modified: Sat, 28 Jan 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 59194
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 36147c185553851c38547798733a9fb2
912ec40237eae2ed558d09103c86c41f87896eca
a4fd9090983c75e1b7faf5ea9439532f51d747faf1853138ac13bdaafa490246
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 03:20:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
52.13.173.34101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.13.173.34:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0askoI2P9uBRYA/R3ubX8w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: C640i1LwWeVLZhxR3ueyIhZekFQ=
www.medibuy.de/widgets/checkout/info
213.133.105.76200 OK 511 B URL HTTP/2 www.medibuy.de/widgets/checkout/info
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (893)
Hash 493a5de4e5ee35b780abd036727f3864
99ab201cb7443a982c8b70945c6e0e64529e69cc
6570e674f01a7fd1efc6e7545379a0a48362799a0e32f9759fa2286786d0ad4a
GET /widgets/checkout/info HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Content-type: application/json
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=31efb09422063ce9651504238ef839e1; csrf[frontend.store-api.proxy]=4bfe1.pJAJLCHKU-PqwiuWpRMmaJlsBMy7k38E_orc9xWHmyY.0MpHGxKHO9e9q0i7x0cXPKE7aIL-oClWqO6WjUXGzmL9835hZfgarqyJRA; timezone=UTC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 03:20:58 GMT
x-robots-tag: noindex
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: deny
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-mod-pagespeed: 1.13.35.2-0
cache-control: no-cache, private, max-age=0, no-cache
vary: Accept-Encoding
content-encoding: br
content-length: 511
content-type: text/html; charset=UTF-8
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/17/a7/ac/1646226955/medi-buy-favicon.png?width=3000
213.133.105.76200 OK 4.6 kB URL HTTP/2 www.medibuy.de/media/17/a7/ac/1646226955/medi-buy-favicon.png?width=3000
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 512 x 512, 4-bit colormap, non-interlaced\012- data
Hash 88c734babd964cc8ae1839e9be164ca9
78fc99bde11eb697353244aa8f7ff3297d9bd9cd
63e35c5c2d81ece3ac43436b7ba8642767a01d88064a04c13ac488157532e342
GET /media/17/a7/ac/1646226955/medi-buy-favicon.png?width=3000 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=31efb09422063ce9651504238ef839e1; csrf[frontend.store-api.proxy]=4bfe1.pJAJLCHKU-PqwiuWpRMmaJlsBMy7k38E_orc9xWHmyY.0MpHGxKHO9e9q0i7x0cXPKE7aIL-oClWqO6WjUXGzmL9835hZfgarqyJRA; timezone=UTC; _gcl_au=1.1.1504954994.1674876059
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 4599
last-modified: Wed, 02 Mar 2022 13:15:55 GMT
accept-ranges: bytes
expires: Mon, 27 Feb 2023 03:20:57 GMT
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-iMc0ur2WTM"
date: Sat, 28 Jan 2023 03:20:58 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.14200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.14:0
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sat, 28 Jan 2023 01:45:20 GMT
expires: Sat, 28 Jan 2023 03:45:20 GMT
cache-control: public, max-age=7200
age: 5738
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e7ebbff54ced2c07469b302fc6d44078
f59983c844c398bd37705051ca685b2d07d85726
04eb3bd7658c1112bfc1d0098e8d7f5fafdb10459e3290c0d4e6a17e65a5494f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 03:20:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-224940953-1&cid=594467656.1674876059&jid=1756886935&gjid=181859995&_gid=43138262.1674876059&_u=YEBAAAAAAAAAAC~&z=1863531691
173.194.221.154200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-224940953-1&cid=594467656.1674876059&jid=1756886935&gjid=181859995&_gid=43138262.1674876059&_u=YEBAAAAAAAAAAC~&z=1863531691
IP 173.194.221.154:0
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-224940953-1&cid=594467656.1674876059&jid=1756886935&gjid=181859995&_gid=43138262.1674876059&_u=YEBAAAAAAAAAAC~&z=1863531691 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.medibuy.de
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.medibuy.de
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 28 Jan 2023 03:20:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e7ebbff54ced2c07469b302fc6d44078
f59983c844c398bd37705051ca685b2d07d85726
04eb3bd7658c1112bfc1d0098e8d7f5fafdb10459e3290c0d4e6a17e65a5494f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 03:20:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.paypal.com/sdk/js?components=buttons,messages,hosted-fields,funding-eligibility&client-id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&commit=true&locale=de_DE¤cy=EUR&intent=capture&merchant-id=GNSPGCCJR6URW
