hxxps://www[.]wichtel-o-mat[.]de/de/parties/78d8da58-f72c-4aac-bb79-e4f1a2969592/participants/7cec603a-82dc-4ccb-a0bc-70ca446621ec/edit

Analysis

max time kernel
155s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20231023-en
resource tags

arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
submitted
16/11/2023, 13:42 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.wichtel-o-mat.de/de/parties/78d8da58-f72c-4aac-bb79-e4f1a2969592/participants/7cec603a-82dc-4ccb-a0bc-70ca446621ec/edit

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1114462139-3090196418-29517368-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1114462139-3090196418-29517368-1000_Classes\Local Settings	OpenWith.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4052	msedge.exe
4052	msedge.exe
1216	msedge.exe
1216	msedge.exe
3904	identity_helper.exe
3904	identity_helper.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe

Suspicious use of FindShellTrayWindow 27 IoCs

pid	Process
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe

Suspicious use of SendNotifyMessage 26 IoCs

pid	Process
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe

Suspicious use of SetWindowsHookEx 7 IoCs

pid	Process
5976	OpenWith.exe
5976	OpenWith.exe
5976	OpenWith.exe
5976	OpenWith.exe
5976	OpenWith.exe
5976	OpenWith.exe
5976	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1216 wrote to memory of 3516	1216	msedge.exe	77
PID 1216 wrote to memory of 3516	1216	msedge.exe	77
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 2464	1216	msedge.exe	88
PID 1216 wrote to memory of 4052	1216	msedge.exe	87
PID 1216 wrote to memory of 4052	1216	msedge.exe	87
PID 1216 wrote to memory of 1588	1216	msedge.exe	89
PID 1216 wrote to memory of 1588	1216	msedge.exe	89
PID 1216 wrote to memory of 1588	1216	msedge.exe	89
PID 1216 wrote to memory of 1588	1216	msedge.exe	89
PID 1216 wrote to memory of 1588	1216	msedge.exe	89
PID 1216 wrote to memory of 1588	1216	msedge.exe	89
PID 1216 wrote to memory of 1588	1216	msedge.exe	89
PID 1216 wrote to memory of 1588	1216	msedge.exe	89
PID 1216 wrote to memory of 1588	1216	msedge.exe	89
PID 1216 wrote to memory of 1588	1216	msedge.exe	89
PID 1216 wrote to memory of 1588	1216	msedge.exe	89
PID 1216 wrote to memory of 1588	1216	msedge.exe	89
PID 1216 wrote to memory of 1588	1216	msedge.exe	89
PID 1216 wrote to memory of 1588	1216	msedge.exe	89
PID 1216 wrote to memory of 1588	1216	msedge.exe	89
PID 1216 wrote to memory of 1588	1216	msedge.exe	89
PID 1216 wrote to memory of 1588	1216	msedge.exe	89
PID 1216 wrote to memory of 1588	1216	msedge.exe	89
PID 1216 wrote to memory of 1588	1216	msedge.exe	89
PID 1216 wrote to memory of 1588	1216	msedge.exe	89

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.wichtel-o-mat.de/de/parties/78d8da58-f72c-4aac-bb79-e4f1a2969592/participants/7cec603a-82dc-4ccb-a0bc-70ca446621ec/edit
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffab41546f8,0x7ffab4154708,0x7ffab4154718
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,8549698502511887433,14998863323726644623,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,8549698502511887433,14998863323726644623,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:2
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,8549698502511887433,14998863323726644623,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2900 /prefetch:8
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8549698502511887433,14998863323726644623,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8549698502511887433,14998863323726644623,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3412 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8549698502511887433,14998863323726644623,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5300 /prefetch:1
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8549698502511887433,14998863323726644623,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5980 /prefetch:1
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8549698502511887433,14998863323726644623,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5964 /prefetch:1
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,8549698502511887433,14998863323726644623,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6288 /prefetch:8
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,8549698502511887433,14998863323726644623,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6288 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8549698502511887433,14998863323726644623,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3880 /prefetch:1
  2⤵
  PID:5172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8549698502511887433,14998863323726644623,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5800 /prefetch:1
  2⤵
  PID:5164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8549698502511887433,14998863323726644623,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6132 /prefetch:1
  2⤵
  PID:5452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8549698502511887433,14998863323726644623,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6640 /prefetch:1
  2⤵
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8549698502511887433,14998863323726644623,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4344 /prefetch:1
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8549698502511887433,14998863323726644623,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6412 /prefetch:1
  2⤵
  PID:5700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,8549698502511887433,14998863323726644623,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6376 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3996

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1080

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1892

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:5976

Network

DNS

68.32.126.40.in-addr.arpa

Remote address:

8.8.8.8:53

Request

68.32.126.40.in-addr.arpa

IN PTR

Response
DNS

208.194.73.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

208.194.73.20.in-addr.arpa

IN PTR

Response
DNS

www.wichtel-o-mat.de

msedge.exe

Remote address:

8.8.8.8:53

Request

www.wichtel-o-mat.de

IN A

Response

www.wichtel-o-mat.de

IN A

138.201.125.103
GET

https://www.wichtel-o-mat.de/de/parties/78d8da58-f72c-4aac-bb79-e4f1a2969592/participants/7cec603a-82dc-4ccb-a0bc-70ca446621ec/edit

msedge.exe

Remote address:

138.201.125.103:443

Request

GET /de/parties/78d8da58-f72c-4aac-bb79-e4f1a2969592/participants/7cec603a-82dc-4ccb-a0bc-70ca446621ec/edit HTTP/2.0
host: www.wichtel-o-mat.de
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
sec-ch-ua-mobile: ?0
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

cache-control: max-age=0, private, must-revalidate
content-encoding: gzip
content-type: text/html; charset=utf-8
date: Thu, 16 Nov 2023 13:42:43 GMT
etag: W/"b11f2631af6c272bdf4412c383cd3c2a"
link: <https://d201e9jk75rru1.cloudfront.net/assets/application-fbf07ca58b322fc336f049d8a900dd96012a8f21.css>; rel=preload; as=style; nopush,<https://d201e9jk75rru1.cloudfront.net/assets/application-9f97c2363fdc1d0537a942e563b88c67bdb48e55.js>; rel=preload; as=script; nopush
referrer-policy: strict-origin-when-cross-origin
server: nginx/1.18.0 + Phusion Passenger(R)
set-cookie: _session_id=f348f53aa696a997f2e83636c48a3e4b; path=/; secure; HttpOnly; SameSite=Lax
status: 200 OK
strict-transport-security: max-age=315360000; includeSubDomains; preload
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: DENY
x-permitted-cross-domain-policies: none
x-powered-by: Phusion Passenger(R)
x-request-id: a0628028-a5be-4496-a49d-7e64e0974c7f
x-runtime: 0.040804
x-xss-protection: 1; mode=block
content-length: 3990
GET

https://www.wichtel-o-mat.de/favicon.ico

msedge.exe

Remote address:

138.201.125.103:443

Request

GET /favicon.ico HTTP/2.0
host: www.wichtel-o-mat.de
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.wichtel-o-mat.de/de/parties/78d8da58-f72c-4aac-bb79-e4f1a2969592/participants/7cec603a-82dc-4ccb-a0bc-70ca446621ec/edit
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _session_id=f348f53aa696a997f2e83636c48a3e4b
cookie: _ga_M3B1PE9R3Z=GS1.1.1700142164.1.0.1700142164.60.0.0
cookie: _ga=GA1.2.1605538676.1700142164
cookie: _gid=GA1.2.1819650672.1700142165
cookie: _gat=1

Response

HTTP/2.0 200

accept-ranges: bytes
content-type: image/x-icon
date: Thu, 16 Nov 2023 13:42:48 GMT
etag: "5c2bc52c-37e"
last-modified: Tue, 01 Jan 2019 19:53:16 GMT
server: nginx/1.18.0 (Ubuntu)
strict-transport-security: max-age=315360000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
content-length: 894
DNS

1.202.248.87.in-addr.arpa

Remote address:

8.8.8.8:53

Request

1.202.248.87.in-addr.arpa

IN PTR

Response

1.202.248.87.in-addr.arpa

IN PTR

https-87-248-202-1amsllnwnet
DNS

103.125.201.138.in-addr.arpa

Remote address:

8.8.8.8:53

Request

103.125.201.138.in-addr.arpa

IN PTR

Response

103.125.201.138.in-addr.arpa

IN PTR

aramonmojocodede
DNS

241.154.82.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

241.154.82.20.in-addr.arpa

IN PTR

Response
DNS

16.43.107.13.in-addr.arpa

Remote address:

8.8.8.8:53

Request

16.43.107.13.in-addr.arpa

IN PTR

Response
DNS

apps.identrust.com

msedge.exe

Remote address:

8.8.8.8:53

Request

apps.identrust.com

IN A

Response

apps.identrust.com

IN CNAME

identrust.edgesuite.net

identrust.edgesuite.net

IN CNAME

a1952.dscq.akamai.net

a1952.dscq.akamai.net

IN A

88.221.25.169

a1952.dscq.akamai.net

IN A

88.221.25.153
GET

http://apps.identrust.com/roots/dstrootcax3.p7c

msedge.exe

Remote address:

88.221.25.169:80

Request

GET /roots/dstrootcax3.p7c HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/10.0
Host: apps.identrust.com

Response

HTTP/1.1 200 OK

X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-Robots-Tag: noindex
Referrer-Policy: same-origin
Last-Modified: Fri, 13 Oct 2023 16:28:31 GMT
ETag: "37d-6079b8c0929c0"
Accept-Ranges: bytes
Content-Length: 893
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Content-Type: application/pkcs7-mime
Cache-Control: max-age=3600
Expires: Thu, 16 Nov 2023 14:42:43 GMT
Date: Thu, 16 Nov 2023 13:42:43 GMT
Connection: keep-alive
DNS

d201e9jk75rru1.cloudfront.net

msedge.exe

Remote address:

8.8.8.8:53

Request

d201e9jk75rru1.cloudfront.net

IN A

Response

d201e9jk75rru1.cloudfront.net

IN A

18.65.40.188

d201e9jk75rru1.cloudfront.net

IN A

18.65.40.118

d201e9jk75rru1.cloudfront.net

IN A

18.65.40.195

d201e9jk75rru1.cloudfront.net

IN A

18.65.40.55
DNS

browser.sentry-cdn.com

msedge.exe

Remote address:

8.8.8.8:53

Request

browser.sentry-cdn.com

IN A

Response

browser.sentry-cdn.com

IN A

151.101.194.217

browser.sentry-cdn.com

IN A

151.101.130.217

browser.sentry-cdn.com

IN A

151.101.2.217

browser.sentry-cdn.com

IN A

151.101.66.217
GET

https://browser.sentry-cdn.com/6.14.3/bundle.min.js

msedge.exe

Remote address:

151.101.194.217:443

Request

GET /6.14.3/bundle.min.js HTTP/2.0
host: browser.sentry-cdn.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
origin: https://www.wichtel-o-mat.de
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
dnt: 1
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: script
referer: https://www.wichtel-o-mat.de/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

cache-control: public, max-age=31536000
expires: Thu, 12 Sep 2024 13:28:35 GMT
last-modified: Thu, 11 Nov 2021 18:22:05 GMT
etag: "8a35861b33f2127b5e692376cceee2c3"
content-type: application/javascript; charset=utf-8
content-encoding: gzip
accept-ranges: bytes
date: Thu, 16 Nov 2023 13:42:44 GMT
age: 796612
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 22726
GET

https://d201e9jk75rru1.cloudfront.net/assets/application-fbf07ca58b322fc336f049d8a900dd96012a8f21.css

msedge.exe

Remote address:

