medi-buy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
301 Moved Permanently 362 B URL HTTP/1.1 medi-buy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a14ae2932eb7208e2fbe6c7d47cd8ff1
8f453576b2211206c157ea267b8418d536a42673
49b75daa0e618eb23492373d25087fc4e8504f105c3b972a33e77902ecb65e5c
Analyzer Verdict Alert fortinet Phishing
GET /mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ HTTP/1.1
Host: medi-buy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 04 Apr 2023 14:15:36 GMT
Server: Apache
Location: https://medi-buy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
Content-Length: 362
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a4074549843769a3da3f055bcb5a78ff
f99062d34cf71bda6a9c64061fb9e61008f94021
895e3801806f031611a25bec5652cc1a46dfa76ea6784f5064d859c1a5b9ddf7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "895E3801806F031611A25BEC5652CC1A46DFA76EA6784F5064D859C1A5B9DDF7"
Last-Modified: Tue, 04 Apr 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10196
Expires: Tue, 04 Apr 2023 17:05:32 GMT
Date: Tue, 04 Apr 2023 14:15:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e50dac5108a698d61ca49516033d1a20
53d243b89fc00deb9bfae07351bbe36ddb7c1df3
e9e0ad98c485b56fe65ea0a8bc4974fff3f804fcf2d8f6266ada9acd27c7b7cc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E9E0AD98C485B56FE65EA0A8BC4974FFF3F804FCF2D8F6266ADA9ACD27C7B7CC"
Last-Modified: Tue, 04 Apr 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4764
Expires: Tue, 04 Apr 2023 15:35:00 GMT
Date: Tue, 04 Apr 2023 14:15:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 903ed2d58f1f33d069b70c4b53f1cb1f
0ef89cd6eb79a2ddd74434f9233cf486fffc1142
d8c984b50f04fcdb1ebc99d982502d85193302c85239ee7497666247edfc0061
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8C984B50F04FCDB1EBC99D982502D85193302C85239EE7497666247EDFC0061"
Last-Modified: Sun, 02 Apr 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13764
Expires: Tue, 04 Apr 2023 18:05:00 GMT
Date: Tue, 04 Apr 2023 14:15:36 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 29fdbcd53b5646cfcdd46510063734c4
85e3ceda5ef130219f4fe8a31e52e2690c8f7d8e
24c27586332c016685e6231fec5836e921048d8aaefbcd4cd6f88969f9d91e18
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 04 Apr 2023 13:16:39 GMT
content-type: application/json
age: 3537
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-05-20-17-04-38.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-05-20-17-04-38.chain
IP
File type PEM certificate\012- , ASCII text
Hash 95f61d351f5fc9533cc78e255ce9bc06
fba284117f347782ac23c51d141d7e3ec15a867e
7fcc5f9e52e389d8d7c6df7f1f2a1291ae0aaae8e554f3022239ab092b2ef3c3
GET /chains/remote-settings.content-signature.mozilla.org-2023-05-20-17-04-38.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: YSIUKtlSadkOl3md5KOjah7/7hKQiIfjQWT+xIiIIPBXJRbqjEnccix4CE4ugq9N43z8VLAJLJM=
x-amz-request-id: XZFG9N8FDWNRYCNT
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 04 Apr 2023 13:53:14 GMT
age: 1342
last-modified: Fri, 31 Mar 2023 17:04:39 GMT
etag: "95f61d351f5fc9533cc78e255ce9bc06"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 04 Apr 2023 14:15:36 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
medi-buy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
301 Moved Permanently 366 B URL HTTP/2 medi-buy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 33f2cec8efe384a91c8675f493c63635
ff9a2b7cb74a88231bb7f04ed7b211fbf453499b
6c45946bbd6cd4828450cdd488e6955e7a7a65b67176c03d9ffca975135e9fc2
Analyzer Verdict Alert fortinet Phishing
GET /mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ HTTP/1.1
Host: medi-buy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
location: https://www.medibuy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
cache-control: max-age=2592000
expires: Thu, 04 May 2023 14:15:37 GMT
content-length: 366
content-type: text/html; charset=iso-8859-1
date: Tue, 04 Apr 2023 14:15:37 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1c682b982d1ecaa1d27cb4da560edd95
fa046ceed7b97d3893993b65490b24f718bd1d7a
4faa28c9a8c88aa88a28e8065763938a3cf81e62a244482b280a58e825f5a904
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4FAA28C9A8C88AA88A28E8065763938A3CF81E62A244482B280A58E825F5A904"
Last-Modified: Mon, 03 Apr 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13578
Expires: Tue, 04 Apr 2023 18:01:55 GMT
Date: Tue, 04 Apr 2023 14:15:37 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Last-Modified, Expires, Retry-After, Cache-Control, Alert, Backoff, Pragma, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 04 Apr 2023 13:17:29 GMT
age: 3488
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: TUYmxtdRxd9cprwhVXVq9A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HZWu4ccMx+s6vKLNeefBgKfariM=
Date: Tue, 04 Apr 2023 14:15:37 GMT
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.medibuy.de/media/f9/fb/76/1660744973/logo-medi-buy.png?width=3000
200 OK 7.7 kB URL HTTP/2 www.medibuy.de/media/f9/fb/76/1660744973/logo-medi-buy.png?width=3000
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 145 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash 5b4f85e28897cbcab62d129e51104eab
28a7e923047697db3ae446ce5a51866c2355cf4e
8a382b94b3e401ae4dffb6e8d9e676d2efc3f5020bd1a09be086f3bd6cce75de
GET /media/f9/fb/76/1660744973/logo-medi-buy.png?width=3000 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
Cookie: session-=dc9e8e1d8898b8dbeb2dfa9f2359f804; csrf[frontend.store-api.proxy]=98cb.g5JXFoJxAdTDFpeAmhh1VfuvX_Fe81aCD5ZVlITDPgw.9dogXPBDR4CxQ93xrE0lAcvFDYI2mDrTTeIC8MyEYT-22md-ziIssaBT0g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 17 Aug 2022 14:02:53 GMT
accept-ranges: bytes
content-length: 7720
cache-control: max-age=2592000, public, s-maxage=10
expires: Thu, 04 May 2023 14:15:37 GMT
content-type: image/png
date: Tue, 04 Apr 2023 14:15:37 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
200 OK 59 kB URL HTTP/2 www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 35697429725d86a7d72aa46bbb2c53d1
0369103b9fec673e0161ccad3dd598251ade7da5
7d42be5c4f29593b4b627137efcbc76d04c04ccfa97fc213134ce0ab7c5b039e
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
Cookie: session-=dc9e8e1d8898b8dbeb2dfa9f2359f804; csrf[frontend.store-api.proxy]=98cb.g5JXFoJxAdTDFpeAmhh1VfuvX_Fe81aCD5ZVlITDPgw.9dogXPBDR4CxQ93xrE0lAcvFDYI2mDrTTeIC8MyEYT-22md-ziIssaBT0g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000, public, s-maxage=10
expires: Thu, 04 May 2023 14:15:37 GMT
vary: Accept-Encoding
content-encoding: br
content-length: 58936
content-type: text/css