192.229.221.25200 OK 158 kB URL HTTP/2 www.paypal.com/sdk/js?components=buttons,messages,hosted-fields,funding-eligibility&client-id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&commit=true&locale=de_DE¤cy=EUR&intent=capture&merchant-id=GNSPGCCJR6URW
IP 192.229.221.25:0
File type ASCII text, with very long lines (65472)
Size 158 kB (158056 bytes)
Hash b738b21d407928a93b2cf4b1fe72b74c
b5ec88066b988e1e4e758411e818f80327e0dade
4d6acc730776fbbaee5706e0cbdb60b2db9835cae825f8c6e106c5f9959a666c
GET /sdk/js?components=buttons,messages,hosted-fields,funding-eligibility&client-id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&commit=true&locale=de_DE¤cy=EUR&intent=capture&merchant-id=GNSPGCCJR6URW HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: *
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600, s-maxage=10800
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; script-src 'nonce-7OaNyRAQ9U/81ZYYWhmwKzumD6tc6jXwU0S8Sp3zr5SX+Pn+' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'nonce-7OaNyRAQ9U/81ZYYWhmwKzumD6tc6jXwU0S8Sp3zr5SX+Pn+' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; object-src 'none'; img-src https: data:; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: application/javascript; charset=utf-8
date: Sat, 28 Jan 2023 03:20:58 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"26968-teyIBmuYjh5OdYQR6Bj4Ayfg2t4"
p3p: true
paypal-debug-id: 0727447b82b42
server: ECAcc (frc/4CF1)
server-timing: traceparent;desc="00-00000000000000000000727447b82b42-20d8e73b04c190de-01", content-encoding;desc="", x-cdn;desc="edgecast"
set-cookie: tsrce=clientsdknodeweb; Domain=.paypal.com; Path=/; Expires=Tue, 31 Jan 2023 03:20:58 GMT; HttpOnly; Secure; SameSite=None
l7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sat, 28 Jan 2023 03:50:58 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1769570458%26vteXpYrS%3D1674877858%26vr%3Df6647b4d1850a1d55dbda1c6fe12e18e%26vt%3Df6647b4d1850a1d55dbda1c6fe12e18d%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Tue, 27 Jan 2026 03:20:58 GMT; HttpOnly; Secure
ts_c=vr%3Df6647b4d1850a1d55dbda1c6fe12e18e%26vt%3Df6647b4d1850a1d55dbda1c6fe12e18d; Path=/; Domain=paypal.com; Expires=Tue, 27 Jan 2026 03:20:58 GMT; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-00000000000000000000727447b82b42-091a806844045a2b-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 158056
X-Firefox-Spdy: h2
www.medibuy.de/_proxy/store-api?path=%2Fstore-api%2Fpaypal%2Fpayment-method-eligibility
213.133.105.76204 No Content 0 B URL HTTP/2 www.medibuy.de/_proxy/store-api?path=%2Fstore-api%2Fpaypal%2Fpayment-method-eligibility
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /_proxy/store-api?path=%2Fstore-api%2Fpaypal%2Fpayment-method-eligibility HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Content-type: application/json
Content-Length: 152
Origin: https://www.medibuy.de
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=31efb09422063ce9651504238ef839e1; csrf[frontend.store-api.proxy]=4bfe1.pJAJLCHKU-PqwiuWpRMmaJlsBMy7k38E_orc9xWHmyY.0MpHGxKHO9e9q0i7x0cXPKE7aIL-oClWqO6WjUXGzmL9835hZfgarqyJRA; timezone=UTC; _gcl_au=1.1.1504954994.1674876059; _ga=GA1.2.594467656.1674876059; _gid=GA1.2.43138262.1674876059; _gat_UA-224940953-1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Sat, 28 Jan 2023 03:20:59 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: deny
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: object-src 'none'; script-src 'none'; base-uri 'self';
expires: Sat, 28 Jan 2023 03:20:59 GMT
cache-control: no-cache, private, public
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2317
Expires: Sat, 28 Jan 2023 03:59:36 GMT
Date: Sat, 28 Jan 2023 03:20:59 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2317
Expires: Sat, 28 Jan 2023 03:59:36 GMT
Date: Sat, 28 Jan 2023 03:20:59 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2317
Expires: Sat, 28 Jan 2023 03:59:36 GMT
Date: Sat, 28 Jan 2023 03:20:59 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2317
Expires: Sat, 28 Jan 2023 03:59:36 GMT
Date: Sat, 28 Jan 2023 03:20:59 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2317
Expires: Sat, 28 Jan 2023 03:59:36 GMT
Date: Sat, 28 Jan 2023 03:20:59 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
