mail.steuerberater-winterfeld.de/
83.169.41.94301 Moved Permanently 331 B URL HTTP/1.1 mail.steuerberater-winterfeld.de/
IP 83.169.41.94:0
ASN #20773 Host Europe GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash dc0b13c2948b8dabd8136abc3c677512
a1c170159163a2271126fc51b8e0ba862f741e07
ae4c7ebaae3db220800c405d961fd7ddf65615cfbfa270ac50d97d850a66f539
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: mail.steuerberater-winterfeld.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 09 Sep 2022 00:23:24 GMT
Server: Apache
Location: https://mail.steuerberater-winterfeld.de/
Content-Length: 331
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b9adda4796e3cda8d92753c46964621c
5f1eba1f6085b23dea088a91fe6f8947172f9f62
a0577a8fcfa81b3f86d99566eb4429655b93a238ffd1a3752bc9aae3d969deea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A0577A8FCFA81B3F86D99566EB4429655B93A238FFD1A3752BC9AAE3D969DEEA"
Last-Modified: Tue, 06 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6120
Expires: Fri, 09 Sep 2022 02:05:24 GMT
Date: Fri, 09 Sep 2022 00:23:24 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
143.204.55.35200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 09 Sep 2022 00:05:34 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: FuFcDVhQEp1uYCkYxusk5S4UMstGgxf5mr3f5AOVwa8CTycky7oRjA==
Age: 1070
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.49200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.49:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 08 Sep 2022 03:46:35 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hvhHAx9dS0INZ6GjDQTIcrBs4o1s41DXdHOkIlz-t-r-pT9LctRbtA==
age: 74210
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Sep 2022 00:23:24 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8933ff5b08f53932016a7a50a2fdc707
55375422e83cea7fac6d9e3e8e7b79a8255b68f3
a8424ddef9491e1b6f6165ded030d6337831fc4ce94947a29b686ecdd65bc237
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8424DDEF9491E1B6F6165DED030D6337831FC4CE94947A29B686ECDD65BC237"
Last-Modified: Thu, 08 Sep 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21596
Expires: Fri, 09 Sep 2022 06:23:20 GMT
Date: Fri, 09 Sep 2022 00:23:24 GMT
Connection: keep-alive
mail.steuerberater-winterfeld.de/
83.169.41.94200 OK 1.7 kB URL HTTP/1.1 mail.steuerberater-winterfeld.de/
IP 83.169.41.94:0
ASN #20773 Host Europe GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (426)
Hash 96416c2d1d2de762a2a5048292890086
4b9d52bdea9dc298a40d4b74bbcd95129725f26d
40f7d31f1dfe6faed6c55b4bcc5cc816cbc1d2ec7480efd306d28751ec0a09e6
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: mail.steuerberater-winterfeld.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 00:23:24 GMT
Server: Apache
Last-Modified: Wed, 25 Mar 2020 14:04:54 GMT
ETag: "15f6-5a1ae5a4304d7-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 1653
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html
mail.steuerberater-winterfeld.de/css/style.css
83.169.41.94200 OK 1.9 kB URL HTTP/1.1 mail.steuerberater-winterfeld.de/css/style.css
IP 83.169.41.94:0
ASN #20773 Host Europe GmbH
Hash 4e00ca9196c90750d951926daba311dd
4ec89e7be31ffc612c9a0e96a2de58b1bbd6b312
4114fbd83fbf3726930e99c21240a3ae030acdf39ed8e5c04c25e92d16d50433
GET /css/style.css HTTP/1.1
Host: mail.steuerberater-winterfeld.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.steuerberater-winterfeld.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 00:23:24 GMT
Server: Apache
Last-Modified: Tue, 17 Apr 2018 11:52:58 GMT
ETag: "1d3e-56a09fad3cb87-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 1927
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9eabfacafd2a070134b50e30b21bc449
f6fa7009ee1b43cff922588fa0bb5121227af960
dda4753d30e6806f9a151846c30eac173771a785c481f6e3e1f67952f03b0d2f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DDA4753D30E6806F9A151846C30EAC173771A785C481F6E3E1F67952F03B0D2F"
Last-Modified: Thu, 08 Sep 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2118
Expires: Fri, 09 Sep 2022 00:58:42 GMT
Date: Fri, 09 Sep 2022 00:23:24 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash b63f97bc3dce37e8ee6a0c9fcae468fe
cc70326582c0016d7434d0553486734266e57e71
6b3b365123beead4021532b8f2578b3761bbd47af45ed2a461a0476d53aa637d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 00:23:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.35200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 08 Sep 2022 23:38:18 GMT
Cache-Control: max-age=3600
Expires: Fri, 09 Sep 2022 00:16:12 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: U57m0IEr_nBORAkj4drUMoSS4ZYKQxrktGPpXTCcGXqtDKcwiihtmw==
