medi-buy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
301 Moved Permanently 414 B URL HTTP/1.1 medi-buy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 0fbdb3bc9e1ec0e2c10bc35cf614f1c8
c2565f6a5c5ad194b29682afea7940e687c70d93
a47795b264eb3e501ee148d5f7ee5bf027eb809d91f0f29c69c64fb6015272a0
Analyzer Verdict Alert fortinet Phishing
GET /mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ HTTP/1.1
Host: medi-buy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Dec 2022 02:15:47 GMT
Server: Apache
Location: https://medi-buy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Content-Length: 414
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10103
Expires: Fri, 02 Dec 2022 05:04:11 GMT
Date: Fri, 02 Dec 2022 02:15:48 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 0c748388899e8a8d3680355da2ea5020
903c620cd137613daafb0da0508c37b2f4a67212
39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 288
Cache-Control: max-age=116412
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 02:15:48 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 10:36:00 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7987
Expires: Fri, 02 Dec 2022 04:28:55 GMT
Date: Fri, 02 Dec 2022 02:15:48 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 01:19:50 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3358
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: OiezOmJuod4xTdOPO1MsyDh2ck0zl6KLZwMzuoC0xTPn+ki12Ruxd1HGnLEsTpy7ogTjhBKQrHM=
x-amz-request-id: 8WM231RWD7XFEGK7
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 01:45:53 GMT
age: 1795
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
medi-buy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
301 Moved Permanently 418 B URL HTTP/2 medi-buy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash ef3d0875f03447289907c5f8ffba3fec
26035d8b23abbe43b3d5ce077bace59bcfc6dcbf
c430f0dacb9694ed9c6f6838d83949d20a83a608c746ebf140f15025bde2470f
Analyzer Verdict Alert fortinet Phishing
GET /mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ HTTP/1.1
Host: medi-buy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
location: https://www.medibuy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
cache-control: max-age=2592000
expires: Sun, 01 Jan 2023 02:15:48 GMT
content-length: 418
content-type: text/html; charset=iso-8859-1
date: Fri, 02 Dec 2022 02:15:48 GMT
server: Apache
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 02:15:48 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 02:08:57 GMT
cache-control: public,max-age=3600
age: 411
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
www.medibuy.de/media/f9/fb/76/1660744973/logo-medi-buy.png?width=3000
200 OK 7.7 kB URL HTTP/2 www.medibuy.de/media/f9/fb/76/1660744973/logo-medi-buy.png?width=3000
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 145 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash 5b4f85e28897cbcab62d129e51104eab
28a7e923047697db3ae446ce5a51866c2355cf4e
8a382b94b3e401ae4dffb6e8d9e676d2efc3f5020bd1a09be086f3bd6cce75de
GET /media/f9/fb/76/1660744973/logo-medi-buy.png?width=3000 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=d6cccefd34053a2097eeb6999f5e4382; csrf[frontend.store-api.proxy]=b.gCEincNtWmrT0Kh6BM8oMM2JQEQLbIKWLkMhygrspw0.sxFR8JZZbh62ufIdR7hZBP_ccRRmIcfCSTZ4nnCY3ji4bkHLgiEcLJS16Q
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 17 Aug 2022 14:02:53 GMT
accept-ranges: bytes
content-length: 7720
cache-control: max-age=2592000, public
expires: Sun, 01 Jan 2023 02:15:48 GMT
content-type: image/png
date: Fri, 02 Dec 2022 02:15:48 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
200 OK 59 kB URL HTTP/2 www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 35697429725d86a7d72aa46bbb2c53d1
0369103b9fec673e0161ccad3dd598251ade7da5
7d42be5c4f29593b4b627137efcbc76d04c04ccfa97fc213134ce0ab7c5b039e
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=d6cccefd34053a2097eeb6999f5e4382; csrf[frontend.store-api.proxy]=b.gCEincNtWmrT0Kh6BM8oMM2JQEQLbIKWLkMhygrspw0.sxFR8JZZbh62ufIdR7hZBP_ccRRmIcfCSTZ4nnCY3ji4bkHLgiEcLJS16Q
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000, public
expires: Sun, 01 Jan 2023 02:15:48 GMT
vary: Accept-Encoding
content-encoding: br
content-length: 58936
content-type: text/css
date: Fri, 02 Dec 2022 02:15:48 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/c7/93/b8/1647424094/rechnung.png
200 OK 3.8 kB URL HTTP/2 www.medibuy.de/media/c7/93/b8/1647424094/rechnung.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 296 x 59, 8-bit/color RGBA, non-interlaced\012- data
Hash 8db2ae36a06c30c951bc5b07d7bc9148
8a309d77ae76de9ada1ba397dddb42b19b10d365
066098bde82e26620fd48cae563e63c82300403f1471d3b1daa3423032874855