34.120.237.76200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea24bcba583bd8bd139559448a343e68
b9d37c2b14f890d41983a59f352e8f7caa9c94bb
e5ef5975eec964ae1684deb424f00833f2d217bdc7e6c385320ed3adeb6bc1c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7585
x-amzn-requestid: bfb52acb-e0d7-482d-8be9-be5db1c16cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_vkE5roAMF0Hw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d44663-2d38d314177e0ac40d4c8240;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:47:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: K9YWM9eaEc1DQ6wtEEuADnG1U-ahRBXDaiHIAm20dkWMOxPWBlJidw==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 22:46:13 GMT
age: 16486
etag: "b9d37c2b14f890d41983a59f352e8f7caa9c94bb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3237aa3-30cf-4312-861c-8d923987ed4b.jpeg
34.120.237.76200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3237aa3-30cf-4312-861c-8d923987ed4b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 335cb821617fe98e993190c93c616f86
130b6f6d592f3ab052015656653a1b3ac259599d
ee90912b731ff31e52ccd404bf45ec6b6d3802247a29f9397eed153ab709df96
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3237aa3-30cf-4312-861c-8d923987ed4b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8569
x-amzn-requestid: d97c9436-5e2d-42a2-ad40-84c7776cdac3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_rVFA_oAMF-2A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d44648-03ff23d6072683a067472191;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:46:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: FuvSHsmeURS0TVrB-5IPYpmsovQh5OWzvsmlT2nzkDGfO2Q8gwP3Xw==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 22:15:45 GMT
age: 18314
etag: "130b6f6d592f3ab052015656653a1b3ac259599d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 79b70f1f-a157-4dd4-8743-825714195b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9T3UGA3oAMFSlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c86695-36e60aba09c152c73b8aefcb;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:37:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zt4bgV2C6Wb_Ufa5mZ7-UDTfCvhXJggPJw9668v5DEmyBnWZ-aNrCg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 23:03:41 GMT
age: 15438
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc7f9ffe5-495a-4f90-a1f3-01e6bafe9287.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc7f9ffe5-495a-4f90-a1f3-01e6bafe9287.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d8744995437fb5a3fa77a14c2e72ac6f
f8ad682561dd204e1193bd6ea1fb7e8eccd51610
76445eced51bce8532ffd0ef6131b5c6d8f38a15267bcad99767795f9191efd9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc7f9ffe5-495a-4f90-a1f3-01e6bafe9287.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10213
x-amzn-requestid: f95cebd1-4305-4dda-b750-4801a441a6a5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_vkFR5oAMFQQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d44663-59ba391e439557731d323660;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:47:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1NYK_m9n3VxzpG0TVuBCrI8hKMNfAfWYC2Jbjr5JpHd4XlzYaQi0Pw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:49:10 GMT
age: 19909
etag: "f8ad682561dd204e1193bd6ea1fb7e8eccd51610"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 195316042e7f798eeeb7993fecb3a383
4aeca24ad4702f87feaf9674ea0c1ff6d71826a3
b7e0a61060455241fce844d2c91eca500d409804361063ddb61053cbc9c7b1c1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13376
x-amzn-requestid: 64d0092e-1f1a-4183-a4a6-805e0bf37d32
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-DvHIyoAMF6fA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443b1-6387770232ddca74531bce91;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8cRGlncOQ6qYv7qbI1HxTz-qUYJkTVa5V2qJM1C8XM5dmyXFA8qRvA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:48:58 GMT
age: 19921
etag: "4aeca24ad4702f87feaf9674ea0c1ff6d71826a3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeb12df7-074b-4044-bdbe-0e07bccbc8e9.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeb12df7-074b-4044-bdbe-0e07bccbc8e9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0ed1a0bd725b2078b4cfe4ed83877901
62493ca03be9870aac2341e033611a6d56bd322a
706e84bc63fd98acaeb72789239af3210ae6e3910e6589d92a25899dc9059dfc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeb12df7-074b-4044-bdbe-0e07bccbc8e9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12397
