beta.medi-buy.de/mailster/1932/aef6a018634059845bdf90d03f626618/aHR0cHM6Ly9tZWRpYnV5LmRlL1Nlam95LUNvcm9uYS1BbnRpZ2VuLVNjaG5lbGx0ZXN0LUxhaWVudGVzdC0xZXItUGFjaw/2
217.160.0.82302 Found 352 B URL HTTP/1.1 beta.medi-buy.de/mailster/1932/aef6a018634059845bdf90d03f626618/aHR0cHM6Ly9tZWRpYnV5LmRlL1Nlam95LUNvcm9uYS1BbnRpZ2VuLVNjaG5lbGx0ZXN0LUxhaWVudGVzdC0xZXItUGFjaw/2
IP 217.160.0.82:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 4c0cce56deb626c8c11b7fda50081111
983b2297173a2a76e08130c4e4eaa13ee02f2b2c
047bb8b91f9554958a382ba9d061e31d49016849f1f7824e2e5cdb1f176f944e
Analyzer Verdict Alert fortinet Phishing
GET /mailster/1932/aef6a018634059845bdf90d03f626618/aHR0cHM6Ly9tZWRpYnV5LmRlL1Nlam95LUNvcm9uYS1BbnRpZ2VuLVNjaG5lbGx0ZXN0LUxhaWVudGVzdC0xZXItUGFjaw/2 HTTP/1.1
Host: beta.medi-buy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
Content-Length: 352
Connection: keep-alive
Keep-Alive: timeout=15
Date: Fri, 27 Jan 2023 11:15:43 GMT
Server: Apache
Location: https://beta.medi-buy.de/mailster/1932/aef6a018634059845bdf90d03f626618/aHR0cHM6Ly9tZWRpYnV5LmRlL1Nlam95LUNvcm9uYS1BbnRpZ2VuLVNjaG5lbGx0ZXN0LUxhaWVudGVzdC0xZXItUGFjaw/2
Cache-Control: max-age=3600
Expires: Fri, 27 Jan 2023 12:15:43 GMT
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 5fe582397f3003b225cb9058e02c2190
68174a54a8f6c4de9247ccea2dcae3c9b76bdb9f
238a2ef5b61d56353d0a5e97ec3092b8f2792cde7cecf40e1a858f8c129d3a9d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "238A2EF5B61D56353D0A5E97EC3092B8F2792CDE7CECF40E1A858F8C129D3A9D"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8463
Expires: Fri, 27 Jan 2023 13:36:46 GMT
Date: Fri, 27 Jan 2023 11:15:43 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 58ffdcb539c3b250fdf31ed761627fc1
5b55b1522ef84c39b5c42f9bbfbc62b806c1269f
eb783cfa8c8544b0574b345abc0bf3c150979d4efce1a013f17b6cd48076fc63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB783CFA8C8544B0574B345ABC0BF3C150979D4EFCE1A013F17B6CD48076FC63"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11085
Expires: Fri, 27 Jan 2023 14:20:28 GMT
Date: Fri, 27 Jan 2023 11:15:43 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 27 Jan 2023 10:35:21 GMT
content-type: application/json
age: 2422
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 69f73ac59327cd9ad7d99816ccfcc03e
c54844f82dbee0d5ee4c8ce344eb0139373e6c6b
e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4417
Expires: Fri, 27 Jan 2023 12:29:20 GMT
Date: Fri, 27 Jan 2023 11:15:43 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: yZsV+GPlFdkwtyXRgRZFaAad6vHrTVgRDF9UCOG7kkbVREfDxUurQR5mX2uTpD6uAFLrDzuufDw=
x-amz-request-id: 08G7MWTK1BANN4Y8
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 27 Jan 2023 10:49:23 GMT
age: 1580
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 11:15:43 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 27 Jan 2023 10:41:40 GMT
age: 2044
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10273
Expires: Fri, 27 Jan 2023 14:06:57 GMT
Date: Fri, 27 Jan 2023 11:15:44 GMT
Connection: keep-alive
push.services.mozilla.com/
34.214.101.241101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.214.101.241:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ZQsmspTkGdVMa3ksNAZQ9g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: YNzC8OgODQ7MhcNgIlxi5BDhVkw=
medibuy.de/media/f9/fb/76/1660744973/logo-medi-buy.png?width=3000
213.133.105.76200 OK 7.7 kB URL HTTP/2 medibuy.de/media/f9/fb/76/1660744973/logo-medi-buy.png?width=3000
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 145 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash 5b4f85e28897cbcab62d129e51104eab
28a7e923047697db3ae446ce5a51866c2355cf4e
8a382b94b3e401ae4dffb6e8d9e676d2efc3f5020bd1a09be086f3bd6cce75de
GET /media/f9/fb/76/1660744973/logo-medi-buy.png?width=3000 HTTP/1.1
Host: medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/Sejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack
Connection: keep-alive
Cookie: session-=2aaba35a66fc5a9aa496f5a825a3db64; csrf[frontend.checkout.line-item.add]=ab49733570.CUbO2rLBDUZdIYvpEFAERoizR7hwpn0ckZFcF6eY600.MCi_lPalIA0lGf-PT2lmftnhGNs-_kV68qUrQP71nyVsB7agxKQ8GTNqsw; csrf[frontend.account.login]=c7b2a980b5e34385.D1GXB7PzBRT9mzYKi_Tu9WsVYFKPICErQqcd4EAye5U.X2GudIaDU0278UNnvp6cpjhiUWfBEWJFNt5zqgR6VuI7FNts2IZpY8zydw; csrf[frontend.product.reviews]=b2504984f399.6xAXphrz8vn8u_CTlvNl9iOYreF99RYqIoyg1zcXULw.oSV04E2BgYqxyJvi85kqp1Cryao-v2xQWOratHwiBI6GXEKLSJvKqI3Ugw; csrf[frontend.store-api.proxy]=1504d755c20a1.zOkYu21eWaoMvq3F3LqpSmoAaDUPB352LQFaR41yYkE.qYVV2Cw2MsN1ivf9tI7wJitsGnR9Zho5fTAYf_RCCyqejU_oNDMfx3TK2g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 17 Aug 2022 14:02:53 GMT
accept-ranges: bytes
content-length: 7720
cache-control: max-age=2592000, public
expires: Sun, 26 Feb 2023 11:15:45 GMT
content-type: image/png
date: Fri, 27 Jan 2023 11:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
medibuy.de/thumbnail/a3/b9/7e/1647423562/vorkasse_400x400.png
213.133.105.76200 OK 3.4 kB URL HTTP/2 medibuy.de/thumbnail/a3/b9/7e/1647423562/vorkasse_400x400.png
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 296 x 59, 8-bit/color RGBA, non-interlaced\012- data
Hash acfea59e8cd875cd024cfbf3d19dd41b
69598eac7549445f211e070d2345f0d9ba676390
e4aa7abfdf0141b057516bf9bddd14be8651a0ae9fe6fc05a723240fd5a8e19a
GET /thumbnail/a3/b9/7e/1647423562/vorkasse_400x400.png HTTP/1.1
Host: medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/Sejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack
Connection: keep-alive
Cookie: session-=2aaba35a66fc5a9aa496f5a825a3db64; csrf[frontend.checkout.line-item.add]=ab49733570.CUbO2rLBDUZdIYvpEFAERoizR7hwpn0ckZFcF6eY600.MCi_lPalIA0lGf-PT2lmftnhGNs-_kV68qUrQP71nyVsB7agxKQ8GTNqsw; csrf[frontend.account.login]=c7b2a980b5e34385.D1GXB7PzBRT9mzYKi_Tu9WsVYFKPICErQqcd4EAye5U.X2GudIaDU0278UNnvp6cpjhiUWfBEWJFNt5zqgR6VuI7FNts2IZpY8zydw; csrf[frontend.product.reviews]=b2504984f399.6xAXphrz8vn8u_CTlvNl9iOYreF99RYqIoyg1zcXULw.oSV04E2BgYqxyJvi85kqp1Cryao-v2xQWOratHwiBI6GXEKLSJvKqI3Ugw; csrf[frontend.store-api.proxy]=1504d755c20a1.zOkYu21eWaoMvq3F3LqpSmoAaDUPB352LQFaR41yYkE.qYVV2Cw2MsN1ivf9tI7wJitsGnR9Zho5fTAYf_RCCyqejU_oNDMfx3TK2g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 09:39:22 GMT
accept-ranges: bytes
content-length: 3411
cache-control: max-age=2592000, public
expires: Sun, 26 Feb 2023 11:15:45 GMT
content-type: image/png
date: Fri, 27 Jan 2023 11:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
medibuy.de/media/c7/93/b8/1647424094/rechnung.png
213.133.105.76200 OK 3.8 kB URL HTTP/2 medibuy.de/media/c7/93/b8/1647424094/rechnung.png
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 296 x 59, 8-bit/color RGBA, non-interlaced\012- data
Hash 8db2ae36a06c30c951bc5b07d7bc9148
8a309d77ae76de9ada1ba397dddb42b19b10d365
066098bde82e26620fd48cae563e63c82300403f1471d3b1daa3423032874855
GET /media/c7/93/b8/1647424094/rechnung.png HTTP/1.1
Host: medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/Sejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack
Connection: keep-alive
Cookie: session-=2aaba35a66fc5a9aa496f5a825a3db64; csrf[frontend.checkout.line-item.add]=ab49733570.CUbO2rLBDUZdIYvpEFAERoizR7hwpn0ckZFcF6eY600.MCi_lPalIA0lGf-PT2lmftnhGNs-_kV68qUrQP71nyVsB7agxKQ8GTNqsw; csrf[frontend.account.login]=c7b2a980b5e34385.D1GXB7PzBRT9mzYKi_Tu9WsVYFKPICErQqcd4EAye5U.X2GudIaDU0278UNnvp6cpjhiUWfBEWJFNt5zqgR6VuI7FNts2IZpY8zydw; csrf[frontend.product.reviews]=b2504984f399.6xAXphrz8vn8u_CTlvNl9iOYreF99RYqIoyg1zcXULw.oSV04E2BgYqxyJvi85kqp1Cryao-v2xQWOratHwiBI6GXEKLSJvKqI3Ugw; csrf[frontend.store-api.proxy]=1504d755c20a1.zOkYu21eWaoMvq3F3LqpSmoAaDUPB352LQFaR41yYkE.qYVV2Cw2MsN1ivf9tI7wJitsGnR9Zho5fTAYf_RCCyqejU_oNDMfx3TK2g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 09:48:14 GMT
accept-ranges: bytes
content-length: 3769