date: Tue, 04 Apr 2023 14:15:37 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/bundles/storefront/assets/illustration/404_error.svg?166990692510264
200 OK 10 kB URL HTTP/2 www.medibuy.de/bundles/storefront/assets/illustration/404_error.svg?166990692510264
IP
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (10264), with no line terminators
Hash 09cc03d27a1bec1834fc2557c8756de6
b99d2c4e2e65fa4a6e67a2120cc003397641b6bb
0f7438ab906cd5e913d0672ede6a7e50a4b33052522152411a83db5fd75077e1
GET /bundles/storefront/assets/illustration/404_error.svg?166990692510264 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
Cookie: session-=dc9e8e1d8898b8dbeb2dfa9f2359f804; csrf[frontend.store-api.proxy]=98cb.g5JXFoJxAdTDFpeAmhh1VfuvX_Fe81aCD5ZVlITDPgw.9dogXPBDR4CxQ93xrE0lAcvFDYI2mDrTTeIC8MyEYT-22md-ziIssaBT0g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 10264
cache-control: max-age=2592000, public, s-maxage=10
expires: Thu, 04 May 2023 14:15:37 GMT
content-security-policy: script-src 'none'
content-type: image/svg+xml
date: Tue, 04 Apr 2023 14:15:37 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/thumbnail/a3/b9/7e/1647423562/vorkasse_400x400.png
200 OK 3.4 kB URL HTTP/2 www.medibuy.de/thumbnail/a3/b9/7e/1647423562/vorkasse_400x400.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 296 x 59, 8-bit/color RGBA, non-interlaced\012- data
Hash acfea59e8cd875cd024cfbf3d19dd41b
69598eac7549445f211e070d2345f0d9ba676390
e4aa7abfdf0141b057516bf9bddd14be8651a0ae9fe6fc05a723240fd5a8e19a
GET /thumbnail/a3/b9/7e/1647423562/vorkasse_400x400.png HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
Cookie: session-=dc9e8e1d8898b8dbeb2dfa9f2359f804; csrf[frontend.store-api.proxy]=98cb.g5JXFoJxAdTDFpeAmhh1VfuvX_Fe81aCD5ZVlITDPgw.9dogXPBDR4CxQ93xrE0lAcvFDYI2mDrTTeIC8MyEYT-22md-ziIssaBT0g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 09:39:22 GMT
accept-ranges: bytes
content-length: 3411
cache-control: max-age=2592000, public, s-maxage=10
expires: Thu, 04 May 2023 14:15:37 GMT
content-type: image/png
date: Tue, 04 Apr 2023 14:15:37 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/c7/93/b8/1647424094/rechnung.png
200 OK 3.8 kB URL HTTP/2 www.medibuy.de/media/c7/93/b8/1647424094/rechnung.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 296 x 59, 8-bit/color RGBA, non-interlaced\012- data
Hash 8db2ae36a06c30c951bc5b07d7bc9148
8a309d77ae76de9ada1ba397dddb42b19b10d365
066098bde82e26620fd48cae563e63c82300403f1471d3b1daa3423032874855
GET /media/c7/93/b8/1647424094/rechnung.png HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
Cookie: session-=dc9e8e1d8898b8dbeb2dfa9f2359f804; csrf[frontend.store-api.proxy]=98cb.g5JXFoJxAdTDFpeAmhh1VfuvX_Fe81aCD5ZVlITDPgw.9dogXPBDR4CxQ93xrE0lAcvFDYI2mDrTTeIC8MyEYT-22md-ziIssaBT0g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 09:48:14 GMT
accept-ranges: bytes
content-length: 3769
cache-control: max-age=2592000, public, s-maxage=10
expires: Thu, 04 May 2023 14:15:37 GMT
content-type: image/png
date: Tue, 04 Apr 2023 14:15:37 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/66/fd/63/1647424374/visa_mastercard.png
200 OK 5.0 kB URL HTTP/2 www.medibuy.de/media/66/fd/63/1647424374/visa_mastercard.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 380 x 180, 8-bit colormap, non-interlaced\012- data
Hash b436b228c185dd1694ee7dc90276a241
16f6d028dcb2ceed023e582620dc6b05792b9e53
00fe369484d1f2ffdcb4e94429c9f197b69ebd3baa6b1de2136b19ffc959f0b7
GET /media/66/fd/63/1647424374/visa_mastercard.png HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
Cookie: session-=dc9e8e1d8898b8dbeb2dfa9f2359f804; csrf[frontend.store-api.proxy]=98cb.g5JXFoJxAdTDFpeAmhh1VfuvX_Fe81aCD5ZVlITDPgw.9dogXPBDR4CxQ93xrE0lAcvFDYI2mDrTTeIC8MyEYT-22md-ziIssaBT0g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 09:52:54 GMT
accept-ranges: bytes
content-length: 4999
cache-control: max-age=2592000, public, s-maxage=10
expires: Thu, 04 May 2023 14:15:37 GMT
content-type: image/png
date: Tue, 04 Apr 2023 14:15:37 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/0b/db/27/1647424306/PayPal.png
200 OK 1.2 kB URL HTTP/2 www.medibuy.de/media/0b/db/27/1647424306/PayPal.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 52 x 13, 8-bit/color RGBA, non-interlaced\012- data
Hash 10e74d7f9c80fa575a82d281d59b07d7
ab28ead6cfd04169bcbb9abe0b72cc6114fdcd04
87c23da20335fef912b5f73054479da28932b7150964dd00f04621f7d66cb88b
GET /media/0b/db/27/1647424306/PayPal.png HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
Cookie: session-=dc9e8e1d8898b8dbeb2dfa9f2359f804; csrf[frontend.store-api.proxy]=98cb.g5JXFoJxAdTDFpeAmhh1VfuvX_Fe81aCD5ZVlITDPgw.9dogXPBDR4CxQ93xrE0lAcvFDYI2mDrTTeIC8MyEYT-22md-ziIssaBT0g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 09:51:46 GMT
accept-ranges: bytes
content-length: 1209
cache-control: max-age=2592000, public, s-maxage=10
expires: Thu, 04 May 2023 14:15:37 GMT
content-type: image/png
date: Tue, 04 Apr 2023 14:15:37 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/2d/d3/21/1647427612/UPS.svg
200 OK 9.8 kB URL HTTP/2 www.medibuy.de/media/2d/d3/21/1647427612/UPS.svg
IP
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (9839), with no line terminators
Hash 7d431787d0670bbfed25042f31765950
7806b1cbd22e59454e0db311a57a0dc6f4c95044
be5355d455d0f806217d793bf05c06583a7e8fae0868f5ce5234dfc9a742c7df
GET /media/2d/d3/21/1647427612/UPS.svg HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
Cookie: session-=dc9e8e1d8898b8dbeb2dfa9f2359f804; csrf[frontend.store-api.proxy]=98cb.g5JXFoJxAdTDFpeAmhh1VfuvX_Fe81aCD5ZVlITDPgw.9dogXPBDR4CxQ93xrE0lAcvFDYI2mDrTTeIC8MyEYT-22md-ziIssaBT0g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 10:46:52 GMT
accept-ranges: bytes
content-length: 9839
cache-control: max-age=2592000, public, s-maxage=10
expires: Thu, 04 May 2023 14:15:37 GMT
content-security-policy: script-src 'none'
content-type: image/svg+xml
date: Tue, 04 Apr 2023 14:15:37 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/de/61/51/1647427683/DPD.svg
200 OK 1.8 kB URL HTTP/2 www.medibuy.de/media/de/61/51/1647427683/DPD.svg
IP
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1784), with no line terminators
Hash dd28c0a5daef8ea0fa5b4fdfb922e642
6835ab6acdc420dd3cfcc5bc65db9c68e9a1e3c7
8234e24e56d28f50892e97f85b54c48ef8da0605a59dd5e82de53112ff4117ed
GET /media/de/61/51/1647427683/DPD.svg HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
Cookie: session-=dc9e8e1d8898b8dbeb2dfa9f2359f804; csrf[frontend.store-api.proxy]=98cb.g5JXFoJxAdTDFpeAmhh1VfuvX_Fe81aCD5ZVlITDPgw.9dogXPBDR4CxQ93xrE0lAcvFDYI2mDrTTeIC8MyEYT-22md-ziIssaBT0g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 10:48:03 GMT
accept-ranges: bytes
content-length: 1784