GET /media/c7/93/b8/1647424094/rechnung.png HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=d6cccefd34053a2097eeb6999f5e4382; csrf[frontend.store-api.proxy]=b.gCEincNtWmrT0Kh6BM8oMM2JQEQLbIKWLkMhygrspw0.sxFR8JZZbh62ufIdR7hZBP_ccRRmIcfCSTZ4nnCY3ji4bkHLgiEcLJS16Q
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 09:48:14 GMT
accept-ranges: bytes
content-length: 3769
cache-control: max-age=2592000, public
expires: Sun, 01 Jan 2023 02:15:48 GMT
content-type: image/png
date: Fri, 02 Dec 2022 02:15:48 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/66/fd/63/1647424374/visa_mastercard.png
200 OK 5.0 kB URL HTTP/2 www.medibuy.de/media/66/fd/63/1647424374/visa_mastercard.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 380 x 180, 8-bit colormap, non-interlaced\012- data
Hash b436b228c185dd1694ee7dc90276a241
16f6d028dcb2ceed023e582620dc6b05792b9e53
00fe369484d1f2ffdcb4e94429c9f197b69ebd3baa6b1de2136b19ffc959f0b7
GET /media/66/fd/63/1647424374/visa_mastercard.png HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=d6cccefd34053a2097eeb6999f5e4382; csrf[frontend.store-api.proxy]=b.gCEincNtWmrT0Kh6BM8oMM2JQEQLbIKWLkMhygrspw0.sxFR8JZZbh62ufIdR7hZBP_ccRRmIcfCSTZ4nnCY3ji4bkHLgiEcLJS16Q
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 09:52:54 GMT
accept-ranges: bytes
content-length: 4999
cache-control: max-age=2592000, public
expires: Sun, 01 Jan 2023 02:15:48 GMT
content-type: image/png
date: Fri, 02 Dec 2022 02:15:48 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/bundles/storefront/assets/illustration/404_error.svg?166990692510264
200 OK 10 kB URL HTTP/2 www.medibuy.de/bundles/storefront/assets/illustration/404_error.svg?166990692510264
IP
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (10264), with no line terminators
Hash 09cc03d27a1bec1834fc2557c8756de6
b99d2c4e2e65fa4a6e67a2120cc003397641b6bb
0f7438ab906cd5e913d0672ede6a7e50a4b33052522152411a83db5fd75077e1
GET /bundles/storefront/assets/illustration/404_error.svg?166990692510264 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=d6cccefd34053a2097eeb6999f5e4382; csrf[frontend.store-api.proxy]=b.gCEincNtWmrT0Kh6BM8oMM2JQEQLbIKWLkMhygrspw0.sxFR8JZZbh62ufIdR7hZBP_ccRRmIcfCSTZ4nnCY3ji4bkHLgiEcLJS16Q
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 10264
cache-control: max-age=2592000, public, s-maxage=10
expires: Sun, 01 Jan 2023 02:15:48 GMT
content-security-policy: script-src 'none'
content-type: image/svg+xml
date: Fri, 02 Dec 2022 02:15:48 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/thumbnail/a3/b9/7e/1647423562/vorkasse_400x400.png
200 OK 3.4 kB URL HTTP/2 www.medibuy.de/thumbnail/a3/b9/7e/1647423562/vorkasse_400x400.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 296 x 59, 8-bit/color RGBA, non-interlaced\012- data
Hash acfea59e8cd875cd024cfbf3d19dd41b
69598eac7549445f211e070d2345f0d9ba676390
e4aa7abfdf0141b057516bf9bddd14be8651a0ae9fe6fc05a723240fd5a8e19a
GET /thumbnail/a3/b9/7e/1647423562/vorkasse_400x400.png HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=d6cccefd34053a2097eeb6999f5e4382; csrf[frontend.store-api.proxy]=b.gCEincNtWmrT0Kh6BM8oMM2JQEQLbIKWLkMhygrspw0.sxFR8JZZbh62ufIdR7hZBP_ccRRmIcfCSTZ4nnCY3ji4bkHLgiEcLJS16Q
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 09:39:22 GMT
accept-ranges: bytes
content-length: 3411
cache-control: max-age=2592000, public, s-maxage=10
expires: Sun, 01 Jan 2023 02:15:48 GMT
content-type: image/png
date: Fri, 02 Dec 2022 02:15:48 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/0b/db/27/1647424306/PayPal.png
200 OK 1.2 kB URL HTTP/2 www.medibuy.de/media/0b/db/27/1647424306/PayPal.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 52 x 13, 8-bit/color RGBA, non-interlaced\012- data
Hash 10e74d7f9c80fa575a82d281d59b07d7
ab28ead6cfd04169bcbb9abe0b72cc6114fdcd04
87c23da20335fef912b5f73054479da28932b7150964dd00f04621f7d66cb88b
GET /media/0b/db/27/1647424306/PayPal.png HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=d6cccefd34053a2097eeb6999f5e4382; csrf[frontend.store-api.proxy]=b.gCEincNtWmrT0Kh6BM8oMM2JQEQLbIKWLkMhygrspw0.sxFR8JZZbh62ufIdR7hZBP_ccRRmIcfCSTZ4nnCY3ji4bkHLgiEcLJS16Q
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 09:51:46 GMT
accept-ranges: bytes
content-length: 1209
cache-control: max-age=2592000, public
expires: Sun, 01 Jan 2023 02:15:48 GMT
content-type: image/png
date: Fri, 02 Dec 2022 02:15:48 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/2d/d3/21/1647427612/UPS.svg
200 OK 9.8 kB URL HTTP/2 www.medibuy.de/media/2d/d3/21/1647427612/UPS.svg
IP
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (9839), with no line terminators
Hash 7d431787d0670bbfed25042f31765950