cache-control: max-age=2592000, public
expires: Sun, 26 Feb 2023 11:15:45 GMT
content-type: image/png
date: Fri, 27 Jan 2023 11:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
beta.medi-buy.de/mailster/1932/aef6a018634059845bdf90d03f626618/aHR0cHM6Ly9tZWRpYnV5LmRlL1Nlam95LUNvcm9uYS1BbnRpZ2VuLVNjaG5lbGx0ZXN0LUxhaWVudGVzdC0xZXItUGFjaw/2
217.160.0.82307 Temporary Redirect 5.0 kB URL HTTP/2 beta.medi-buy.de/mailster/1932/aef6a018634059845bdf90d03f626618/aHR0cHM6Ly9tZWRpYnV5LmRlL1Nlam95LUNvcm9uYS1BbnRpZ2VuLVNjaG5lbGx0ZXN0LUxhaWVudGVzdC0xZXItUGFjaw/2
IP 217.160.0.82:0
File type PNG image data, 380 x 180, 8-bit colormap, non-interlaced\012- data
Hash b436b228c185dd1694ee7dc90276a241
16f6d028dcb2ceed023e582620dc6b05792b9e53
00fe369484d1f2ffdcb4e94429c9f197b69ebd3baa6b1de2136b19ffc959f0b7
Analyzer Verdict Alert fortinet Phishing
GET /mailster/1932/aef6a018634059845bdf90d03f626618/aHR0cHM6Ly9tZWRpYnV5LmRlL1Nlam95LUNvcm9uYS1BbnRpZ2VuLVNjaG5lbGx0ZXN0LUxhaWVudGVzdC0xZXItUGFjaw/2 HTTP/1.1
Host: beta.medi-buy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 307 Temporary Redirect
content-type: text/html; charset=UTF-8
location: https://medibuy.de/Sejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack
date: Fri, 27 Jan 2023 11:15:43 GMT
server: Apache
x-powered-by: PHP/8.0.27
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: Mailster
set-cookie: mailster=aef6a018634059845bdf90d03f626618; expires=Fri, 27-Jan-2023 12:15:44 GMT; Max-Age=3600; path=/
X-Firefox-Spdy: h2
medibuy.de/media/0b/db/27/1647424306/PayPal.png
213.133.105.76200 OK 1.2 kB URL HTTP/2 medibuy.de/media/0b/db/27/1647424306/PayPal.png
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 52 x 13, 8-bit/color RGBA, non-interlaced\012- data
Hash 10e74d7f9c80fa575a82d281d59b07d7
ab28ead6cfd04169bcbb9abe0b72cc6114fdcd04
87c23da20335fef912b5f73054479da28932b7150964dd00f04621f7d66cb88b
GET /media/0b/db/27/1647424306/PayPal.png HTTP/1.1
Host: medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/Sejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack
Connection: keep-alive
Cookie: session-=2aaba35a66fc5a9aa496f5a825a3db64; csrf[frontend.checkout.line-item.add]=ab49733570.CUbO2rLBDUZdIYvpEFAERoizR7hwpn0ckZFcF6eY600.MCi_lPalIA0lGf-PT2lmftnhGNs-_kV68qUrQP71nyVsB7agxKQ8GTNqsw; csrf[frontend.account.login]=c7b2a980b5e34385.D1GXB7PzBRT9mzYKi_Tu9WsVYFKPICErQqcd4EAye5U.X2GudIaDU0278UNnvp6cpjhiUWfBEWJFNt5zqgR6VuI7FNts2IZpY8zydw; csrf[frontend.product.reviews]=b2504984f399.6xAXphrz8vn8u_CTlvNl9iOYreF99RYqIoyg1zcXULw.oSV04E2BgYqxyJvi85kqp1Cryao-v2xQWOratHwiBI6GXEKLSJvKqI3Ugw; csrf[frontend.store-api.proxy]=1504d755c20a1.zOkYu21eWaoMvq3F3LqpSmoAaDUPB352LQFaR41yYkE.qYVV2Cw2MsN1ivf9tI7wJitsGnR9Zho5fTAYf_RCCyqejU_oNDMfx3TK2g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 09:51:46 GMT
accept-ranges: bytes
content-length: 1209
cache-control: max-age=2592000, public
expires: Sun, 26 Feb 2023 11:15:45 GMT
content-type: image/png
date: Fri, 27 Jan 2023 11:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
213.133.105.76200 OK 59 kB URL HTTP/2 medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 35697429725d86a7d72aa46bbb2c53d1
0369103b9fec673e0161ccad3dd598251ade7da5
7d42be5c4f29593b4b627137efcbc76d04c04ccfa97fc213134ce0ab7c5b039e
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307 HTTP/1.1
Host: medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/Sejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack
Connection: keep-alive
Cookie: session-=2aaba35a66fc5a9aa496f5a825a3db64; csrf[frontend.checkout.line-item.add]=ab49733570.CUbO2rLBDUZdIYvpEFAERoizR7hwpn0ckZFcF6eY600.MCi_lPalIA0lGf-PT2lmftnhGNs-_kV68qUrQP71nyVsB7agxKQ8GTNqsw; csrf[frontend.account.login]=c7b2a980b5e34385.D1GXB7PzBRT9mzYKi_Tu9WsVYFKPICErQqcd4EAye5U.X2GudIaDU0278UNnvp6cpjhiUWfBEWJFNt5zqgR6VuI7FNts2IZpY8zydw; csrf[frontend.product.reviews]=b2504984f399.6xAXphrz8vn8u_CTlvNl9iOYreF99RYqIoyg1zcXULw.oSV04E2BgYqxyJvi85kqp1Cryao-v2xQWOratHwiBI6GXEKLSJvKqI3Ugw; csrf[frontend.store-api.proxy]=1504d755c20a1.zOkYu21eWaoMvq3F3LqpSmoAaDUPB352LQFaR41yYkE.qYVV2Cw2MsN1ivf9tI7wJitsGnR9Zho5fTAYf_RCCyqejU_oNDMfx3TK2g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000, public
expires: Sun, 26 Feb 2023 11:15:45 GMT
vary: Accept-Encoding
content-encoding: br
content-length: 58936
content-type: text/css
date: Fri, 27 Jan 2023 11:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
medibuy.de/media/2d/d3/21/1647427612/UPS.svg
213.133.105.76200 OK 9.8 kB URL HTTP/2 medibuy.de/media/2d/d3/21/1647427612/UPS.svg
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (9839), with no line terminators
Hash 7d431787d0670bbfed25042f31765950
7806b1cbd22e59454e0db311a57a0dc6f4c95044
be5355d455d0f806217d793bf05c06583a7e8fae0868f5ce5234dfc9a742c7df
GET /media/2d/d3/21/1647427612/UPS.svg HTTP/1.1
Host: medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/Sejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack
Connection: keep-alive
Cookie: session-=2aaba35a66fc5a9aa496f5a825a3db64; csrf[frontend.checkout.line-item.add]=ab49733570.CUbO2rLBDUZdIYvpEFAERoizR7hwpn0ckZFcF6eY600.MCi_lPalIA0lGf-PT2lmftnhGNs-_kV68qUrQP71nyVsB7agxKQ8GTNqsw; csrf[frontend.account.login]=c7b2a980b5e34385.D1GXB7PzBRT9mzYKi_Tu9WsVYFKPICErQqcd4EAye5U.X2GudIaDU0278UNnvp6cpjhiUWfBEWJFNt5zqgR6VuI7FNts2IZpY8zydw; csrf[frontend.product.reviews]=b2504984f399.6xAXphrz8vn8u_CTlvNl9iOYreF99RYqIoyg1zcXULw.oSV04E2BgYqxyJvi85kqp1Cryao-v2xQWOratHwiBI6GXEKLSJvKqI3Ugw; csrf[frontend.store-api.proxy]=1504d755c20a1.zOkYu21eWaoMvq3F3LqpSmoAaDUPB352LQFaR41yYkE.qYVV2Cw2MsN1ivf9tI7wJitsGnR9Zho5fTAYf_RCCyqejU_oNDMfx3TK2g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 10:46:52 GMT
accept-ranges: bytes
content-length: 9839
cache-control: max-age=2592000, public
expires: Sun, 26 Feb 2023 11:15:45 GMT
content-security-policy: script-src 'none'
content-type: image/svg+xml
date: Fri, 27 Jan 2023 11:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
medibuy.de/media/de/61/51/1647427683/DPD.svg
213.133.105.76200 OK 1.8 kB URL HTTP/2 medibuy.de/media/de/61/51/1647427683/DPD.svg
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1784), with no line terminators
Hash dd28c0a5daef8ea0fa5b4fdfb922e642
6835ab6acdc420dd3cfcc5bc65db9c68e9a1e3c7
8234e24e56d28f50892e97f85b54c48ef8da0605a59dd5e82de53112ff4117ed
GET /media/de/61/51/1647427683/DPD.svg HTTP/1.1
Host: medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/Sejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack
Connection: keep-alive
Cookie: session-=2aaba35a66fc5a9aa496f5a825a3db64; csrf[frontend.checkout.line-item.add]=ab49733570.CUbO2rLBDUZdIYvpEFAERoizR7hwpn0ckZFcF6eY600.MCi_lPalIA0lGf-PT2lmftnhGNs-_kV68qUrQP71nyVsB7agxKQ8GTNqsw; csrf[frontend.account.login]=c7b2a980b5e34385.D1GXB7PzBRT9mzYKi_Tu9WsVYFKPICErQqcd4EAye5U.X2GudIaDU0278UNnvp6cpjhiUWfBEWJFNt5zqgR6VuI7FNts2IZpY8zydw; csrf[frontend.product.reviews]=b2504984f399.6xAXphrz8vn8u_CTlvNl9iOYreF99RYqIoyg1zcXULw.oSV04E2BgYqxyJvi85kqp1Cryao-v2xQWOratHwiBI6GXEKLSJvKqI3Ugw; csrf[frontend.store-api.proxy]=1504d755c20a1.zOkYu21eWaoMvq3F3LqpSmoAaDUPB352LQFaR41yYkE.qYVV2Cw2MsN1ivf9tI7wJitsGnR9Zho5fTAYf_RCCyqejU_oNDMfx3TK2g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 10:48:03 GMT
accept-ranges: bytes
content-length: 1784
cache-control: max-age=2592000, public
expires: Sun, 26 Feb 2023 11:15:45 GMT
content-security-policy: script-src 'none'
content-type: image/svg+xml
date: Fri, 27 Jan 2023 11:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
medibuy.de/media/82/e2/a0/1647426572/Hermes.svg
213.133.105.76200 OK 9.4 kB URL HTTP/2 medibuy.de/media/82/e2/a0/1647426572/Hermes.svg
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (9350), with no line terminators
Hash 5f5624b00ef137c75797afa4cca2ad88
55e72269cfd7e4690830fe00fdffdcae157d5894