cache-control: max-age=2592000, public, s-maxage=10
expires: Thu, 04 May 2023 14:15:37 GMT
content-security-policy: script-src 'none'
content-type: image/svg+xml
date: Tue, 04 Apr 2023 14:15:37 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/82/e2/a0/1647426572/Hermes.svg
200 OK 9.4 kB URL HTTP/2 www.medibuy.de/media/82/e2/a0/1647426572/Hermes.svg
IP
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (9350), with no line terminators
Hash 5f5624b00ef137c75797afa4cca2ad88
55e72269cfd7e4690830fe00fdffdcae157d5894
166ab49b3471568a0e08af48c9f41a260397eec8032a2b1774d22f2edb830d3c
GET /media/82/e2/a0/1647426572/Hermes.svg HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
Cookie: session-=dc9e8e1d8898b8dbeb2dfa9f2359f804; csrf[frontend.store-api.proxy]=98cb.g5JXFoJxAdTDFpeAmhh1VfuvX_Fe81aCD5ZVlITDPgw.9dogXPBDR4CxQ93xrE0lAcvFDYI2mDrTTeIC8MyEYT-22md-ziIssaBT0g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 10:29:32 GMT
accept-ranges: bytes
content-length: 9350
cache-control: max-age=2592000, public, s-maxage=10
expires: Thu, 04 May 2023 14:15:37 GMT
content-security-policy: script-src 'none'
content-type: image/svg+xml
date: Tue, 04 Apr 2023 14:15:37 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/js/all.js?1669906925946899
200 OK 231 kB URL HTTP/2 www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/js/all.js?1669906925946899
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (59042)
Size 231 kB (231005 bytes)
Hash ee2d56d611bc6ee2e4de06764076c649
ddeff7ec512764dcd4315bb5ac7400552926be55
fa449a3b958ebd156bc4962929db24e30b0ebc5ff19331e4fa71dfe97db8d498
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/js/all.js?1669906925946899 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
Cookie: session-=dc9e8e1d8898b8dbeb2dfa9f2359f804; csrf[frontend.store-api.proxy]=98cb.g5JXFoJxAdTDFpeAmhh1VfuvX_Fe81aCD5ZVlITDPgw.9dogXPBDR4CxQ93xrE0lAcvFDYI2mDrTTeIC8MyEYT-22md-ziIssaBT0g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 231005
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
expires: Thu, 04 May 2023 14:01:47 GMT
vary: Accept-Encoding
etag: W/"PSA-RM_47jDH5u"
x-original-content-length: 946899
content-encoding: gzip
cache-control: max-age=2592000, public, s-maxage=10
date: Tue, 04 Apr 2023 14:15:37 GMT
x-content-type-options: nosniff
content-type: application/javascript
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/0f/55/eb/1647434309/gls.jpg
200 OK 21 kB URL HTTP/2 www.medibuy.de/media/0f/55/eb/1647434309/gls.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1168x657, components 3\012- data
Hash ea8c3240f3a929801f0525d005eddc25
ef6b0286016c58e8722cbf64b1e185b61e80486a
bdcbf3e1707aba9169bff1919ff05fe7f06f76ef3b9046f081534b947a041bf9
GET /media/0f/55/eb/1647434309/gls.jpg HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
Cookie: session-=dc9e8e1d8898b8dbeb2dfa9f2359f804; csrf[frontend.store-api.proxy]=98cb.g5JXFoJxAdTDFpeAmhh1VfuvX_Fe81aCD5ZVlITDPgw.9dogXPBDR4CxQ93xrE0lAcvFDYI2mDrTTeIC8MyEYT-22md-ziIssaBT0g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 12:38:29 GMT
accept-ranges: bytes
content-length: 20730
cache-control: max-age=2592000, public, s-maxage=10
expires: Thu, 04 May 2023 14:15:37 GMT
content-type: image/jpeg
date: Tue, 04 Apr 2023 14:15:37 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/90/e1/80/1647434313/dhl.png
200 OK 23 kB URL HTTP/2 www.medibuy.de/media/90/e1/80/1647434313/dhl.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 892 x 660, 8-bit/color RGBA, non-interlaced\012- data
Hash f701ba545c40d9022dc97668c7400a43
91c4cad7ae63f5f751dff1bc0a2ebede2e64d908
f97e17aa330ea80f47c7f90e46af5cbea114e31d835d4bb39956a8ff2379e9f6
GET /media/90/e1/80/1647434313/dhl.png HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
Cookie: session-=dc9e8e1d8898b8dbeb2dfa9f2359f804; csrf[frontend.store-api.proxy]=98cb.g5JXFoJxAdTDFpeAmhh1VfuvX_Fe81aCD5ZVlITDPgw.9dogXPBDR4CxQ93xrE0lAcvFDYI2mDrTTeIC8MyEYT-22md-ziIssaBT0g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 12:38:33 GMT
accept-ranges: bytes
content-length: 23109
cache-control: max-age=2592000, public, s-maxage=10
expires: Thu, 04 May 2023 14:15:37 GMT
content-type: image/png
date: Tue, 04 Apr 2023 14:15:37 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Regular.woff2
200 OK 100 kB URL HTTP/2 www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Regular.woff2
IP
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format (Version 2), TrueType, length 100088, version 1.0\012- data
Size 100 kB (100088 bytes)
Hash 77812e2fead777db0dc806b1eaabc7fd
512526689a4fd677ffca333a9dc1d412ad44caaf
77677cd3d62f53fce403b743c6ab0dfacf6109cfa5f2c511a57b0779222c76de
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Regular.woff2 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
Cookie: session-=dc9e8e1d8898b8dbeb2dfa9f2359f804; csrf[frontend.store-api.proxy]=98cb.g5JXFoJxAdTDFpeAmhh1VfuvX_Fe81aCD5ZVlITDPgw.9dogXPBDR4CxQ93xrE0lAcvFDYI2mDrTTeIC8MyEYT-22md-ziIssaBT0g
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 100088
cache-control: max-age=2592000, public, s-maxage=10
expires: Thu, 04 May 2023 14:15:37 GMT
content-type: font/woff2
date: Tue, 04 Apr 2023 14:15:37 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-SemiBold.woff2
200 OK 107 kB URL HTTP/2 www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-SemiBold.woff2
IP
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format (Version 2), TrueType, length 107184, version 1.0\012- data
Size 107 kB (107184 bytes)
Hash 3d011804596fb2ccde4af51830a9a7d5
999e92214edfb5b102919586df4cfe16f7ddaccb
e9bb1331830a18e2504d966f1fa931e711cad726e454722f324d63534cec97d9
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-SemiBold.woff2 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
Cookie: session-=dc9e8e1d8898b8dbeb2dfa9f2359f804; csrf[frontend.store-api.proxy]=98cb.g5JXFoJxAdTDFpeAmhh1VfuvX_Fe81aCD5ZVlITDPgw.9dogXPBDR4CxQ93xrE0lAcvFDYI2mDrTTeIC8MyEYT-22md-ziIssaBT0g
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 107184
cache-control: max-age=2592000, public, s-maxage=10
expires: Thu, 04 May 2023 14:15:37 GMT
content-type: font/woff2
date: Tue, 04 Apr 2023 14:15:37 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Bold.woff2
200 OK 107 kB URL HTTP/2 www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Bold.woff2
IP
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format (Version 2), TrueType, length 107300, version 1.0\012- data
Size 107 kB (107300 bytes)
Hash 741dc4163a97ffa354979f18802f6ca8
0e4b89a4a2801dd5e25364f439d7bfee47594762
20fd98b18d523471ae687971086817766649ce25f32e438d14711561a95bc9e9
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Bold.woff2 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