7806b1cbd22e59454e0db311a57a0dc6f4c95044
be5355d455d0f806217d793bf05c06583a7e8fae0868f5ce5234dfc9a742c7df
GET /media/2d/d3/21/1647427612/UPS.svg HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=d6cccefd34053a2097eeb6999f5e4382; csrf[frontend.store-api.proxy]=b.gCEincNtWmrT0Kh6BM8oMM2JQEQLbIKWLkMhygrspw0.sxFR8JZZbh62ufIdR7hZBP_ccRRmIcfCSTZ4nnCY3ji4bkHLgiEcLJS16Q
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 10:46:52 GMT
accept-ranges: bytes
content-length: 9839
cache-control: max-age=2592000, public
expires: Sun, 01 Jan 2023 02:15:48 GMT
content-security-policy: script-src 'none'
content-type: image/svg+xml
date: Fri, 02 Dec 2022 02:15:48 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/de/61/51/1647427683/DPD.svg
200 OK 1.8 kB URL HTTP/2 www.medibuy.de/media/de/61/51/1647427683/DPD.svg
IP
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1784), with no line terminators
Hash dd28c0a5daef8ea0fa5b4fdfb922e642
6835ab6acdc420dd3cfcc5bc65db9c68e9a1e3c7
8234e24e56d28f50892e97f85b54c48ef8da0605a59dd5e82de53112ff4117ed
GET /media/de/61/51/1647427683/DPD.svg HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=d6cccefd34053a2097eeb6999f5e4382; csrf[frontend.store-api.proxy]=b.gCEincNtWmrT0Kh6BM8oMM2JQEQLbIKWLkMhygrspw0.sxFR8JZZbh62ufIdR7hZBP_ccRRmIcfCSTZ4nnCY3ji4bkHLgiEcLJS16Q
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 10:48:03 GMT
accept-ranges: bytes
content-length: 1784
cache-control: max-age=2592000, public
expires: Sun, 01 Jan 2023 02:15:48 GMT
content-security-policy: script-src 'none'
content-type: image/svg+xml
date: Fri, 02 Dec 2022 02:15:48 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/82/e2/a0/1647426572/Hermes.svg
200 OK 9.4 kB URL HTTP/2 www.medibuy.de/media/82/e2/a0/1647426572/Hermes.svg
IP
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (9350), with no line terminators
Hash 5f5624b00ef137c75797afa4cca2ad88
55e72269cfd7e4690830fe00fdffdcae157d5894
166ab49b3471568a0e08af48c9f41a260397eec8032a2b1774d22f2edb830d3c
GET /media/82/e2/a0/1647426572/Hermes.svg HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=d6cccefd34053a2097eeb6999f5e4382; csrf[frontend.store-api.proxy]=b.gCEincNtWmrT0Kh6BM8oMM2JQEQLbIKWLkMhygrspw0.sxFR8JZZbh62ufIdR7hZBP_ccRRmIcfCSTZ4nnCY3ji4bkHLgiEcLJS16Q
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 10:29:32 GMT
accept-ranges: bytes
content-length: 9350
cache-control: max-age=2592000, public
expires: Sun, 01 Jan 2023 02:15:48 GMT
content-security-policy: script-src 'none'
content-type: image/svg+xml
date: Fri, 02 Dec 2022 02:15:48 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/90/e1/80/1647434313/dhl.png
200 OK 23 kB URL HTTP/2 www.medibuy.de/media/90/e1/80/1647434313/dhl.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 892 x 660, 8-bit/color RGBA, non-interlaced\012- data
Hash f701ba545c40d9022dc97668c7400a43
91c4cad7ae63f5f751dff1bc0a2ebede2e64d908
f97e17aa330ea80f47c7f90e46af5cbea114e31d835d4bb39956a8ff2379e9f6
GET /media/90/e1/80/1647434313/dhl.png HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=d6cccefd34053a2097eeb6999f5e4382; csrf[frontend.store-api.proxy]=b.gCEincNtWmrT0Kh6BM8oMM2JQEQLbIKWLkMhygrspw0.sxFR8JZZbh62ufIdR7hZBP_ccRRmIcfCSTZ4nnCY3ji4bkHLgiEcLJS16Q
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 12:38:33 GMT
accept-ranges: bytes
content-length: 23109
cache-control: max-age=2592000, public
expires: Sun, 01 Jan 2023 02:15:48 GMT
content-type: image/png
date: Fri, 02 Dec 2022 02:15:48 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/0f/55/eb/1647434309/gls.jpg
200 OK 21 kB URL HTTP/2 www.medibuy.de/media/0f/55/eb/1647434309/gls.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1168x657, components 3\012- data
Hash ea8c3240f3a929801f0525d005eddc25
ef6b0286016c58e8722cbf64b1e185b61e80486a
bdcbf3e1707aba9169bff1919ff05fe7f06f76ef3b9046f081534b947a041bf9
GET /media/0f/55/eb/1647434309/gls.jpg HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=d6cccefd34053a2097eeb6999f5e4382; csrf[frontend.store-api.proxy]=b.gCEincNtWmrT0Kh6BM8oMM2JQEQLbIKWLkMhygrspw0.sxFR8JZZbh62ufIdR7hZBP_ccRRmIcfCSTZ4nnCY3ji4bkHLgiEcLJS16Q
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 12:38:29 GMT
accept-ranges: bytes
content-length: 20730
cache-control: max-age=2592000, public
expires: Sun, 01 Jan 2023 02:15:48 GMT
content-type: image/jpeg
date: Fri, 02 Dec 2022 02:15:48 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1f88399f3fdd89dbb9ca1229cb67143a
325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3
831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 277
Cache-Control: max-age=111338
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 02:15:48 GMT
Etag: "63886ea9-1d7"
