Overview

URLsaudiwildlife.com/wp.zip
IP 95.216.13.243 (Finland)
ASN#24940 Hetzner Online GmbH
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-02-07 13:55:42 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (16)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
r3.o.lencr.org (7) 344 2020-12-02 08:52:13 UTC 2023-02-06 17:12:01 UTC 23.36.76.226
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-02-06 17:16:39 UTC 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-02-06 17:12:14 UTC 34.117.237.239
fonts.gstatic.com (4) 0 2014-04-02 10:51:04 UTC 2023-02-06 18:55:02 UTC 216.58.207.227 Domain (gstatic.com) ranked at: 540
saudiwildlife.com (2) 0 2017-08-17 14:14:57 UTC 2022-11-19 13:19:16 UTC 95.216.13.243 Unknown ranking
ocsp.sca1b.amazontrust.com (4) 1015 2016-02-14 02:37:56 UTC 2019-03-27 04:05:54 UTC 54.230.245.110
cdn.hu-manity.co (1) 158732 2021-01-13 14:05:14 UTC 2023-02-07 09:16:53 UTC 82.102.27.18
img-getpocket.cdn.mozilla.net (5) 1631 2017-09-01 03:40:57 UTC 2023-02-06 18:30:00 UTC 34.120.237.76
fonts.googleapis.com (1) 8877 2012-05-23 12:41:44 UTC 2023-02-06 17:59:30 UTC 142.250.74.106
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-02-06 17:12:30 UTC 35.241.9.150
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-02-06 17:15:43 UTC 54.148.77.40
www.hoellennetz.de (23) 0 2014-12-10 12:24:24 UTC 2023-01-25 12:45:13 UTC 87.238.192.59 Unknown ranking
ocsp.pki.goog (7) 175 2017-06-14 07:23:31 UTC 2023-02-06 17:12:03 UTC 142.250.74.131
transactional-api.hu-manity.co (2) 176299 2021-03-25 12:25:13 UTC 2023-02-07 09:16:53 UTC 54.170.160.105
designer-api.hu-manity.co (2) 167731 2021-03-25 12:25:13 UTC 2023-02-07 09:16:53 UTC 63.34.39.137
img.br.de (1) 162205 2017-08-09 07:50:06 UTC 2023-01-19 07:59:33 UTC 2.16.67.188

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-02-07 2 www.hoellennetz.de/blogs/media/office.php Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 4 reports on IP: 95.216.13.243
Date UQ / IDS / BL URL IP
2023-03-20 00:56:07 +0000 0 - 0 - 1 saudiwildlife.com/wp.zip 95.216.13.243
2023-02-07 13:55:42 +0000 0 - 0 - 1 saudiwildlife.com/wp.zip 95.216.13.243
2022-09-29 03:26:12 +0000 0 - 0 - 1 saudiwildlife.com/wp.zip 95.216.13.243
2022-08-29 01:13:20 +0000 0 - 0 - 1 saudiwildlife.com/wp.zip 95.216.13.243


Last 5 reports on ASN: Hetzner Online GmbH
Date UQ / IDS / BL URL IP
2023-03-28 15:04:50 +0000 0 - 5 - 0 transfer.sh/get/P6HS4R/Hiwid%20Spoofer.rar 144.76.136.153
2023-03-28 15:01:26 +0000 0 - 0 - 1 www.freedomxpressglobal.com/en/webmail-login/ (...) 65.21.250.61
2023-03-28 15:00:26 +0000 0 - 0 - 1 static.61.250.21.65.clients.your-server.de/en (...) 65.21.250.61
2023-03-28 14:16:39 +0000 0 - 1 - 0 www.icearchiver.com/downloads/icearchiver.exe 136.243.162.142
2023-03-28 14:11:08 +0000 0 - 1 - 0 softslot.ru/d28bc0c/desktop/alarm-clocks/desk (...) 88.99.57.61


Last 4 reports on domain: saudiwildlife.com
Date UQ / IDS / BL URL IP
2023-03-20 00:56:07 +0000 0 - 0 - 1 saudiwildlife.com/wp.zip 95.216.13.243
2023-02-07 13:55:42 +0000 0 - 0 - 1 saudiwildlife.com/wp.zip 95.216.13.243
2022-09-29 03:26:12 +0000 0 - 0 - 1 saudiwildlife.com/wp.zip 95.216.13.243
2022-08-29 01:13:20 +0000 0 - 0 - 1 saudiwildlife.com/wp.zip 95.216.13.243


Last 1 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-09-29 03:26:12 +0000 0 - 0 - 1 saudiwildlife.com/wp.zip 95.216.13.243

JavaScript

Executed Scripts (15)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (64)