Age: 2706
mail.steuerberater-winterfeld.de/img/logo.png
83.169.41.94200 OK 18 kB URL HTTP/1.1 mail.steuerberater-winterfeld.de/img/logo.png
IP 83.169.41.94:0
ASN #20773 Host Europe GmbH
File type PNG image data, 133 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 4ecdddf53fa4b4b108649508cbd1c849
ae874dd2fe3a2ae2d9097111cba8fb9bcfc0c335
b3a52ce017d5ac916dbc75595f345f49075ee73c2c8fac31b430295487efeec4
GET /img/logo.png HTTP/1.1
Host: mail.steuerberater-winterfeld.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.steuerberater-winterfeld.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 00:23:24 GMT
Server: Apache
Last-Modified: Tue, 17 Apr 2018 11:52:58 GMT
ETag: "470b-56a09fad3b7ff"
Accept-Ranges: bytes
Content-Length: 18187
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash b63f97bc3dce37e8ee6a0c9fcae468fe
cc70326582c0016d7434d0553486734266e57e71
6b3b365123beead4021532b8f2578b3761bbd47af45ed2a461a0476d53aa637d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 00:23:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mail.steuerberater-winterfeld.de/img/blog.png
83.169.41.94200 OK 2.3 kB URL HTTP/1.1 mail.steuerberater-winterfeld.de/img/blog.png
IP 83.169.41.94:0
ASN #20773 Host Europe GmbH
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash f7891a5403c402960ecb0ae37decbc65
105e9ffa2949e7460075e120277b61a4d656e495
68c47af57438cc7a864c4ed04ceffc2d66ace8792792f5ba66f6b4caedcced2b
GET /img/blog.png HTTP/1.1
Host: mail.steuerberater-winterfeld.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.steuerberater-winterfeld.de/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 00:23:24 GMT
Server: Apache
Last-Modified: Tue, 17 Apr 2018 11:52:58 GMT
ETag: "918-56a09fad3cb87"
Accept-Ranges: bytes
Content-Length: 2328
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash db3d2d40f373a7ef445874e65d7f0397
087a4802f28647e830222fafc67bda30dec5fc31
4a7ff3bf120d9795d86e370be5fb2987edd4575e1ce0ab1f2f7a66ddf1e5b0d0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 00:23:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
assets.plesk.com/static/default-website-content/public/fonts/lato-v16-latin-regular-b4d2c4.woff2
185.76.9.21200 OK 24 kB URL HTTP/2 assets.plesk.com/static/default-website-content/public/fonts/lato-v16-latin-regular-b4d2c4.woff2
IP 185.76.9.21:0
ASN #60068 Datacamp Limited
File type Web Open Font Format (Version 2), TrueType, length 23484, version 1.0\012- data
Hash b4d2c4c39853ee244272c04999b230ba
c82e22dde9716c40ba20e6c7ed03a1b66556de15
c3c0d3f472358aac78455515c4800771426770c22698e2486d39fdb5505634e1
GET /static/default-website-content/public/fonts/lato-v16-latin-regular-b4d2c4.woff2 HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mail.steuerberater-winterfeld.de
Connection: keep-alive
Referer: https://mail.steuerberater-winterfeld.de/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Sep 2022 00:23:24 GMT
content-type: font/woff2
content-length: 23484
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 16 Sep 2021 06:02:26 GMT
access-control-allow-origin: *
etag: "6142ddf2-5bbc"
expires: Mon, 23 May 2022 11:14:49 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 401C:3740:2D5377:345862:628B6A51
via: 1.1 varnish
age: 154
x-served-by: cache-bma1681-BMA
x-cache-hits: 1
x-timer: S1653304043.023326,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 3e6170d6400f8fc3835c53daa19a90ec307f5a88
x-accel-expires: @1662683395
server: CDN77-Turbo
x-77-nzt: AblMCRSC6IH/0QAAAA
x-77-nzt-ray: drBzeT6jq+I
x-cache: HIT
x-age: 209
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
assets.plesk.com/static/default-website-content/public/img/logo-775316.svg
185.76.9.21200 OK 24 kB URL HTTP/2 assets.plesk.com/static/default-website-content/public/img/logo-775316.svg
IP 185.76.9.21:0
ASN #60068 Datacamp Limited
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1988)
Hash 3f3e0b93484c5c5d69e0c30deafd6ccb
50c11ccfcca86b185d67f7c1dc131b9a6c1ac4ed
49acf6c4383d52000938eecfe67a951219ad514e571bf7add5085fb137726a88
GET /static/default-website-content/public/img/logo-775316.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.steuerberater-winterfeld.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 00:23:24 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 16 Sep 2021 06:02:26 GMT
access-control-allow-origin: *
etag: W/"6142ddf2-86f"
expires: Mon, 23 May 2022 11:14:49 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 3DEE:E362:22D13D5:2406A2C:628B6A51
via: 1.1 varnish
age: 154
x-served-by: cache-bma1632-BMA
x-cache-hits: 1