Cookie: session-=dc9e8e1d8898b8dbeb2dfa9f2359f804; csrf[frontend.store-api.proxy]=98cb.g5JXFoJxAdTDFpeAmhh1VfuvX_Fe81aCD5ZVlITDPgw.9dogXPBDR4CxQ93xrE0lAcvFDYI2mDrTTeIC8MyEYT-22md-ziIssaBT0g
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 107300
cache-control: max-age=2592000, public, s-maxage=10
expires: Thu, 04 May 2023 14:15:37 GMT
content-type: font/woff2
date: Tue, 04 Apr 2023 14:15:37 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da501e2a330785bb2a626a8b64beda12
a98f4428f627249686e244657af1dd3fccbeeb96
55689103661d491905bab1470071b28adc1037fdbaf7291a2cf9d5d5e24e69e5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Apr 2023 14:15:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-5ZRS4MZ
200 OK 60 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-5ZRS4MZ
IP
File type ASCII text, with very long lines (2655)
Hash 6e55c44e5443a5760b50e6d705d17583
3f52dbaee9fc2eeb606e691e879456d457ba61ab
d7d539d0b522f4134400c13fc15108ba0f701b96540c215039307bc149729fb1
GET /gtm.js?id=GTM-5ZRS4MZ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 04 Apr 2023 14:15:38 GMT
expires: Tue, 04 Apr 2023 14:15:38 GMT
cache-control: private, max-age=900
last-modified: Tue, 04 Apr 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 60144
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.medibuy.de/widgets/checkout/info
200 OK 511 B URL HTTP/2 www.medibuy.de/widgets/checkout/info
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (893)
Hash 493a5de4e5ee35b780abd036727f3864
99ab201cb7443a982c8b70945c6e0e64529e69cc
6570e674f01a7fd1efc6e7545379a0a48362799a0e32f9759fa2286786d0ad4a
GET /widgets/checkout/info HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Content-type: application/json
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
Cookie: session-=dc9e8e1d8898b8dbeb2dfa9f2359f804; csrf[frontend.store-api.proxy]=98cb.g5JXFoJxAdTDFpeAmhh1VfuvX_Fe81aCD5ZVlITDPgw.9dogXPBDR4CxQ93xrE0lAcvFDYI2mDrTTeIC8MyEYT-22md-ziIssaBT0g; timezone=UTC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Apr 2023 14:15:38 GMT
x-robots-tag: noindex
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: deny
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-mod-pagespeed: 1.13.35.2-0
cache-control: no-cache, private, max-age=0, no-cache, s-maxage=10
vary: Accept-Encoding
content-encoding: br
content-length: 511
content-type: text/html; charset=UTF-8
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da501e2a330785bb2a626a8b64beda12
a98f4428f627249686e244657af1dd3fccbeeb96
55689103661d491905bab1470071b28adc1037fdbaf7291a2cf9d5d5e24e69e5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Apr 2023 14:15:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Tue, 04 Apr 2023 14:05:12 GMT
expires: Tue, 04 Apr 2023 16:05:12 GMT
cache-control: public, max-age=7200
age: 626
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.medibuy.de/media/17/a7/ac/1646226955/medi-buy-favicon.png?width=3000
200 OK 4.6 kB URL HTTP/2 www.medibuy.de/media/17/a7/ac/1646226955/medi-buy-favicon.png?width=3000
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 512 x 512, 4-bit colormap, non-interlaced\012- data
Hash 88c734babd964cc8ae1839e9be164ca9
78fc99bde11eb697353244aa8f7ff3297d9bd9cd
63e35c5c2d81ece3ac43436b7ba8642767a01d88064a04c13ac488157532e342
GET /media/17/a7/ac/1646226955/medi-buy-favicon.png?width=3000 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
Cookie: session-=dc9e8e1d8898b8dbeb2dfa9f2359f804; csrf[frontend.store-api.proxy]=98cb.g5JXFoJxAdTDFpeAmhh1VfuvX_Fe81aCD5ZVlITDPgw.9dogXPBDR4CxQ93xrE0lAcvFDYI2mDrTTeIC8MyEYT-22md-ziIssaBT0g; timezone=UTC; _gcl_au=1.1.875332519.1680617738
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Mar 2022 13:15:55 GMT
accept-ranges: bytes
content-length: 4599
cache-control: max-age=2592000, public, s-maxage=10
expires: Thu, 04 May 2023 14:15:38 GMT
content-type: image/png
date: Tue, 04 Apr 2023 14:15:38 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8a07d5641831d569df8afc101ade4999
762e0ba34872c6244ee7aed321a85ef2773bb1d2
4cb46e0db39844d918179e7f1b42a16dbac407742b15ed63919b052b23029469
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Apr 2023 14:15:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-224940953-1&cid=985310827.1680617738&jid=849502101&gjid=1708430593&_gid=415325804.1680617738&_u=YEBAAAAAAAAAAC~&z=1602664613
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-224940953-1&cid=985310827.1680617738&jid=849502101&gjid=1708430593&_gid=415325804.1680617738&_u=YEBAAAAAAAAAAC~&z=1602664613
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-224940953-1&cid=985310827.1680617738&jid=849502101&gjid=1708430593&_gid=415325804.1680617738&_u=YEBAAAAAAAAAAC~&z=1602664613 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.medibuy.de
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.medibuy.de
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 04 Apr 2023 14:15:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8a07d5641831d569df8afc101ade4999
762e0ba34872c6244ee7aed321a85ef2773bb1d2
4cb46e0db39844d918179e7f1b42a16dbac407742b15ed63919b052b23029469
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Apr 2023 14:15:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f06399875b2b1c6a0afe8a1d791f5a4a
f2ce36c5d6599e57e4df8f08a030e8cb00ebe830
2eef24cc1ae135e7e1687c3e56cd7be21530e2aa7612e686a829d2c204ab532e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2EEF24CC1AE135E7E1687C3E56CD7BE21530E2AA7612E686A829D2C204AB532E"
Last-Modified: Mon, 03 Apr 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10857
Expires: Tue, 04 Apr 2023 17:16:35 GMT
Date: Tue, 04 Apr 2023 14:15:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f06399875b2b1c6a0afe8a1d791f5a4a
f2ce36c5d6599e57e4df8f08a030e8cb00ebe830
2eef24cc1ae135e7e1687c3e56cd7be21530e2aa7612e686a829d2c204ab532e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2EEF24CC1AE135E7E1687C3E56CD7BE21530E2AA7612E686A829D2C204AB532E"
Last-Modified: Mon, 03 Apr 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10857
Expires: Tue, 04 Apr 2023 17:16:35 GMT
Date: Tue, 04 Apr 2023 14:15:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f06399875b2b1c6a0afe8a1d791f5a4a
f2ce36c5d6599e57e4df8f08a030e8cb00ebe830
2eef24cc1ae135e7e1687c3e56cd7be21530e2aa7612e686a829d2c204ab532e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2EEF24CC1AE135E7E1687C3E56CD7BE21530E2AA7612E686A829D2C204AB532E"
Last-Modified: Mon, 03 Apr 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10857
Expires: Tue, 04 Apr 2023 17:16:35 GMT