Request Response
                                        
                                            GET /wp.zip HTTP/1.1 
Host: saudiwildlife.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         95.216.13.243
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Tue, 07 Feb 2023 13:55:31 GMT
Server: Apache
Location: https://saudiwildlife.com/wp.zip
Content-Length: 240
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   240
Md5:    f997f53783f8abe2da307d4ccb219990
Sha1:   9615f793d4f307c2d18b21793be8dc9a0d9bf513
Sha256: f8d94843dcc15b5412dfbb9467d2bdfcfb0883d7beeecb8121a8eab09bb3acd7
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "35CAB3987FC0E4A41B305CB208C1E33FA38CE8BDFD9F386C3DC0411DD4D5AC61"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17151
Expires: Tue, 07 Feb 2023 18:41:22 GMT
Date: Tue, 07 Feb 2023 13:55:31 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5987
Expires: Tue, 07 Feb 2023 15:35:18 GMT
Date: Tue, 07 Feb 2023 13:55:31 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 07 Feb 2023 13:34:08 GMT
age: 1283
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    bf0c602d32b3c14606f22a86183b5e3c
Sha1:   6eabd8d83475eba731968abe1a05a8bfd272f160
Sha256: 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13708
Expires: Tue, 07 Feb 2023 17:43:59 GMT
Date: Tue, 07 Feb 2023 13:55:31 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: zIKbqoZuwg7pzzl3EP/2Ckd4VJcfQf4dZjL2KDlvBiZkIDOanq69kzJVVLJJNAHHN+6lujPzn+FmlhYDXVRp0Q==
x-amz-request-id: YM6V0ETVSXW1NHTQ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 07 Feb 2023 13:45:35 GMT
age: 596
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    e76071a28ee566dababb3834f46d68ed
Sha1:   aebb4e68c1ba2de0f90025283e8ed8470944fde0
Sha256: 78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
                                        
                                            GET /wp.zip HTTP/1.1 
Host: saudiwildlife.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         95.216.13.243
HTTP/2 302 Found
content-type: text/html; charset=iso-8859-1
                                        
location: https://www.hoellennetz.de/blogs/media/office.php
content-length: 233
date: Tue, 07 Feb 2023 13:55:31 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   233
Md5:    fa77b8c3d20852be3df80e0668e527e0
Sha1:   a90e2259bbb3862251824db572581f23c2471c61
Sha256: 83f5f490df506f9e549f16c8c7445a1e9a0d417ab9ac76fa61d9d420b4efeadf
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 07 Feb 2023 13:55:32 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Expires, Retry-After, Content-Length, Content-Type, ETag, Cache-Control, Alert, Pragma, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 07 Feb 2023 13:14:52 GMT
age: 2440
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B3BC5433FFE5CE146CFE3B7A947E6789B1E4E7DDCC43331E24A50E764C683D7D"
Last-Modified: Tue, 07 Feb 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18590
Expires: Tue, 07 Feb 2023 19:05:22 GMT
Date: Tue, 07 Feb 2023 13:55:32 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3073
Expires: Tue, 07 Feb 2023 14:46:45 GMT
Date: Tue, 07 Feb 2023 13:55:32 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Dvs4Kir62OseMnx+mvVx6w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         54.148.77.40
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: mO0UkSYme9aRKdTe0B0q1CNhv4s=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9687
Expires: Tue, 07 Feb 2023 16:37:01 GMT
Date: Tue, 07 Feb 2023 13:55:34 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9687
Expires: Tue, 07 Feb 2023 16:37:01 GMT
Date: Tue, 07 Feb 2023 13:55:34 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c48c35-4645-41c0-a6fa-b700208324c7.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 13390
x-amzn-requestid: 0664e077-13a4-4a97-afc2-3969cee56958
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f2pu6Fb7oAMF_0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63df565f-057ee8fa26aa83d21f875d73;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 07:10:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cAwOWu-_JYTMa0l-1A07FxgOGtG7P59D7XlovXByRA9dQxfsS2An7w==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 18:44:40 GMT
age: 69054
etag: "bd8374980c16b7d5a28e55b8bef2215713b1ebb2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   13390
Md5:    75b0935816ca54d5d20a9fffa5531e0d
Sha1:   bd8374980c16b7d5a28e55b8bef2215713b1ebb2
Sha256: 4ab6f49d22d029681754b617001f93467d63035acdaf12905c2314cab77991af
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6718344-fcb4-4366-9239-8921034a7114.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12967
x-amzn-requestid: 38c58626-f4ad-4e2b-ad71-a628519d2ea2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmEdHFwCoAMFhxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8b453-7da6d0c1093468d320caaa1e;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 06:25:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AFal52_Srd2lOpZS7RF7Nit-8jPqmbmXDTT57d8Ax-1AjBce6LxlFQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 04:57:38 GMT
age: 32276
etag: "4e42e2ad289dfe5bd9a55d34fd768f7532bdf71d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12967
Md5:    8e0be7db14d930d6227443314bcd1747
Sha1:   4e42e2ad289dfe5bd9a55d34fd768f7532bdf71d
Sha256: baedfbdb08a67f9ff4c698f7e65b08d7e4c5078d0a4233e6bff529b44812735a
                                        