x-timer: S1653304043.040784,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 044fad660626a22ff001a772b55a5d5779e70b56
x-accel-expires: @1662683513
server: CDN77-Turbo
x-77-nzt: AblMCRSb+9v/WwAAAA
x-77-nzt-ray: YEAIxYb2H+k
x-cache: HIT
x-age: 91
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
assets.plesk.com/static/default-website-content/public/img/guy-508c30.png
185.76.9.21200 OK 10 kB URL HTTP/2 assets.plesk.com/static/default-website-content/public/img/guy-508c30.png
IP 185.76.9.21:0
ASN #60068 Datacamp Limited
File type PNG image data, 144 x 286, 8-bit/color RGBA, non-interlaced\012- data
Hash 508c30a08de6e9a033e045a6979f76d7
8bbde0114d14ef4e0687fab5cc70e3bd4d96c233
40d72d259fff82a177cd2c2f2a1bd0024ec04a2cd5a19d5596187755cc2ae5f2
GET /static/default-website-content/public/img/guy-508c30.png HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.steuerberater-winterfeld.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 00:23:24 GMT
content-type: image/png
content-length: 9999
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 16 Sep 2021 06:02:26 GMT
access-control-allow-origin: *
etag: "6142ddf2-270f"
expires: Mon, 23 May 2022 11:14:49 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 3F90:7313:155B620:162533E:628B6A51
via: 1.1 varnish
age: 154
x-served-by: cache-bma1632-BMA
x-cache-hits: 1
x-timer: S1653304043.201352,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 05a247c73331f2c9b8c20f277bb01530b73ebd69
x-accel-expires: @1662683513
server: CDN77-Turbo
x-77-nzt: AblMCRSnmJr/WwAAAA
x-77-nzt-ray: yca9xVWEXzE
x-cache: HIT
x-age: 91
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
assets.plesk.com/static/default-website-content/public/img/header-domain-page-15b75d.png
185.76.9.21200 OK 192 kB URL HTTP/2 assets.plesk.com/static/default-website-content/public/img/header-domain-page-15b75d.png
IP 185.76.9.21:0
ASN #60068 Datacamp Limited
File type PNG image data, 998 x 840, 8-bit/color RGBA, non-interlaced\012- data
Size 192 kB (191877 bytes)
Hash 15b75d100a555e3f0d84c59d81dd46e8
435e0f337cf2fb81d65fa4aa1c14caaa109f5bc6
f2fd07b6c6a69ba71eb8513377f052f5b692d610a2e890151084e7fcfb09799d
GET /static/default-website-content/public/img/header-domain-page-15b75d.png HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.steuerberater-winterfeld.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 00:23:24 GMT
content-type: image/png
content-length: 191877
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 16 Sep 2021 06:02:26 GMT
access-control-allow-origin: *
etag: "6142ddf2-2ed85"
expires: Mon, 23 May 2022 11:15:35 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: B038:8A57:FDC5B0:1075642:628B6A7F
via: 1.1 varnish
age: 108
x-served-by: cache-bma1681-BMA
x-cache-hits: 1
x-timer: S1653304043.201739,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: aabbe9bc697ada4e73c5910722c114837a19bc75
x-accel-expires: @1662683125
server: CDN77-Turbo
x-77-nzt: AblMCRTIeRD/3wEAAA
x-77-nzt-ray: Gpa30nBJO2Q
x-cache: HIT
x-age: 479
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
assets.plesk.com/static/default-website-content/public/favicon-1db747.ico
185.76.9.21200 OK 114 kB URL HTTP/2 assets.plesk.com/static/default-website-content/public/favicon-1db747.ico
IP 185.76.9.21:0
ASN #60068 Datacamp Limited
File type MS Windows icon resource - 7 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel\012- data
Size 114 kB (113459 bytes)
Hash 1db747255c64a30f9236e9d929e986ca
384023452346aa087d40c93c23ca2f5e32ff1b1f
88baf40feb43463a8f6aa6543e88bdbe33f0db9a317486e786eee1e5c76a9544
GET /static/default-website-content/public/favicon-1db747.ico HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.steuerberater-winterfeld.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 00:23:25 GMT
content-type: image/vnd.microsoft.icon
content-length: 113459
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 16 Sep 2021 06:02:26 GMT
access-control-allow-origin: *
etag: "6142ddf2-1bb33"
expires: Mon, 23 May 2022 11:15:35 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 51AE:F41A:4F31FD:5200AF:628B6A7F
via: 1.1 varnish
age: 116
x-served-by: cache-bma1624-BMA
x-cache-hits: 1
x-timer: S1653304052.583034,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: d13b1907e23db30d9c140200d8f6b99fdaf87fdb
x-accel-expires: @1662683396
server: CDN77-Turbo
x-77-nzt: AblMCRQNS5X/0QAAAA
x-77-nzt-ray: o4UU1LkdAYs
x-cache: HIT
x-age: 209
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
assets.plesk.com/static/default-website-content/public/img/developers-blog-22dfe6.svg
185.76.9.21200 OK 946 B URL HTTP/2 assets.plesk.com/static/default-website-content/public/img/developers-blog-22dfe6.svg