Expires: Sat, 03 Dec 2022 09:11:26 GMT
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Regular.woff2
200 OK 100 kB URL HTTP/2 www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Regular.woff2
IP
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format (Version 2), TrueType, length 100088, version 1.0\012- data
Size 100 kB (100088 bytes)
Hash 77812e2fead777db0dc806b1eaabc7fd
512526689a4fd677ffca333a9dc1d412ad44caaf
77677cd3d62f53fce403b743c6ab0dfacf6109cfa5f2c511a57b0779222c76de
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Regular.woff2 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
Cookie: session-=d6cccefd34053a2097eeb6999f5e4382; csrf[frontend.store-api.proxy]=b.gCEincNtWmrT0Kh6BM8oMM2JQEQLbIKWLkMhygrspw0.sxFR8JZZbh62ufIdR7hZBP_ccRRmIcfCSTZ4nnCY3ji4bkHLgiEcLJS16Q
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 100088
cache-control: max-age=2592000, public, s-maxage=10
expires: Sun, 01 Jan 2023 02:15:49 GMT
content-type: font/woff2
date: Fri, 02 Dec 2022 02:15:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-SemiBold.woff2
200 OK 107 kB URL HTTP/2 www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-SemiBold.woff2
IP
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format (Version 2), TrueType, length 107184, version 1.0\012- data
Size 107 kB (107184 bytes)
Hash 3d011804596fb2ccde4af51830a9a7d5
999e92214edfb5b102919586df4cfe16f7ddaccb
e9bb1331830a18e2504d966f1fa931e711cad726e454722f324d63534cec97d9
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-SemiBold.woff2 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
Cookie: session-=d6cccefd34053a2097eeb6999f5e4382; csrf[frontend.store-api.proxy]=b.gCEincNtWmrT0Kh6BM8oMM2JQEQLbIKWLkMhygrspw0.sxFR8JZZbh62ufIdR7hZBP_ccRRmIcfCSTZ4nnCY3ji4bkHLgiEcLJS16Q
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 107184
cache-control: max-age=2592000, public, s-maxage=10
expires: Sun, 01 Jan 2023 02:15:49 GMT
content-type: font/woff2
date: Fri, 02 Dec 2022 02:15:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Bold.woff2
200 OK 107 kB URL HTTP/2 www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Bold.woff2
IP
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format (Version 2), TrueType, length 107300, version 1.0\012- data
Size 107 kB (107300 bytes)
Hash 741dc4163a97ffa354979f18802f6ca8
0e4b89a4a2801dd5e25364f439d7bfee47594762
20fd98b18d523471ae687971086817766649ce25f32e438d14711561a95bc9e9
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Bold.woff2 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
Cookie: session-=d6cccefd34053a2097eeb6999f5e4382; csrf[frontend.store-api.proxy]=b.gCEincNtWmrT0Kh6BM8oMM2JQEQLbIKWLkMhygrspw0.sxFR8JZZbh62ufIdR7hZBP_ccRRmIcfCSTZ4nnCY3ji4bkHLgiEcLJS16Q
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 107300
cache-control: max-age=2592000, public, s-maxage=10
expires: Sun, 01 Jan 2023 02:15:49 GMT
content-type: font/woff2
date: Fri, 02 Dec 2022 02:15:49 GMT
server: Apache
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 93P0qdk3ObccSB0ezysMDA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: fwe+M7iKkayFv1aZzFVTXggIEpY=
ocsp.digicert.com/
200 OK 471 B IP
Hash 0ea87db59dce85a59e0cb6456fb593e7
d2d4307d2c444a2c14a280995b185f2d6d96539b
bea3c2ac6b37c6d3ebc7e5c4825d3f6c32dd4ef82c526ff6277cbcc4f8048f91
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6514
Cache-Control: max-age=89532
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 02:15:49 GMT
Etag: "6388011f-1d7"
Expires: Sat, 03 Dec 2022 03:08:01 GMT
Last-Modified: Thu, 01 Dec 2022 01:19:27 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 188c50963e7939b1f26a31dbcb8c8200
859416e6148ea6618584e53604efcf072bb989cc
3a313cd3c1693a886bfbf6ffc6fbac78f87e6ded2b9a7749553444ada65ce36e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 02:15:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.medibuy.de/widgets/checkout/info
200 OK 511 B URL HTTP/2 www.medibuy.de/widgets/checkout/info
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (893)
Hash 493a5de4e5ee35b780abd036727f3864
99ab201cb7443a982c8b70945c6e0e64529e69cc
6570e674f01a7fd1efc6e7545379a0a48362799a0e32f9759fa2286786d0ad4a
GET /widgets/checkout/info HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Content-type: application/json
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=d6cccefd34053a2097eeb6999f5e4382; csrf[frontend.store-api.proxy]=b.gCEincNtWmrT0Kh6BM8oMM2JQEQLbIKWLkMhygrspw0.sxFR8JZZbh62ufIdR7hZBP_ccRRmIcfCSTZ4nnCY3ji4bkHLgiEcLJS16Q; timezone=UTC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 02:15:49 GMT
x-robots-tag: noindex
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: deny