x-amzn-requestid: e8436997-696d-483a-b03a-a84e7ca614ea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_T5HbzoAMFXsw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445b2-1c2ccd0a187d0a3e2f6a59cc;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:44:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lmLHc8fKQYUpq9B-GyOQ0FKzhxi0ToTEPA7cu6JnQftgDFDNV8USvw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:37 GMT
etag: "62493ca03be9870aac2341e033611a6d56bd322a"
content-type: image/jpeg
age: 19462
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.paypal.com/tagmanager/pptm.js?id=www.medibuy.de&t=xo&v=5.0.350&source=payments_sdk&mrid=GNSPGCCJR6URW&client_id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&comp=buttons,messages,hosted-fields,funding-eligibility&vault=false
192.229.221.25200 OK 4.3 kB URL HTTP/2 www.paypal.com/tagmanager/pptm.js?id=www.medibuy.de&t=xo&v=5.0.350&source=payments_sdk&mrid=GNSPGCCJR6URW&client_id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&comp=buttons,messages,hosted-fields,funding-eligibility&vault=false
IP 192.229.221.25:0
Hash 3e78a08d7e5fe163a8826957a9945381
c5d73b2207473e5d3dabc99f0f1803b90414ef77
627d371964a1c25e4b7283ee04fabf0a33df568499e48beba3d94bb72d197e24
GET /tagmanager/pptm.js?id=www.medibuy.de&t=xo&v=5.0.350&source=payments_sdk&mrid=GNSPGCCJR6URW&client_id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&comp=buttons,messages,hosted-fields,funding-eligibility&vault=false HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Cookie: tsrce=clientsdknodeweb
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-Eg7FoSWPIBfbLnS72YFGJEEmG0MwfxK8tRMudEmDxJ66AZVI' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' 'unsafe-eval'; img-src * data:; object-src 'none'; font-src 'self' https://*.paypalobjects.com https://*.paypal.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://nexus.ensighten.com https://*.google-analytics.com 'unsafe-inline' https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' https://*.qualtrics.com;
content-type: application/x-javascript; charset=utf-8
date: Sat, 28 Jan 2023 03:20:59 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"2f34-zQQ0FVqIlbkbuS4WgpPW/nUPXC4"
last-modified: Thu, 26 Jan 2023 23:16:31 GMT
paypal-debug-id: 0ba7256831083
server: ECAcc (frc/4C9E)
server-timing: traceparent;desc="00-00000000000000000000ba7256831083-aeefd2484303ebd1-01", content-encoding;desc="", x-cdn;desc="edgecast"
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sat, 28 Jan 2023 12:06:55 GMT; HttpOnly; Secure
enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sun, 28 Jan 2024 03:20:59 GMT; Secure
x-pp-s=eyJ0IjoiMTY3NDg3NjA1OTQ0OSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
tsrce=tagmanagernodeweb; Domain=.paypal.com; Path=/; Expires=Tue, 31 Jan 2023 03:20:59 GMT; HttpOnly; Secure; SameSite=None
nsid=s%3Acba0pN04cwaNSbAuP_aGylQZY2hySlge.7a4tnhgncvWmcOjkgUkJHSv0%2B7V%2Bv0VwWwy9NpTN5ds; Path=/; HttpOnly; Secure
l7_az=dcg15.slc; Path=/; Domain=paypal.com; Expires=Sat, 28 Jan 2023 03:50:59 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1769570459%26vteXpYrS%3D1674877859%26vr%3Df6647ed61850a1d30a336f69fe0af875%26vt%3Df6647ed61850a1d30a336f69fe0af874%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Tue, 27 Jan 2026 03:20:59 GMT; HttpOnly; Secure
ts_c=vr%3Df6647ed61850a1d30a336f69fe0af875%26vt%3Df6647ed61850a1d30a336f69fe0af874; Path=/; Domain=paypal.com; Expires=Tue, 27 Jan 2026 03:20:59 GMT; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-00000000000000000000ba7256831083-0805cf0a18171a24-01
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
www.paypal.com/xoplatform/logger/api/logger
192.229.221.25200 OK 608 B URL HTTP/2 www.paypal.com/xoplatform/logger/api/logger
IP 192.229.221.25:0
File type JSON data\012- , ASCII text, with very long lines (1019), with no line terminators
Hash aa4f8a91ed7e8f5088188188f27a1516
7f452f88a84db4841825fe5f6d98d01a1f499a86
deb0baa7886a3b0a98287694a5971edae4c6d178084656a17c4142199c074b9a
POST /xoplatform/logger/api/logger HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1456
Origin: https://www.medibuy.de
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-credentials: true
access-control-allow-origin: https://www.medibuy.de
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: application/json; charset=utf-8