IP 185.76.9.21:0
ASN #60068 Datacamp Limited
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 6a089bac0cb088cbe678a9d606ee48c2
280618fa5e004f09ca531e18f9550603280d8af9
eabd493c3f02b11835b9c68d7f1714b9c34068041550f696a6409272d53654c0
GET /static/default-website-content/public/img/developers-blog-22dfe6.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.steuerberater-winterfeld.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 00:23:24 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 16 Sep 2021 06:02:26 GMT
access-control-allow-origin: *
etag: W/"6142ddf2-51f"
expires: Mon, 23 May 2022 11:14:49 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 3B1E:4F43:F84E7D:105C350:628B6A51
via: 1.1 varnish
age: 153
x-served-by: cache-bma1681-BMA
x-cache-hits: 1
x-timer: S1653304043.177940,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 6cdf74fa20bb4bdc0f7e1114e3eb68368c7e6018
x-accel-expires: @1662683126
server: CDN77-Turbo
x-77-nzt: AblMCRRnAd7/3gEAAA
x-77-nzt-ray: 72B5rGDtcU4
x-cache: HIT
x-age: 478
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
push.services.mozilla.com/
54.148.190.4101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.148.190.4:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ZJrzmg7TS3KdKRuvmeruWA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: H49OS4NdY+q58tR73RLsNwz9lWc=
ocsp.sca1b.amazontrust.com/
143.204.42.156200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.156:0
Hash 377d992b8e6a5d82a2515ee92187d910
0f5b79ae72a6b60b5f279357254a00bebe68ed85
f2afacc88d21b405c59f7fa74efcee8e0294dcea4e42c82cef9e666de9f0dbd3
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 09 Sep 2022 00:23:25 GMT
Last-Modified: Thu, 08 Sep 2022 23:29:54 GMT
Server: ECS (nyb/1D27)
X-Cache: Miss from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: u6Y8yaqEFLJlNnF-ZXfDvvcrwDhbGoIUyXR4oeXbtGdXOAwKDXtHhw==
Age: 3211
ocsp.sca1b.amazontrust.com/
143.204.42.156200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.156:0
Hash 377d992b8e6a5d82a2515ee92187d910
0f5b79ae72a6b60b5f279357254a00bebe68ed85
f2afacc88d21b405c59f7fa74efcee8e0294dcea4e42c82cef9e666de9f0dbd3
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 09 Sep 2022 00:23:25 GMT
Last-Modified: Fri, 09 Sep 2022 00:01:46 GMT
Server: ECS (nyb/1D15)
X-Cache: Miss from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: AL8HdW8cyEfHBN--MfhVAwXe97WrpEbuwoDwKFwBPKdJIoAVi6MWpg==
Age: 1299
firehose.us-west-2.amazonaws.com/
35.89.72.29200 OK 20 B URL HTTP/1.1 firehose.us-west-2.amazonaws.com/
IP 35.89.72.29:0
Hash 3970e82605c7d109bb348fc94e9eecc0
e03849ea786b9f7b28a35c17949e85a93eb1cff1
f5d031af01f137ae07fa71720fab94d16cc8a2a59868766002918b7c240f3967
OPTIONS / HTTP/1.1
Host: firehose.us-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent
Referer: https://mail.steuerberater-winterfeld.de/
Origin: https://mail.steuerberater-winterfeld.de
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amzn-RequestId: e6af6250-a930-f120-bd3b-ebed6e2d113c
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Access-Control-Allow-Headers: authorization,content-type,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent
Access-Control-Allow-Methods: POST
Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amz-request-id,x-amz-id-2,x-amzn-ErrorMessage,Date
Access-Control-Max-Age: 172800
Content-Length: 20
Date: Fri, 09 Sep 2022 00:23:25 GMT
firehose.us-west-2.amazonaws.com/
35.89.72.29200 OK 246 B URL HTTP/1.1 firehose.us-west-2.amazonaws.com/
IP 35.89.72.29:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 466717ef1f91c05eea649a479cbf1cba
f968045e8f78484786f018009c4e1cc2615703c7
30e55a5f1a9825d2cfcdb76911729348b8877eb94bda6e6ffaf0994321d23c41
POST / HTTP/1.1
Host: firehose.us-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Amz-User-Agent: aws-sdk-js/2.693.0 callback
Content-Type: application/x-amz-json-1.1
X-Amz-Target: Firehose_20150804.PutRecord
X-Amz-Content-Sha256: e8cdda9cbacceabaacf61532de5a4b05a5cef2f7cddc1725d92f75a4f1b9affd
X-Amz-Date: 20220909T002316Z
Authorization: AWS4-HMAC-SHA256 Credential=AKIAR4YEYRJL6JKBNRGP/20220909/us-west-2/firehose/aws4_request, SignedHeaders=host;x-amz-content-sha256;x-amz-date;x-amz-target;x-amz-user-agent, Signature=c2aa5ee9ead5203c5b6981decece3b94ffbc92ca85b8102a1039e39ae7a2fd73
Content-Length: 108
Origin: https://mail.steuerberater-winterfeld.de
Connection: keep-alive
Referer: https://mail.steuerberater-winterfeld.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amzn-RequestId: f72c36ea-49e9-bd37-acb8-bf578ef45d2b
Access-Control-Allow-Origin: *