Date: Tue, 04 Apr 2023 14:15:38 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09d7bfe8-bfa6-4d25-aa3f-159254f09bfa.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09d7bfe8-bfa6-4d25-aa3f-159254f09bfa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ad137bebd56918d96431d867ae123332
8572417b762ea2b1dccc3d4236336456be6be1cf
92a575b8055174a83ac1066e2ff931525760c9b96f3e588077ce0ce24a0a7b46
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09d7bfe8-bfa6-4d25-aa3f-159254f09bfa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8658
x-amzn-requestid: 36fb7671-bd9a-43fc-8920-c5948711d560
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CvNkNGjHIAMFsBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6429294d-5e753ae346a583ac5cbb42f4;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Sun, 02 Apr 2023 07:05:49 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: UPNt2yE-_295UTjOFpgSxhrl1XjSOSgQVJoEf__wc0y5btcJ9dIT1w==
via: 1.1 773bf3616e85ce2b187fa78710a6beb2.cloudfront.net (CloudFront), 1.1 60b744e5b364d04abea9fa6686121242.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Apr 2023 07:23:35 GMT
age: 24724
etag: "8572417b762ea2b1dccc3d4236336456be6be1cf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5a64c6f-4f76-4a92-92c4-1fa8cb48142e.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5a64c6f-4f76-4a92-92c4-1fa8cb48142e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fde7605b95c3ac6b8de339dbd12e17b1
b44d521b31be7b3fe378a0e070c49379a6eab26e
5496cf7c705ccc67dd13f86a07d9a352424d58591aa67afe1e1361c640f8d510
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5a64c6f-4f76-4a92-92c4-1fa8cb48142e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6803
x-amzn-requestid: 6c78179f-0d11-4a23-8e86-e4f05d7c7f90
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: C0fq3HrioAMF7ww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642b4645-758850e07ef9b1512b684c35;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Mon, 03 Apr 2023 21:33:57 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: fYzW2B9Nf5JLhQdDSzDsT7h-auY41wg3PSAaSI6U68BNGvtHI99W7A==
via: 1.1 ee32c7a76e2727d565413cc6c352ef48.cloudfront.net (CloudFront), 1.1 7545e37b10b5fcf5e3df98185c85194a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Apr 2023 21:51:49 GMT
age: 59030
etag: "b44d521b31be7b3fe378a0e070c49379a6eab26e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeae50b2-4a88-4f71-ae4f-7fd74b695fe8.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeae50b2-4a88-4f71-ae4f-7fd74b695fe8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 80fcfbf9081b3ede0bbbb18635a9cbf4
037891066a15726bb272a8d74f96abb1520b4fe3
5cf70d8254f20aea5ca12439a4558f459d6bbf162f5e1a0f9b62e79de29d4b29
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeae50b2-4a88-4f71-ae4f-7fd74b695fe8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6898
x-amzn-requestid: a56b192d-c797-4521-9af4-e3baaa8e6205
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: C0frbGsRoAMFjiA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642b4648-5aeb60706595f7762c545067;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Mon, 03 Apr 2023 21:34:00 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: FntrW1uzEjetZkzVLvN-VUeVu4uWI0ceRV5-OY12YFGq5LQKFfS2mg==
via: 1.1 8ead054384c1626556ee4410cad35692.cloudfront.net (CloudFront), 1.1 f268a165a18929fd0a24a3189fbd16b2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Apr 2023 21:52:14 GMT
age: 59005
etag: "037891066a15726bb272a8d74f96abb1520b4fe3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2b3221e-f465-4b09-8edb-d71d2b28f571.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2b3221e-f465-4b09-8edb-d71d2b28f571.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 904fe1f41565ef3b94317ec52a7203e1
b7911bd82a447c46eb419919a52ea46fa243ee0f
19e32a25d63d4696b05d167d44b640582352985928518bc2ce11973a20e9b2da
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2b3221e-f465-4b09-8edb-d71d2b28f571.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11387
x-amzn-requestid: 3e5b802d-c2f3-4b72-8dea-5f6452cd57d6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: C0frcED1oAMFZiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642b4648-2429f95743f7924f14ec8565;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Mon, 03 Apr 2023 21:34:00 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: AwwZW1aflV_FqbJ56tFlLGrrFH6fQDhFm6aHEcVCMUcvBAZuV9w8bg==
via: 1.1 ffc1e24c06bfbb135c0a4d240b382048.cloudfront.net (CloudFront), 1.1 3bb2b699cd244bf37141ea08a6a61732.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Apr 2023 09:29:26 GMT
age: 17173
etag: "b7911bd82a447c46eb419919a52ea46fa243ee0f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106409ef-b973-4018-aee9-294835a882a8.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106409ef-b973-4018-aee9-294835a882a8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 790b71fc2b1faa08db8b4334c9c3f9e3
e1defe547d4ffca2560cd8f25c4f7a92a9ae87b4
eed429169c9d3feb115463d8ead934fa348cdca60aabf0c88d4553ed23575c9c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106409ef-b973-4018-aee9-294835a882a8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10535
x-amzn-requestid: 8efe600f-9818-4c23-afd3-41c5a4dece2f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: C0frbFHSoAMF8HQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642b4648-65e8e6fd575fdc91668d6676;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Mon, 03 Apr 2023 21:34:00 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: NhzzKWFDbSlLrixhTlz5sZSW4x_TPkwj7Kzt6M2m1FmXR7ZdBCCq0w==
via: 1.1 8591441a35c0af61913aec9af012bc38.cloudfront.net (CloudFront), 1.1 a9e73292d0b92053c3e38dcec15fd0e2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Apr 2023 22:01:36 GMT
age: 58443
etag: "e1defe547d4ffca2560cd8f25c4f7a92a9ae87b4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa5f70c40-8b38-48db-b482-a5cc8f1580ef.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa5f70c40-8b38-48db-b482-a5cc8f1580ef.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9d1360ec3cb182322e0a0c445f57e5b7
9f71e3cd002ca8116d917c3b7fb57291099269d1
e3d216e879d771bf2507928ba1b26465c87a4202a4cdc03483f002c2826a81b2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa5f70c40-8b38-48db-b482-a5cc8f1580ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6912
x-amzn-requestid: 53fcdc8a-e064-4e81-b5ac-5d0ae4bcfdb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: C0fpuEZ-IAMFxaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642b463d-3b7b43f30dd66fae5dc9ea6a;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Mon, 03 Apr 2023 21:33:49 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: I29hcOKFN0L3ivDpD5pWg-Kg22Z10td_Vll6SRScTslvd__JZnJyTg==