166ab49b3471568a0e08af48c9f41a260397eec8032a2b1774d22f2edb830d3c
GET /media/82/e2/a0/1647426572/Hermes.svg HTTP/1.1
Host: medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/Sejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack
Connection: keep-alive
Cookie: session-=2aaba35a66fc5a9aa496f5a825a3db64; csrf[frontend.checkout.line-item.add]=ab49733570.CUbO2rLBDUZdIYvpEFAERoizR7hwpn0ckZFcF6eY600.MCi_lPalIA0lGf-PT2lmftnhGNs-_kV68qUrQP71nyVsB7agxKQ8GTNqsw; csrf[frontend.account.login]=c7b2a980b5e34385.D1GXB7PzBRT9mzYKi_Tu9WsVYFKPICErQqcd4EAye5U.X2GudIaDU0278UNnvp6cpjhiUWfBEWJFNt5zqgR6VuI7FNts2IZpY8zydw; csrf[frontend.product.reviews]=b2504984f399.6xAXphrz8vn8u_CTlvNl9iOYreF99RYqIoyg1zcXULw.oSV04E2BgYqxyJvi85kqp1Cryao-v2xQWOratHwiBI6GXEKLSJvKqI3Ugw; csrf[frontend.store-api.proxy]=1504d755c20a1.zOkYu21eWaoMvq3F3LqpSmoAaDUPB352LQFaR41yYkE.qYVV2Cw2MsN1ivf9tI7wJitsGnR9Zho5fTAYf_RCCyqejU_oNDMfx3TK2g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 10:29:32 GMT
accept-ranges: bytes
content-length: 9350
cache-control: max-age=2592000, public
expires: Sun, 26 Feb 2023 11:15:45 GMT
content-security-policy: script-src 'none'
content-type: image/svg+xml
date: Fri, 27 Jan 2023 11:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
medibuy.de/media/0f/55/eb/1647434309/gls.jpg
213.133.105.76200 OK 21 kB URL HTTP/2 medibuy.de/media/0f/55/eb/1647434309/gls.jpg
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1168x657, components 3\012- data
Hash ea8c3240f3a929801f0525d005eddc25
ef6b0286016c58e8722cbf64b1e185b61e80486a
bdcbf3e1707aba9169bff1919ff05fe7f06f76ef3b9046f081534b947a041bf9
GET /media/0f/55/eb/1647434309/gls.jpg HTTP/1.1
Host: medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/Sejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack
Connection: keep-alive
Cookie: session-=2aaba35a66fc5a9aa496f5a825a3db64; csrf[frontend.checkout.line-item.add]=ab49733570.CUbO2rLBDUZdIYvpEFAERoizR7hwpn0ckZFcF6eY600.MCi_lPalIA0lGf-PT2lmftnhGNs-_kV68qUrQP71nyVsB7agxKQ8GTNqsw; csrf[frontend.account.login]=c7b2a980b5e34385.D1GXB7PzBRT9mzYKi_Tu9WsVYFKPICErQqcd4EAye5U.X2GudIaDU0278UNnvp6cpjhiUWfBEWJFNt5zqgR6VuI7FNts2IZpY8zydw; csrf[frontend.product.reviews]=b2504984f399.6xAXphrz8vn8u_CTlvNl9iOYreF99RYqIoyg1zcXULw.oSV04E2BgYqxyJvi85kqp1Cryao-v2xQWOratHwiBI6GXEKLSJvKqI3Ugw; csrf[frontend.store-api.proxy]=1504d755c20a1.zOkYu21eWaoMvq3F3LqpSmoAaDUPB352LQFaR41yYkE.qYVV2Cw2MsN1ivf9tI7wJitsGnR9Zho5fTAYf_RCCyqejU_oNDMfx3TK2g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 12:38:29 GMT
accept-ranges: bytes
content-length: 20730
cache-control: max-age=2592000, public
expires: Sun, 26 Feb 2023 11:15:45 GMT
content-type: image/jpeg
date: Fri, 27 Jan 2023 11:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
medibuy.de/media/90/e1/80/1647434313/dhl.png
213.133.105.76200 OK 23 kB URL HTTP/2 medibuy.de/media/90/e1/80/1647434313/dhl.png
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 892 x 660, 8-bit/color RGBA, non-interlaced\012- data
Hash f701ba545c40d9022dc97668c7400a43
91c4cad7ae63f5f751dff1bc0a2ebede2e64d908
f97e17aa330ea80f47c7f90e46af5cbea114e31d835d4bb39956a8ff2379e9f6
GET /media/90/e1/80/1647434313/dhl.png HTTP/1.1
Host: medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/Sejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack
Connection: keep-alive
Cookie: session-=2aaba35a66fc5a9aa496f5a825a3db64; csrf[frontend.checkout.line-item.add]=ab49733570.CUbO2rLBDUZdIYvpEFAERoizR7hwpn0ckZFcF6eY600.MCi_lPalIA0lGf-PT2lmftnhGNs-_kV68qUrQP71nyVsB7agxKQ8GTNqsw; csrf[frontend.account.login]=c7b2a980b5e34385.D1GXB7PzBRT9mzYKi_Tu9WsVYFKPICErQqcd4EAye5U.X2GudIaDU0278UNnvp6cpjhiUWfBEWJFNt5zqgR6VuI7FNts2IZpY8zydw; csrf[frontend.product.reviews]=b2504984f399.6xAXphrz8vn8u_CTlvNl9iOYreF99RYqIoyg1zcXULw.oSV04E2BgYqxyJvi85kqp1Cryao-v2xQWOratHwiBI6GXEKLSJvKqI3Ugw; csrf[frontend.store-api.proxy]=1504d755c20a1.zOkYu21eWaoMvq3F3LqpSmoAaDUPB352LQFaR41yYkE.qYVV2Cw2MsN1ivf9tI7wJitsGnR9Zho5fTAYf_RCCyqejU_oNDMfx3TK2g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 12:38:33 GMT
accept-ranges: bytes
content-length: 23109
cache-control: max-age=2592000, public
expires: Sun, 26 Feb 2023 11:15:45 GMT
content-type: image/png
date: Fri, 27 Jan 2023 11:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Regular.woff2
213.133.105.76200 OK 100 kB URL HTTP/2 medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Regular.woff2
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format (Version 2), TrueType, length 100088, version 1.0\012- data
Size 100 kB (100088 bytes)
Hash 77812e2fead777db0dc806b1eaabc7fd
512526689a4fd677ffca333a9dc1d412ad44caaf
77677cd3d62f53fce403b743c6ab0dfacf6109cfa5f2c511a57b0779222c76de
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Regular.woff2 HTTP/1.1
Host: medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
Cookie: session-=2aaba35a66fc5a9aa496f5a825a3db64; csrf[frontend.checkout.line-item.add]=ab49733570.CUbO2rLBDUZdIYvpEFAERoizR7hwpn0ckZFcF6eY600.MCi_lPalIA0lGf-PT2lmftnhGNs-_kV68qUrQP71nyVsB7agxKQ8GTNqsw; csrf[frontend.account.login]=c7b2a980b5e34385.D1GXB7PzBRT9mzYKi_Tu9WsVYFKPICErQqcd4EAye5U.X2GudIaDU0278UNnvp6cpjhiUWfBEWJFNt5zqgR6VuI7FNts2IZpY8zydw; csrf[frontend.product.reviews]=b2504984f399.6xAXphrz8vn8u_CTlvNl9iOYreF99RYqIoyg1zcXULw.oSV04E2BgYqxyJvi85kqp1Cryao-v2xQWOratHwiBI6GXEKLSJvKqI3Ugw; csrf[frontend.store-api.proxy]=1504d755c20a1.zOkYu21eWaoMvq3F3LqpSmoAaDUPB352LQFaR41yYkE.qYVV2Cw2MsN1ivf9tI7wJitsGnR9Zho5fTAYf_RCCyqejU_oNDMfx3TK2g
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 100088
cache-control: max-age=2592000, public, s-maxage=10
expires: Sun, 26 Feb 2023 11:15:45 GMT
content-type: font/woff2
date: Fri, 27 Jan 2023 11:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-SemiBold.woff2
213.133.105.76200 OK 107 kB URL HTTP/2 medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-SemiBold.woff2
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format (Version 2), TrueType, length 107184, version 1.0\012- data
Size 107 kB (107184 bytes)
Hash 3d011804596fb2ccde4af51830a9a7d5
999e92214edfb5b102919586df4cfe16f7ddaccb
e9bb1331830a18e2504d966f1fa931e711cad726e454722f324d63534cec97d9
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-SemiBold.woff2 HTTP/1.1
Host: medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
Cookie: session-=2aaba35a66fc5a9aa496f5a825a3db64; csrf[frontend.checkout.line-item.add]=ab49733570.CUbO2rLBDUZdIYvpEFAERoizR7hwpn0ckZFcF6eY600.MCi_lPalIA0lGf-PT2lmftnhGNs-_kV68qUrQP71nyVsB7agxKQ8GTNqsw; csrf[frontend.account.login]=c7b2a980b5e34385.D1GXB7PzBRT9mzYKi_Tu9WsVYFKPICErQqcd4EAye5U.X2GudIaDU0278UNnvp6cpjhiUWfBEWJFNt5zqgR6VuI7FNts2IZpY8zydw; csrf[frontend.product.reviews]=b2504984f399.6xAXphrz8vn8u_CTlvNl9iOYreF99RYqIoyg1zcXULw.oSV04E2BgYqxyJvi85kqp1Cryao-v2xQWOratHwiBI6GXEKLSJvKqI3Ugw; csrf[frontend.store-api.proxy]=1504d755c20a1.zOkYu21eWaoMvq3F3LqpSmoAaDUPB352LQFaR41yYkE.qYVV2Cw2MsN1ivf9tI7wJitsGnR9Zho5fTAYf_RCCyqejU_oNDMfx3TK2g
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 107184
cache-control: max-age=2592000, public, s-maxage=10
expires: Sun, 26 Feb 2023 11:15:45 GMT
content-type: font/woff2
date: Fri, 27 Jan 2023 11:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Bold.woff2
213.133.105.76200 OK 107 kB URL HTTP/2 medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Bold.woff2
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format (Version 2), TrueType, length 107300, version 1.0\012- data
Size 107 kB (107300 bytes)
Hash 741dc4163a97ffa354979f18802f6ca8
0e4b89a4a2801dd5e25364f439d7bfee47594762
20fd98b18d523471ae687971086817766649ce25f32e438d14711561a95bc9e9
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Bold.woff2 HTTP/1.1
Host: medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