Content-Encoding: gzip
x-amz-id-2: Ug3g8L2DOV83chCIzo6hz0keki8NjR4vTKnkHSKJNH4/JCdjC8so19khdltvAfN6VXR2dSKRA4T7cGCWZNKqnGhPdHTsLBC7
Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amz-request-id,x-amz-id-2,x-amzn-ErrorMessage,Date
Content-Type: application/x-amz-json-1.1
Content-Length: 246
Date: Fri, 09 Sep 2022 00:23:25 GMT
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8646
Expires: Fri, 09 Sep 2022 02:47:32 GMT
Date: Fri, 09 Sep 2022 00:23:26 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8646
Expires: Fri, 09 Sep 2022 02:47:32 GMT
Date: Fri, 09 Sep 2022 00:23:26 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8646
Expires: Fri, 09 Sep 2022 02:47:32 GMT
Date: Fri, 09 Sep 2022 00:23:26 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8646
Expires: Fri, 09 Sep 2022 02:47:32 GMT
Date: Fri, 09 Sep 2022 00:23:26 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F793f20c6-757e-47e5-8ab6-4d73ceae75af.jpeg
34.120.237.76200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F793f20c6-757e-47e5-8ab6-4d73ceae75af.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9590b525c8b07a297c8784f02b161a1
cec8428d159a5bde29e89c64cfb04146f759d52b
d309772ce79d36f7b1df0a3ea85a01f8278db2909c860721d105b772efed82ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F793f20c6-757e-47e5-8ab6-4d73ceae75af.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4002
x-amzn-requestid: ea2f5309-e220-4b7e-b718-9339b9444cc2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKQ6hHM8IAMFeJQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a61dc-7d45fd9253b7b7fa732b6f8d;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:42:52 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: VD7SlrM2RwFk5cfQvul2bTJA__GPYd5_UPY0D0_5NGLHoBj3yur7PA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 5abfab33f248090bb0f31ca137ce9464.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 22:15:21 GMT
age: 7685
etag: "cec8428d159a5bde29e89c64cfb04146f759d52b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc632269f-fb89-42dc-acc4-f733f3d7beb7.jpeg
34.120.237.76200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc632269f-fb89-42dc-acc4-f733f3d7beb7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a5fdeb374d4e3669ce5d9ff2cd22cd19
70ede5692526afd351d134a391383461dafdc64f
10c5d8e41aae1a36525a45375966b5067333f0c7edc176a540fd6527ebe1ad8c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc632269f-fb89-42dc-acc4-f733f3d7beb7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4532
x-amzn-requestid: e5694699-7f38-4542-8808-54bda7ee7d86
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YIMmGGUmIAMF2cw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63198e26-1aa6788e24fcfdf0008bee21;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 06:39:34 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zdVUahmbPQ7sQMlg14M89JOwjN2PEM03GNLYEwxPjcaioRpyqb8isA==
via: 1.1 ef6538ee7be7b17c84d06edb0f4c0a1a.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 22:26:32 GMT
age: 7014
etag: "70ede5692526afd351d134a391383461dafdc64f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37eff517-f8c4-4e04-9fb6-e9a22aa4d8bf.jpeg
34.120.237.76200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37eff517-f8c4-4e04-9fb6-e9a22aa4d8bf.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e0c4155f7b9f8a4a31780ea86e50e398
50ae5dbe015dc8b9ad022cb5b11cb2c4c8086368
598683a93574a8418e19decdbfc5bcae2f028c6e1791c192f98425bd8e339ad4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37eff517-f8c4-4e04-9fb6-e9a22aa4d8bf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7788
x-amzn-requestid: c062503b-bd30-4d31-ab0b-3a4637325645
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YEup5HnNIAMFRdw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63182b0b-41941a9a6b3efebd200acc79;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 05:24:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: Mr5kyQn_8e8Kvzt25ocmkjxhrqKLSACXKApfVOz6mPbKPJIsX0xzNQ==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 3c974a460e97e56c6eb1e6a30797d9d6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 15:25:09 GMT
age: 77514
etag: "50ae5dbe015dc8b9ad022cb5b11cb2c4c8086368"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe94f950b-af66-4803-868a-b00031195100.jpeg
34.120.237.76200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe94f950b-af66-4803-868a-b00031195100.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7d3752fb9bfaa323218e5a7b93aa5c6
08b4d519a099b04a9f1515377d02e51575f3321f