                                            GET /blogs/media/office.php HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         87.238.192.59
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Date: Tue, 07 Feb 2023 13:55:32 GMT
Server: Apache
Access-Control-Allow-Origin: https://app.hu-manity.co
Access-Control-Allow-Methods: GET
X-Redirect-By: WordPress
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Link: <https://www.hoellennetz.de/wp-json/>; rel="https://api.w.org/"
Set-Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg; path=/
Location: https://www.hoellennetz.de
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  data
Size:   18909
Md5:    0c4b822f0f447c850cc8983ceead1d6f
Sha1:   af5fefaf535e22fe93b7b21d824d1510f725eb27
Sha256: 9897ba58f005d70283429d651c80cbf6032fb0ae6a450ffac0f501e7da994b10

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4227
x-amzn-requestid: b45f2ab7-0102-4542-9514-54fb93a0e27f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f77sTH4jIAMFnsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e1731b-4a24bcb1102e58543cd81343;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: V_4NzIAVBOZMjf_YIM3bowFdlP1y4peI5JI-jO105s3NVjmyYnC0Tg==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:48:48 GMT
age: 58006
etag: "83c9437e71a0a03b3e8ff652155a85eafa76cdda"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4227
Md5:    eedb4de12585c70ddb5b8f94fe6a59e2
Sha1:   83c9437e71a0a03b3e8ff652155a85eafa76cdda
Sha256: d4493a30f62e9ad224b3595ba3af8a322e2d4a3d9238a1847973f962bdcc0c82
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c86a61b-07c3-45f6-b564-e556eb788d04.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12682
x-amzn-requestid: d858d90a-b1ca-401c-8e00-8ccd9c0a7504
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f78mUEsfIAMFreg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e1748e-2783de3e3de9c520246bf06e;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:43:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: eq8Kle9uYWJ3vmaJD50r-oaTb_O2ObQgLNlTcYn9XQoHCyAO3isqyQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:44:49 GMT
age: 58245
etag: "47d4a4bb26fafff0c6aebfe3dc7ddfa4970f8e9a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12682
Md5:    59419fb1cf4689bed183d0e9a6aed782
Sha1:   47d4a4bb26fafff0c6aebfe3dc7ddfa4970f8e9a
Sha256: e6009407bd61bee1ae16ec30ea5914be77c56ee65dfb30595b10a1cedc6798c9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32cb7a16-13bc-4d42-8e17-7be2a40cfc82.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6316
x-amzn-requestid: 1988058c-5aee-4964-9046-83a5f14a927d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fwhjnFdxoAMFgpQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dce2e3-5ec35d0d6bef4d4944c629c0;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 10:33:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Z9b1A_GpinQXvbA-g2PoKhVSNVd5gMrId0WUTmKSCkg-YAan1dtp-w==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 22:21:35 GMT
age: 56039
etag: "2e54c22fb83981e2690161cd521e4fc3998e9c16"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6316
Md5:    c3cd20c6639e2b0d996fbbd7df2d4f47
Sha1:   2e54c22fb83981e2690161cd521e4fc3998e9c16
Sha256: 9b2b1f3e062fca74341d09540e44d2a02ec451b8349440ed5917073e8fab988d
                                        
                                            GET / HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         87.238.192.59
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Tue, 07 Feb 2023 13:55:33 GMT
Server: Apache
Access-Control-Allow-Origin: https://app.hu-manity.co
Access-Control-Allow-Methods: GET
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Link: <https://www.hoellennetz.de/wp-json/>; rel="https://api.w.org/"
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 13789
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (11199), with CRLF, LF line terminators
Size:   13789
Md5:    6550fffc7e8608864301d6fca3b6986c
Sha1:   9d14e45a051bcac9e17fd614a5daca9d781c0522
Sha256: 68c8d1eee7eca7a9f1521fc8285493d42c3cced8ef0140137f1bfdfe0a70a2f3
                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         87.238.192.59
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 07 Feb 2023 13:55:34 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 17:51:43 GMT
ETag: "172a9-5edae3dff0a54-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 12518
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (47826)
Size:   12518
Md5:    8fa87dd23394a22621248ec378d2af59
Sha1:   9305bc637a89b1700d7f56a19a80bd32b0feb2f7
Sha256: c162f7de24fa2d4e93e0da254ef287ff72f4a3e03f42443265097968351388dc
                                        