Cookie: session-=2aaba35a66fc5a9aa496f5a825a3db64; csrf[frontend.checkout.line-item.add]=ab49733570.CUbO2rLBDUZdIYvpEFAERoizR7hwpn0ckZFcF6eY600.MCi_lPalIA0lGf-PT2lmftnhGNs-_kV68qUrQP71nyVsB7agxKQ8GTNqsw; csrf[frontend.account.login]=c7b2a980b5e34385.D1GXB7PzBRT9mzYKi_Tu9WsVYFKPICErQqcd4EAye5U.X2GudIaDU0278UNnvp6cpjhiUWfBEWJFNt5zqgR6VuI7FNts2IZpY8zydw; csrf[frontend.product.reviews]=b2504984f399.6xAXphrz8vn8u_CTlvNl9iOYreF99RYqIoyg1zcXULw.oSV04E2BgYqxyJvi85kqp1Cryao-v2xQWOratHwiBI6GXEKLSJvKqI3Ugw; csrf[frontend.store-api.proxy]=1504d755c20a1.zOkYu21eWaoMvq3F3LqpSmoAaDUPB352LQFaR41yYkE.qYVV2Cw2MsN1ivf9tI7wJitsGnR9Zho5fTAYf_RCCyqejU_oNDMfx3TK2g
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 107300
cache-control: max-age=2592000, public, s-maxage=10
expires: Sun, 26 Feb 2023 11:15:45 GMT
content-type: font/woff2
date: Fri, 27 Jan 2023 11:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 5d26c41823a6e8c5fdcf3c28efbfdd01
2415b281bb7ee36d62aec11e477e4797e8bbc10c
e7c952964c5abd9aa20b354673bedf66a9ddb64c8c9ce0075a6601fe5d28cabe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 11:15:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-5ZRS4MZ
142.250.74.168200 OK 59 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-5ZRS4MZ
IP 142.250.74.168:0
File type ASCII text, with very long lines (2655)
Hash 9630d69d90af5108ef62858076e1d0c3
8f5f938dab17294d6dd978cf0359d10ed5b3e733
90598673ec7329760926bcdc50360e72860559d11297681fb483606face7d2e1
GET /gtm.js?id=GTM-5ZRS4MZ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 27 Jan 2023 11:15:45 GMT
expires: Fri, 27 Jan 2023 11:15:45 GMT
cache-control: private, max-age=900
last-modified: Fri, 27 Jan 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 59206
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
medibuy.de/widgets/checkout/info
213.133.105.76200 OK 511 B URL HTTP/2 medibuy.de/widgets/checkout/info
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (893)
Hash 493a5de4e5ee35b780abd036727f3864
99ab201cb7443a982c8b70945c6e0e64529e69cc
6570e674f01a7fd1efc6e7545379a0a48362799a0e32f9759fa2286786d0ad4a
GET /widgets/checkout/info HTTP/1.1
Host: medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/Sejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack
X-Requested-With: XMLHttpRequest
Content-type: application/json
Connection: keep-alive
Cookie: session-=2aaba35a66fc5a9aa496f5a825a3db64; csrf[frontend.checkout.line-item.add]=ab49733570.CUbO2rLBDUZdIYvpEFAERoizR7hwpn0ckZFcF6eY600.MCi_lPalIA0lGf-PT2lmftnhGNs-_kV68qUrQP71nyVsB7agxKQ8GTNqsw; csrf[frontend.account.login]=c7b2a980b5e34385.D1GXB7PzBRT9mzYKi_Tu9WsVYFKPICErQqcd4EAye5U.X2GudIaDU0278UNnvp6cpjhiUWfBEWJFNt5zqgR6VuI7FNts2IZpY8zydw; csrf[frontend.product.reviews]=b2504984f399.6xAXphrz8vn8u_CTlvNl9iOYreF99RYqIoyg1zcXULw.oSV04E2BgYqxyJvi85kqp1Cryao-v2xQWOratHwiBI6GXEKLSJvKqI3Ugw; csrf[frontend.store-api.proxy]=1504d755c20a1.zOkYu21eWaoMvq3F3LqpSmoAaDUPB352LQFaR41yYkE.qYVV2Cw2MsN1ivf9tI7wJitsGnR9Zho5fTAYf_RCCyqejU_oNDMfx3TK2g; timezone=UTC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 11:15:45 GMT
x-robots-tag: noindex
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: deny
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-mod-pagespeed: 1.13.35.2-0
cache-control: no-cache, private, max-age=0, no-cache
vary: Accept-Encoding
content-encoding: br
content-length: 511
content-type: text/html; charset=UTF-8
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 5d26c41823a6e8c5fdcf3c28efbfdd01
2415b281bb7ee36d62aec11e477e4797e8bbc10c
e7c952964c5abd9aa20b354673bedf66a9ddb64c8c9ce0075a6601fe5d28cabe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 11:15:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3608
Expires: Fri, 27 Jan 2023 12:15:53 GMT
Date: Fri, 27 Jan 2023 11:15:45 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3608
Expires: Fri, 27 Jan 2023 12:15:53 GMT
Date: Fri, 27 Jan 2023 11:15:45 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3608
Expires: Fri, 27 Jan 2023 12:15:53 GMT
Date: Fri, 27 Jan 2023 11:15:45 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3608
Expires: Fri, 27 Jan 2023 12:15:53 GMT
Date: Fri, 27 Jan 2023 11:15:45 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg
34.120.237.76200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5e7158416f60576804ccff03307319fe
a342f94625e913fa6b8d862a59979f1e3ad80dd1
5c525df7d169cc7e033d920c11f4a0163a781c025a22b70530882b56964a9a52
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5737
x-amzn-requestid: cc977ea9-c418-4a5a-a13b-c86e16bbe6ba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fRGPFGL5oAMFiSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d050c6-2d540cac5ca7d4e64cfdb8bc;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 21:42:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uZnA5gkRlZyqamh_n3992G9PlMJa4gJ-mjSOQEysII73dDKLXmeXsg==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 12:26:22 GMT
age: 82163
etag: "a342f94625e913fa6b8d862a59979f1e3ad80dd1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
34.120.237.76200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ba0a42dadf6a976df148f652e9cc1844
4d825b74865effa4a858ddcad1d0969671facc07
7276a38c9ba6b13a06f24ab8b802f210f98c5541df53fbcd8e879a14d2957d95
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5943
x-amzn-requestid: 6774f4a4-ed83-49df-868f-4517c2af914b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUXxNF2UIAMFlYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a007-75b1e8975c3f4b503e0a1c5b;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:55 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MeE0Qrn_yZvUApGQTbOKQ14Z2ipPLbPFPyVqkKTk0Bs7ETn0UU6yMg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 21:48:43 GMT
age: 48422
etag: "4d825b74865effa4a858ddcad1d0969671facc07"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 131eb343c5abd61939457d69bd371348
ffb2035cf64fc83f01db5c6f26ffa264b6aac95b
8486eb9dc6325018f8721bc6f37408f260b6e652b145280f2d778d860d3ec2d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7538
x-amzn-requestid: 113924cc-a196-4dbd-91d9-68c213265afe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3fobF-ZoAMFjjA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c61302-6b24941a642b22cf21e47dc0;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 03:16:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2P09wOtKPDHjxxAuzcLFMQJwmGN1zNJcH9LA6IJpeaGiaPVRF4y-TA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 21:59:56 GMT
age: 47749
etag: "ffb2035cf64fc83f01db5c6f26ffa264b6aac95b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91a77b6d-ccc1-422b-8493-221c615accaf.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91a77b6d-ccc1-422b-8493-221c615accaf.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e0fe44d9606e6a149a253423f312dfc5
78e442e8a9142311c25dafd01823a240f4acb0d6
9aad8938c1fda9641f95a4369f57ea57303a28e05f56e3bb1961e17cfbb123f4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91a77b6d-ccc1-422b-8493-221c615accaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13175
x-amzn-requestid: 14ccf28a-a84a-4903-9edc-7659096cb3ae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fRxOCFrkIAMFt8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d0958c-6a67f1aa65038439793808fd;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 02:35:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 10J4VSVgerDXDZu4y_1eRSX9p883b6Rx82BCc-B2Ck4Z8Eh31jB5uA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 07:43:52 GMT
age: 12713
etag: "78e442e8a9142311c25dafd01823a240f4acb0d6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6bc02c23-d6b7-4540-bebd-59cf20f191e3.jpeg
34.120.237.76200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6bc02c23-d6b7-4540-bebd-59cf20f191e3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5b31e73071ee6af880d3939c698c0514
1ac5ee7d1398eb29a9484a1154b0c96556bb6bf4