fa33f2240aea7395b0be62683743523beb1f0f11cb390f4d532e3474610a812c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe94f950b-af66-4803-868a-b00031195100.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7646
x-amzn-requestid: a1a8ac97-ed7f-4eb3-b704-b553d53f9279
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YEaEoHoAoAMFkwg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63180a1d-34dbcab50e2f495d4acfec54;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 03:03:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Q1ZgETKZlo1pp7yC2b_B_R0YocRP7BX9gYTExa5l9NcOB82uXRBYbQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 03:38:26 GMT
age: 74700
etag: "08b4d519a099b04a9f1515377d02e51575f3321f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F734c0779-c033-4fb9-aef7-ec81416744c3.jpeg
34.120.237.76200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F734c0779-c033-4fb9-aef7-ec81416744c3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cf8614d876156699bdf11897c45e9ae8
ff2c27cf141c68259e6e85020b01efc5d41730a6
c89d6a2fdc789fc725e8bac99774f9f9f0b22000f57d32f5611525bca30002d9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F734c0779-c033-4fb9-aef7-ec81416744c3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6365
x-amzn-requestid: dc414175-8174-4fa8-812b-1f72de48d5f7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKRBYEt8oAMFmyg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a6208-1c2417b120725a9a0642620a;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:43:36 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: 8Bvag9DT9hfKBaEhvBZ3UOna0tA_z7uvExg_2VVhd5yHy9BiJAkHbQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 76dcc62b68091cc715d50b5017be77fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 21:54:52 GMT
age: 8914
etag: "ff2c27cf141c68259e6e85020b01efc5d41730a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7cf625b-bc88-409c-ba19-f5826328ea51.jpeg
34.120.237.76200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7cf625b-bc88-409c-ba19-f5826328ea51.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 38bfbe2db4b4504a825123cf20667234
bc14d92551e46fb63f0f6b48e6e0e5496c5dc201
a5929b6d6b7a9bd67bc80d335869d55f43e5eff9c5703e34640ce8f3adb590ad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7cf625b-bc88-409c-ba19-f5826328ea51.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7378
x-amzn-requestid: b97047bb-2298-42d3-8829-a51f9a067806
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X3ypFH5KIAMFi6Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6312fe39-3a8cf8cc64b8d5382a57d9ca;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 07:11:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: l0C-a4s5VKj_GEzVzie05f5gc7yesn0OzzNFMoFm-iFBlUTBGHUZqA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 10:45:09 GMT
age: 49097
etag: "bc14d92551e46fb63f0f6b48e6e0e5496c5dc201"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
assets.plesk.com/static/default-website-content/public/bundle.js
185.76.9.21200 OK 0 B URL HTTP/2 assets.plesk.com/static/default-website-content/public/bundle.js
IP 185.76.9.21:0
ASN #60068 Datacamp Limited
GET /static/default-website-content/public/bundle.js HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.steuerberater-winterfeld.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 00:23:24 GMT
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 16 Sep 2021 06:02:26 GMT
access-control-allow-origin: *
etag: W/"6142ddf2-3e76c"
expires: Mon, 23 May 2022 11:14:49 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 4D6E:4F44:2015229:21361F3:628B6A51
via: 1.1 varnish
age: 125
x-served-by: cache-bma1623-BMA
x-cache-hits: 1
x-timer: S1653304014.044026,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: cedc1134cf950adca3bf6f6fe4272d6944c37a5f
x-accel-expires: @1662683125
server: CDN77-Turbo
x-77-nzt: AblMCRTQ8Tr/3wEAAA
x-77-nzt-ray: InWYojLLPcY
x-cache: HIT
x-age: 479
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
assets.plesk.com/static/default-website-content/public/img/question-mark-circle-7c07a2.svg
185.76.9.21200 OK 0 B URL HTTP/2 assets.plesk.com/static/default-website-content/public/img/question-mark-circle-7c07a2.svg
IP 185.76.9.21:0
ASN #60068 Datacamp Limited
GET /static/default-website-content/public/img/question-mark-circle-7c07a2.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.steuerberater-winterfeld.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 00:23:24 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 16 Sep 2021 06:02:26 GMT
access-control-allow-origin: *
etag: W/"6142ddf2-1ce"
expires: Mon, 23 May 2022 11:14:49 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 922E:E362:22D13D5:2406A29:628B6A51