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-mod-pagespeed: 1.13.35.2-0
cache-control: no-cache, private, max-age=0, no-cache, s-maxage=10
vary: Accept-Encoding
content-encoding: br
content-length: 511
content-type: text/html; charset=UTF-8
server: Apache
X-Firefox-Spdy: h2
www.paypal.com/sdk/js?components=buttons,messages,hosted-fields,funding-eligibility&client-id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&commit=true&locale=de_DE¤cy=EUR&intent=capture&merchant-id=GNSPGCCJR6URW
200 OK 160 kB URL HTTP/2 www.paypal.com/sdk/js?components=buttons,messages,hosted-fields,funding-eligibility&client-id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&commit=true&locale=de_DE¤cy=EUR&intent=capture&merchant-id=GNSPGCCJR6URW
IP
File type ASCII text, with very long lines (65472)
Size 160 kB (159633 bytes)
Hash ffd7319fd51f871edaedc3a030cab038
94183593cc110dba99622ec256ae748b7cc3be68
528bf2b60113b9d1b2399e59b1633cd43995c26eac199706ddb5cdfcaa1e76e4
GET /sdk/js?components=buttons,messages,hosted-fields,funding-eligibility&client-id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&commit=true&locale=de_DE¤cy=EUR&intent=capture&merchant-id=GNSPGCCJR6URW HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Server-Timing
age: 7
cache-control: public, max-age=3600, s-maxage=10800
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; script-src 'nonce-ZwFzdvBDhHOvNh9sho1s9YAYXkpYhoEfhG1bQGKhb/JSIRT+' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'nonce-ZwFzdvBDhHOvNh9sho1s9YAYXkpYhoEfhG1bQGKhb/JSIRT+' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; object-src 'none'; img-src https: data:; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: application/javascript; charset=utf-8
date: Fri, 02 Dec 2022 02:15:49 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"26f91-lBg1k8wRDbqZYi7CVq50i3zDvmg"
last-modified: Fri, 02 Dec 2022 02:15:43 GMT
p3p: true
paypal-debug-id: 0272a92ba19b4
server: ECAcc (ska/F68B)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast",edge;dur=4
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-00000000000000000000272a92ba19b4-4d0be772d07c7916-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 159633
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-5ZRS4MZ
200 OK 61 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-5ZRS4MZ
IP
File type ASCII text, with very long lines (2655)
Hash 802cdcedf15fc77d9b9c85631c5f245b
0923f08a3c9dbac525180179804211426cc1ad21
90d242d703497509951c885c8db96703816b1b03e7202b07befe00bc13ae6e91
GET /gtm.js?id=GTM-5ZRS4MZ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Dec 2022 02:15:49 GMT
expires: Fri, 02 Dec 2022 02:15:49 GMT
cache-control: private, max-age=900
last-modified: Fri, 02 Dec 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 61448
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.medibuy.de/media/17/a7/ac/1646226955/medi-buy-favicon.png?width=3000
200 OK 4.6 kB URL HTTP/2 www.medibuy.de/media/17/a7/ac/1646226955/medi-buy-favicon.png?width=3000
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 512 x 512, 4-bit colormap, non-interlaced\012- data
Hash 88c734babd964cc8ae1839e9be164ca9
78fc99bde11eb697353244aa8f7ff3297d9bd9cd
63e35c5c2d81ece3ac43436b7ba8642767a01d88064a04c13ac488157532e342
GET /media/17/a7/ac/1646226955/medi-buy-favicon.png?width=3000 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=d6cccefd34053a2097eeb6999f5e4382; csrf[frontend.store-api.proxy]=b.gCEincNtWmrT0Kh6BM8oMM2JQEQLbIKWLkMhygrspw0.sxFR8JZZbh62ufIdR7hZBP_ccRRmIcfCSTZ4nnCY3ji4bkHLgiEcLJS16Q; timezone=UTC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Mar 2022 13:15:55 GMT
accept-ranges: bytes
content-length: 4599
cache-control: max-age=2592000, public
expires: Sun, 01 Jan 2023 02:15:49 GMT
content-type: image/png
date: Fri, 02 Dec 2022 02:15:49 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/_proxy/store-api?path=%2Fstore-api%2Fpaypal%2Fpayment-method-eligibility
204 No Content 0 B URL HTTP/2 www.medibuy.de/_proxy/store-api?path=%2Fstore-api%2Fpaypal%2Fpayment-method-eligibility
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /_proxy/store-api?path=%2Fstore-api%2Fpaypal%2Fpayment-method-eligibility HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Content-type: application/json
Content-Length: 148
Origin: https://www.medibuy.de
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=d6cccefd34053a2097eeb6999f5e4382; csrf[frontend.store-api.proxy]=b.gCEincNtWmrT0Kh6BM8oMM2JQEQLbIKWLkMhygrspw0.sxFR8JZZbh62ufIdR7hZBP_ccRRmIcfCSTZ4nnCY3ji4bkHLgiEcLJS16Q; timezone=UTC; _gcl_au=1.1.48162692.1669947348
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Fri, 02 Dec 2022 02:15:49 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: deny