bc5520882250fc495f2da3c114f83b8f690dc6d8dc67ac759a183c88581fb967
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6bc02c23-d6b7-4540-bebd-59cf20f191e3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5378
x-amzn-requestid: 907321d1-ba63-4c67-9e20-605a090da987
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUXxDHH_IAMFXxw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a006-4cc2e9550d0b6b504bd09899;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EsKE5lHMRa9uiqkdhhiJyaDfr0rH9waQeKtbdoYpsHUR4Ywo0TxweQ==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 21:57:34 GMT
age: 47891
etag: "1ac5ee7d1398eb29a9484a1154b0c96556bb6bf4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd33883a9-7857-4110-892f-73f67db692bc.jpeg
34.120.237.76200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd33883a9-7857-4110-892f-73f67db692bc.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a85badd84c0542610b94f22c4f265511
5b490095b5e02d9fef4b762888353998b645dfc9
23d6d9848caf36f0556438c371f112b40dcbf9b08b8b27bd37d4d73960c701c1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd33883a9-7857-4110-892f-73f67db692bc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9482
x-amzn-requestid: 825c5e6b-8fda-445e-9ed3-f5d634943c00
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fIZd0HqkIAMFn7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ccd5f1-2b31fe3001a1b04a406ff7ff;Sampled=0
x-amzn-remapped-date: Sun, 22 Jan 2023 06:21:37 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CLTiEOu21gcngjMAN7EcwiAVeXsOYrTqwKr-puh4Cq9W51bI4WivVQ==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 05:22:53 GMT
age: 21172
etag: "5b490095b5e02d9fef4b762888353998b645dfc9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a10e2eaf8bb1fe15ecaede758a645dfd
de645ccd2d6f4f1cebb6cfb14b8a273e3b1f934d
09e008202b104ab8a86ffcd3580575c0a516f21c0ddfeeae718f2c7cdf5f85f7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6243
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 11:15:45 GMT
Last-Modified: Fri, 27 Jan 2023 09:31:42 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
medibuy.de/media/17/a7/ac/1646226955/medi-buy-favicon.png?width=3000
213.133.105.76200 OK 4.6 kB URL HTTP/2 medibuy.de/media/17/a7/ac/1646226955/medi-buy-favicon.png?width=3000
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 512 x 512, 4-bit colormap, non-interlaced\012- data
Hash 88c734babd964cc8ae1839e9be164ca9
78fc99bde11eb697353244aa8f7ff3297d9bd9cd
63e35c5c2d81ece3ac43436b7ba8642767a01d88064a04c13ac488157532e342
GET /media/17/a7/ac/1646226955/medi-buy-favicon.png?width=3000 HTTP/1.1
Host: medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/Sejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack
Connection: keep-alive
Cookie: session-=2aaba35a66fc5a9aa496f5a825a3db64; csrf[frontend.checkout.line-item.add]=ab49733570.CUbO2rLBDUZdIYvpEFAERoizR7hwpn0ckZFcF6eY600.MCi_lPalIA0lGf-PT2lmftnhGNs-_kV68qUrQP71nyVsB7agxKQ8GTNqsw; csrf[frontend.account.login]=c7b2a980b5e34385.D1GXB7PzBRT9mzYKi_Tu9WsVYFKPICErQqcd4EAye5U.X2GudIaDU0278UNnvp6cpjhiUWfBEWJFNt5zqgR6VuI7FNts2IZpY8zydw; csrf[frontend.product.reviews]=b2504984f399.6xAXphrz8vn8u_CTlvNl9iOYreF99RYqIoyg1zcXULw.oSV04E2BgYqxyJvi85kqp1Cryao-v2xQWOratHwiBI6GXEKLSJvKqI3Ugw; csrf[frontend.store-api.proxy]=1504d755c20a1.zOkYu21eWaoMvq3F3LqpSmoAaDUPB352LQFaR41yYkE.qYVV2Cw2MsN1ivf9tI7wJitsGnR9Zho5fTAYf_RCCyqejU_oNDMfx3TK2g; timezone=UTC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Mar 2022 13:15:55 GMT
accept-ranges: bytes
content-length: 4599
cache-control: max-age=2592000, public
expires: Sun, 26 Feb 2023 11:15:45 GMT
content-type: image/png
date: Fri, 27 Jan 2023 11:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
medibuy.de/media/38/85/50/1649169170/sejoy-corona-antigen-schnelltest-laientest-1er.jpg?width=800
213.133.105.76200 OK 165 kB URL HTTP/2 medibuy.de/media/38/85/50/1649169170/sejoy-corona-antigen-schnelltest-laientest-1er.jpg?width=800
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.1 (Windows), datetime=2022:01:22 17:58:13], baseline, precision 8, 1000x1000, components 3\012- data
Size 165 kB (164948 bytes)
Hash 31e14bb1022edabbd8949369edc5926c
8e8cc52b07a06d94ab3fdfa5c0c13f98331d7eaf
8a7e367e43cf83ddced24509396a38d966a2840789f5257cbad26842bd88be39
GET /media/38/85/50/1649169170/sejoy-corona-antigen-schnelltest-laientest-1er.jpg?width=800 HTTP/1.1
Host: medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/Sejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack
Connection: keep-alive
Cookie: session-=2aaba35a66fc5a9aa496f5a825a3db64; csrf[frontend.checkout.line-item.add]=ab49733570.CUbO2rLBDUZdIYvpEFAERoizR7hwpn0ckZFcF6eY600.MCi_lPalIA0lGf-PT2lmftnhGNs-_kV68qUrQP71nyVsB7agxKQ8GTNqsw; csrf[frontend.account.login]=c7b2a980b5e34385.D1GXB7PzBRT9mzYKi_Tu9WsVYFKPICErQqcd4EAye5U.X2GudIaDU0278UNnvp6cpjhiUWfBEWJFNt5zqgR6VuI7FNts2IZpY8zydw; csrf[frontend.product.reviews]=b2504984f399.6xAXphrz8vn8u_CTlvNl9iOYreF99RYqIoyg1zcXULw.oSV04E2BgYqxyJvi85kqp1Cryao-v2xQWOratHwiBI6GXEKLSJvKqI3Ugw; csrf[frontend.store-api.proxy]=1504d755c20a1.zOkYu21eWaoMvq3F3LqpSmoAaDUPB352LQFaR41yYkE.qYVV2Cw2MsN1ivf9tI7wJitsGnR9Zho5fTAYf_RCCyqejU_oNDMfx3TK2g; timezone=UTC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 05 Apr 2022 14:32:50 GMT
accept-ranges: bytes
content-length: 164948
cache-control: max-age=2592000, public, s-maxage=10
expires: Sun, 26 Feb 2023 11:15:45 GMT
content-type: image/jpeg
date: Fri, 27 Jan 2023 11:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash 769116c0a2d65a2c0dd6784f6ccfb834
2a7f8f7d1c84c2042a1a3b5641ed17168a282ba5
21986a24ef4d97db2d57ed4788afb5c5668452e2a97350b92338022157d4d6f0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 27 Jan 2023 11:15:46 GMT
Last-Modified: Fri, 27 Jan 2023 09:35:30 GMT
Server: ECS (nyb/1D1C)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9NeJoHKL-wcaNGR3CoYX4AIog84G3Y_OqrfBD1HjwkW3t8Q-Nbit9g==
Age: 6016
www.google-analytics.com/analytics.js
142.250.74.14200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.14:0
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Fri, 27 Jan 2023 09:45:20 GMT
expires: Fri, 27 Jan 2023 11:45:20 GMT
cache-control: public, max-age=7200
age: 5426
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bootstrap.smartsuppchat.com/widget/8da5a9d4fd2fd1bdd32ecfd5ef6ddd92f9ac21df.json
18.192.59.1200 OK 164 kB URL HTTP/2 bootstrap.smartsuppchat.com/widget/8da5a9d4fd2fd1bdd32ecfd5ef6ddd92f9ac21df.json
IP 18.192.59.1:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (1217), with no line terminators
Size 164 kB (163885 bytes)
Hash 1c6586e614993d6d379371e2fa1beb8b
c1089bffd12e7a778fe9d4adaf8c8ed6beefa302
620531f2b8d5c5ffa9f2722cb1559379adbeeff74898965ce2e183234fc13c1b
GET /widget/8da5a9d4fd2fd1bdd32ecfd5ef6ddd92f9ac21df.json HTTP/1.1
Host: bootstrap.smartsuppchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/
Content-Type: text/plain
Origin: https://medibuy.de
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 27 Jan 2023 11:15:46 GMT
content-type: application/json; charset=utf-8
x-version: 53ea911f61896be6992922257e82b4783f6cf210
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: private, max-age=0, must-revalidate
x-hit: redis
etag: "4c2-q/mmrvu9CQfBvKqxkvd0fmvkzN8"
content-encoding: br
X-Firefox-Spdy: h2
widget-v2.smartsuppcdn.com/static/js/runtime-main.f3d23b3d.js
185.76.9.15200 OK 1.3 kB URL HTTP/2 widget-v2.smartsuppcdn.com/static/js/runtime-main.f3d23b3d.js
IP 185.76.9.15:0
ASN #60068 Datacamp Limited
Hash d368bb94d4a309bc83a812585e13023f
33aa20619478275fb39718c93c6e605d2390fca1
6971afa573b2cfead68e1f7d1c9c728f468397c8b9a8f4bc47e107050757d62c
GET /static/js/runtime-main.f3d23b3d.js HTTP/1.1
Host: widget-v2.smartsuppcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 27 Jan 2023 11:15:46 GMT