via: 1.1 59456abf79b201034ab5c9cfef7355e2.cloudfront.net (CloudFront), 1.1 ae06b19943a6bad1c1b12b79f7339498.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Apr 2023 21:52:12 GMT
age: 59007
etag: "9f71e3cd002ca8116d917c3b7fb57291099269d1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.paypal.com/sdk/js?components=buttons,messages,hosted-fields,funding-eligibility&client-id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&commit=true&locale=de_DE¤cy=EUR&intent=capture&merchant-id=GNSPGCCJR6URW
200 OK 139 kB URL HTTP/2 www.paypal.com/sdk/js?components=buttons,messages,hosted-fields,funding-eligibility&client-id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&commit=true&locale=de_DE¤cy=EUR&intent=capture&merchant-id=GNSPGCCJR6URW
IP
File type ASCII text, with very long lines (65472)
Size 139 kB (138729 bytes)
Hash 7f1695e74b8545615ea026dd8a8edc77
582013622be6ef4180013c3c93552f857eb567d0
8012ff9f538f93ab5d2f5d7aeb9401c8979a6816586bf0fe473133570ceb29cb
GET /sdk/js?components=buttons,messages,hosted-fields,funding-eligibility&client-id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&commit=true&locale=de_DE¤cy=EUR&intent=capture&merchant-id=GNSPGCCJR6URW HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600, s-maxage=10800
content-encoding: gzip
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; script-src 'nonce-7fN80x2rrnqNjFSvMuoVl1E5B9tSvOgD7QrtSI6LaPxe2dMI' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'nonce-7fN80x2rrnqNjFSvMuoVl1E5B9tSvOgD7QrtSI6LaPxe2dMI' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; object-src 'none'; img-src https: data:; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: application/javascript; charset=utf-8
etag: W/"21de9-WCATYivm70GAATw8k1UvhX61Z9A"
p3p: true
paypal-debug-id: f574042b5a54b
traceparent: 00-0000000000000000000f574042b5a54b-f9b5f857df8bd30d-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 04 Apr 2023 14:15:39 GMT
age: 0
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220032-HHN, cache-bma1654-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1680617738.103315,VS0,VE1104
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f574042b5a54b-c64edb11e78f4170-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
content-length: 138729
X-Firefox-Spdy: h2
www.paypal.com/credit-presentment/experiments/local?uid=uid_nxcgkmlpawwmkeyiswfbzxbloanntp&sdkMeta=eyJ1cmwiOiJodHRwczovL3d3dy5wYXlwYWwuY29tL3Nkay9qcz9jb21wb25lbnRzPWJ1dHRvbnMsbWVzc2FnZXMsaG9zdGVkLWZpZWxkcyxmdW5kaW5nLWVsaWdpYmlsaXR5JmNsaWVudC1pZD1BVVBkLW5ESmU4TVJRYkR3RzFiSXJJcUxyREYzRnA1NkJyaWdQUXctdGdubllaTVptWmlmQmt2YWFYM3lNVElOSVZ1ZG4wTTU0aUpkQ3JIQyZjb21taXQ9dHJ1ZSZsb2NhbGU9ZGVfREUmY3VycmVuY3k9RVVSJmludGVudD1jYXB0dXJlJm1lcmNoYW50LWlkPUdOU1BHQ0NKUjZVUlciLCJhdHRycyI6eyJkYXRhLXVpZCI6InVpZF9ueGNna21scGF3d21rZXlpc3dmYnp4YmxvYW5udHAifX0&env=production&scriptUID=uid_nxcgkmlpawwmkeyiswfbzxbloanntp&version=1.40.3&integrationType=SDK
200 OK 1.4 kB URL HTTP/2 www.paypal.com/credit-presentment/experiments/local?uid=uid_nxcgkmlpawwmkeyiswfbzxbloanntp&sdkMeta=eyJ1cmwiOiJodHRwczovL3d3dy5wYXlwYWwuY29tL3Nkay9qcz9jb21wb25lbnRzPWJ1dHRvbnMsbWVzc2FnZXMsaG9zdGVkLWZpZWxkcyxmdW5kaW5nLWVsaWdpYmlsaXR5JmNsaWVudC1pZD1BVVBkLW5ESmU4TVJRYkR3RzFiSXJJcUxyREYzRnA1NkJyaWdQUXctdGdubllaTVptWmlmQmt2YWFYM3lNVElOSVZ1ZG4wTTU0aUpkQ3JIQyZjb21taXQ9dHJ1ZSZsb2NhbGU9ZGVfREUmY3VycmVuY3k9RVVSJmludGVudD1jYXB0dXJlJm1lcmNoYW50LWlkPUdOU1BHQ0NKUjZVUlciLCJhdHRycyI6eyJkYXRhLXVpZCI6InVpZF9ueGNna21scGF3d21rZXlpc3dmYnp4YmxvYW5udHAifX0&env=production&scriptUID=uid_nxcgkmlpawwmkeyiswfbzxbloanntp&version=1.40.3&integrationType=SDK
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash aed46d08a0030e61305b1e999510426a
0cf95dfc6848a507ccb5cabe67dfabcd93c0a27c
b9d097a5d3c82d9bb283ca20b2215cc4acca6d887032ddeaff7b13dc96713f22
GET /credit-presentment/experiments/local?uid=uid_nxcgkmlpawwmkeyiswfbzxbloanntp&sdkMeta=eyJ1cmwiOiJodHRwczovL3d3dy5wYXlwYWwuY29tL3Nkay9qcz9jb21wb25lbnRzPWJ1dHRvbnMsbWVzc2FnZXMsaG9zdGVkLWZpZWxkcyxmdW5kaW5nLWVsaWdpYmlsaXR5JmNsaWVudC1pZD1BVVBkLW5ESmU4TVJRYkR3RzFiSXJJcUxyREYzRnA1NkJyaWdQUXctdGdubllaTVptWmlmQmt2YWFYM3lNVElOSVZ1ZG4wTTU0aUpkQ3JIQyZjb21taXQ9dHJ1ZSZsb2NhbGU9ZGVfREUmY3VycmVuY3k9RVVSJmludGVudD1jYXB0dXJlJm1lcmNoYW50LWlkPUdOU1BHQ0NKUjZVUlciLCJhdHRycyI6eyJkYXRhLXVpZCI6InVpZF9ueGNna21scGF3d21rZXlpc3dmYnp4YmxvYW5udHAifX0&env=production&scriptUID=uid_nxcgkmlpawwmkeyiswfbzxbloanntp&version=1.40.3&integrationType=SDK HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Server-Timing
cache-control: s-maxage=86400, max-age=0
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'sha256-sGD8lvmhqrWwzXWxhS84kJKBE5np85jyWGNliwp1kZE=' 'sha256-rv/dzGq+AtXohIRdYGvIMVViq5Tmm5n1EpTlPiFO05w=' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' * data:; object-src 'none'; font-src 'self' https://*.paypalobjects.com https://*.paypal.com https:; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com
content-type: text/html; charset=utf-8
edge-cache-tag: up-treatments-zoid
etag: W/"12ba-f4PcKMB90/5sP6surSPQPP12K+8"
paypal-debug-id: f3985456b7d1d
traceparent: 00-0000000000000000000f3985456b7d1d-db830ac278ddfc88-01
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 04 Apr 2023 14:15:39 GMT
age: 52524
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220056-HHN, cache-bma1654-BMA
x-cache: HIT, HIT
x-cache-hits: 70, 1790
x-timer: S1680617739.396722,VS0,VE1
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f3985456b7d1d-4f102d21e88fd4ea-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
content-length: 1443
X-Firefox-Spdy: h2
www.medibuy.de/_proxy/store-api?path=%2Fstore-api%2Fpaypal%2Fpayment-method-eligibility
204 No Content 0 B URL HTTP/2 www.medibuy.de/_proxy/store-api?path=%2Fstore-api%2Fpaypal%2Fpayment-method-eligibility
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /_proxy/store-api?path=%2Fstore-api%2Fpaypal%2Fpayment-method-eligibility HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Content-type: application/json
Content-Length: 151
Origin: https://www.medibuy.de
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
Cookie: session-=dc9e8e1d8898b8dbeb2dfa9f2359f804; csrf[frontend.store-api.proxy]=98cb.g5JXFoJxAdTDFpeAmhh1VfuvX_Fe81aCD5ZVlITDPgw.9dogXPBDR4CxQ93xrE0lAcvFDYI2mDrTTeIC8MyEYT-22md-ziIssaBT0g; timezone=UTC; _gcl_au=1.1.875332519.1680617738; _ga=GA1.2.985310827.1680617738; _gid=GA1.2.415325804.1680617738; _gat_UA-224940953-1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Tue, 04 Apr 2023 14:15:39 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: deny
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: object-src 'none'; script-src 'none'; base-uri 'self';
expires: Tue, 04 Apr 2023 14:15:39 GMT