via: 1.1 varnish
age: 154
x-served-by: cache-bma1681-BMA
x-cache-hits: 1
x-timer: S1653304043.085082,VS0,VE0
vary: Accept-Encoding
x-fastly-request-id: b5e850c6a78bce872c716edbca3a57ca6ea061dd
x-accel-expires: @1662683118
server: CDN77-Turbo
x-77-nzt: AblMCRTrGIb/5gEAAA
x-77-nzt-ray: qbL9pXOR2zM
x-cache: HIT
x-age: 486
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
assets.plesk.com/static/default-website-content/public/img/forum-4b225c.svg
185.76.9.21200 OK 0 B URL HTTP/2 assets.plesk.com/static/default-website-content/public/img/forum-4b225c.svg
IP 185.76.9.21:0
ASN #60068 Datacamp Limited
GET /static/default-website-content/public/img/forum-4b225c.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.steuerberater-winterfeld.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 00:23:24 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 16 Sep 2021 06:02:26 GMT
access-control-allow-origin: *
etag: W/"6142ddf2-1569"
expires: Mon, 23 May 2022 11:14:21 GMT
cache-control: max-age=600
x-proxy-cache: HIT
x-github-request-id: A4E6:8A57:FDB8BC:10748D6:628B6A51
via: 1.1 varnish
age: 153
x-served-by: cache-bma1681-BMA
x-cache-hits: 1
x-timer: S1653304043.121875,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 4a9e830e6ba39cce9b3f23d4d8dfb0e6c9cc2965
x-accel-expires: @1662683074
server: CDN77-Turbo
x-77-nzt: AblMCRS+mN3/EgIAAA
x-77-nzt-ray: yUXZmBVNTxs
x-cache: HIT
x-age: 530
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
assets.plesk.com/static/default-website-content/public/img/header-bg-1d0da8.svg
185.76.9.21200 OK 0 B URL HTTP/2 assets.plesk.com/static/default-website-content/public/img/header-bg-1d0da8.svg
IP 185.76.9.21:0
ASN #60068 Datacamp Limited
GET /static/default-website-content/public/img/header-bg-1d0da8.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.steuerberater-winterfeld.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 00:23:24 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
last-modified: Thu, 16 Sep 2021 06:02:26 GMT
access-control-allow-origin: *
etag: W/"6142ddf2-132"
expires: Mon, 23 May 2022 11:14:49 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 4DD6:1627:11BB8F7:125EEDE:628B6A51
via: 1.1 varnish
age: 154
x-served-by: cache-bma1681-BMA
x-cache-hits: 1
x-timer: S1653304043.188651,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 88fa691dfc1a20096a665a3e4a05734ea2624fd8
x-accel-expires: @1662683183
server: CDN77-Turbo
x-77-nzt: AblMCRRqPaH/pQEAAA
x-77-nzt-ray: JvAMrQ6XbYE
x-cache: HIT
x-age: 421
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
assets.plesk.com/static/default-website-content/public/default-website-index.js
185.76.9.21200 OK 0 B URL HTTP/2 assets.plesk.com/static/default-website-content/public/default-website-index.js
IP 185.76.9.21:0
ASN #60068 Datacamp Limited
GET /static/default-website-content/public/default-website-index.js HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.steuerberater-winterfeld.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Sep 2022 00:23:24 GMT
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Thu, 16 Sep 2021 06:02:26 GMT
access-control-allow-origin: *
etag: W/"6142ddf2-5433"
expires: Mon, 23 May 2022 11:16:18 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 0E80:4A01:E7F21B:17168FB:628B6AAA
via: 1.1 varnish
age: 240
x-served-by: cache-bma1631-BMA
x-cache-hits: 1
x-timer: S1653304219.804805,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 5e564bc242062ac2b444f0e00f4de0c19a5debc7
x-accel-expires: @1662683283
server: CDN77-Turbo
x-77-nzt: AblMCRS9Ub3/QQEAAA
x-77-nzt-ray: hv+Y38B/QVQ
x-cache: HIT
x-age: 321
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
mail.steuerberater-winterfeld.de/img/globe.png
83.169.41.94200 OK 0 B URL HTTP/1.1 mail.steuerberater-winterfeld.de/img/globe.png
IP 83.169.41.94:0
ASN #20773 Host Europe GmbH
GET /img/globe.png HTTP/1.1
Host: mail.steuerberater-winterfeld.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.steuerberater-winterfeld.de/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 00:23:24 GMT
Server: Apache
Last-Modified: Tue, 17 Apr 2018 11:52:58 GMT
ETag: "c1c9-56a09fad3c3b7"
Accept-Ranges: bytes
Content-Length: 49609
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
assets.plesk.com/static/default-website-content/public/img/knowlede-base-d84150.svg
185.76.9.21200 OK 0 B URL HTTP/2 assets.plesk.com/static/default-website-content/public/img/knowlede-base-d84150.svg
IP 185.76.9.21:0
ASN #60068 Datacamp Limited