content-type: application/javascript
last-modified: Tue, 17 Jan 2023 07:36:57 GMT
etag: W/"63c65019-9bd"
expires: Wed, 17 Jan 2024 09:18:34 GMT
cache-control: max-age=31536000, public, immutable
access-control-allow-origin: *
x-accel-expires: @1705483114
server: CDN77-Turbo
x-77-nzt: AblMCQ0AgPP/eEoNAA
x-77-nzt-ray: c0a4cc28c74a2cd062b2d363986b1514
x-cache: HIT
x-age: 871032
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
www.paypal.com/sdk/js?components=buttons,messages,hosted-fields,funding-eligibility&client-id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&commit=true&locale=de_DE¤cy=EUR&intent=capture&merchant-id=GNSPGCCJR6URW
192.229.221.25200 OK 158 kB URL HTTP/2 www.paypal.com/sdk/js?components=buttons,messages,hosted-fields,funding-eligibility&client-id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&commit=true&locale=de_DE¤cy=EUR&intent=capture&merchant-id=GNSPGCCJR6URW
IP 192.229.221.25:0
File type ASCII text, with very long lines (65472)
Size 158 kB (158053 bytes)
Hash 6579c775fc42e0f15bd97fcbbac1ab06
2c8e1cb8420af4dda77801efcd08c8d2c6d4f8d6
31eab099f31331cb5cc1c04de7ab235660be49a004a4c6a64daccd63e786a52f
GET /sdk/js?components=buttons,messages,hosted-fields,funding-eligibility&client-id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&commit=true&locale=de_DE¤cy=EUR&intent=capture&merchant-id=GNSPGCCJR6URW HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: *
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600, s-maxage=10800
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; script-src 'nonce-HlNdalXu3z575yu4UxIOHCJSgC1ff9/GD4tv9kLlRYk825US' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'nonce-HlNdalXu3z575yu4UxIOHCJSgC1ff9/GD4tv9kLlRYk825US' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; object-src 'none'; img-src https: data:; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: application/javascript; charset=utf-8
date: Fri, 27 Jan 2023 11:15:46 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"26965-LI4cuEIK9N2neAHvzQjI0sbU+NY"
p3p: true
paypal-debug-id: 0a50a23b22b43
server: ECAcc (frc/4CF1)
server-timing: traceparent;desc="00-00000000000000000000a50a23b22b43-4830f6993986a1c3-01", content-encoding;desc="", x-cdn;desc="edgecast"
set-cookie: tsrce=clientsdknodeweb; Domain=.paypal.com; Path=/; Expires=Mon, 30 Jan 2023 11:15:46 GMT; HttpOnly; Secure; SameSite=None
l7_az=dcg13.slc; Path=/; Domain=paypal.com; Expires=Fri, 27 Jan 2023 11:45:46 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1769512546%26vteXpYrS%3D1674819946%26vr%3Df2f0cf021850ad00a05ced98fe53bbf8%26vt%3Df2f0cf021850ad00a05ced98fe53bbf7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 26 Jan 2026 11:15:46 GMT; HttpOnly; Secure
ts_c=vr%3Df2f0cf021850ad00a05ced98fe53bbf8%26vt%3Df2f0cf021850ad00a05ced98fe53bbf7; Path=/; Domain=paypal.com; Expires=Mon, 26 Jan 2026 11:15:46 GMT; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-00000000000000000000a50a23b22b43-3fa79653732de592-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 158053
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash c42eb2050a283f21152cb2a539e45663
07730dd784a196746ae876671c4db93095395bcd
2a1a29ed7785e4679c08d68111c40fdda41404e786ae3d8820a74ff3b3b6b731
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 27 Jan 2023 11:15:46 GMT
Last-Modified: Fri, 27 Jan 2023 11:08:51 GMT
Server: ECS (nyb/1D2E)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: PKOHswyUVktlb-Ut_IAfW6E1P5iYBvjNFTZ8c-jNpTUCEWEO2Lliqw==
Age: 415
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-224940953-1&cid=602267449.1674818146&jid=2051272326&gjid=1065884747&_gid=1944958656.1674818146&_u=aGBAAAAKAAAAACAM~&z=2129741024
64.233.165.156200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-224940953-1&cid=602267449.1674818146&jid=2051272326&gjid=1065884747&_gid=1944958656.1674818146&_u=aGBAAAAKAAAAACAM~&z=2129741024
IP 64.233.165.156:0
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-224940953-1&cid=602267449.1674818146&jid=2051272326&gjid=1065884747&_gid=1944958656.1674818146&_u=aGBAAAAKAAAAACAM~&z=2129741024 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/
Content-Type: text/plain
Content-Length: 0
Origin: https://medibuy.de
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://medibuy.de
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 27 Jan 2023 11:15:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
websocket-visitors.smartsupp.com/socket/?EIO=3&transport=websocket
52.29.123.76101 Switching Protocols 0 B URL HTTP/1.1 websocket-visitors.smartsupp.com/socket/?EIO=3&transport=websocket
IP 52.29.123.76:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket/?EIO=3&transport=websocket HTTP/1.1
Host: websocket-visitors.smartsupp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://medibuy.de
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: rDzLp5YycdBIaj101RVeQg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Fri, 27 Jan 2023 11:15:46 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: BhdvpzPAVR/l/rS2SY1H3uyDI+Q=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 1f4c8e17a668764556ab61c7c31e53c7
ada5ee5917ab9faf3d55a6da1d5bfc3077e42de2
8ac89ed8b6650ea140c2eac1b1dd61f8498e97e278e6bd6debfd803a588e2468
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 11:15:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
medibuy.de/_proxy/store-api?path=%2Fstore-api%2Fpaypal%2Fpayment-method-eligibility
213.133.105.76204 No Content 0 B URL HTTP/2 medibuy.de/_proxy/store-api?path=%2Fstore-api%2Fpaypal%2Fpayment-method-eligibility
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /_proxy/store-api?path=%2Fstore-api%2Fpaypal%2Fpayment-method-eligibility HTTP/1.1
Host: medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/Sejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack
X-Requested-With: XMLHttpRequest
Content-type: application/json
Content-Length: 160
Origin: https://medibuy.de
Connection: keep-alive
Cookie: session-=2aaba35a66fc5a9aa496f5a825a3db64; csrf[frontend.checkout.line-item.add]=ab49733570.CUbO2rLBDUZdIYvpEFAERoizR7hwpn0ckZFcF6eY600.MCi_lPalIA0lGf-PT2lmftnhGNs-_kV68qUrQP71nyVsB7agxKQ8GTNqsw; csrf[frontend.account.login]=c7b2a980b5e34385.D1GXB7PzBRT9mzYKi_Tu9WsVYFKPICErQqcd4EAye5U.X2GudIaDU0278UNnvp6cpjhiUWfBEWJFNt5zqgR6VuI7FNts2IZpY8zydw; csrf[frontend.product.reviews]=b2504984f399.6xAXphrz8vn8u_CTlvNl9iOYreF99RYqIoyg1zcXULw.oSV04E2BgYqxyJvi85kqp1Cryao-v2xQWOratHwiBI6GXEKLSJvKqI3Ugw; csrf[frontend.store-api.proxy]=1504d755c20a1.zOkYu21eWaoMvq3F3LqpSmoAaDUPB352LQFaR41yYkE.qYVV2Cw2MsN1ivf9tI7wJitsGnR9Zho5fTAYf_RCCyqejU_oNDMfx3TK2g; timezone=UTC; _gcl_au=1.1.454540711.1674818146; _ga=GA1.2.602267449.1674818146; _gid=GA1.2.1944958656.1674818146; _gat_UA-224940953-1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Fri, 27 Jan 2023 11:15:46 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: deny
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: object-src 'none'; script-src 'none'; base-uri 'self';
expires: Fri, 27 Jan 2023 11:15:46 GMT
cache-control: no-cache, private, public
server: Apache
X-Firefox-Spdy: h2
www.paypal.com/tagmanager/pptm.js?id=medibuy.de&t=xo&v=5.0.350&source=payments_sdk&mrid=GNSPGCCJR6URW&client_id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&comp=buttons,messages,hosted-fields,funding-eligibility&vault=false
192.229.221.25200 OK 4.3 kB URL HTTP/2 www.paypal.com/tagmanager/pptm.js?id=medibuy.de&t=xo&v=5.0.350&source=payments_sdk&mrid=GNSPGCCJR6URW&client_id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&comp=buttons,messages,hosted-fields,funding-eligibility&vault=false
IP 192.229.221.25:0
File type ASCII text, with very long lines (12084), with no line terminators
Hash 6c2a4add0de48c36548abd5a6848adab
b58b311cf64bfe3055ef89b397c3d49977d54c39
d13eb21c1431af643dac2d41466d4729587807cefb47eadabc6712ccf3a97ad2