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: object-src 'none'; script-src 'none'; base-uri 'self';
expires: Fri, 02 Dec 2022 02:15:49 GMT
cache-control: no-cache, private, public
server: Apache
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 02 Dec 2022 00:41:08 GMT
expires: Fri, 02 Dec 2022 02:41:08 GMT
cache-control: public, max-age=7200
age: 5681
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.paypal.com/tagmanager/pptm.js?id=www.medibuy.de&t=xo&v=5.0.343&source=payments_sdk&mrid=GNSPGCCJR6URW&client_id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&comp=buttons,messages,hosted-fields,funding-eligibility&vault=false
200 OK 4.3 kB URL HTTP/2 www.paypal.com/tagmanager/pptm.js?id=www.medibuy.de&t=xo&v=5.0.343&source=payments_sdk&mrid=GNSPGCCJR6URW&client_id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&comp=buttons,messages,hosted-fields,funding-eligibility&vault=false
IP
Hash 3e78a08d7e5fe163a8826957a9945381
c5d73b2207473e5d3dabc99f0f1803b90414ef77
627d371964a1c25e4b7283ee04fabf0a33df568499e48beba3d94bb72d197e24
GET /tagmanager/pptm.js?id=www.medibuy.de&t=xo&v=5.0.343&source=payments_sdk&mrid=GNSPGCCJR6URW&client_id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&comp=buttons,messages,hosted-fields,funding-eligibility&vault=false HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-expose-headers: Server-Timing
age: 38308
cache-control: public, max-age=3600
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-mFeLVwiMNbwdrmTlRMPNQ4kKeYKcGTpFTaTMcKI6Hg0/ihPw' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' 'unsafe-eval'; img-src * data:; object-src 'none'; font-src 'self' https://*.paypalobjects.com https://*.paypal.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://nexus.ensighten.com https://*.google-analytics.com 'unsafe-inline' https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' https://*.qualtrics.com;
content-type: application/x-javascript; charset=utf-8
date: Fri, 02 Dec 2022 02:15:49 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"2f34-zQQ0FVqIlbkbuS4WgpPW/nUPXC4"
last-modified: Thu, 01 Dec 2022 15:37:21 GMT
paypal-debug-id: 0b223827b4212
server: ECAcc (lhd/35DB)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast",edge;dur=54
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-00000000000000000000b223827b4212-b4b874a607979742-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 51d5484b700426c5612c309bbf14b114
026994960bfaaa4e2604b66cb795b2787fe300a2
e3e30a64f2e4fc59120c46b320d104f1b9d9a8af90106ab78715d14e49e11ae0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 02:15:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-224940953-1&cid=1842571655.1669947348&jid=44156775&gjid=842093684&_gid=1359211177.1669947348&_u=YEBAAAAAAAAAAC~&z=1663448892
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-224940953-1&cid=1842571655.1669947348&jid=44156775&gjid=842093684&_gid=1359211177.1669947348&_u=YEBAAAAAAAAAAC~&z=1663448892
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-224940953-1&cid=1842571655.1669947348&jid=44156775&gjid=842093684&_gid=1359211177.1669947348&_u=YEBAAAAAAAAAAC~&z=1663448892 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.medibuy.de
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.medibuy.de
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 02 Dec 2022 02:15:49 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49a9684674e0f1b3974c6427c5354fe4
c201e61bcda9cc91369f0c57f8236fcdd3db26c6
27b8d50242836a45aca1fcd0cb58e7f685011c1f93b57d0e3ea9a02400f8d801
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 02:15:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.paypal.com/xoplatform/logger/api/logger
200 OK 607 B URL HTTP/2 www.paypal.com/xoplatform/logger/api/logger
IP
File type JSON data\012- , ASCII text, with very long lines (1016), with no line terminators
Hash e1b0d32f5d0a4773fd9e63922a07fac4
583e95503f5b8cb2c534964c919a5453a8b6d53d
1cd09e87365aed223c0e8d6ea3c76e0e473be057468b898614b473cba4c8e1cb
POST /xoplatform/logger/api/logger HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1455
Origin: https://www.medibuy.de
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-credentials: true
access-control-allow-origin: https://www.medibuy.de
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: application/json; charset=utf-8
date: Fri, 02 Dec 2022 02:15:50 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"3f8-bg2UaR25oATIneP50joc56ECUPE"
paypal-debug-id: 0a459524857a3
server: ECAcc (lhd/35F1)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast",edge;dur=223
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sat, 02 Dec 2023 02:15:50 GMT; Secure
LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Fri, 02 Dec 2022 11:01:46 GMT; HttpOnly; Secure
tsrce=loggernodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Mon, 05 Dec 2022 02:15:49 GMT; HttpOnly; Secure
x-pp-s=eyJ0IjoiMTY2OTk0NzM1MDI0MSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
l7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Fri, 02 Dec 2022 02:45:50 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1764641750%26vteXpYrS%3D1669949150%26vr%3Dd09e5cb81840ad045cd58247fd4e3298%26vt%3Dd09e5cb81840ad045cd58247fd4e3297%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 01 Dec 2025 02:15:50 GMT; HttpOnly; Secure
ts_c=vr%3Dd09e5cb81840ad045cd58247fd4e3298%26vt%3Dd09e5cb81840ad045cd58247fd4e3297; Path=/; Domain=paypal.com; Expires=Mon, 01 Dec 2025 02:15:50 GMT; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-00000000000000000000a459524857a3-ac769a348b451670-01
vary: Accept-Encoding
x-content-type-options: nosniff
content-length: 607
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17039
Expires: Fri, 02 Dec 2022 06:59:49 GMT
Date: Fri, 02 Dec 2022 02:15:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17039
Expires: Fri, 02 Dec 2022 06:59:49 GMT
Date: Fri, 02 Dec 2022 02:15:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17039
Expires: Fri, 02 Dec 2022 06:59:49 GMT
Date: Fri, 02 Dec 2022 02:15:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17039
Expires: Fri, 02 Dec 2022 06:59:49 GMT
Date: Fri, 02 Dec 2022 02:15:50 GMT
Connection: keep-alive
www.paypal.com/xoplatform/logger/api/logger
200 OK 2.9 kB URL HTTP/2 www.paypal.com/xoplatform/logger/api/logger
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b47431190f34eccf0a6efb98e2a32b7d
9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
OPTIONS /xoplatform/logger/api/logger HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.medibuy.de/
Origin: https://www.medibuy.de
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: https://www.medibuy.de
cache-control: max-age=0, no-cache, no-store, must-revalidate
date: Fri, 02 Dec 2022 02:15:50 GMT
dc: ccg11-origin-www-1.paypal.com
paypal-debug-id: 09526a0719392
server: ECAcc (lhd/35BB)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast",edge;dur=217
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Fri, 02 Dec 2022 11:01:46 GMT; HttpOnly; Secure
enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sat, 02 Dec 2023 02:15:50 GMT; Secure
x-pp-s=eyJ0IjoiMTY2OTk0NzM0OTk5OSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
tsrce=loggernodeweb; Domain=.paypal.com; Path=/; Expires=Mon, 05 Dec 2022 02:15:50 GMT; HttpOnly; Secure; SameSite=None
l7_az=dcg15.slc; Path=/; Domain=paypal.com; Expires=Fri, 02 Dec 2022 02:45:50 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1764641749%26vteXpYrS%3D1669949149%26vr%3Dd09e5bd61840ad04b95f6db4fd4ce415%26vt%3Dd09e5bd61840ad04b95f6db4fd4ce414%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 01 Dec 2025 02:15:50 GMT; HttpOnly; Secure
ts_c=vr%3Dd09e5bd61840ad04b95f6db4fd4ce415%26vt%3Dd09e5bd61840ad04b95f6db4fd4ce414; Path=/; Domain=paypal.com; Expires=Mon, 01 Dec 2025 02:15:50 GMT; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-000000000000000000009526a0719392-32bfd4519141c090-01
x-content-type-options: nosniff
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 156e9ea97b774cbd8361072e4041b6c8
fc71ae3cae92ed6011904bb2367f23bf4e69fab4
58d953c19ebbbdfc3965bbe3f52308d4702deaf4d0c029f4674bcb862da138af
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8863
x-amzn-requestid: 798d014b-0f9c-4787-a676-8f5e8fae3d11
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdG14HBNIAMFdWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851bf-7549feac6d476a8512676412;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: r_0F64VpyutAOJ9IcTWrs3Sv--fhKiwKsV1FW0fOMSRt1QLLPxvJzg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 07:43:11 GMT
age: 66759
etag: "fc71ae3cae92ed6011904bb2367f23bf4e69fab4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb543a0f6-0efe-4518-9420-4eff88edf8e6.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb543a0f6-0efe-4518-9420-4eff88edf8e6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 60ccdde4ce64b4a3fe6fc2a059b3bde1
5ce119089f4a4cd139b523889b6cd84cd79191f4
2089225a6dc13845ab8e031416920d16952ae1461ca10d72c408ad001ed8f27b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb543a0f6-0efe-4518-9420-4eff88edf8e6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4840
x-amzn-requestid: 6bc8fa91-5696-4bc6-b1e7-3c36b2c01801