                                            GET /wp-content/plugins/page-list/css/page-list.css?ver=5.3 HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         87.238.192.59
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 07 Feb 2023 13:55:34 GMT
Server: Apache
Last-Modified: Fri, 30 Dec 2022 06:33:32 GMT
ETag: "60c-5f105c7ced76f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 549
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   549
Md5:    1e6767203e247baf8fe7a8a86f737446
Sha1:   02e62fd437d8bcf334991574acf51d6bf5810eaa
Sha256: a6c78955fd064ed56f61520e3b3aaa6520f9ee377c76f24aec1fe15786e7c6f5
                                        
                                            GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         87.238.192.59
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 07 Feb 2023 13:55:34 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 17:51:43 GMT
ETag: "d9-5edae3dfa4795-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 189
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   189
Md5:    5a18e16eb01cbaa862eb32e6b77bedb2
Sha1:   3abf9b913cc9f558f02cba7c9b822f8d1812cb96
Sha256: d2b5af913332941d5ae7786d1fa70e0d009315c4ede6ad5b80d0f663bb54521f
                                        
                                            GET /wp-content/plugins/cforms2/styling/cforms2012.css?ver=15.0.4 HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         87.238.192.59
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 07 Feb 2023 13:55:34 GMT
Server: Apache
Last-Modified: Thu, 06 Aug 2020 20:52:44 GMT
ETag: "1cab-5ac3bab8c5340-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 1749
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   1749
Md5:    e38e0b2637a20776792f20a920bc7404
Sha1:   5422bb31972059827edf40bd8cae4f48971be813
Sha256: c35963da313dcb0ab1994f1cb5490eace353236e2a52fb2f8b59a4aad6ef7816
                                        
                                            GET /wp-content/themes/twentyfifteen/css/blocks.css?ver=20220914 HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         87.238.192.59
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 07 Feb 2023 13:55:34 GMT
Server: Apache
Last-Modified: Mon, 28 Nov 2022 14:37:44 GMT
ETag: "356c-5ee88d0825b1d-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 2328
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   2328
Md5:    df0a3d09604a363eebba18e2a5aca957
Sha1:   c9baf208b69a5c90185ecac5b4cee80fd4d1cbdf
Sha256: 84413115f20d04d973b85180c83f0dc6df0c2823cf08417dc39fdfc8fc802e40
                                        
                                            GET /wp-content/plugins/wp-lightbox-2/styles/lightbox.min.css?ver=1.3.4 HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         87.238.192.59
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 07 Feb 2023 13:55:34 GMT
Server: Apache
Last-Modified: Sat, 16 Jan 2021 20:21:05 GMT
ETag: "c2b-5b90a3a7f34e6-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 1164
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1164
Md5:    8e6b500d0b59be45dc27d14e1c296f6a
Sha1:   8aa028f9a19478f69c95e9558391ec101620847e
Sha256: 4480d270bf3c7e46669b7c746277c00ff7bb958b3b1160497ba4b92c018c67d3
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 07 Feb 2023 13:55:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         87.238.192.59
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 07 Feb 2023 13:55:34 GMT
Server: Apache
Last-Modified: Sat, 12 Dec 2020 20:18:34 GMT
ETag: "2bd8-5b64a1d0fe6ae-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 4169
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   4169
Md5:    5629711d7fdd5b28441bac39b851299f
Sha1:   4e0bf2b7383097f7c352023a1b1b1b48a50356b6
Sha256: 44c444309c7a6c05ff4a9bc198bed9e9596bedb5658637c85689c9a471dcdd16
                                        
                                            GET /wp-content/plugins/cforms2/js/cforms.js?ver=15.0.4 HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         87.238.192.59
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 07 Feb 2023 13:55:34 GMT
Server: Apache
Last-Modified: Thu, 06 Aug 2020 20:52:44 GMT
ETag: "4af3-5ac3bab8aebe1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 4365
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   4365
Md5:    51d2469d40f0bb311df73159811fbcee
Sha1:   c951a5b4dab034da170c607b82d0b5d5093be387
Sha256: 9a07d47c7066015175ed13172a2c68422d39774421d6b4d117e402f68ce6702e
                                        