GET /tagmanager/pptm.js?id=medibuy.de&t=xo&v=5.0.350&source=payments_sdk&mrid=GNSPGCCJR6URW&client_id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&comp=buttons,messages,hosted-fields,funding-eligibility&vault=false HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/
Connection: keep-alive
Cookie: tsrce=clientsdknodeweb
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-ntDDIwnxujM0ZqnqK78bBvUWpTPmEtjbA8YDB/T6kB0kKKQq' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' 'unsafe-eval'; img-src * data:; object-src 'none'; font-src 'self' https://*.paypalobjects.com https://*.paypal.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://nexus.ensighten.com https://*.google-analytics.com 'unsafe-inline' https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' https://*.qualtrics.com;
content-type: application/x-javascript; charset=utf-8
date: Fri, 27 Jan 2023 11:15:47 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"2f34-zQQ0FVqIlbkbuS4WgpPW/nUPXC4"
paypal-debug-id: 049856b370446
server: ECAcc (frc/4CA6)
server-timing: traceparent;desc="00-0000000000000000000049856b370446-0f9b8a41d0265051-01", content-encoding;desc="", x-cdn;desc="edgecast"
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Fri, 27 Jan 2023 20:01:42 GMT; HttpOnly; Secure
enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sat, 27 Jan 2024 11:15:46 GMT; Secure
x-pp-s=eyJ0IjoiMTY3NDgxODE0Njk5NSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
tsrce=tagmanagernodeweb; Domain=.paypal.com; Path=/; Expires=Mon, 30 Jan 2023 11:15:47 GMT; HttpOnly; Secure; SameSite=None
nsid=s%3AHSFhsygeczTUAKQFYpw_yMxtF92T-LnR.bOHquvME42iXhvw5FdSzyR0VKZSUOO7wQYB5eUhvfng; Path=/; HttpOnly; Secure
l7_az=dcg13.slc; Path=/; Domain=paypal.com; Expires=Fri, 27 Jan 2023 11:45:47 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1769512546%26vteXpYrS%3D1674819946%26vr%3Df2f0d2631850a1f1acc8a459fe4711c5%26vt%3Df2f0d2631850a1f1acc8a459fe4711c4%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 26 Jan 2026 11:15:47 GMT; HttpOnly; Secure
ts_c=vr%3Df2f0d2631850a1f1acc8a459fe4711c5%26vt%3Df2f0d2631850a1f1acc8a459fe4711c4; Path=/; Domain=paypal.com; Expires=Mon, 26 Jan 2026 11:15:47 GMT; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-0000000000000000000049856b370446-b5b6c3bd02764f46-01
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 4299
X-Firefox-Spdy: h2
t.paypal.com/ts?pgrp=muse%3Ageneric%3Aanalytics%3A%3Amerchant&page=muse%3Ageneric%3Aanalytics%3A%3Amerchant%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&fltp=analytics-generic&pt=Sejoy%20Corona%20Antigen%20Laientest%2C%201er%20Pack%20g%C3%BCnstig%20online%20kaufen&dh=1024&dw=1280&bh=836&bw=1152&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1674818146891&g=0&completeurl=https%3A%2F%2Fmedibuy.de%2FSejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack&ru=https%3A%2F%2Fmedibuy.de%2FSejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack&sinfo=%7B%22partners%22%3A%7B%22ecwid%22%3A%7B%7D%2C%22bigCommerce%22%3A%7B%7D%2C%22shopify%22%3A%7B%7D%2C%22wix%22%3A%7B%7D%2C%22bigCartel%22%3A%7B%7D%7D%7D
192.229.221.25200 OK 42 B URL HTTP/2 t.paypal.com/ts?pgrp=muse%3Ageneric%3Aanalytics%3A%3Amerchant&page=muse%3Ageneric%3Aanalytics%3A%3Amerchant%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&fltp=analytics-generic&pt=Sejoy%20Corona%20Antigen%20Laientest%2C%201er%20Pack%20g%C3%BCnstig%20online%20kaufen&dh=1024&dw=1280&bh=836&bw=1152&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1674818146891&g=0&completeurl=https%3A%2F%2Fmedibuy.de%2FSejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack&ru=https%3A%2F%2Fmedibuy.de%2FSejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack&sinfo=%7B%22partners%22%3A%7B%22ecwid%22%3A%7B%7D%2C%22bigCommerce%22%3A%7B%7D%2C%22shopify%22%3A%7B%7D%2C%22wix%22%3A%7B%7D%2C%22bigCartel%22%3A%7B%7D%7D%7D
IP 192.229.221.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4682377ddfbe4e7dabfddb2e543e842
328e472721a93345801ed5533240eac2d1f8498c
6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93
GET /ts?pgrp=muse%3Ageneric%3Aanalytics%3A%3Amerchant&page=muse%3Ageneric%3Aanalytics%3A%3Amerchant%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&fltp=analytics-generic&pt=Sejoy%20Corona%20Antigen%20Laientest%2C%201er%20Pack%20g%C3%BCnstig%20online%20kaufen&dh=1024&dw=1280&bh=836&bw=1152&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1674818146891&g=0&completeurl=https%3A%2F%2Fmedibuy.de%2FSejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack&ru=https%3A%2F%2Fmedibuy.de%2FSejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack&sinfo=%7B%22partners%22%3A%7B%22ecwid%22%3A%7B%7D%2C%22bigCommerce%22%3A%7B%7D%2C%22shopify%22%3A%7B%7D%2C%22wix%22%3A%7B%7D%2C%22bigCartel%22%3A%7B%7D%7D%7D HTTP/1.1
Host: t.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/
Connection: keep-alive
Cookie: tsrce=tagmanagernodeweb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: image/gif
date: Fri, 27 Jan 2023 11:15:47 GMT
expires: Fri, 27 Jan 2023 11:15:47 GMT
p3p: policyref="https://t.paypal.com/w3c/p3p.xml",CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: bcaf280554c06
pragma: no-cache
server: ECAcc (frc/4CF2)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast"
set-cookie: ts=vreXpYrS%3D1769512547%26vteXpYrS%3D1674819947%26vr%3Df2f0d3971850a5681f50ed84ffffffff%26vt%3Df2f0d3971850a5681f50ed84fffffffe; Expires=Tue, 27 Jan 2026 11:15:47 GMT; Domain=.paypal.com; Path=/; Secure; HttpOnly
ts_c=vr%3Df2f0d3971850a5681f50ed84ffffffff%26vt%3Df2f0d3971850a5681f50ed84fffffffe; Expires=Tue, 27 Jan 2026 11:15:47 GMT; Domain=.paypal.com; Path=/; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-0000000000000000000bcaf280554c06-27660a056a97b509-01
content-length: 42
X-Firefox-Spdy: h2
www.paypal.com/xoplatform/logger/api/logger
192.229.221.25200 OK 609 B URL HTTP/2 www.paypal.com/xoplatform/logger/api/logger
IP 192.229.221.25:0
File type JSON data\012- , ASCII text, with very long lines (1017), with no line terminators
Hash b1b63238f8de87312059fd7533c3f58d
d26d0643cd639e1fd021767d49d55ca17b75db2f
0b6a1041e0f9b5f1a763e334fe2fa06e21ba79d91cb1c9ddd23f2dfb80180a3f
POST /xoplatform/logger/api/logger HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/
content-type: application/json
Content-Length: 1436
Origin: https://medibuy.de
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-credentials: true
access-control-allow-origin: https://medibuy.de
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: application/json; charset=utf-8
date: Fri, 27 Jan 2023 11:15:47 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"3f9-Vd5HVwl8Hn87ftpzjaxqjBoWzEs"
paypal-debug-id: 0407a99916b44
server: ECAcc (frc/4CD6)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast"
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sat, 27 Jan 2024 11:15:47 GMT; Secure
LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Fri, 27 Jan 2023 20:01:43 GMT; HttpOnly; Secure
tsrce=loggernodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Mon, 30 Jan 2023 11:15:46 GMT; HttpOnly; Secure
x-pp-s=eyJ0IjoiMTY3NDgxODE0NzY5NCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Fri, 27 Jan 2023 11:45:47 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1769512547%26vteXpYrS%3D1674819947%26vr%3Df2f0d5581850ad04ba10e7f2fe58f154%26vt%3Df2f0d5581850ad04ba10e7f2fe58f153%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 26 Jan 2026 11:15:47 GMT; HttpOnly; Secure
ts_c=vr%3Df2f0d5581850ad04ba10e7f2fe58f154%26vt%3Df2f0d5581850ad04ba10e7f2fe58f153; Path=/; Domain=paypal.com; Expires=Mon, 26 Jan 2026 11:15:47 GMT; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-00000000000000000000407a99916b44-200e07f42f561b34-01
vary: Accept-Encoding
x-content-type-options: nosniff