GET /static/default-website-content/public/img/knowlede-base-d84150.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.steuerberater-winterfeld.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 00:23:24 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 16 Sep 2021 06:02:26 GMT
access-control-allow-origin: *
etag: W/"6142ddf2-332"
expires: Mon, 23 May 2022 11:14:49 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 3E14:7313:155B641:162535F:628B6A51
via: 1.1 varnish
age: 162
x-served-by: cache-bma1674-BMA
x-cache-hits: 1
x-timer: S1653304052.518505,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 1bcca9524d519e25e102063b5a92e6850ca36da6
x-accel-expires: @1662683175
server: CDN77-Turbo
x-77-nzt: AblMCRQYqTD/rQEAAA
x-77-nzt-ray: gfkF2acwP3k
x-cache: HIT
x-age: 429
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
assets.plesk.com/static/default-website-content/public/img/plesk-guides-3aaef8.svg
185.76.9.21200 OK 0 B URL HTTP/2 assets.plesk.com/static/default-website-content/public/img/plesk-guides-3aaef8.svg
IP 185.76.9.21:0
ASN #60068 Datacamp Limited
GET /static/default-website-content/public/img/plesk-guides-3aaef8.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.steuerberater-winterfeld.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 00:23:24 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 16 Sep 2021 06:02:26 GMT
access-control-allow-origin: *
etag: W/"6142ddf2-8e6"
expires: Mon, 23 May 2022 11:14:49 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 61F4:6C9D:9EF117:A82CAD:628B6A51
via: 1.1 varnish
age: 153
x-served-by: cache-bma1670-BMA
x-cache-hits: 1
x-timer: S1653304043.120483,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 5e0d2d55a022d8f81888a9eba4d0d4f0e0112b56
x-accel-expires: @1662683513
server: CDN77-Turbo
x-77-nzt: AblMCRSAsaL/WwAAAA
x-77-nzt-ray: IiaJfAHW+Vg
x-cache: HIT
x-age: 91
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
assets.plesk.com/static/default-website-content/public/img/facebook-c06b9c.svg
185.76.9.21200 OK 0 B URL HTTP/2 assets.plesk.com/static/default-website-content/public/img/facebook-c06b9c.svg
IP 185.76.9.21:0
ASN #60068 Datacamp Limited
GET /static/default-website-content/public/img/facebook-c06b9c.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.steuerberater-winterfeld.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 00:23:24 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
last-modified: Thu, 16 Sep 2021 06:02:26 GMT
access-control-allow-origin: *
etag: W/"6142ddf2-318"
expires: Mon, 23 May 2022 11:13:52 GMT
cache-control: max-age=600
x-proxy-cache: HIT
x-github-request-id: 82E6:7313:155B653:162536E:628B6A51
via: 1.1 varnish
age: 153
x-served-by: cache-bma1670-BMA
x-cache-hits: 1
x-timer: S1653304043.184529,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 4ba97906a2b8683fd69f75deb796e85128592f86
x-accel-expires: @1662683513
server: CDN77-Turbo
x-77-nzt: AblMCRTUhc3/WwAAAA
x-77-nzt-ray: eor/g7+Zxd0
x-cache: HIT
x-age: 91
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:300,400,600&subset=latin,latin-ext,cyrillic,cyrillic-ext,greek,greek-ext,vietnamese
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300,400,600&subset=latin,latin-ext,cyrillic,cyrillic-ext,greek,greek-ext,vietnamese
IP 142.250.74.10:0
GET /css?family=Open+Sans:300,400,600&subset=latin,latin-ext,cyrillic,cyrillic-ext,greek,greek-ext,vietnamese HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.steuerberater-winterfeld.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Sep 2022 00:23:24 GMT
date: Fri, 09 Sep 2022 00:23:24 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
assets.plesk.com/static/default-website-content/public/img/try-online-demo-6e5f27.svg
185.76.9.21200 OK 0 B URL HTTP/2 assets.plesk.com/static/default-website-content/public/img/try-online-demo-6e5f27.svg
IP 185.76.9.21:0
ASN #60068 Datacamp Limited
GET /static/default-website-content/public/img/try-online-demo-6e5f27.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.steuerberater-winterfeld.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 00:23:24 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 16 Sep 2021 06:02:26 GMT
access-control-allow-origin: *
etag: W/"6142ddf2-6e9"
expires: Mon, 23 May 2022 11:14:49 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: EDB4:4F43:F84E6D:105C344:628B6A51
via: 1.1 varnish
age: 154
x-served-by: cache-bma1632-BMA
x-cache-hits: 1
x-timer: S1653304043.084546,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: c53de62db144032279389d6fe2f8e663a661c45c
x-accel-expires: @1662683081
server: CDN77-Turbo
x-77-nzt: AblMCRSlH/3/CwIAAA
x-77-nzt-ray: wEDuiz7ICqk
x-cache: HIT
x-age: 523
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2