18.65.40.188:443

Request

GET /assets/application-fbf07ca58b322fc336f049d8a900dd96012a8f21.css HTTP/1.1
Host: d201e9jk75rru1.cloudfront.net
Connection: keep-alive
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: text/css,*/*;q=0.1
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: style
Referer: https://www.wichtel-o-mat.de/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Content-Type: text/css
Content-Length: 30551
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Cache-Control: public
Date: Sat, 23 Sep 2023 13:39:03 GMT
Expires: Sun, 22 Sep 2024 13:39:03 GMT
Last-Modified: Tue, 20 Dec 2022 05:44:57 GMT
Server: nginx/1.18.0 (Ubuntu)
Strict-Transport-Security: max-age=315360000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
X-Cache: Hit from cloudfront
Via: 1.1 97eaba44803576cf9f5d9993fc05ccee.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P1
X-Amz-Cf-Id: mY37dIWO__SB5ZTHbAw75I2bLZ8lvKxXTfzR4CpP45PQnD82ltTFaQ==
Age: 4665821
GET

https://d201e9jk75rru1.cloudfront.net/assets/wichtel_status-ab4de76e8e2bff02dd9e987102a53dcc14304751.png

msedge.exe

Remote address:

18.65.40.188:443

Request

GET /assets/wichtel_status-ab4de76e8e2bff02dd9e987102a53dcc14304751.png HTTP/1.1
Host: d201e9jk75rru1.cloudfront.net
Connection: keep-alive
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://www.wichtel-o-mat.de/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Content-Type: image/png
Content-Length: 44769
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Cache-Control: public
Date: Sun, 13 Aug 2023 12:02:04 GMT
Expires: Mon, 12 Aug 2024 12:02:04 GMT
Last-Modified: Tue, 20 Dec 2022 05:44:57 GMT
Server: nginx/1.18.0 (Ubuntu)
Strict-Transport-Security: max-age=315360000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
X-Cache: Hit from cloudfront
Via: 1.1 97eaba44803576cf9f5d9993fc05ccee.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P1
X-Amz-Cf-Id: PkAMSpaHRjsHppx7kUqhdoo1wJP2Ik7fQ6MZpUctFZcLdEtzQuHUKg==
Age: 8214041
GET

https://d201e9jk75rru1.cloudfront.net/assets/bg_menu-5d1f1d9e83df4075709e365e1af9d73d249955b8.png

msedge.exe

Remote address:

18.65.40.188:443

Request

GET /assets/bg_menu-5d1f1d9e83df4075709e365e1af9d73d249955b8.png HTTP/1.1
Host: d201e9jk75rru1.cloudfront.net
Connection: keep-alive
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://d201e9jk75rru1.cloudfront.net/assets/application-fbf07ca58b322fc336f049d8a900dd96012a8f21.css
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Content-Type: image/png
Content-Length: 301
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Cache-Control: public
Date: Thu, 14 Sep 2023 01:18:01 GMT
Expires: Fri, 13 Sep 2024 01:18:01 GMT
Last-Modified: Tue, 20 Dec 2022 05:44:57 GMT
Server: nginx/1.18.0 (Ubuntu)
Strict-Transport-Security: max-age=315360000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
X-Cache: Hit from cloudfront
Via: 1.1 97eaba44803576cf9f5d9993fc05ccee.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P1
X-Amz-Cf-Id: 30Dy-YodurAL1gdj56WQ_FynzswFmajqnCjmZZ5TBZWf0PGiCHzCKA==
Age: 5487884
GET

https://d201e9jk75rru1.cloudfront.net/assets/bg_content_bottom-4ac7eaff3985f6ace7ab29ebb4a44f65c813f2c3.jpg

msedge.exe

Remote address:

18.65.40.188:443

Request

GET /assets/bg_content_bottom-4ac7eaff3985f6ace7ab29ebb4a44f65c813f2c3.jpg HTTP/1.1
Host: d201e9jk75rru1.cloudfront.net
Connection: keep-alive
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://d201e9jk75rru1.cloudfront.net/assets/application-fbf07ca58b322fc336f049d8a900dd96012a8f21.css
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Content-Type: image/jpeg
Content-Length: 3277
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Cache-Control: public
Date: Wed, 20 Sep 2023 17:26:40 GMT
Expires: Thu, 19 Sep 2024 17:26:40 GMT
Last-Modified: Tue, 20 Dec 2022 05:44:57 GMT
Server: nginx/1.18.0 (Ubuntu)
Strict-Transport-Security: max-age=315360000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
X-Cache: Hit from cloudfront
Via: 1.1 97eaba44803576cf9f5d9993fc05ccee.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P1
X-Amz-Cf-Id: RXlbaucwJOHNBmlDzgb5Ibqp-ju6IARyJXu_h4xP-AmVwLyDQLeWKA==
Age: 4911365
GET

https://d201e9jk75rru1.cloudfront.net/assets/bg_adframe-511c56a3098d719de89e475ffc0d2759ed88c721.png

msedge.exe

Remote address:

18.65.40.188:443

Request

GET /assets/bg_adframe-511c56a3098d719de89e475ffc0d2759ed88c721.png HTTP/1.1
Host: d201e9jk75rru1.cloudfront.net
Connection: keep-alive
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://d201e9jk75rru1.cloudfront.net/assets/application-fbf07ca58b322fc336f049d8a900dd96012a8f21.css
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Content-Type: image/png
Content-Length: 1950
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Cache-Control: public
Date: Wed, 15 Nov 2023 02:06:23 GMT
Expires: Thu, 14 Nov 2024 02:06:23 GMT
Last-Modified: Tue, 26 Sep 2023 01:58:04 GMT
Server: nginx/1.18.0 (Ubuntu)
Strict-Transport-Security: max-age=315360000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
X-Cache: Hit from cloudfront
Via: 1.1 97eaba44803576cf9f5d9993fc05ccee.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P1
X-Amz-Cf-Id: ql4RTanlA3AF_qUra2MhKMczgNEGbnwm2xp1Djv3aQLx4Go9f_NO3w==
Age: 128182
GET

https://d201e9jk75rru1.cloudfront.net/assets/application-9f97c2363fdc1d0537a942e563b88c67bdb48e55.js

msedge.exe

Remote address:

18.65.40.188:443

Request

GET /assets/application-9f97c2363fdc1d0537a942e563b88c67bdb48e55.js HTTP/1.1
Host: d201e9jk75rru1.cloudfront.net
Connection: keep-alive
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: */*
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: script
Referer: https://www.wichtel-o-mat.de/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Content-Type: application/javascript
Content-Length: 69133
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Cache-Control: public
Date: Wed, 15 Nov 2023 01:43:55 GMT
Expires: Thu, 14 Nov 2024 01:43:55 GMT
Last-Modified: Tue, 26 Sep 2023 01:58:04 GMT
Server: nginx/1.18.0 (Ubuntu)
Strict-Transport-Security: max-age=315360000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
X-Cache: Hit from cloudfront
Via: 1.1 b6cf988ed9428ad8492255f2faaacfdc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P1
X-Amz-Cf-Id: Zxl1D4Cl5RWhaNJdYXNdXsb-rLyr07MstbJyPCAoQJc028nGJox4aA==
Age: 129529
GET

https://d201e9jk75rru1.cloudfront.net/assets/button_ok-1b69840a7c3225ff846d321b3dcd06eb255b6ecd.png

msedge.exe

Remote address:

18.65.40.188:443

Request

GET /assets/button_ok-1b69840a7c3225ff846d321b3dcd06eb255b6ecd.png HTTP/1.1
Host: d201e9jk75rru1.cloudfront.net
Connection: keep-alive
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://www.wichtel-o-mat.de/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Content-Type: image/png
Content-Length: 1782
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Cache-Control: public
Date: Sun, 15 Oct 2023 18:49:48 GMT
Expires: Mon, 14 Oct 2024 18:49:48 GMT
Last-Modified: Tue, 26 Sep 2023 01:58:04 GMT
Server: nginx/1.18.0 (Ubuntu)
Strict-Transport-Security: max-age=315360000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
X-Cache: Hit from cloudfront
Via: 1.1 b6cf988ed9428ad8492255f2faaacfdc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P1
X-Amz-Cf-Id: 7gNu2O9CldgiHDOREky5mDjsE9e0QcqdSo61S404VqG5yc_zUZTTLQ==
Age: 2746377
GET

https://d201e9jk75rru1.cloudfront.net/assets/langswitch_en-2063d6ad2f67d5c83e5b0f8821d85d6934c6738c.png

msedge.exe

Remote address:

18.65.40.188:443

Request

GET /assets/langswitch_en-2063d6ad2f67d5c83e5b0f8821d85d6934c6738c.png HTTP/1.1
Host: d201e9jk75rru1.cloudfront.net
Connection: keep-alive
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://d201e9jk75rru1.cloudfront.net/assets/application-fbf07ca58b322fc336f049d8a900dd96012a8f21.css
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Content-Type: image/png
Content-Length: 3757
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Cache-Control: public
Date: Thu, 27 Jul 2023 08:17:37 GMT
Expires: Fri, 26 Jul 2024 08:17:37 GMT
Last-Modified: Tue, 20 Dec 2022 05:44:57 GMT
Server: nginx/1.18.0 (Ubuntu)
Strict-Transport-Security: max-age=315360000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
X-Cache: Hit from cloudfront
Via: 1.1 b6cf988ed9428ad8492255f2faaacfdc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P1
X-Amz-Cf-Id: kqkgO_NllRtrVi49lQciXS2D6dFhVkyhknSYTVSJyx3irrgAZRqjIQ==
Age: 9696308
DNS

169.25.221.88.in-addr.arpa

Remote address:

8.8.8.8:53

Request

169.25.221.88.in-addr.arpa

IN PTR

Response

169.25.221.88.in-addr.arpa

IN PTR

a88-221-25-169deploystaticakamaitechnologiescom
DNS

217.194.101.151.in-addr.arpa

Remote address:

8.8.8.8:53

Request

217.194.101.151.in-addr.arpa

IN PTR

Response
DNS

188.40.65.18.in-addr.arpa

Remote address:

8.8.8.8:53

Request

188.40.65.18.in-addr.arpa

IN PTR

Response

188.40.65.18.in-addr.arpa

IN PTR

server-18-65-40-188ams1r cloudfrontnet
DNS

226.21.18.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

226.21.18.104.in-addr.arpa

IN PTR

Response
DNS

113.39.65.18.in-addr.arpa

Remote address:

8.8.8.8:53

Request

113.39.65.18.in-addr.arpa

IN PTR

Response

113.39.65.18.in-addr.arpa

IN PTR

server-18-65-39-113ams1r cloudfrontnet
GET

https://d201e9jk75rru1.cloudfront.net/assets/bg_content-ca79b8660cbb3ae8d3f9e5085ba566e252a0cbcf.png

msedge.exe

Remote address:

18.65.40.188:443

Request

GET /assets/bg_content-ca79b8660cbb3ae8d3f9e5085ba566e252a0cbcf.png HTTP/1.1
Host: d201e9jk75rru1.cloudfront.net
Connection: keep-alive
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://d201e9jk75rru1.cloudfront.net/assets/application-fbf07ca58b322fc336f049d8a900dd96012a8f21.css
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Content-Type: image/png
Content-Length: 217
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Cache-Control: public
Date: Sun, 20 Aug 2023 14:01:18 GMT
Expires: Mon, 19 Aug 2024 14:01:18 GMT
Last-Modified: Tue, 20 Dec 2022 05:44:57 GMT
Server: nginx/1.18.0 (Ubuntu)
Strict-Transport-Security: max-age=315360000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
X-Cache: Hit from cloudfront
Via: 1.1 2f7b5be8899520ed019685dc425dc306.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P1
X-Amz-Cf-Id: yLcXyMr7wWdFfGX6xqgxv85MTmlvx6PwOEN37qzu3kLpxRfGvCt9eQ==
Age: 7602087
GET

https://d201e9jk75rru1.cloudfront.net/assets/button_yes-a025d6dab8ffde69b4607f166e79f5ec1c0b8d3a.png

msedge.exe

Remote address:

18.65.40.188:443

Request

GET /assets/button_yes-a025d6dab8ffde69b4607f166e79f5ec1c0b8d3a.png HTTP/1.1
Host: d201e9jk75rru1.cloudfront.net
Connection: keep-alive
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://d201e9jk75rru1.cloudfront.net/assets/application-fbf07ca58b322fc336f049d8a900dd96012a8f21.css
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Content-Type: image/png
Content-Length: 16776
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Cache-Control: public
Date: Fri, 01 Sep 2023 03:59:56 GMT
Expires: Sat, 31 Aug 2024 03:59:56 GMT
Last-Modified: Tue, 20 Dec 2022 05:44:57 GMT
Server: nginx/1.18.0 (Ubuntu)
Strict-Transport-Security: max-age=315360000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
X-Cache: Hit from cloudfront
Via: 1.1 2f7b5be8899520ed019685dc425dc306.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P1
X-Amz-Cf-Id: NpVLLgB_Zaq9oKQkvB7LBwg3qtA45cVXNmXqSJ_Bw_57LUUM-8RsKg==
Age: 6601369
GET

https://d201e9jk75rru1.cloudfront.net/assets/bg_top-5d172b30897a45405046c5c0b191799176a2e637.png

msedge.exe

Remote address:

18.65.40.188:443

Request

GET /assets/bg_top-5d172b30897a45405046c5c0b191799176a2e637.png HTTP/1.1
Host: d201e9jk75rru1.cloudfront.net
Connection: keep-alive
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://d201e9jk75rru1.cloudfront.net/assets/application-fbf07ca58b322fc336f049d8a900dd96012a8f21.css
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Content-Type: image/png
Content-Length: 993
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Cache-Control: public
Date: Wed, 20 Sep 2023 17:26:40 GMT
Expires: Thu, 19 Sep 2024 17:26:40 GMT
Last-Modified: Tue, 20 Dec 2022 05:44:57 GMT
Server: nginx/1.18.0 (Ubuntu)
Strict-Transport-Security: max-age=315360000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
X-Cache: Hit from cloudfront
Via: 1.1 e086ec27af2d3105a1a9fa7efa1be454.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P1
X-Amz-Cf-Id: RUcjGcyxaBwlECgALOpHDTx8Sz6vIJxCT8418QkD6-xdi2cYmFzBvQ==
Age: 4911365
GET

https://d201e9jk75rru1.cloudfront.net/assets/button_no-466077749021c10285a06736338c9e21ec99fda6.png

msedge.exe

Remote address:

18.65.40.188:443

Request

GET /assets/button_no-466077749021c10285a06736338c9e21ec99fda6.png HTTP/1.1
Host: d201e9jk75rru1.cloudfront.net
Connection: keep-alive
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://d201e9jk75rru1.cloudfront.net/assets/application-fbf07ca58b322fc336f049d8a900dd96012a8f21.css
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Content-Type: image/png
Content-Length: 17183
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Cache-Control: public
Date: Wed, 27 Sep 2023 06:12:06 GMT
Expires: Thu, 26 Sep 2024 06:12:06 GMT
Last-Modified: Tue, 26 Sep 2023 01:58:04 GMT
Server: nginx/1.18.0 (Ubuntu)
Strict-Transport-Security: max-age=315360000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
X-Cache: Hit from cloudfront
Via: 1.1 e086ec27af2d3105a1a9fa7efa1be454.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P1
X-Amz-Cf-Id: q_bbUkazMMip3Rn24uDfPNe3ekSOzh-XbbqwcwLB1pKFKAPoTuasbA==
Age: 4347039
GET

https://d201e9jk75rru1.cloudfront.net/assets/logo_wichtel-o-mat-49857b89e193c70fb1469ae8450848cf9f3afa4c.png

msedge.exe

Remote address:

18.65.40.188:443

Request

GET /assets/logo_wichtel-o-mat-49857b89e193c70fb1469ae8450848cf9f3afa4c.png HTTP/1.1
Host: d201e9jk75rru1.cloudfront.net
Connection: keep-alive
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://d201e9jk75rru1.cloudfront.net/assets/application-fbf07ca58b322fc336f049d8a900dd96012a8f21.css
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Content-Type: image/png
Content-Length: 30202
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Cache-Control: public
Date: Sat, 14 Oct 2023 10:17:06 GMT
Expires: Sun, 13 Oct 2024 10:17:06 GMT
Last-Modified: Tue, 26 Sep 2023 01:58:04 GMT
Server: nginx/1.18.0 (Ubuntu)
Strict-Transport-Security: max-age=315360000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
X-Cache: Hit from cloudfront
Via: 1.1 e086ec27af2d3105a1a9fa7efa1be454.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P1
X-Amz-Cf-Id: DzkHyVGNqUWcKRPBh4s-1mSq102P4fb80YUinocngJBuJmGRPo5nSg==
Age: 2863539
GET

https://d201e9jk75rru1.cloudfront.net/assets/bg_fieldset-42411f662375c3158b8429d4914118899d6e0e12.png

msedge.exe

Remote address:

18.65.40.188:443

Request

GET /assets/bg_fieldset-42411f662375c3158b8429d4914118899d6e0e12.png HTTP/1.1
Host: d201e9jk75rru1.cloudfront.net
Connection: keep-alive
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://d201e9jk75rru1.cloudfront.net/assets/application-fbf07ca58b322fc336f049d8a900dd96012a8f21.css
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Content-Type: image/png
Content-Length: 15761
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Cache-Control: public
Date: Sat, 14 Oct 2023 18:30:15 GMT
Expires: Sun, 13 Oct 2024 18:30:15 GMT
Last-Modified: Tue, 26 Sep 2023 01:58:04 GMT
Server: nginx/1.18.0 (Ubuntu)
Strict-Transport-Security: max-age=315360000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
X-Cache: Hit from cloudfront
Via: 1.1 e086ec27af2d3105a1a9fa7efa1be454.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P1
X-Amz-Cf-Id: IxizzyCNUR8vAJlSU8n2-sGa8G-5rW3xGQ-8djniij6OJPCumd6N_A==
Age: 2833950
GET

https://d201e9jk75rru1.cloudfront.net/assets/wichtel_geschenkliste-898e38b22dd7e8fd53436c57e6ed75466676d572.png

msedge.exe

Remote address:

18.65.40.188:443

Request

GET /assets/wichtel_geschenkliste-898e38b22dd7e8fd53436c57e6ed75466676d572.png HTTP/1.1
Host: d201e9jk75rru1.cloudfront.net
Connection: keep-alive
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://d201e9jk75rru1.cloudfront.net/assets/application-fbf07ca58b322fc336f049d8a900dd96012a8f21.css
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Content-Type: image/png
Content-Length: 17511
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Cache-Control: public
Date: Sun, 17 Sep 2023 05:48:10 GMT
Expires: Mon, 16 Sep 2024 05:48:10 GMT
Last-Modified: Tue, 20 Dec 2022 05:44:57 GMT
Server: nginx/1.18.0 (Ubuntu)
Strict-Transport-Security: max-age=315360000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
X-Cache: Hit from cloudfront
Via: 1.1 e086ec27af2d3105a1a9fa7efa1be454.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P1
X-Amz-Cf-Id: KtPhAikAqQcG0vvEa3NFVVpDpNFf2eQe2FI10fmUXzuE7QzXkM8nkA==
Age: 5212475
GET

https://d201e9jk75rru1.cloudfront.net/assets/bg_bottom-4faec37b8d917b6430a7c45d10724ac333ca90ca.png

msedge.exe

Remote address:

18.65.40.188:443

Request

GET /assets/bg_bottom-4faec37b8d917b6430a7c45d10724ac333ca90ca.png HTTP/1.1
Host: d201e9jk75rru1.cloudfront.net
Connection: keep-alive
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://d201e9jk75rru1.cloudfront.net/assets/application-fbf07ca58b322fc336f049d8a900dd96012a8f21.css
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Content-Type: image/png
Content-Length: 8111
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Cache-Control: public
Date: Thu, 07 Sep 2023 19:09:16 GMT
Expires: Fri, 06 Sep 2024 19:09:16 GMT
Last-Modified: Tue, 20 Dec 2022 05:44:57 GMT
Server: nginx/1.18.0 (Ubuntu)
Strict-Transport-Security: max-age=315360000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
X-Cache: Hit from cloudfront
Via: 1.1 e086ec27af2d3105a1a9fa7efa1be454.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P1
X-Amz-Cf-Id: 3j-q5ROiX-YGSwITpJdKRpmlXXmaeMs3faa-LFVJkb0Z5PCvF8TOtQ==
Age: 6028409
GET

https://d201e9jk75rru1.cloudfront.net/assets/bg_main-298bef47e84c095497d7de8e237ee834f1dce12f.jpg

msedge.exe

Remote address:

18.65.40.188:443

Request

GET /assets/bg_main-298bef47e84c095497d7de8e237ee834f1dce12f.jpg HTTP/1.1
Host: d201e9jk75rru1.cloudfront.net
Connection: keep-alive
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://d201e9jk75rru1.cloudfront.net/assets/application-fbf07ca58b322fc336f049d8a900dd96012a8f21.css
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Content-Type: image/jpeg
Content-Length: 1391
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Cache-Control: public
Date: Thu, 27 Jul 2023 08:17:37 GMT
Expires: Fri, 26 Jul 2024 08:17:37 GMT
Last-Modified: Tue, 20 Dec 2022 05:44:57 GMT
Server: nginx/1.18.0 (Ubuntu)
Strict-Transport-Security: max-age=315360000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
X-Cache: Hit from cloudfront
Via: 1.1 37bca31d9c7de06b67b2363770e065b4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P1
X-Amz-Cf-Id: qsZ72P7Pf_eFaHcg8eWvAtUgYkktHLamM9YGLcHXk4UaIfNXNAtNFw==
Age: 9696308
GET

https://d201e9jk75rru1.cloudfront.net/assets/bg_fieldset_top-78e269b7f8c4c62b87cbdaf3da7462a2f88fc6af.png

msedge.exe

Remote address:

18.65.40.188:443

Request

GET /assets/bg_fieldset_top-78e269b7f8c4c62b87cbdaf3da7462a2f88fc6af.png HTTP/1.1
Host: d201e9jk75rru1.cloudfront.net
Connection: keep-alive
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://d201e9jk75rru1.cloudfront.net/assets/application-fbf07ca58b322fc336f049d8a900dd96012a8f21.css
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Content-Type: image/png
Content-Length: 340
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Cache-Control: public
Date: Sun, 03 Sep 2023 17:26:56 GMT
Expires: Mon, 02 Sep 2024 17:26:56 GMT
Last-Modified: Tue, 20 Dec 2022 05:44:57 GMT
Server: nginx/1.18.0 (Ubuntu)
Strict-Transport-Security: max-age=315360000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
X-Cache: Hit from cloudfront
Via: 1.1 37bca31d9c7de06b67b2363770e065b4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P1
X-Amz-Cf-Id: VghbqZLvhVQbZ-cbW4OpYT5lV9xp0xHnseb-BDxz1pVJ5lIIB6Y3-g==
Age: 6380149
DNS

sentry.mojocode.de

msedge.exe

Remote address:

8.8.8.8:53

Request

sentry.mojocode.de

IN A

Response

sentry.mojocode.de

IN CNAME

aramon.mojocode.de

aramon.mojocode.de

IN A

138.201.125.103
POST

https://sentry.mojocode.de/api/2/envelope/?sentry_key=b2fd7cf636314d759d0a2a92cbb130fb&sentry_version=7

msedge.exe

Remote address:

138.201.125.103:443

Request

POST /api/2/envelope/?sentry_key=b2fd7cf636314d759d0a2a92cbb130fb&sentry_version=7 HTTP/2.0
host: sentry.mojocode.de
content-length: 482
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
content-type: text/plain;charset=UTF-8
accept: */*
origin: https://www.wichtel-o-mat.de
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.wichtel-o-mat.de/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

access-control-allow-origin: https://www.wichtel-o-mat.de
access-control-expose-headers: x-sentry-error, x-sentry-rate-limits, retry-after
content-type: application/json
date: Thu, 16 Nov 2023 13:42:45 GMT
server: nginx
strict-transport-security: max-age=315360000; includeSubDomains; preload
vary: Origin
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
content-length: 2
DNS

analytics.google.com

msedge.exe

Remote address:

8.8.8.8:53

Request

analytics.google.com

IN A

Response

analytics.google.com

IN CNAME

analytics-alv.google.com

analytics-alv.google.com

IN A

216.239.32.181

analytics-alv.google.com

IN A

216.239.38.181

analytics-alv.google.com

IN A

216.239.34.181

analytics-alv.google.com

IN A

216.239.36.181
DNS

stats.g.doubleclick.net

msedge.exe

Remote address:

8.8.8.8:53

Request

stats.g.doubleclick.net

IN A

Response

stats.g.doubleclick.net

IN A

142.250.102.155

stats.g.doubleclick.net

IN A

142.250.102.157

stats.g.doubleclick.net

IN A

142.250.102.154

stats.g.doubleclick.net

IN A

142.250.102.156
POST

https://analytics.google.com/g/collect?v=2&tid=G-M3B1PE9R3Z&gtm=45je3b81v894962914&_p=1700142162934&_gaz=1&gcd=11l1l1l1l1&dma=0&cid=1605538676.1700142164&ul=en-us&sr=1280x720&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&_s=1&sid=1700142164&sct=1&seg=0&dl=https%3A%2F%2Fwww.wichtel-o-mat.de%2Fde%2Fparties%2F78d8da58-f72c-4aac-bb79-e4f1a2969592%2Fparticipants%2F7cec603a-82dc-4ccb-a0bc-70ca446621ec%2Fedit&dt=Online-Wichteln%20mit%20dem%20Wichtel-O-Mat%20%3A%3A%20Wichtel-Status%20bearbeiten&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=4587

msedge.exe

Remote address:

216.239.32.181:443

Request

POST /g/collect?v=2&tid=G-M3B1PE9R3Z&gtm=45je3b81v894962914&_p=1700142162934&_gaz=1&gcd=11l1l1l1l1&dma=0&cid=1605538676.1700142164&ul=en-us&sr=1280x720&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&_s=1&sid=1700142164&sct=1&seg=0&dl=https%3A%2F%2Fwww.wichtel-o-mat.de%2Fde%2Fparties%2F78d8da58-f72c-4aac-bb79-e4f1a2969592%2Fparticipants%2F7cec603a-82dc-4ccb-a0bc-70ca446621ec%2Fedit&dt=Online-Wichteln%20mit%20dem%20Wichtel-O-Mat%20%3A%3A%20Wichtel-Status%20bearbeiten&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=4587 HTTP/2.0
host: analytics.google.com
content-length: 0
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
content-type: text/plain;charset=UTF-8
accept: */*
origin: https://www.wichtel-o-mat.de
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
referer: https://www.wichtel-o-mat.de/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
POST

https://stats.g.doubleclick.net/g/collect?v=2&tid=G-M3B1PE9R3Z&cid=1605538676.1700142164&gtm=45je3b81v894962914&aip=1&dma=0&gcd=11l1l1l1l1

msedge.exe

Remote address:

142.250.102.155:443

Request

POST /g/collect?v=2&tid=G-M3B1PE9R3Z&cid=1605538676.1700142164&gtm=45je3b81v894962914&aip=1&dma=0&gcd=11l1l1l1l1 HTTP/2.0
host: stats.g.doubleclick.net
content-length: 0
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
content-type: text/plain;charset=UTF-8
accept: */*
origin: https://www.wichtel-o-mat.de
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
referer: https://www.wichtel-o-mat.de/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

googleads.g.doubleclick.net

msedge.exe

Remote address:

8.8.8.8:53

Request

googleads.g.doubleclick.net

IN A

Response

googleads.g.doubleclick.net

IN A

172.217.168.194
GET

https://googleads.g.doubleclick.net/pagead/html/r20231109/r20190131/zrt_lookup_fy2021.html

msedge.exe

Remote address:

172.217.168.194:443

Request

GET /pagead/html/r20231109/r20190131/zrt_lookup_fy2021.html HTTP/2.0
host: googleads.g.doubleclick.net
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
sec-ch-ua-mobile: ?0
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://www.wichtel-o-mat.de/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

200.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

200.179.250.142.in-addr.arpa

IN PTR

Response

200.179.250.142.in-addr.arpa

IN PTR

ams15s42-in-f81e100net
DNS

194.23.217.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

194.23.217.172.in-addr.arpa

IN PTR

Response

194.23.217.172.in-addr.arpa

IN PTR

prg03s05-in-f1941e100net

194.23.217.172.in-addr.arpa

IN PTR

ams16s37-in-f2�J

194.23.217.172.in-addr.arpa

IN PTR

prg03s05-in-f2�J
DNS

206.23.217.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

206.23.217.172.in-addr.arpa

IN PTR

Response

206.23.217.172.in-addr.arpa

IN PTR

ams16s37-in-f141e100net

206.23.217.172.in-addr.arpa

IN PTR

prg03s05-in-f14�I

206.23.217.172.in-addr.arpa

IN PTR

prg03s05-in-f206�I
DNS

181.32.239.216.in-addr.arpa

Remote address:

8.8.8.8:53

Request

181.32.239.216.in-addr.arpa

IN PTR

Response
DNS

155.102.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

155.102.250.142.in-addr.arpa

IN PTR

Response

155.102.250.142.in-addr.arpa

IN PTR

rb-in-f1551e100net
DNS

194.168.217.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

194.168.217.172.in-addr.arpa

IN PTR

Response

194.168.217.172.in-addr.arpa

IN PTR

ams16s32-in-f21e100net
DNS

cdn.ampproject.org

msedge.exe

Remote address:

8.8.8.8:53

Request

cdn.ampproject.org

IN A

Response

cdn.ampproject.org

IN CNAME

cdn-content.ampproject.org

cdn-content.ampproject.org

IN A

142.250.179.161
DNS

tpc.googlesyndication.com

msedge.exe

Remote address:

8.8.8.8:53

Request

tpc.googlesyndication.com

IN A

Response

tpc.googlesyndication.com

IN A

142.251.36.1
GET

https://cdn.ampproject.org/rtv/012310301456000/amp4ads-v0.js

msedge.exe

Remote address:

142.250.179.161:443

Request

GET /rtv/012310301456000/amp4ads-v0.js HTTP/2.0
host: cdn.ampproject.org
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://googleads.g.doubleclick.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://cdn.ampproject.org/rtv/012310301456000/v0/amp-ad-exit-0.1.js

msedge.exe

Remote address:

142.250.179.161:443

Request

GET /rtv/012310301456000/v0/amp-ad-exit-0.1.js HTTP/2.0
host: cdn.ampproject.org
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://googleads.g.doubleclick.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://cdn.ampproject.org/rtv/012310301456000/v0/amp-analytics-0.1.js

msedge.exe

Remote address:

142.250.179.161:443

Request

GET /rtv/012310301456000/v0/amp-analytics-0.1.js HTTP/2.0
host: cdn.ampproject.org
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://googleads.g.doubleclick.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://cdn.ampproject.org/rtv/012310301456000/v0/amp-fit-text-0.1.js

msedge.exe

Remote address:

142.250.179.161:443

Request

GET /rtv/012310301456000/v0/amp-fit-text-0.1.js HTTP/2.0
host: cdn.ampproject.org
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://googleads.g.doubleclick.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://cdn.ampproject.org/rtv/012310301456000/v0/amp-form-0.1.js

msedge.exe

Remote address:

142.250.179.161:443

Request

GET /rtv/012310301456000/v0/amp-form-0.1.js HTTP/2.0
host: cdn.ampproject.org
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://googleads.g.doubleclick.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://cdn.ampproject.org/rtv/012310301456000/v0/amp-gwd-animation-0.1.js

msedge.exe

Remote address:

142.250.179.161:443

Request

GET /rtv/012310301456000/v0/amp-gwd-animation-0.1.js HTTP/2.0
host: cdn.ampproject.org
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://googleads.g.doubleclick.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://tpc.googlesyndication.com/pagead/images/adchoices/de.png

msedge.exe

Remote address:

142.251.36.1:443

Request

GET /pagead/images/adchoices/de.png HTTP/2.0
host: tpc.googlesyndication.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://googleads.g.doubleclick.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://tpc.googlesyndication.com/pagead/images/adchoices/icon.png

msedge.exe

Remote address:

142.251.36.1:443

Request

GET /pagead/images/adchoices/icon.png HTTP/2.0
host: tpc.googlesyndication.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://googleads.g.doubleclick.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://tpc.googlesyndication.com/sadbundle/16394311881675826595/65156b36029b56001185dae0.png

msedge.exe

Remote address:

142.251.36.1:443

Request

GET /sadbundle/16394311881675826595/65156b36029b56001185dae0.png HTTP/2.0
host: tpc.googlesyndication.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://googleads.g.doubleclick.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

39.142.81.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

39.142.81.104.in-addr.arpa

IN PTR

Response

39.142.81.104.in-addr.arpa

IN PTR

a104-81-142-39deploystaticakamaitechnologiescom
DNS

161.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

161.179.250.142.in-addr.arpa

IN PTR

Response

161.179.250.142.in-addr.arpa

IN PTR

ams15s41-in-f11e100net
DNS

106.208.58.216.in-addr.arpa

Remote address:

8.8.8.8:53

Request

106.208.58.216.in-addr.arpa

IN PTR

Response

106.208.58.216.in-addr.arpa

IN PTR

ams17s08-in-f101e100net

106.208.58.216.in-addr.arpa

IN PTR

sof01s11-in-f106�I
DNS

1.36.251.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

1.36.251.142.in-addr.arpa

IN PTR

Response

1.36.251.142.in-addr.arpa

IN PTR

ams15s44-in-f11e100net
DNS

131.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

131.179.250.142.in-addr.arpa

IN PTR

Response

131.179.250.142.in-addr.arpa

IN PTR

ams17s10-in-f31e100net
DNS

100.39.251.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

100.39.251.142.in-addr.arpa

IN PTR

Response

100.39.251.142.in-addr.arpa

IN PTR

ams15s48-in-f41e100net
DNS

edge.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

edge.microsoft.com

IN A

Response

edge.microsoft.com

IN CNAME

edge-microsoft-com.dual-a-0036.a-msedge.net

edge-microsoft-com.dual-a-0036.a-msedge.net

IN CNAME

dual-a-0036.dc-msedge.net

dual-a-0036.dc-msedge.net

IN A

131.253.33.239

dual-a-0036.dc-msedge.net

IN A

13.107.22.239
OPTIONS

https://edge.microsoft.com/translate/auth

msedge.exe

Remote address:

131.253.33.239:443

Request

OPTIONS /translate/auth HTTP/2.0
host: edge.microsoft.com
accept: */*
access-control-request-method: GET
access-control-request-headers: x-mesh-client-arch,x-mesh-client-edge-channel,x-mesh-client-edge-version,x-mesh-client-os,x-mesh-client-os-version,x-mesh-client-webview
origin: https://www.wichtel-o-mat.de
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
sec-fetch-mode: cors
sec-fetch-site: cross-site
sec-fetch-dest: empty
referer: https://www.wichtel-o-mat.de/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 204

cache-control: max-age=0, no-cache, no-store, must-revalidate
access-control-allow-headers: x-mesh-client-arch,x-mesh-client-edge-channel,x-mesh-client-edge-version,x-mesh-client-os,x-mesh-client-os-version,x-mesh-client-webview
access-control-allow-headers: X-Mesh-Client-Edge-Version
access-control-allow-headers: X-Mesh-Client-Edge-Channel
access-control-allow-headers: X-Mesh-Client-OS
access-control-allow-headers: X-Mesh-Client-OS-Version
access-control-allow-headers: X-Mesh-Client-Arch
access-control-allow-headers: X-Mesh-Client-WebView
access-control-allow-methods: GET
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 553F93BE4E864215B44B78EB0CBA122D Ref B: LON212050703007 Ref C: 2023-11-16T13:42:50Z
date: Thu, 16 Nov 2023 13:42:49 GMT
GET

https://edge.microsoft.com/translate/auth

msedge.exe

Remote address:

131.253.33.239:443

Request

GET /translate/auth HTTP/2.0
host: edge.microsoft.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
x-mesh-client-edge-version: 92.0.902.67
x-mesh-client-edge-channel: stable
x-mesh-client-os: Windows
x-mesh-client-os-version: 10.0.19041
x-mesh-client-arch: x86_64
x-mesh-client-webview: 0
origin: https://www.wichtel-o-mat.de
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.wichtel-o-mat.de/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 400

cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 36F8F23F789A44F1A9CFB65CE6C9F900 Ref B: LON212050703007 Ref C: 2023-11-16T13:42:50Z
date: Thu, 16 Nov 2023 13:42:49 GMT
DNS

239.33.253.131.in-addr.arpa

Remote address:

8.8.8.8:53

Request

239.33.253.131.in-addr.arpa

IN PTR

Response
DNS

158.240.127.40.in-addr.arpa

Remote address:

8.8.8.8:53

Request

158.240.127.40.in-addr.arpa

IN PTR

Response
DNS

26.35.223.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

26.35.223.20.in-addr.arpa

IN PTR

Response
DNS

203.197.79.204.in-addr.arpa

Remote address:

8.8.8.8:53

Request

203.197.79.204.in-addr.arpa

IN PTR

Response

203.197.79.204.in-addr.arpa

IN PTR

a-0003a-msedgenet
DNS

157.123.68.40.in-addr.arpa

Remote address:

8.8.8.8:53

Request

157.123.68.40.in-addr.arpa

IN PTR

Response
DNS

18.31.95.13.in-addr.arpa

Remote address:

8.8.8.8:53

Request

18.31.95.13.in-addr.arpa

IN PTR

Response
DNS

65.252.72.23.in-addr.arpa

Remote address:

8.8.8.8:53

Request

65.252.72.23.in-addr.arpa

IN PTR

Response

65.252.72.23.in-addr.arpa

IN PTR

a23-72-252-65deploystaticakamaitechnologiescom
DNS

55.36.223.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

55.36.223.20.in-addr.arpa

IN PTR

Response
DNS

tse1.mm.bing.net

Remote address:

8.8.8.8:53

Request

tse1.mm.bing.net

IN A

Response

tse1.mm.bing.net

IN CNAME

mm-mm.bing.net.trafficmanager.net

mm-mm.bing.net.trafficmanager.net

IN CNAME

dual-a-0001.a-msedge.net

dual-a-0001.a-msedge.net

IN A

204.79.197.200

dual-a-0001.a-msedge.net

IN A

13.107.21.200
GET

https://tse1.mm.bing.net/th?id=OADD2.10239317301596_1DG6BQP8IZK93D1X4&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

Remote address:

204.79.197.200:443

Request

GET /th?id=OADD2.10239317301596_1DG6BQP8IZK93D1X4&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 461387
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A38AD03B1B5944FCB0558A0F19DBE1B2 Ref B: DUS30EDGE0909 Ref C: 2023-11-16T13:43:28Z
date: Thu, 16 Nov 2023 13:43:27 GMT
GET

https://tse1.mm.bing.net/th?id=OADD2.10239317300915_11PL293NENO2DA53I&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

Remote address:

204.79.197.200:443

Request

GET /th?id=OADD2.10239317300915_11PL293NENO2DA53I&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 417176
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 7DA6FD691F0D462FB80753F848A2B5E7 Ref B: DUS30EDGE0909 Ref C: 2023-11-16T13:43:28Z
date: Thu, 16 Nov 2023 13:43:27 GMT
GET

https://tse1.mm.bing.net/th?id=OADD2.10239317301187_1ZYFA7XNBG4NK6SSZ&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

Remote address:

204.79.197.200:443

Request

GET /th?id=OADD2.10239317301187_1ZYFA7XNBG4NK6SSZ&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 436788
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 01763D0B1CA84070AEBE5E046269812C Ref B: DUS30EDGE0909 Ref C: 2023-11-16T13:43:28Z
date: Thu, 16 Nov 2023 13:43:27 GMT
GET

https://tse1.mm.bing.net/th?id=OADD2.10239317301312_1T9ZATUOGPW0HJ7P7&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

Remote address:

204.79.197.200:443

Request

GET /th?id=OADD2.10239317301312_1T9ZATUOGPW0HJ7P7&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 767131
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B0B9096A7BFB4BEBA2C1917692311F54 Ref B: DUS30EDGE0909 Ref C: 2023-11-16T13:43:28Z
date: Thu, 16 Nov 2023 13:43:27 GMT
GET

https://tse1.mm.bing.net/th?id=OADD2.10239317301348_1IGED3LPK164UYK70&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

Remote address:

204.79.197.200:443

Request

GET /th?id=OADD2.10239317301348_1IGED3LPK164UYK70&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 531680
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E7CD56E012FA442D9FD58FF535B97252 Ref B: DUS30EDGE0909 Ref C: 2023-11-16T13:43:28Z
date: Thu, 16 Nov 2023 13:43:27 GMT
GET

https://tse1.mm.bing.net/th?id=OADD2.10239317301721_1Y64UM4ZK2VT4MVP3&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

Remote address:

204.79.197.200:443

Request

GET /th?id=OADD2.10239317301721_1Y64UM4ZK2VT4MVP3&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 729137
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 057A9717B7974EF5BF2ACFD888325075 Ref B: DUS30EDGE0909 Ref C: 2023-11-16T13:43:28Z
date: Thu, 16 Nov 2023 13:43:27 GMT
DNS

200.197.79.204.in-addr.arpa

Remote address:

8.8.8.8:53

Request

200.197.79.204.in-addr.arpa

IN PTR

Response

200.197.79.204.in-addr.arpa

IN PTR

a-0001a-msedgenet
DNS

209.78.101.95.in-addr.arpa

Remote address:

8.8.8.8:53

Request

209.78.101.95.in-addr.arpa

IN PTR

Response

209.78.101.95.in-addr.arpa

IN PTR

a95-101-78-209deploystaticakamaitechnologiescom
DNS

240.221.184.93.in-addr.arpa

Remote address:

8.8.8.8:53

Request

240.221.184.93.in-addr.arpa

IN PTR

Response
DNS

23.236.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

23.236.111.52.in-addr.arpa

IN PTR

Response
DNS

adclick.g.doubleclick.net

msedge.exe

Remote address:

8.8.8.8:53

Request

adclick.g.doubleclick.net

IN A

Response

adclick.g.doubleclick.net

IN A

142.250.179.130
POST

https://adclick.g.doubleclick.net/aclk?sa=l&ai=ClFp4VxxWZd7LBoCEpt8Pge6VyAnpzMSddLzlxaL_Ebfaor3AARABILbH_xtgye7thoCAoBmgAcKPg5wqyAEJqQIpN_mFyi-yPqgDAcgDCKoE8AJP0OuALTu1gRueDQ3uWeskkLanOOIhUygVlIQLDb44WtdRjOPSLtYEOqHbmmWQ0l6Lf4TBiAx5IYeNVv__gvFV9FzhU8VVaVF-WLtpJ5-CdyVUtWfa0xCbcSiumjnQYqy6GzpIQ6JwblqNiB8U7LdjZpAQMJkYZUfHYPbL3KycU7M3_XBpIoDs6geL7oUl0GJkSCd03aulDopk5qmwjRDFuTSqy0uHH2shM1iNkZnWwxDv9SlvKe_gu3NY1X8K1P7--O9tRmgF9cQHIl1lX1zYX3XRnSSUqFblHBF_ytAiNkCG9iDWjSLt5xl8uFBeOJHXvAuInfP4Gmj4iX5agueXHQDSS_Gn_B_aJzyqlrDMUoM2j4ljjVJuIBh-UOFO_Mu-88KOSFmrToIvEgV8nP8EMWTD0RWhVSFz0sFOffNpn2WJybmVUhfCnIOAgik5l4Jwgl7cHVQag6XccxCnKMGfp09pPKtKtwJR6clS2VotmsAEuZmhps8EiAW54eydTaAGLoAHwsfT-wSoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggUCIBhEAEYHzICigI6AoBASL39wTqxCVhf6SsstutHgAoBmAsByAsBgAwBogwYKhYKFOS0sQLutbECtbixAuS0sQLutbECqg0CVVPIDQHYEwzQFQGYFgH4FgGAFwE&ae=1&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE&num=1&cid=CAQSTwDICaaNILPQGNpNIcEqebGoFZ8Hm81ZjG21dqxSneY_3NEH4m1CGBluPpdMRZAgR9Z-AHjr33ws5iJSKjgdJt0pvQY7m6xpHvtFQPBORXEYAQ&sig=AOD64_3XXwwi_amMQMWBP4bptFgEB43tRg&client=ca-pub-9085263631344051&rf=6&nb=_nb&nx=107&ny=21&act=1&ri=1&uap=Windows&uapv=10.0&uaa=x86&uam=&uafv=92.0.902.67&uab=&uaw=&uafvl=&adurl=https://diganexa.com/ZA/1679942392%3Ftrackid%3D699483749%26cid%3D632-738-7241%26placement%3Dwww.wichtel-o-mat.de%26target%3D%26campaignid%3D20732129465%26gclid%3DEAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE

msedge.exe

Remote address:

142.250.179.130:443

Request

POST /aclk?sa=l&ai=ClFp4VxxWZd7LBoCEpt8Pge6VyAnpzMSddLzlxaL_Ebfaor3AARABILbH_xtgye7thoCAoBmgAcKPg5wqyAEJqQIpN_mFyi-yPqgDAcgDCKoE8AJP0OuALTu1gRueDQ3uWeskkLanOOIhUygVlIQLDb44WtdRjOPSLtYEOqHbmmWQ0l6Lf4TBiAx5IYeNVv__gvFV9FzhU8VVaVF-WLtpJ5-CdyVUtWfa0xCbcSiumjnQYqy6GzpIQ6JwblqNiB8U7LdjZpAQMJkYZUfHYPbL3KycU7M3_XBpIoDs6geL7oUl0GJkSCd03aulDopk5qmwjRDFuTSqy0uHH2shM1iNkZnWwxDv9SlvKe_gu3NY1X8K1P7--O9tRmgF9cQHIl1lX1zYX3XRnSSUqFblHBF_ytAiNkCG9iDWjSLt5xl8uFBeOJHXvAuInfP4Gmj4iX5agueXHQDSS_Gn_B_aJzyqlrDMUoM2j4ljjVJuIBh-UOFO_Mu-88KOSFmrToIvEgV8nP8EMWTD0RWhVSFz0sFOffNpn2WJybmVUhfCnIOAgik5l4Jwgl7cHVQag6XccxCnKMGfp09pPKtKtwJR6clS2VotmsAEuZmhps8EiAW54eydTaAGLoAHwsfT-wSoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggUCIBhEAEYHzICigI6AoBASL39wTqxCVhf6SsstutHgAoBmAsByAsBgAwBogwYKhYKFOS0sQLutbECtbixAuS0sQLutbECqg0CVVPIDQHYEwzQFQGYFgH4FgGAFwE&ae=1&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE&num=1&cid=CAQSTwDICaaNILPQGNpNIcEqebGoFZ8Hm81ZjG21dqxSneY_3NEH4m1CGBluPpdMRZAgR9Z-AHjr33ws5iJSKjgdJt0pvQY7m6xpHvtFQPBORXEYAQ&sig=AOD64_3XXwwi_amMQMWBP4bptFgEB43tRg&client=ca-pub-9085263631344051&rf=6&nb=_nb&nx=107&ny=21&act=1&ri=1&uap=Windows&uapv=10.0&uaa=x86&uam=&uafv=92.0.902.67&uab=&uaw=&uafvl=&adurl=https://diganexa.com/ZA/1679942392%3Ftrackid%3D699483749%26cid%3D632-738-7241%26placement%3Dwww.wichtel-o-mat.de%26target%3D%26campaignid%3D20732129465%26gclid%3DEAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE HTTP/2.0
host: adclick.g.doubleclick.net
content-length: 0
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
content-type: text/plain;charset=UTF-8
accept: */*
origin: https://googleads.g.doubleclick.net
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
referer: https://googleads.g.doubleclick.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

diganexa.com

msedge.exe

Remote address:

8.8.8.8:53

Request

diganexa.com

IN A

Response

diganexa.com

IN A

172.64.171.4

diganexa.com

IN A

172.64.170.4
GET

https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
sec-ch-ua-mobile: ?0
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
referer: https://googleads.g.doubleclick.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: text/html; charset=UTF-8
set-cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA; Expires=Thu, 23 Nov 2023 13:44:16 GMT; Path=/
set-cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA; Expires=Thu, 23 Nov 2023 13:44:16 GMT; Path=/; SameSite=None; Secure
set-cookie: fsid=p9nnmparm7ou1en60g5b80ch04; expires=Sat, 08-Nov-2053 13:44:16 GMT; Max-Age=946080000; path=/; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6kyox7r6aWSE9Sx9OPKYYdgDgPrlryl3Mqu9KxCrUC2tdGCzvcn7adIO2lPQwKUGRS8%2BEajpgeIc06G02l%2Blj9dkaSX1B41KaDLDODO3IR3TIUdFpYv6U9IoP7c4ZWk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82702aedcd3b0eae-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/tpl/Foundation/v5/static/stylesheets/foundation.min.css

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /tpl/Foundation/v5/static/stylesheets/foundation.min.css HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: text/css
last-modified: Mon, 26 Jun 2023 14:23:15 GMT
etag: W/"b472-5ff0917583ac0-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6111
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j%2FiNJYXSBAybt0iQbizIveg6A4%2B37ZgrbDzOAn3jO%2Bam84dsiSjgOO1C%2FzwkJ7%2BR2YJabJKqb8zGnWw%2FAEP2tId9GyFekLaz3K8S0Fcpihu8WQFdxI4AcIPLMPEdEHc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82702af1a9cd0eae-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/tpl/Foundation/v5/static/javascripts/jquery/3.4.1/jquery.min.js

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /tpl/Foundation/v5/static/javascripts/jquery/3.4.1/jquery.min.js HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: application/javascript
last-modified: Mon, 26 Jun 2023 14:23:15 GMT
etag: W/"15851-5ff0917583ac0-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6111
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QmbcC5uwouOFIqNo6Zln5j9y1A%2BZVR6iq6GLCO9RcxoTm4NA4etq5YPIy4gYQEg4SYYoZep4dvP6f2WBwveAjaixbp9E3YvAiCC6r9%2FuGsG%2Fiy2PrFtpbpqjhHIFI7o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82702af1a9d00eae-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/a/1679942392/img/diganexa-logo.svg

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /a/1679942392/img/diganexa-logo.svg HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: image/svg+xml
last-modified: Thu, 21 Sep 2023 11:29:12 GMT
etag: W/"da8-605dccd208b30"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5728
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OxZBUHLJismZ3w41thHuooH5e9zZwkVINIGYmjfPOl1BGxuO4VD8AoQgBv0HfmYJdUVZDPgcfYneH9PhOhUKp6xY1gGCNjWZzPSyuIgCp%2BLALuLzL9VMJCvRG6Nhrl4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af1fa280eae-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/a/1679942392/img/burger.svg

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /a/1679942392/img/burger.svg HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: image/svg+xml
last-modified: Fri, 27 Oct 2023 13:53:41 GMT
etag: W/"221-608b304183740"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5728
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HmkwmCqY8ZPSQt%2BCHJu%2BRGDMBIn7pZr3o1R3eLvxpmErZbKjinogIlbVfrrKsYJvsSF5Pbe0PXa5bbnWIq8YD6FptvJSAeMjJEBx17gpexlqM4TTuWWnA1V%2B5wgHnBo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af21a4c0eae-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/a/1679942392/img/user.svg

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /a/1679942392/img/user.svg HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: image/svg+xml
last-modified: Fri, 27 Oct 2023 13:53:41 GMT
etag: W/"43b-608b304180860"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5728
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AG5WEJBpVjbAry18pgS%2FbgBhVSWvyIBpYKDeN0ukHdj7dg85d%2F67UoY8s0xGWbc1XSFgBEm9CPzqR0CnL%2BUWZUrnf%2F%2FEwNO10%2BgP7IBlrxT1SeyF2M53EqX%2Bc18OqJw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af21a4d0eae-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/a/1679942392/img/search.svg

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /a/1679942392/img/search.svg HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: image/svg+xml
last-modified: Thu, 21 Sep 2023 11:29:12 GMT
etag: W/"cd7-605dccd200660"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5728
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Eul0X8pW5kgyYrgRy7xPToceQsmTZlAGdJqtlJgcZeVfoGDAXgFpFo80ENdY80X2arfTNgvODVYP3J9x5cTJiibpYh7WeSxlmk9URYWaZD%2F%2F%2Fi7IA4je2KbP2N45WB4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af21a520eae-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/a/1679942392/img/device-icon.svg

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /a/1679942392/img/device-icon.svg HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: image/svg+xml
last-modified: Fri, 27 Oct 2023 13:53:41 GMT
etag: W/"4d1-608b304186620"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5728
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C8uK2cOLrLK9HkhG0HLG80MvcOLCJskjbaFRgV5Pli%2BPjM%2BeMkvbC9QWqo33weFWVOZYa9FZ884CK367ZruQUxxpRhjAJFbX3%2BWujW3W6EhowqTFc1%2Fbj%2FfNR4XZy7E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af21a4f0eae-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/a/1679942392/img/stars-icon.svg

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /a/1679942392/img/stars-icon.svg HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: image/png
content-length: 232084
last-modified: Thu, 21 Sep 2023 11:29:12 GMT
etag: "38a94-605dccd212388"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5728
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=THCin4O4TW27Z6j3QLgtcvVY2dxheOT5IZw8ajsBcCpxxtwnd7ZjAbwyvFhI9gSCF7fvorsYZvAlnnsrvV2YCb1VH0Upf9cROn%2Bh9MzbIBeh%2BkmZupRPA46pKDVYCVA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af21a540eae-AMS
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/a/1679942392/img/lock-icon.svg

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /a/1679942392/img/lock-icon.svg HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: image/png
content-length: 145345
last-modified: Thu, 21 Sep 2023 11:51:59 GMT
etag: "237c1-605dd1ea030f0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5728
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CO2z6dM7ZKf02uXKz3nI32aahD4ys%2FokygfDvblcCjOLMKo3Td92XG2l13n%2BaspnbQb8Ins2qjfxOwgw9gM1tjCcS6Yb44wNbIYlnMsmNegefpOd0vmrCCh5YBUYNLE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af21a550eae-AMS
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/a/1679942392/img/devices_portal.png

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /a/1679942392/img/devices_portal.png HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: image/svg+xml
last-modified: Thu, 21 Sep 2023 11:29:12 GMT
etag: W/"a91-605dccd1fcfb0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5728
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AEjjg7eT9rsTGarkO%2BOPf4AGbWHf1Cg%2FfZ2R0z8K5g5Hce%2FkoJ%2FSU0Yfy%2B17rFbxaSEvHSu5KeJzwbkiwa5H5gYLB1B2RklHyIBt0x%2FUx6Z1gJgNvEDdwbKC11Hc4t8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af21a530eae-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/a/1679942392/img/arrows-movies.png

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /a/1679942392/img/arrows-movies.png HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: image/png
content-length: 128417
last-modified: Thu, 21 Sep 2023 11:52:57 GMT
etag: "1f5a1-605dd22112848"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5728
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XvjBJ10QQTDORteLG7MK7Pyi9P6AR%2FFldxBJUJvZpqcW5cka8CWAJyw3m6d0LEkxyUcqMydV7ytDnUFFxCdvwmKvpGOt%2F%2FLBRDqgON6BXI6S%2FAJquyZb4jZMFK5oeD4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af21a570eae-AMS
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/a/1679942392/img/arrows-movies-mob.png

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /a/1679942392/img/arrows-movies-mob.png HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: image/png
content-length: 73512
last-modified: Thu, 21 Sep 2023 11:27:18 GMT
etag: "11f28-605dcc6534978"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5728
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L%2BdYQDkhjosnyWuA6oS8YpYA5%2FmieTvOwH7TjF7vFi9A%2F4hnVqNhDxIwpdZiXfvcSRFIhf2qGqG7co2NqAc%2FgfEA%2FKgVS98nn%2BRY1Q%2BV3HNxv8B2lKLmL2l%2B3uXie70%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af21a580eae-AMS
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/a/1679942392/img/arrows-music.png