content-length: 609
X-Firefox-Spdy: h2
translations.smartsuppcdn.com/api/v1/widget/translations/lang/de/defaults
185.76.9.15200 OK 0 B URL HTTP/2 translations.smartsuppcdn.com/api/v1/widget/translations/lang/de/defaults
IP 185.76.9.15:0
ASN #60068 Datacamp Limited
GET /api/v1/widget/translations/lang/de/defaults HTTP/1.1
Host: translations.smartsuppcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/
Origin: https://medibuy.de
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 11:15:46 GMT
content-type: application/json; charset=utf-8
x-version: 78e493457cacc39802378b86cc0dd22811aade7e
vary: Origin
access-control-allow-origin: *
cache-control: max-age=600
x-response-time: 0ms
x-accel-expires: @1674818409
server: CDN77-Turbo
x-77-nzt: AblMCQ0OgUz/UQEAAA
x-77-nzt-ray: c0a4cc28ca480fcf62b2d363e117711f
x-cache: HIT
x-age: 337
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
widget-v2.smartsuppcdn.com/asset-manifest.json
185.76.9.15200 OK 0 B URL HTTP/2 widget-v2.smartsuppcdn.com/asset-manifest.json
IP 185.76.9.15:0
ASN #60068 Datacamp Limited
GET /asset-manifest.json HTTP/1.1
Host: widget-v2.smartsuppcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/
Content-Type: text/plain
Origin: https://medibuy.de
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 27 Jan 2023 11:15:46 GMT
content-type: application/json
last-modified: Tue, 17 Jan 2023 07:36:57 GMT
etag: W/"63c65019-6ce"
expires: Tue, 17 Jan 2023 09:23:33 GMT
cache-control: max-age=300, public, s-maxage=60
access-control-allow-origin: *
x-accel-expires: @1674818162
server: CDN77-Turbo
x-77-nzt: AblMCQ2ZVGr/LAAAAA
x-77-nzt-ray: c0a4cc28ca480fcf62b2d363a4637e0e
x-cache: HIT
x-age: 44
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
www.paypal.com/xoplatform/logger/api/logger
192.229.221.25200 OK 0 B URL HTTP/2 www.paypal.com/xoplatform/logger/api/logger
IP 192.229.221.25:0
OPTIONS /xoplatform/logger/api/logger HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://medibuy.de/
Origin: https://medibuy.de
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: https://medibuy.de
cache-control: max-age=0, no-cache, no-store, must-revalidate
date: Fri, 27 Jan 2023 11:15:47 GMT
dc: ccg11-origin-www-1.paypal.com
paypal-debug-id: 072b024a4964a
server: ECAcc (frc/4CD6)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast"
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Fri, 27 Jan 2023 20:01:43 GMT; HttpOnly; Secure
enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sat, 27 Jan 2024 11:15:47 GMT; Secure
x-pp-s=eyJ0IjoiMTY3NDgxODE0NzQ4OCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
tsrce=loggernodeweb; Domain=.paypal.com; Path=/; Expires=Mon, 30 Jan 2023 11:15:47 GMT; HttpOnly; Secure; SameSite=None
l7_az=dcg01.phx; Path=/; Domain=paypal.com; Expires=Fri, 27 Jan 2023 11:45:47 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1769512547%26vteXpYrS%3D1674819947%26vr%3Df2f0d48a1850ad04b54afee8fe5ceb4c%26vt%3Df2f0d48a1850ad04b54afee8fe5ceb4b%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 26 Jan 2026 11:15:47 GMT; HttpOnly; Secure
ts_c=vr%3Df2f0d48a1850ad04b54afee8fe5ceb4c%26vt%3Df2f0d48a1850ad04b54afee8fe5ceb4b; Path=/; Domain=paypal.com; Expires=Mon, 26 Jan 2026 11:15:47 GMT; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-0000000000000000000072b024a4964a-39838fb10ad49304-01
x-content-type-options: nosniff
X-Firefox-Spdy: h2
widget-v2.smartsuppcdn.com/static/js/main.a3c0c1de.chunk.js
185.76.9.15200 OK 0 B URL HTTP/2 widget-v2.smartsuppcdn.com/static/js/main.a3c0c1de.chunk.js
IP 185.76.9.15:0
ASN #60068 Datacamp Limited
GET /static/js/main.a3c0c1de.chunk.js HTTP/1.1
Host: widget-v2.smartsuppcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 27 Jan 2023 11:15:46 GMT
content-type: application/javascript
last-modified: Tue, 17 Jan 2023 07:36:57 GMT
etag: W/"63c65019-1cc88"
expires: Wed, 17 Jan 2024 09:19:35 GMT
cache-control: max-age=31536000, public, immutable
access-control-allow-origin: *
x-accel-expires: @1705483175
server: CDN77-Turbo
x-77-nzt: AblMCQ32xxL/O0oNAA
x-77-nzt-ray: c0a4cc28c74a2cd062b2d36378714914
x-cache: HIT
x-age: 870971
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/js/all.js?1669906925946899
213.133.105.76200 OK 0 B URL HTTP/2 medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/js/all.js?1669906925946899
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/js/all.js?1669906925946899 HTTP/1.1
Host: medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/Sejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack
Connection: keep-alive
Cookie: session-=2aaba35a66fc5a9aa496f5a825a3db64; csrf[frontend.checkout.line-item.add]=ab49733570.CUbO2rLBDUZdIYvpEFAERoizR7hwpn0ckZFcF6eY600.MCi_lPalIA0lGf-PT2lmftnhGNs-_kV68qUrQP71nyVsB7agxKQ8GTNqsw; csrf[frontend.account.login]=c7b2a980b5e34385.D1GXB7PzBRT9mzYKi_Tu9WsVYFKPICErQqcd4EAye5U.X2GudIaDU0278UNnvp6cpjhiUWfBEWJFNt5zqgR6VuI7FNts2IZpY8zydw; csrf[frontend.product.reviews]=b2504984f399.6xAXphrz8vn8u_CTlvNl9iOYreF99RYqIoyg1zcXULw.oSV04E2BgYqxyJvi85kqp1Cryao-v2xQWOratHwiBI6GXEKLSJvKqI3Ugw; csrf[frontend.store-api.proxy]=1504d755c20a1.zOkYu21eWaoMvq3F3LqpSmoAaDUPB352LQFaR41yYkE.qYVV2Cw2MsN1ivf9tI7wJitsGnR9Zho5fTAYf_RCCyqejU_oNDMfx3TK2g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000, public
expires: Sun, 26 Feb 2023 11:15:45 GMT
vary: Accept-Encoding
content-encoding: br
content-type: application/javascript
date: Fri, 27 Jan 2023 11:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
medibuy.de/Sejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack
213.133.105.76200 OK 0 B URL HTTP/2 medibuy.de/Sejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
GET /Sejoy-Corona-Antigen-Schnelltest-Laientest-1er-Pack HTTP/1.1
Host: medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Fri, 27 Jan 2023 11:15:44 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: deny
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
sw-invalidation-states:
set-cookie: session-=2aaba35a66fc5a9aa496f5a825a3db64; path=/; secure; HttpOnly; SameSite=lax
session-=2aaba35a66fc5a9aa496f5a825a3db64; path=/; secure; httponly; samesite=lax
csrf[frontend.checkout.line-item.add]=ab49733570.CUbO2rLBDUZdIYvpEFAERoizR7hwpn0ckZFcF6eY600.MCi_lPalIA0lGf-PT2lmftnhGNs-_kV68qUrQP71nyVsB7agxKQ8GTNqsw; path=/; secure; httponly; samesite=lax
csrf[frontend.account.login]=c7b2a980b5e34385.D1GXB7PzBRT9mzYKi_Tu9WsVYFKPICErQqcd4EAye5U.X2GudIaDU0278UNnvp6cpjhiUWfBEWJFNt5zqgR6VuI7FNts2IZpY8zydw; path=/; secure; httponly; samesite=lax
csrf[frontend.product.reviews]=b2504984f399.6xAXphrz8vn8u_CTlvNl9iOYreF99RYqIoyg1zcXULw.oSV04E2BgYqxyJvi85kqp1Cryao-v2xQWOratHwiBI6GXEKLSJvKqI3Ugw; path=/; secure; httponly; samesite=lax
csrf[frontend.store-api.proxy]=1504d755c20a1.zOkYu21eWaoMvq3F3LqpSmoAaDUPB352LQFaR41yYkE.qYVV2Cw2MsN1ivf9tI7wJitsGnR9Zho5fTAYf_RCCyqejU_oNDMfx3TK2g; path=/; secure; httponly; samesite=lax
x-mod-pagespeed: 1.13.35.2-0
cache-control: no-cache, private, max-age=0, no-cache
vary: Accept-Encoding
content-encoding: br
content-type: text/html; charset=UTF-8
server: Apache
X-Firefox-Spdy: h2
www.smartsuppchat.com/loader.js?
185.76.9.15200 OK 0 B URL HTTP/2 www.smartsuppchat.com/loader.js?
IP 185.76.9.15:0
ASN #60068 Datacamp Limited
GET /loader.js? HTTP/1.1
Host: www.smartsuppchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://medibuy.de/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 27 Jan 2023 11:15:45 GMT
content-type: application/javascript
last-modified: Wed, 28 Dec 2022 13:18:33 GMT
etag: W/"63ac4229-4b9b"
expires: Wed, 28 Dec 2022 13:26:03 GMT
cache-control: max-age=300, public, s-maxage=60
x-accel-expires: @1674818173
server: CDN77-Turbo
x-77-nzt: AblMCQ3Agpb/IAAAAA
x-77-nzt-ray: c0a4cc286e4dfcc961b2d3636e18592c
x-cache: HIT
x-age: 32
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2