cache-control: no-cache, private, public
server: Apache
X-Firefox-Spdy: h2
www.paypal.com/tagmanager/pptm.js?id=www.medibuy.de&t=xo&v=5.0.361&source=payments_sdk&mrid=GNSPGCCJR6URW&client_id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&comp=buttons,messages,hosted-fields,funding-eligibility&vault=false
200 OK 4.3 kB URL HTTP/2 www.paypal.com/tagmanager/pptm.js?id=www.medibuy.de&t=xo&v=5.0.361&source=payments_sdk&mrid=GNSPGCCJR6URW&client_id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&comp=buttons,messages,hosted-fields,funding-eligibility&vault=false
IP
File type ASCII text, with very long lines (12084), with no line terminators
Hash da1b94bdea2eb1769e74df6fbd2c1a2e
4c7f6b5318ffd3d36b6b431f4bd113b55d8f14a7
45cc4e008a654e4ef3f3b3eb0ca92f52ade64445039059b5395b11734b033be4
GET /tagmanager/pptm.js?id=www.medibuy.de&t=xo&v=5.0.361&source=payments_sdk&mrid=GNSPGCCJR6URW&client_id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&comp=buttons,messages,hosted-fields,funding-eligibility&vault=false HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-U1daDFXv81cw2lUK2wjN8H8fXv3iUD0Rcm64nQgRZ2fjtd59' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' 'unsafe-eval'; img-src * data:; object-src 'none'; font-src 'self' https://*.paypalobjects.com https://*.paypal.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://nexus.ensighten.com https://*.google-analytics.com 'unsafe-inline' https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' https://*.qualtrics.com;
content-type: application/x-javascript; charset=utf-8
etag: W/"2f34-zQQ0FVqIlbkbuS4WgpPW/nUPXC4"
paypal-debug-id: f9932192a6836
traceparent: 00-0000000000000000000f9932192a6836-582a972a1f5a91e4-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 04 Apr 2023 14:15:39 GMT
age: 0
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220053-HHN, cache-bma1654-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1680617739.377700,VS0,VE298
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f9932192a6836-93aed9b88f0fc294-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
content-length: 4299
X-Firefox-Spdy: h2
www.paypal.com/credit-presentment/experiments/hash?device_id=uid_88435465ea_mtq6mtu6mzk
200 OK 57 B URL HTTP/2 www.paypal.com/credit-presentment/experiments/hash?device_id=uid_88435465ea_mtq6mtu6mzk
IP
File type ASCII text, with no line terminators
Hash df7e075cfa26fe8f65be996133193936
603025324b3a9b9bfc7ac5fc56eabe9196fe48e7
38ec6274e674d4e4710c9f7618e84fc18bc22b7d425537e7f063eb79c262723d
GET /credit-presentment/experiments/hash?device_id=uid_88435465ea_mtq6mtu6mzk HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.paypal.com/credit-presentment/experiments/local?uid=uid_nxcgkmlpawwmkeyiswfbzxbloanntp&sdkMeta=eyJ1cmwiOiJodHRwczovL3d3dy5wYXlwYWwuY29tL3Nkay9qcz9jb21wb25lbnRzPWJ1dHRvbnMsbWVzc2FnZXMsaG9zdGVkLWZpZWxkcyxmdW5kaW5nLWVsaWdpYmlsaXR5JmNsaWVudC1pZD1BVVBkLW5ESmU4TVJRYkR3RzFiSXJJcUxyREYzRnA1NkJyaWdQUXctdGdubllaTVptWmlmQmt2YWFYM3lNVElOSVZ1ZG4wTTU0aUpkQ3JIQyZjb21taXQ9dHJ1ZSZsb2NhbGU9ZGVfREUmY3VycmVuY3k9RVVSJmludGVudD1jYXB0dXJlJm1lcmNoYW50LWlkPUdOU1BHQ0NKUjZVUlciLCJhdHRycyI6eyJkYXRhLXVpZCI6InVpZF9ueGNna21scGF3d21rZXlpc3dmYnp4YmxvYW5udHAifX0&env=production&scriptUID=uid_nxcgkmlpawwmkeyiswfbzxbloanntp&version=1.40.3&integrationType=SDK
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Server-Timing
cache-control: s-maxage=86400, max-age=0
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' * data:; object-src 'none'; font-src 'self' https://*.paypalobjects.com https://*.paypal.com https:; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com
content-type: text/html; charset=utf-8
edge-cache-tag: up-treatments-hash
etag: W/"28-EKNGN61mHZi6M0Rxdlb8x2IJwvg"
paypal-debug-id: f484810c2a851
traceparent: 00-0000000000000000000f484810c2a851-ed6af4512fc467bd-01
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 04 Apr 2023 14:15:39 GMT
age: 0
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220063-HHN, cache-bma1654-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1680617740.581089,VS0,VE190
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f484810c2a851-b3fabbeb8782b3f7-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
content-length: 57
X-Firefox-Spdy: h2
t.paypal.com/ts?pgrp=muse%3Ageneric%3Aanalytics%3A%3Amerchant&page=muse%3Ageneric%3Aanalytics%3A%3Amerchant%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&fltp=analytics-generic&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1680617739510&g=0&completeurl=https%3A%2F%2Fwww.medibuy.de%2Fmailster%2F1382%2F0529a4a3ac022c4af80ba896df840055%2FaHR0cHM6Ly9tZWRpLWJ1eS5kZQ&sinfo=%7B%22partners%22%3A%7B%22ecwid%22%3A%7B%7D%2C%22bigCommerce%22%3A%7B%7D%2C%22shopify%22%3A%7B%7D%2C%22wix%22%3A%7B%7D%2C%22bigCartel%22%3A%7B%7D%7D%7D
200 OK 42 B URL HTTP/2 t.paypal.com/ts?pgrp=muse%3Ageneric%3Aanalytics%3A%3Amerchant&page=muse%3Ageneric%3Aanalytics%3A%3Amerchant%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&fltp=analytics-generic&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1680617739510&g=0&completeurl=https%3A%2F%2Fwww.medibuy.de%2Fmailster%2F1382%2F0529a4a3ac022c4af80ba896df840055%2FaHR0cHM6Ly9tZWRpLWJ1eS5kZQ&sinfo=%7B%22partners%22%3A%7B%22ecwid%22%3A%7B%7D%2C%22bigCommerce%22%3A%7B%7D%2C%22shopify%22%3A%7B%7D%2C%22wix%22%3A%7B%7D%2C%22bigCartel%22%3A%7B%7D%7D%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4682377ddfbe4e7dabfddb2e543e842
328e472721a93345801ed5533240eac2d1f8498c
6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93
GET /ts?pgrp=muse%3Ageneric%3Aanalytics%3A%3Amerchant&page=muse%3Ageneric%3Aanalytics%3A%3Amerchant%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&fltp=analytics-generic&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1680617739510&g=0&completeurl=https%3A%2F%2Fwww.medibuy.de%2Fmailster%2F1382%2F0529a4a3ac022c4af80ba896df840055%2FaHR0cHM6Ly9tZWRpLWJ1eS5kZQ&sinfo=%7B%22partners%22%3A%7B%22ecwid%22%3A%7B%7D%2C%22bigCommerce%22%3A%7B%7D%2C%22shopify%22%3A%7B%7D%2C%22wix%22%3A%7B%7D%2C%22bigCartel%22%3A%7B%7D%7D%7D HTTP/1.1
Host: t.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: image/gif
expires: Tue, 04 Apr 2023 14:15:39 GMT
p3p: policyref="https://t.paypal.com/w3c/p3p.xml",CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: 75f2f0821b1b9
pragma: no-cache
set-cookie: ts=vreXpYrS%3D1775312139%26vteXpYrS%3D1680619539%26vr%3D4c9f965e1870a460772020baffffffff%26vt%3D4c9f965e1870a460772020bafffffffe; Expires=Sat, 04 Apr 2026 14:15:39 GMT; Domain=.paypal.com; Path=/; Secure; HttpOnly
ts_c=vr%3D4c9f965e1870a460772020baffffffff%26vt%3D4c9f965e1870a460772020bafffffffe; Expires=Sat, 04 Apr 2026 14:15:39 GMT; Domain=.paypal.com; Path=/; Secure