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGxTFxyoAMFRzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e6e-3e85b78905aaa73726eef85a;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:36:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UraCGe--VISONXzaUBpA7vuLuD5l7zihtQIph7LVn1QsS8MjLBbvKw==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:48:51 GMT
age: 16019
etag: "5ce119089f4a4cd139b523889b6cd84cd79191f4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0842726-801f-4648-a54d-c0cb2cf5348a.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0842726-801f-4648-a54d-c0cb2cf5348a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 89502a302863c914b4de5e8c6a7f6846
898d50ac6e372609656fccee27de3d036bc0281c
9bc1f83d570d70b7e17e5de7a1546885851431ea989d915852ae7130387c422f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0842726-801f-4648-a54d-c0cb2cf5348a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5675
x-amzn-requestid: a47e049a-6f76-4af4-8064-fd7722bcfb17
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGepGYEIAMFeQw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-09e13afe27c4dc5b44e828be;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: U_3ah2pFrsQl9IVVqm9EVI99FnF79b9zOUFVBGX966JAjkDg6UF--A==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:47:56 GMT
age: 16074
etag: "898d50ac6e372609656fccee27de3d036bc0281c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 07:20:09 GMT
age: 68141
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb2cfbf1-2aef-40a6-97e1-99a756e32924.png
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb2cfbf1-2aef-40a6-97e1-99a756e32924.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 16a112f00456d38c4c9e051ccf40e105
8fe32fffe672f0e91ce773af0e4be960f55bad08
43517bbcd17ec6d05d09a4c0d183610acdc7e2fa4767cb786cb8b936d5f44402
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb2cfbf1-2aef-40a6-97e1-99a756e32924.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13461
x-amzn-requestid: 8c0121a6-cf29-4cd0-bd42-d9f67af62b84
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZQsyGhGoAMF1-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6386c7eb-593f28367320530e2dcafbfb;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 03:03:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: fY7pkaeRu9vdWa68sWrtGxp2BkC9lZhbJ1cgGWap2H8y1zXUxKT6zA==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 06:28:23 GMT
age: 71247
etag: "8fe32fffe672f0e91ce773af0e4be960f55bad08"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.medibuy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
404 Not Found 0 B URL HTTP/2 www.medibuy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
IP
ASN #24940 Hetzner Online GmbH
GET /mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
date: Fri, 02 Dec 2022 02:15:48 GMT
access-control-allow-origin: *
access-control-allow-methods: GET,POST,PUT,PATCH,DELETE
access-control-allow-headers: Content-Type,Authorization,sw-context-token,sw-access-key,sw-language-id,sw-version-id,sw-inheritance,fail-on-error,indexing-behavior,single-operation,sw-include-seo-urls
access-control-expose-headers: Content-Type,Authorization,sw-context-token,sw-access-key,sw-language-id,sw-version-id,sw-inheritance,fail-on-error,indexing-behavior,single-operation,sw-include-seo-urls
sw-language-id: 2fbb5fe2e29a4d70aa5854ce7ce3e20b
sw-context-token: de6KtBa8Jk9GMgT6sRi81kTGGNj7wcQo
x-frame-options: deny
set-cookie: session-=d6cccefd34053a2097eeb6999f5e4382; path=/; secure; HttpOnly; SameSite=lax
session-=d6cccefd34053a2097eeb6999f5e4382; path=/; secure; httponly; samesite=lax
csrf[frontend.store-api.proxy]=b.gCEincNtWmrT0Kh6BM8oMM2JQEQLbIKWLkMhygrspw0.sxFR8JZZbh62ufIdR7hZBP_ccRRmIcfCSTZ4nnCY3ji4bkHLgiEcLJS16Q; path=/; secure; httponly; samesite=lax
cache-control: no-cache, private, public
content-type: text/html; charset=UTF-8
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/js/all.js?1669906925946899
200 OK 0 B URL HTTP/2 www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/js/all.js?1669906925946899
IP
ASN #24940 Hetzner Online GmbH
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/js/all.js?1669906925946899 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/dca8227b9fdcf93e9329ab3e4d8e567d/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=d6cccefd34053a2097eeb6999f5e4382; csrf[frontend.store-api.proxy]=b.gCEincNtWmrT0Kh6BM8oMM2JQEQLbIKWLkMhygrspw0.sxFR8JZZbh62ufIdR7hZBP_ccRRmIcfCSTZ4nnCY3ji4bkHLgiEcLJS16Q
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000, public
expires: Sun, 01 Jan 2023 02:15:48 GMT
vary: Accept-Encoding
content-encoding: br
content-type: application/javascript
date: Fri, 02 Dec 2022 02:15:48 GMT
server: Apache
X-Firefox-Spdy: h2
213.133.105.76
23.36.76.226
34.160.144.191
93.184.220.29