                                            GET /wp-content/plugins/simple-mail-address-encoder/smae.js?ver=1.0.0 HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         87.238.192.59
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 07 Feb 2023 13:55:34 GMT
Server: Apache
Last-Modified: Fri, 25 Oct 2019 16:08:21 GMT
ETag: "415-595be5be7917c-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 503
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size:   503
Md5:    918ca2b36f66fc20ee1d1c00b1411a95
Sha1:   bb4f985085f436816268d5e79fd8d6cb9deb5f27
Sha256: 2cfb8ac3404cd4122f8d8c0d68f4c571f0bf82088554f0c93ad4cd2588357fdc
                                        
                                            GET /wp-content/themes/twentyfifteen/genericons/genericons.css?ver=20201026 HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         87.238.192.59
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 07 Feb 2023 13:55:34 GMT
Server: Apache
Last-Modified: Mon, 28 Nov 2022 14:37:44 GMT
ETag: "6b80-5ee88d08141dd-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 16581
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (19226)
Size:   16581
Md5:    762263ade49de47ecefe73b7b9f178c0
Sha1:   9e27a38f633fe803b1b19f19d17fb353c95b7a72
Sha256: c17754c35a65fdd4d8c77a73c4fe5eeea2422b7c330cdeab6bf212b03efbe7f1
                                        
                                            GET /wp-content/plugins/wp-lightbox-2/js/dist/wp-lightbox-2.min.js?ver=1.3.4.1 HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         87.238.192.59
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 07 Feb 2023 13:55:34 GMT
Server: Apache
Last-Modified: Sat, 16 Jan 2021 20:21:05 GMT
ETag: "4557-5b90a3a7ed726-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 4871
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (17750)
Size:   4871
Md5:    73923ebdb45aec8191ba7010ea7cb0c7
Sha1:   1b2790bb9fa13294cf220d13a1852bd9e7b4b553
Sha256: f106e90e1f82226c29a8c7306d70f47b15a7d73f920cdd4e64d04ccdd3fb9bb2
                                        
                                            GET /wp-content/themes/twentyfifteen/style.css?ver=20221101 HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         87.238.192.59
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 07 Feb 2023 13:55:34 GMT
Server: Apache
Last-Modified: Mon, 28 Nov 2022 14:37:44 GMT
ETag: "18581-5ee88d08289fd-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 14351
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (403)
Size:   14351
Md5:    dd01561106910d757d138493c7033c10
Sha1:   7ca095b0c1c1de621a459ff8f3fee96a2ddca9f8
Sha256: 941e68258f179c6965952a60e8354e97bc5dd371063befb99b5147143bca9aa2
                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         87.238.192.59
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 07 Feb 2023 13:55:34 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 17:51:42 GMT
ETag: "15e54-5edae3dee5119-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 30995
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65447)
Size:   30995
Md5:    1b5264c989379b828aff60f65a518a24
Sha1:   98641237f14ccb33ac114f54329a33bd0aa17eb7
Sha256: 6c8e7b78c6dbc13426810c905572db7589cf3e00264e30ce797fddb0b1092237
                                        
                                            GET /wp-content/themes/twentyfifteen/js/skip-link-focus-fix.js?ver=20141028 HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         87.238.192.59
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 07 Feb 2023 13:55:34 GMT
Server: Apache
Last-Modified: Mon, 28 Nov 2022 14:37:44 GMT
ETag: "2d7-5ee88d081edbd-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 445
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   445
Md5:    e0ba9e2214f9bd5260223ed05a3f7b3e
Sha1:   64fcba18103bb87a27ed50447f675fbc19ebdf08
Sha256: e364f0ec3f498066567784e4936e5e01a241199b87aaf0ddfef9bbae87ef8cb0
                                        
                                            GET /wp-content/themes/twentyfifteen/js/functions.js?ver=20221101 HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         87.238.192.59
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 07 Feb 2023 13:55:34 GMT
Server: Apache
Last-Modified: Mon, 28 Nov 2022 14:37:44 GMT
ETag: "117a-5ee88d081edbd-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 1584
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   1584
Md5:    48a4b544c4da663f567bf9982eb24734
Sha1:   3bdf40f10997de6b2a4036e5bccdf3c8c1dc95db
Sha256: 6f01ab6be3b076bfd92c651eb502d70184280269692205894d3590dbacf211a4
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         87.238.192.59
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 07 Feb 2023 13:55:34 GMT
Server: Apache
Last-Modified: Wed, 25 May 2022 16:01:58 GMT
ETag: "48b9-5dfd83166fd26-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 5009
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (15660)
Size:   5009
Md5:    e6624e0b978e6ddba476be41aaaa82df
Sha1:   822e920d8233072110ed7c8a7f379e5b13209b18
Sha256: dac86a9ce08e4d8cded47b4fa900a664b0c997d8910c2a1be54a423678925a41
                                        