traceparent: 00-000000000000000000075f2f0821b1b9-8bb1abab7c05d0c1-01
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Tue, 04 Apr 2023 14:15:39 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220059-HHN, cache-bma1653-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1680617740.777630,VS0,VE177
server-timing: content-encoding;desc="",x-cdn;desc="fastly"
timing-allow-origin: *
content-length: 42
X-Firefox-Spdy: h2
www.medibuy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
404 Not Found 0 B URL HTTP/2 www.medibuy.de/mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ
IP
ASN #24940 Hetzner Online GmbH
GET /mailster/1382/0529a4a3ac022c4af80ba896df840055/aHR0cHM6Ly9tZWRpLWJ1eS5kZQ HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
date: Tue, 04 Apr 2023 14:15:37 GMT
access-control-allow-origin: *
access-control-allow-methods: GET,POST,PUT,PATCH,DELETE
access-control-allow-headers: Content-Type,Authorization,sw-context-token,sw-access-key,sw-language-id,sw-version-id,sw-inheritance,fail-on-error,indexing-behavior,single-operation,sw-include-seo-urls
access-control-expose-headers: Content-Type,Authorization,sw-context-token,sw-access-key,sw-language-id,sw-version-id,sw-inheritance,fail-on-error,indexing-behavior,single-operation,sw-include-seo-urls
sw-language-id: 2fbb5fe2e29a4d70aa5854ce7ce3e20b
sw-context-token: 11BDZfFFrpR3C1CnPwCwgw1EIkEVW5dQ
x-frame-options: deny
set-cookie: session-=dc9e8e1d8898b8dbeb2dfa9f2359f804; path=/; secure; HttpOnly; SameSite=lax
session-=dc9e8e1d8898b8dbeb2dfa9f2359f804; path=/; secure; httponly; samesite=lax
csrf[frontend.store-api.proxy]=98cb.g5JXFoJxAdTDFpeAmhh1VfuvX_Fe81aCD5ZVlITDPgw.9dogXPBDR4CxQ93xrE0lAcvFDYI2mDrTTeIC8MyEYT-22md-ziIssaBT0g; path=/; secure; httponly; samesite=lax
cache-control: no-cache, private, public
content-type: text/html; charset=UTF-8
server: Apache
X-Firefox-Spdy: h2
www.paypal.com/xoplatform/logger/api/logger
200 OK 0 B URL HTTP/2 www.paypal.com/xoplatform/logger/api/logger
IP
POST /xoplatform/logger/api/logger HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1463
Origin: https://www.paypal.com
Connection: keep-alive
Referer: https://www.paypal.com/credit-presentment/experiments/local?uid=uid_nxcgkmlpawwmkeyiswfbzxbloanntp&sdkMeta=eyJ1cmwiOiJodHRwczovL3d3dy5wYXlwYWwuY29tL3Nkay9qcz9jb21wb25lbnRzPWJ1dHRvbnMsbWVzc2FnZXMsaG9zdGVkLWZpZWxkcyxmdW5kaW5nLWVsaWdpYmlsaXR5JmNsaWVudC1pZD1BVVBkLW5ESmU4TVJRYkR3RzFiSXJJcUxyREYzRnA1NkJyaWdQUXctdGdubllaTVptWmlmQmt2YWFYM3lNVElOSVZ1ZG4wTTU0aUpkQ3JIQyZjb21taXQ9dHJ1ZSZsb2NhbGU9ZGVfREUmY3VycmVuY3k9RVVSJmludGVudD1jYXB0dXJlJm1lcmNoYW50LWlkPUdOU1BHQ0NKUjZVUlciLCJhdHRycyI6eyJkYXRhLXVpZCI6InVpZF9ueGNna21scGF3d21rZXlpc3dmYnp4YmxvYW5udHAifX0&env=production&scriptUID=uid_nxcgkmlpawwmkeyiswfbzxbloanntp&version=1.40.3&integrationType=SDK
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ch: Sec-CH-UA-Full
access-control-allow-credentials: true
access-control-allow-origin: https://www.paypal.com
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: application/json; charset=utf-8
etag: W/"3f8-69vNOmGv7YlCzehmCKWSLsBazgw"
origin-trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluIjp0cnVlfQ==
paypal-debug-id: f484810b2cea4
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 03 Apr 2024 14:15:39 GMT; Secure
LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 04 Apr 2023 23:01:35 GMT; HttpOnly; Secure
tsrce=loggernodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Fri, 07 Apr 2023 14:15:38 GMT; HttpOnly; Secure
x-pp-s=eyJ0IjoiMTY4MDYxNzczOTc0MiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Tue, 04 Apr 2023 14:45:39 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1775312139%26vteXpYrS%3D1680619539%26vr%3D4c9f95ca1870a1f1ab3d19daf977fb9f%26vt%3D4c9f95ca1870a1f1ab3d19daf977fb9e%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Fri, 03 Apr 2026 14:15:39 GMT; HttpOnly; Secure
ts_c=vr%3D4c9f95ca1870a1f1ab3d19daf977fb9f%26vt%3D4c9f95ca1870a1f1ab3d19daf977fb9e; Path=/; Domain=paypal.com; Expires=Fri, 03 Apr 2026 14:15:39 GMT; Secure
traceparent: 00-0000000000000000000f484810b2cea4-0482fa1276fa6943-01
x-content-type-options: nosniff
dc: ccg11-origin-www-1.paypal.com
accept-ranges: none
via: 1.1 varnish, 1.1 varnish
content-encoding: br
date: Tue, 04 Apr 2023 14:15:39 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220075-HHN, cache-bma1654-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1680617740.632557,VS0,VE195
vary: Accept-Encoding
server-timing: content-encoding;desc="br",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
www.paypal.com/xoplatform/logger/api/logger
200 OK 0 B URL HTTP/2 www.paypal.com/xoplatform/logger/api/logger
IP
POST /xoplatform/logger/api/logger HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1470
Origin: https://www.medibuy.de
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ch: Sec-CH-UA-Full
access-control-allow-credentials: true
access-control-allow-origin: https://www.medibuy.de
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: application/json; charset=utf-8
etag: W/"3fa-JjougLPDCQcHxfaB4rZV70po7Dk"
origin-trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluIjp0cnVlfQ==
paypal-debug-id: f48481033bb7e
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 03 Apr 2024 14:15:40 GMT; Secure
LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 04 Apr 2023 23:01:36 GMT; HttpOnly; Secure
tsrce=loggernodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Fri, 07 Apr 2023 14:15:39 GMT; HttpOnly; Secure
x-pp-s=eyJ0IjoiMTY4MDYxNzc0MDMxOCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
l7_az=dcg13.slc; Path=/; Domain=paypal.com; Expires=Tue, 04 Apr 2023 14:45:40 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1775312140%26vteXpYrS%3D1680619540%26vr%3D4c9f980c1870a78858b80d6ef9790fc0%26vt%3D4c9f980c1870a78858b80d6ef9790fbf%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Fri, 03 Apr 2026 14:15:40 GMT; HttpOnly; Secure
ts_c=vr%3D4c9f980c1870a78858b80d6ef9790fc0%26vt%3D4c9f980c1870a78858b80d6ef9790fbf; Path=/; Domain=paypal.com; Expires=Fri, 03 Apr 2026 14:15:40 GMT; Secure
traceparent: 00-0000000000000000000f48481033bb7e-e63c78ae59bfff1f-01
x-content-type-options: nosniff
dc: ccg11-origin-www-1.paypal.com
accept-ranges: none
via: 1.1 varnish, 1.1 varnish
content-encoding: br
date: Tue, 04 Apr 2023 14:15:40 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220027-HHN, cache-bma1654-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1680617740.218319,VS0,VE178
vary: Accept-Encoding
server-timing: content-encoding;desc="br",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
213.133.105.76
23.33.119.27
64.233.161.155