date: Sat, 28 Jan 2023 03:21:00 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"3fb-m4YbCBts9uTJxggZWqAxJsy3MQk"
paypal-debug-id: 0841451816106
server: ECAcc (frc/4C8E)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast"
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sun, 28 Jan 2024 03:21:00 GMT; Secure
LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sat, 28 Jan 2023 12:06:56 GMT; HttpOnly; Secure
tsrce=loggernodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Tue, 31 Jan 2023 03:20:59 GMT; HttpOnly; Secure
x-pp-s=eyJ0IjoiMTY3NDg3NjA2MDI1NSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
l7_az=dcg01.phx; Path=/; Domain=paypal.com; Expires=Sat, 28 Jan 2023 03:51:00 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1769570460%26vteXpYrS%3D1674877860%26vr%3Df664821a1850ad04c4ffe9d3fe34a0f0%26vt%3Df664821a1850ad04c4ffe9d3fe34a0ef%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Tue, 27 Jan 2026 03:21:00 GMT; HttpOnly; Secure
ts_c=vr%3Df664821a1850ad04c4ffe9d3fe34a0f0%26vt%3Df664821a1850ad04c4ffe9d3fe34a0ef; Path=/; Domain=paypal.com; Expires=Tue, 27 Jan 2026 03:21:00 GMT; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-00000000000000000000841451816106-bcd4c7902ca9679c-01
vary: Accept-Encoding
x-content-type-options: nosniff
content-length: 608
X-Firefox-Spdy: h2
www.medibuy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
213.133.105.76404 Not Found 0 B URL HTTP/2 www.medibuy.de/mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
GET /mailster/1271/f88c6c0c9af9dec77d964e7fde0cc2f4/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
date: Sat, 28 Jan 2023 03:20:57 GMT
access-control-allow-origin: *
access-control-allow-methods: GET,POST,PUT,PATCH,DELETE
access-control-allow-headers: Content-Type,Authorization,sw-context-token,sw-access-key,sw-language-id,sw-version-id,sw-inheritance,fail-on-error,indexing-behavior,single-operation,sw-include-seo-urls
access-control-expose-headers: Content-Type,Authorization,sw-context-token,sw-access-key,sw-language-id,sw-version-id,sw-inheritance,fail-on-error,indexing-behavior,single-operation,sw-include-seo-urls
sw-language-id: 2fbb5fe2e29a4d70aa5854ce7ce3e20b
sw-context-token: pUlxYgFHgclceXG3pGOjiJHKDwdKTpBW
x-frame-options: deny
set-cookie: session-=31efb09422063ce9651504238ef839e1; path=/; secure; HttpOnly; SameSite=lax
session-=31efb09422063ce9651504238ef839e1; path=/; secure; httponly; samesite=lax
csrf[frontend.store-api.proxy]=4bfe1.pJAJLCHKU-PqwiuWpRMmaJlsBMy7k38E_orc9xWHmyY.0MpHGxKHO9e9q0i7x0cXPKE7aIL-oClWqO6WjUXGzmL9835hZfgarqyJRA; path=/; secure; httponly; samesite=lax
cache-control: no-cache, private, public
content-type: text/html; charset=UTF-8
server: Apache
X-Firefox-Spdy: h2
www.paypal.com/xoplatform/logger/api/logger
192.229.221.25200 OK 0 B URL HTTP/2 www.paypal.com/xoplatform/logger/api/logger
IP 192.229.221.25:0
OPTIONS /xoplatform/logger/api/logger HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.medibuy.de/
Origin: https://www.medibuy.de
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: https://www.medibuy.de
cache-control: max-age=0, no-cache, no-store, must-revalidate
date: Sat, 28 Jan 2023 03:20:59 GMT
dc: ccg11-origin-www-1.paypal.com
paypal-debug-id: 0808267b1a687
server: ECAcc (frc/4CC4)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast"
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sat, 28 Jan 2023 12:06:55 GMT; HttpOnly; Secure
enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sun, 28 Jan 2024 03:20:59 GMT; Secure
x-pp-s=eyJ0IjoiMTY3NDg3NjA1OTkzOCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
tsrce=loggernodeweb; Domain=.paypal.com; Path=/; Expires=Tue, 31 Jan 2023 03:20:59 GMT; HttpOnly; Secure; SameSite=None
l7_az=dcg13.slc; Path=/; Domain=paypal.com; Expires=Sat, 28 Jan 2023 03:50:59 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1769570459%26vteXpYrS%3D1674877859%26vr%3Df66481061850a7a85a5cd33effbc9d22%26vt%3Df66481061850a7a85a5cd33effbc9d21%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Tue, 27 Jan 2026 03:20:59 GMT; HttpOnly; Secure
ts_c=vr%3Df66481061850a7a85a5cd33effbc9d22%26vt%3Df66481061850a7a85a5cd33effbc9d21; Path=/; Domain=paypal.com; Expires=Tue, 27 Jan 2026 03:20:59 GMT; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-00000000000000000000808267b1a687-a89d7b2cd54e6046-01
x-content-type-options: nosniff
X-Firefox-Spdy: h2