                                            GET /wp-content/uploads/2016/03/cropped-cropped-Hoelle1957-2.jpg HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         87.238.192.59
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 07 Feb 2023 13:55:34 GMT
Server: Apache
Last-Modified: Tue, 28 Feb 2017 20:46:56 GMT
ETag: "47f5-5499d4bebf000"
Accept-Ranges: bytes
Content-Length: 18421
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 248x248, components 3\012- data
Size:   18421
Md5:    22504b6a702ed84112233729e8bf65cb
Sha1:   040d1627547b29dd0c07b0aebce14f83da9fff6a
Sha256: 5f85518dd343811980a32c310b6d678e8227f793b8b60996ef1c09487c0a4474
                                        
                                            GET /wp-content/plugins/cforms2/cforms-common.css HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/wp-content/plugins/cforms2/styling/cforms2012.css?ver=15.0.4
Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         87.238.192.59
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 07 Feb 2023 13:55:34 GMT
Server: Apache
Last-Modified: Thu, 06 Aug 2020 20:52:44 GMT
ETag: "31a-5ac3bab8bd640-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 320
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   320
Md5:    88e5ff377c1e312e46b0e299dae013c9
Sha1:   04392a0e00599e2ac9c958e016033e03ff9ece36
Sha256: 4d432aeeb9e9532b01a4ccf80305c00a34b8969b244f319e1c4a591c416e8c87
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 07 Feb 2023 13:55:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2016/03/Kanzelfels1968-3-1.jpg HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         87.238.192.59
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 07 Feb 2023 13:55:34 GMT
Server: Apache
Last-Modified: Thu, 24 Mar 2016 20:02:12 GMT
ETag: "1932-52ed0ec0e7900"
Accept-Ranges: bytes
Content-Length: 6450
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 324x200, components 3\012- data
Size:   6450
Md5:    0b8d23d9d4db8db3fc757c0f7f670c98
Sha1:   0ed5dbbe913516b684d5051c75fd4f89cd5c10c3
Sha256: 7445f01bcb010b8c274c2f83261153d4047b663d3ec4131c8b9988be258afea5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=118879
Date: Tue, 07 Feb 2023 13:55:34 GMT
Etag: "63e17189-1d7"
Expires: Wed, 08 Feb 2023 22:56:53 GMT
Last-Modified: Mon, 06 Feb 2023 21:30:49 GMT
Server: ECS (nyb/1D07)
X-Cache: Miss from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: nf9L0ne5uXj61grhZL-fYVvbCMucoPlpyn6aulK6ohqw3SlCIL1fdw==
Age: 5164

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=115444
Date: Tue, 07 Feb 2023 13:55:34 GMT
Etag: "63e17189-1d7"
Expires: Wed, 08 Feb 2023 21:59:38 GMT
Last-Modified: Mon, 06 Feb 2023 21:30:49 GMT
Server: ECS (nyb/1D28)
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: TZKksXH__nqqbKIlM8bULZ57Yd3l47oRVS1WLZSr5uD_6r1Gx2NBYA==
Age: 1729

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 07 Feb 2023 13:55:34 GMT
Last-Modified: Tue, 07 Feb 2023 13:07:31 GMT
Server: ECS (nyb/1D2A)
X-Cache: Miss from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: HQJ9gVwWxdGU7Il3YdmGtI-5zGcEM2Mc2CLR5WHzrq16lRP7VQoNtA==
Age: 2883

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 07 Feb 2023 13:55:34 GMT
Last-Modified: Tue, 07 Feb 2023 12:46:45 GMT
Server: ECS (bsa/EB1D)
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: qSMcX7cCut4bqTKaYt_EACunew_eMF9qQtYCHayON9OOVPdZY0cvuA==
Age: 4130

                                        
                                            OPTIONS /api/transactional/session/save HTTP/1.1 
Host: transactional-api.hu-manity.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-api-key
Referer: https://www.hoellennetz.de/
Origin: https://www.hoellennetz.de
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Cache-Control: max-age=0

search
                                         54.170.160.105
HTTP/2 204 No Content
                                        
date: Tue, 07 Feb 2023 13:55:34 GMT
server: nginx/1.22.0
x-powered-by: Express
x-request-id: c07c44d9-3531-4028-8b60-3c112675e392
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,OPTIONS,PATCH,POST,DELETE
access-control-allow-headers: *
X-Firefox-Spdy: h2

                                        
                                            OPTIONS /api/designer/user-design-live?AppID=wwwhoellennetzde-fdc4588 HTTP/1.1 
Host: designer-api.hu-manity.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-api-key
Referer: https://www.hoellennetz.de/
Origin: https://www.hoellennetz.de
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Cache-Control: max-age=0

search
                                         63.34.39.137
HTTP/2 204 No Content
                                        
date: Tue, 07 Feb 2023 13:55:34 GMT
server: nginx/1.22.0
x-powered-by: Express
x-request-id: 8843b048-cbfd-4586-b26d-39bc883615a9
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,OPTIONS,PATCH,POST,DELETE
access-control-allow-headers: *
X-Firefox-Spdy: h2

                                        
                                            POST /api/transactional/session/save HTTP/1.1 
Host: transactional-api.hu-manity.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.hoellennetz.de/
Content-Type: application/json; charset=utf-8
x-api-key: hudft60djisdusdjwek
Origin: https://www.hoellennetz.de
Content-Length: 239
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.170.160.105
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Tue, 07 Feb 2023 13:55:34 GMT
content-length: 64
server: nginx/1.22.0
x-powered-by: Express
x-request-id: 32c6f5f6-f2e7-450a-8d6e-f3694d6d7453
access-control-allow-origin: *
etag: W/"40-akokwV165N52Xg52g5ofcUal2g0"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   64
Md5:    1949508bdcc8ea012a38751b5dcb6753
Sha1:   6a4a24c15d7ae4de765e0e76839a1f7146a5da0d
Sha256: f37982dbd1ac02d4380903d8d637117a292100ef19402c60d22aa0db5f7dc0f6
                                        
                                            GET /e88131a2-3ebe-4acb-b4eb-23281d068fef.jpeg?_v=1609852746889&rect=212,0,269,269&w=35&h=35&q=80 HTTP/1.1 
Host: img.br.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         2.16.67.188
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 866
X-Request-ID: f6cc4a0e42cb74e09f9a6fbfc7b12eaf
ETag: "ffb51410a54be7d1f076f8fe07e0b906961925b29ff4af762adc74cad881a712_v1"
Strict-Transport-Security: max-age=15724800; includeSubDomains
Cache-Control: public, max-age=31535993
Expires: Wed, 07 Feb 2024 13:55:27 GMT
Date: Tue, 07 Feb 2023 13:55:34 GMT
Connection: keep-alive
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  JPEG image data, baseline, precision 8, 35x35, components 3\012- data
Size:   866
Md5:    1a897acbba134d8ee413e672c7880353
Sha1:   db282692f6fde5faed32c3455c7e88c09cf09168
Sha256: 06b25482a6ed522e47f70e067a825cb81584b8eb33f7bd7aeab5a2cb7dd0efd1
                                        
                                            GET /api/designer/user-design-live?AppID=wwwhoellennetzde-fdc4588 HTTP/1.1 
Host: designer-api.hu-manity.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.hoellennetz.de/
Content-Type: application/json; charset=utf-8
x-api-key: hudft60djisdusdjwek
Origin: https://www.hoellennetz.de
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         63.34.39.137
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Tue, 07 Feb 2023 13:55:34 GMT
content-length: 52854
server: nginx/1.22.0
x-powered-by: Express
x-request-id: daff9994-b759-42df-9cad-303561fe4873
access-control-allow-origin: *
etag: W/"ce76-JCJmHfdBvWyYidEVcrNZwx2ZBuQ"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (52799), with no line terminators
Size:   52854
Md5:    930da09f693fa07ee5200b7bcfa8fc8d
Sha1:   2422661df741bd6c9889d11572b359c31d9906e4
Sha256: 4258d0311019b3e0408dd883a9b651e04e1a61359a5a01c57ed00aef6ae8919b
                                        
                                            GET /wp-content/uploads/2016/03/cropped-Hoelle1957-2-192x192.jpg HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         87.238.192.59
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 07 Feb 2023 13:55:35 GMT
Server: Apache
Last-Modified: Thu, 17 Mar 2016 19:35:00 GMT
ETag: "3fcf-52e43b9e48100"
Accept-Ranges: bytes
Content-Length: 16335
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 192x192, components 3\012- data
Size:   16335
Md5:    b9e039a21e752b2643d1e13e40910911
Sha1:   f2fb504724eb34b1e86c7f46096f27ee968eee48
Sha256: fef56100c3644ef746263428bb8e7fa9b2f43830f6810e8b67ac3b0b724ad8a2
                                        
                                            GET /wp-content/uploads/2016/03/cropped-Hoelle1957-2-32x32.jpg HTTP/1.1 
Host: www.hoellennetz.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Cookie: PHPSESSID=klqtnnheisoknmu6t33ts1kgfg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         87.238.192.59
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 07 Feb 2023 13:55:35 GMT
Server: Apache
Last-Modified: Thu, 17 Mar 2016 19:35:00 GMT
ETag: "4fa-52e43b9e48100"
Accept-Ranges: bytes
Content-Length: 1274
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 32x32, components 3\012- data
Size:   1274
Md5:    5d6ce8bb163a641c2b0f30456ae397ff
Sha1:   facc8f5e872bc151d023b1374a15b8221ade9ef9
Sha256: e6b24fe796ffbd9affeb43f396861be7bd4c087ade0ef3efce1c4940ffd9d52e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 07 Feb 2023 13:55:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 07 Feb 2023 13:55:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 07 Feb 2023 13:55:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 07 Feb 2023 13:55:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/notoserif/v21/ga6Iaw1J5X9T9RW6j9bNfFcWaA.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.hoellennetz.de
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23948
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Feb 2023 02:06:30 GMT
expires: Sat, 03 Feb 2024 02:06:30 GMT
cache-control: public, max-age=31536000
age: 388145
last-modified: Mon, 09 May 2022 19:47:44 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 23948, version 1.0\012- data
Size:   23948
Md5:    aeb92e524ca62170347fa63974605767
Sha1:   1e10bfbd720481e42035a5469d7ce8fc51d34aab
Sha256: 25475d82cc976fb2c71b15b3e416c22bf636dd247bbb268d312e7c076ec5b6e4
                                        
                                            GET /s/notosans/v27/o-0NIpQlx3QUlC5A4PNjXhFVZNyB.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.hoellennetz.de
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12684
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 00:35:22 GMT
expires: Fri, 02 Feb 2024 00:35:22 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 09 May 2022 18:28:04 GMT
age: 480013
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 12684, version 1.0\012- data
Size:   12684
Md5:    0c235386bcf6af06f67e6c89fd19e434
Sha1:   10720574d4609322023984a761f32f9518c07bc4
Sha256: c1c30918a861cb6a985ab55d54ad7e861682354197f164cb3b7194f20eed67ac
                                        
                                            GET /s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.hoellennetz.de
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Feb 2023 06:21:50 GMT
expires: Wed, 07 Feb 2024 06:21:50 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 09 May 2022 18:27:55 GMT
age: 27225
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 12860, version 1.0\012- data
Size:   12860
Md5:    ab21c24efd75543e16e34807ebc6cdec
Sha1:   eb2562f9729079333fbcbbe94868695669dd3301
Sha256: 88f00438d26021a325247c4427898f7c778a22976df9f1a9d9876429778bf265
                                        
                                            GET /s/notoserif/v21/ga6Law1J5X9T9RW6j9bNdOwzfReecQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.hoellennetz.de
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27456
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Feb 2023 02:11:10 GMT
expires: Sat, 03 Feb 2024 02:11:10 GMT
cache-control: public, max-age=31536000
age: 387865
last-modified: Mon, 09 May 2022 20:10:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 27456, version 1.0\012- data
Size:   27456
Md5:    80becb8b7638756b35eebf31518f8904
Sha1:   ba154f44545a98796887a9b5cfd84d765d3d0c05
Sha256: a0a9ce1553fa74dad4d8cf55b7df7d012a3acdec01cd39d682fce0e5b52e99f2
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 07 Feb 2023 13:55:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /hu-banner.min.js HTTP/1.1 
Host: cdn.hu-manity.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         82.102.27.18
HTTP/2 200 OK
content-type: application/javascript
                                        
server: keycdn-engine
date: Tue, 07 Feb 2023 13:55:34 GMT
x-amz-id-2: FSQRX/4rjLRRVXyGJAyuAPqJQNp71bDykuiPzFqF7kEFbPodpvju+M8+vOlzviU0v4kOrUnO3E0=
x-amz-request-id: RBVPJY9QZ8JH8Y5K
last-modified: Thu, 19 Jan 2023 21:58:09 GMT
etag: W/"ea52fd8ca5c9bd63109c73a84df4a1ea"
expires: Tue, 07 Feb 2023 14:55:34 GMT
cache-control: max-age=3600
content-encoding: gzip
link: <http://ert-banner.s3-website-eu-west-1.amazonaws.com/hu-banner.min.js>; rel="canonical"
x-cache: HIT
x-shield: active
x-edge-location: noos
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /css?family=Noto+Sans%3A400italic%2C700italic%2C400%2C700%7CNoto+Serif%3A400italic%2C700italic%2C400%2C700%7CInconsolata%3A400%2C700&subset=latin%2Clatin-ext&display=fallback HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hoellennetz.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 Feb 2023 13:55:34 GMT
date: Tue, 07 Feb 2023 13:55:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---