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /a/1679942392/img/arrows-music.png HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: image/png
content-length: 87035
last-modified: Thu, 21 Sep 2023 11:27:18 GMT
etag: "153fb-605dcc652b508"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5728
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EibbxtJ7%2F1IhqLVrE%2F2fhXxqrx0BTxECsahXcYnW7%2BDmWUc2cZPGlZ0CK2DGYAJIJZgollW7an%2BnvleiPl%2BkYCqWYJmrZnA1X6Cw4SpWkHkmPwf5j33DVPHqqwreKYY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af22a5a0eae-AMS
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/a/1679942392/img/arrows-music-mob.png

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /a/1679942392/img/arrows-music-mob.png HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: image/png
content-length: 148854
last-modified: Thu, 21 Sep 2023 11:27:19 GMT
etag: "24576-605dcc65a4a70"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5728
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ImJqHLFXilubr%2Fc%2Bg9CW0%2B7rD1uVawzS5%2FKFZifBrAdW9%2FtXjzYAIN5dHC51BPhd%2Bsha3YGJlGXQdPKe49t7m4A5Bv2nI8Eu1bFHFxECy5oK0uwmxP1oCa6X%2FONNWA4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af21a590eae-AMS
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/a/1679942392/img/arrows-games.png

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /a/1679942392/img/arrows-games.png HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: image/svg+xml
last-modified: Thu, 21 Sep 2023 11:27:18 GMT
etag: W/"475-605dcc6514da8"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5728
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EqXmvjTUzQlu3vSOU2b7hUMtygm84srHG80S%2F8ypfY%2BfDkSYz7EKtvQ6M3DBEk7cBD24JQLJMhBsGIUU%2FqrZWSLX5Y18CnKwDlrIiCXZFU%2FRYOS2vRsTem3ffh5Uhbk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af22a5f0eae-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/a/1679942392/img/arrows-games-mob.png

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /a/1679942392/img/arrows-games-mob.png HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: image/svg+xml
last-modified: Thu, 21 Sep 2023 11:29:12 GMT
etag: W/"c89-605dccd206420"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5728
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QlJun%2FQs82u37KvkW7vBMnhlQSQ02CVnXKSP5%2Fi2EbuF%2FwtRFXfk3nqeCWyPvWGPGDDEhoXiMdgyLGptEOIiEoh2mEpOblqFo3MpYt%2FvIOLOqzWrz4I6oCQRSOOL5S0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af21a510eae-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/a/1679942392/img/arrows-audiobooks.png

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /a/1679942392/img/arrows-audiobooks.png HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: image/svg+xml
last-modified: Mon, 25 Sep 2023 14:12:05 GMT
etag: W/"11fb-6062f8afba0c0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5728
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z84%2FwVMWUcKcEmapKTG7AI5XG%2FuvnbUD1yf3dPGebrCoww6sEXhaL%2BCzVFmrja2EZaIEPYDcVJIAuZWuHBhwdtZhldi%2FqOMLKWdS4QcW1Go%2F58dp2vdDhu8NQUBOC88%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af22a600eae-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/a/1679942392/img/arrows-audiobooks-mob.png

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /a/1679942392/img/arrows-audiobooks-mob.png HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: image/png
content-length: 136899
last-modified: Thu, 21 Sep 2023 11:27:18 GMT
etag: "216c3-605dcc6598b08"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5728
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sPvAwCiKcRQKGVx9GYvPAaLPybXFpAAJHRQXHrHdx2fCqFGmJkRXTy2eamHVOhkrKb04SkGs0K%2Fr8F%2Bwiy3fnhYoJHEs1M9nZS93hUjYqIOJBLaxJdA%2FuB2YntNtyrk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af22a5b0eae-AMS
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/a/1679942392/img/bullet-arrow.svg

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /a/1679942392/img/bullet-arrow.svg HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: image/svg+xml
last-modified: Mon, 25 Sep 2023 14:12:05 GMT
etag: W/"16f0-6062f8afab660"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5728
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zzMYzIJzoH4qoQPDNrtzjv45hIhrkzBvEFMBCK1Xz8ykbSbr%2B0T7Evx2ZvDlpqn%2FbceScNOHG2cEtMQ0D1WKTV9QbUu6xP%2Fn79xxxCBtIKQAoBlF2VfbjSsSxZdHRIw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af22a640eae-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/a/1679942392/img/film-reel-new.svg

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /a/1679942392/img/film-reel-new.svg HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: image/png
content-length: 75474
last-modified: Thu, 21 Sep 2023 11:27:18 GMT
etag: "126d2-605dcc651da48"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5728
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tGE0rWgRdCO1j71IPAEZLJwEhyiKgPaT0dJICwsrB5Q%2F607ngkUiA0OHTJ1RCgX86Qe3NOBgmQ93lJ1Qi6%2BTuFuCV8XbNk3PzNRid4Xwo%2F%2BncVnU4YEgCH3Y4oHkG28%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af22a5d0eae-AMS
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/a/1679942392/img/mp3-new.svg

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /a/1679942392/img/mp3-new.svg HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: image/png
content-length: 86089
last-modified: Thu, 21 Sep 2023 11:27:18 GMT
etag: "15049-605dcc6540110"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5728
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I%2BLkE%2FPre4KxvQbwWfEP%2FNPQt4gxjV%2FBT7M%2FKAYr2nI4lAo4JGpmofx%2FqmrP4sgYY%2BsOKiaaxwj7zHaUl7lps9nJVwYXh4sOyEB%2B%2BGHKKZfgiixQhw3W2ExCK74u268%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af21a560eae-AMS
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/a/1679942392/img/controller-new.svg

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /a/1679942392/img/controller-new.svg HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: image/svg+xml
last-modified: Mon, 25 Sep 2023 14:12:05 GMT
etag: W/"1a93-6062f8afb5e58"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5728
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GVDiInnlGWKWfZ0hWR9%2FtQIFy%2BKz%2F4XNf8Z2etFknnbYNa9mjC9c3lTlefltmzzINEdd5vxaLp9uQ%2FAVBVPucmRewYsa4B1RIi9sIe8SWwVYqvJjCW05c6RvLCZVH%2B0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af22a610eae-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/a/1679942392/img/book-new.svg

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /a/1679942392/img/book-new.svg HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:16 GMT
content-type: image/svg+xml
last-modified: Mon, 25 Sep 2023 14:12:05 GMT
etag: W/"2503-6062f8afb0480"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5728
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2EXp%2FahkE8hvGJ5cT0vBmJUJ2tc8c2BTw9KnGYyqW%2BW9KaQmQ24J2q7wi8L7IWNUo8OxRFIPW47MZgFEfHs%2BQwfTqdTZoQEO0UHR5jra%2BqyaVAdDM9s3vI4NEYv4jD0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af22a620eae-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://diganexa.com/a/1679942392/img/favi-diganexa.svg

msedge.exe

Remote address:

172.64.171.4:443

Request

GET /a/1679942392/img/favi-diganexa.svg HTTP/2.0
host: diganexa.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: AWSALBCORS=2cKWnI+vd6t9XIUWdlDJdd+NM10ag8/2hxdyiu3r1QlLOyOwFx6a9/MXuoIIkQTQWir9iZ6NL3PSYvzl45qxUJ92rGBkyesPnsxJBDz9IqhbpG49qEaQLSAl9fUA
cookie: fsid=p9nnmparm7ou1en60g5b80ch04

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:17 GMT
content-type: image/svg+xml
last-modified: Wed, 27 Sep 2023 09:01:50 GMT
etag: W/"4a5-606537125c990"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5728
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dej6ITBGtFYL3lL53eEkzrQoPUl9NM01sKSy8oB%2FqfhIdyn0NBAD5zbw8JS9C5fj3tsGdU%2FJsOD1fEDbFlS127EvPHp1v9Ld63abosTv2sdhoq4T4wlHsHUWW2rIMGA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af7afe60eae-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
DNS

130.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

130.179.250.142.in-addr.arpa

IN PTR

Response

130.179.250.142.in-addr.arpa

IN PTR

ams17s10-in-f21e100net
DNS

4.171.64.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

4.171.64.172.in-addr.arpa

IN PTR

Response
DNS

162.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

162.179.250.142.in-addr.arpa

IN PTR

Response

162.179.250.142.in-addr.arpa

IN PTR

ams15s41-in-f21e100net
DNS

st.at2010.net

msedge.exe

Remote address:

8.8.8.8:53

Request

st.at2010.net

IN A

Response

st.at2010.net

IN A

104.22.76.145

st.at2010.net

IN A

172.67.22.107

st.at2010.net

IN A

104.22.77.145
GET

https://st.at2010.net/a/1679942392/img/graphic3.svg

msedge.exe

Remote address:

104.22.76.145:443

Request

GET /a/1679942392/img/graphic3.svg HTTP/2.0
host: st.at2010.net
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:17 GMT
content-type: image/webp
content-length: 88396
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=129857
content-disposition: inline; filename="music-hex.webp"
vary: Accept
access-control-allow-origin: *
etag: "1fb41-605dcc65627d8"
last-modified: Thu, 21 Sep 2023 11:27:18 GMT
cache-control: max-age=2678400
cf-cache-status: HIT
age: 5729
accept-ranges: bytes
server: cloudflare
cf-ray: 82702af53e556705-AMS
GET

https://st.at2010.net/a/1679942392/img/graphic4.svg

msedge.exe

Remote address:

104.22.76.145:443

Request

GET /a/1679942392/img/graphic4.svg HTTP/2.0
host: st.at2010.net
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:17 GMT
content-type: image/webp
content-length: 91194
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=131181
content-disposition: inline; filename="movies-hex.webp"
vary: Accept
access-control-allow-origin: *
etag: "2006d-605dcc656df70"
last-modified: Thu, 21 Sep 2023 11:27:18 GMT
cache-control: max-age=2678400
cf-cache-status: HIT
age: 5729
accept-ranges: bytes
server: cloudflare
cf-ray: 82702af53e546705-AMS
GET

https://st.at2010.net/a/1679942392/img/tiles-side.png

msedge.exe

Remote address:

104.22.76.145:443

Request

GET /a/1679942392/img/tiles-side.png HTTP/2.0
host: st.at2010.net
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:17 GMT
content-type: image/webp
content-length: 634848
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=879188
content-disposition: inline; filename="tiles-side.webp"
vary: Accept
access-control-allow-origin: *
etag: "d6a54-605dcc93fe600"
last-modified: Thu, 21 Sep 2023 11:28:07 GMT
cache-control: max-age=2678400
cf-cache-status: HIT
age: 727
accept-ranges: bytes
server: cloudflare
cf-ray: 82702af53e526705-AMS
GET

https://st.at2010.net/a/1679942392/img/movies-hex.png

msedge.exe

Remote address:

104.22.76.145:443

Request

GET /a/1679942392/img/movies-hex.png HTTP/2.0
host: st.at2010.net
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:17 GMT
content-type: image/webp
content-length: 102650
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=148291
content-disposition: inline; filename="games-hex.webp"
vary: Accept
access-control-allow-origin: *
etag: "24343-605dcc6556c58"
last-modified: Thu, 21 Sep 2023 11:27:18 GMT
cache-control: max-age=2678400
cf-cache-status: HIT
age: 5728
accept-ranges: bytes
server: cloudflare
cf-ray: 82702af53e566705-AMS
GET

https://st.at2010.net/a/1679942392/img/music-hex.png

msedge.exe

Remote address:

104.22.76.145:443

Request

GET /a/1679942392/img/music-hex.png HTTP/2.0
host: st.at2010.net
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:17 GMT
content-type: image/svg+xml
last-modified: Wed, 27 Sep 2023 09:01:50 GMT
etag: W/"158bf-606537126db00"
access-control-allow-origin: *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 727
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af53e506705-AMS
content-encoding: br
GET

https://st.at2010.net/a/1679942392/img/games-hex.png

msedge.exe

Remote address:

104.22.76.145:443

Request

GET /a/1679942392/img/games-hex.png HTTP/2.0
host: st.at2010.net
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:17 GMT
content-type: image/webp
content-length: 95610
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=139683
content-disposition: inline; filename="books-hex.webp"
vary: Accept
access-control-allow-origin: *
etag: "221a3-605dcc654b0d8"
last-modified: Thu, 21 Sep 2023 11:27:18 GMT
cache-control: max-age=2678400
cf-cache-status: HIT
age: 727
accept-ranges: bytes
server: cloudflare
cf-ray: 82702af55e6c6705-AMS
GET

https://st.at2010.net/a/1679942392/img/books-hex.png

msedge.exe

Remote address:

104.22.76.145:443

Request

GET /a/1679942392/img/books-hex.png HTTP/2.0
host: st.at2010.net
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Thu, 16 Nov 2023 13:44:17 GMT
content-type: image/svg+xml
last-modified: Wed, 27 Sep 2023 09:01:50 GMT
etag: W/"13446-6065371264e60"
access-control-allow-origin: *
cache-control: max-age=2678400
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 82702af53e516705-AMS
content-encoding: br
DNS

js-agent.newrelic.com

msedge.exe

Remote address:

8.8.8.8:53

Request

js-agent.newrelic.com

IN A

Response

js-agent.newrelic.com

IN CNAME

k.sni.global.fastly.net

k.sni.global.fastly.net

IN A

151.101.2.137

k.sni.global.fastly.net

IN A

151.101.66.137

k.sni.global.fastly.net

IN A

151.101.130.137

k.sni.global.fastly.net

IN A

151.101.194.137
GET

https://js-agent.newrelic.com/nr-spa-1.247.0.min.js

msedge.exe

Remote address:

151.101.2.137:443

Request

GET /nr-spa-1.247.0.min.js HTTP/2.0
host: js-agent.newrelic.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
origin: https://diganexa.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
dnt: 1
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: script
referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

x-amz-id-2: LkxNi4rK86SR9oapU0FZXffuOc+eetMZC6QR/vejFUr7Wpaesza6EcO2mRA/yq+gncDbOrnkByc=
x-amz-request-id: 7RY601B0TRY2CXB7
last-modified: Tue, 14 Nov 2023 21:54:28 GMT
etag: "8521c4694a1100f8db886be1e923dd77"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400
x-amz-version-id: BCvP_nDw2MuiPhwoqHEaL9Gl7.5eVmRh
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
content-encoding: br
accept-ranges: bytes
date: Thu, 16 Nov 2023 13:44:17 GMT
via: 1.1 varnish
x-served-by: cache-ams21061-AMS
x-cache: HIT
x-cache-hits: 119550
x-timer: S1700142258.990122,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=300
content-length: 29290
DNS

bam.eu01.nr-data.net

msedge.exe

Remote address:

8.8.8.8:53

Request

bam.eu01.nr-data.net

IN A

Response

bam.eu01.nr-data.net

IN CNAME

bam-eu01.cell.eu.nr-data.net

bam-eu01.cell.eu.nr-data.net

IN CNAME

fastly-tls12-bam.eu01.nr-data.net

fastly-tls12-bam.eu01.nr-data.net

IN A

185.221.87.23
DNS

145.76.22.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

145.76.22.104.in-addr.arpa

IN PTR

Response
POST

https://bam.eu01.nr-data.net/1/NRBR-74c27739d3fa0d464e8?a=251773528&v=1.247.0&to=MhBSZQoZXhJRWxFZVwtac0QLDF8MH2IkHxI%3D&rst=2007&ck=0&s=6e5f733d69b586a4&ref=https://diganexa.com/ZA/1679942392&af=err,xhr,stn,ins,spa&ap=442&be=761&fe=978&dc=393&at=HldFE0IDTU0SWUcKQxgI&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1700142254622,%22n%22:0,%22f%22:25,%22dn%22:83,%22dne%22:83,%22c%22:83,%22s%22:121,%22ce%22:194,%22rq%22:196,%22rp%22:761,%22rpe%22:791,%22di%22:1152,%22ds%22:1152,%22de%22:1154,%22dc%22:1735,%22l%22:1735,%22le%22:1739%7D,%22navigation%22:%7B%7D%7D&fp=1232&fcp=1232

msedge.exe

Remote address:

185.221.87.23:443

Request

POST /1/NRBR-74c27739d3fa0d464e8?a=251773528&v=1.247.0&to=MhBSZQoZXhJRWxFZVwtac0QLDF8MH2IkHxI%3D&rst=2007&ck=0&s=6e5f733d69b586a4&ref=https://diganexa.com/ZA/1679942392&af=err,xhr,stn,ins,spa&ap=442&be=761&fe=978&dc=393&at=HldFE0IDTU0SWUcKQxgI&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1700142254622,%22n%22:0,%22f%22:25,%22dn%22:83,%22dne%22:83,%22c%22:83,%22s%22:121,%22ce%22:194,%22rq%22:196,%22rp%22:761,%22rpe%22:791,%22di%22:1152,%22ds%22:1152,%22de%22:1154,%22dc%22:1735,%22l%22:1735,%22le%22:1739%7D,%22navigation%22:%7B%7D%7D&fp=1232&fcp=1232 HTTP/1.1
Host: bam.eu01.nr-data.net
Connection: keep-alive
Content-Length: 0
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
content-type: text/plain
Accept: */*
Origin: https://diganexa.com
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 40
date: Thu, 16 Nov 2023 13:44:18 GMT
content-type: text/plain
server: istio-envoy
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
access-control-allow-credentials: true
access-control-allow-origin: https://diganexa.com
cross-origin-resource-policy: cross-origin
x-envoy-upstream-service-time: 2
x-served-by: cache-ams21044-AMS
POST

https://bam.eu01.nr-data.net/events/1/NRBR-74c27739d3fa0d464e8?a=251773528&v=1.247.0&to=MhBSZQoZXhJRWxFZVwtac0QLDF8MH2IkHxI%3D&rst=4490&ck=0&s=6e5f733d69b586a4&ref=https://diganexa.com/ZA/1679942392

msedge.exe

Remote address:

185.221.87.23:443

Request

POST /events/1/NRBR-74c27739d3fa0d464e8?a=251773528&v=1.247.0&to=MhBSZQoZXhJRWxFZVwtac0QLDF8MH2IkHxI%3D&rst=4490&ck=0&s=6e5f733d69b586a4&ref=https://diganexa.com/ZA/1679942392 HTTP/1.1
Host: bam.eu01.nr-data.net
Connection: keep-alive
Content-Length: 196
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
content-type: text/plain
Accept: */*
Origin: https://diganexa.com
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 24
date: Thu, 16 Nov 2023 13:44:20 GMT
content-type: image/gif
access-control-allow-origin: https://diganexa.com
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
access-control-allow-credentials: true
x-served-by: cache-ams21044-AMS
POST

https://bam.eu01.nr-data.net/events/1/NRBR-74c27739d3fa0d464e8?a=251773528&v=1.247.0&to=MhBSZQoZXhJRWxFZVwtac0QLDF8MH2IkHxI%3D&rst=12478&ck=0&s=6e5f733d69b586a4&ref=https://diganexa.com/ZA/1679942392

msedge.exe

Remote address:

185.221.87.23:443

Request

POST /events/1/NRBR-74c27739d3fa0d464e8?a=251773528&v=1.247.0&to=MhBSZQoZXhJRWxFZVwtac0QLDF8MH2IkHxI%3D&rst=12478&ck=0&s=6e5f733d69b586a4&ref=https://diganexa.com/ZA/1679942392 HTTP/1.1
Host: bam.eu01.nr-data.net
Connection: keep-alive
Content-Length: 298
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
content-type: text/plain
Accept: */*
Origin: https://diganexa.com
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 24
date: Thu, 16 Nov 2023 13:44:28 GMT
content-type: image/gif
access-control-allow-origin: https://diganexa.com
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
access-control-allow-credentials: true
x-served-by: cache-ams21044-AMS
POST

https://bam.eu01.nr-data.net/jserrors/1/NRBR-74c27739d3fa0d464e8?a=251773528&v=1.247.0&to=MhBSZQoZXhJRWxFZVwtac0QLDF8MH2IkHxI%3D&rst=12478&ck=0&s=6e5f733d69b586a4&ref=https://diganexa.com/ZA/1679942392

msedge.exe

Remote address:

185.221.87.23:443

Request

POST /jserrors/1/NRBR-74c27739d3fa0d464e8?a=251773528&v=1.247.0&to=MhBSZQoZXhJRWxFZVwtac0QLDF8MH2IkHxI%3D&rst=12478&ck=0&s=6e5f733d69b586a4&ref=https://diganexa.com/ZA/1679942392 HTTP/1.1
Host: bam.eu01.nr-data.net
Connection: keep-alive
Content-Length: 592
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
content-type: text/plain
Accept: */*
Origin: https://diganexa.com
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 24
date: Thu, 16 Nov 2023 13:44:28 GMT
content-type: image/gif
access-control-allow-origin: https://diganexa.com
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
access-control-allow-credentials: true
x-served-by: cache-ams21044-AMS
POST

https://bam.eu01.nr-data.net/jserrors/1/NRBR-74c27739d3fa0d464e8?a=251773528&v=1.247.0&to=MhBSZQoZXhJRWxFZVwtac0QLDF8MH2IkHxI%3D&rst=23487&ck=0&s=6e5f733d69b586a4&ref=https://diganexa.com/ZA/1679942392

msedge.exe

Remote address:

185.221.87.23:443

Request

POST /jserrors/1/NRBR-74c27739d3fa0d464e8?a=251773528&v=1.247.0&to=MhBSZQoZXhJRWxFZVwtac0QLDF8MH2IkHxI%3D&rst=23487&ck=0&s=6e5f733d69b586a4&ref=https://diganexa.com/ZA/1679942392 HTTP/1.1
Host: bam.eu01.nr-data.net
Connection: keep-alive
Content-Length: 621
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
content-type: text/plain
Accept: */*
Origin: https://diganexa.com
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 24
date: Thu, 16 Nov 2023 13:44:39 GMT
content-type: image/gif
access-control-allow-origin: https://diganexa.com
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
access-control-allow-credentials: true
x-served-by: cache-ams21044-AMS
POST

https://bam.eu01.nr-data.net/jserrors/1/NRBR-74c27739d3fa0d464e8?a=251773528&v=1.247.0&to=MhBSZQoZXhJRWxFZVwtac0QLDF8MH2IkHxI%3D&rst=34490&ck=0&s=6e5f733d69b586a4&ref=https://diganexa.com/ZA/1679942392

msedge.exe

Remote address:

185.221.87.23:443

Request

POST /jserrors/1/NRBR-74c27739d3fa0d464e8?a=251773528&v=1.247.0&to=MhBSZQoZXhJRWxFZVwtac0QLDF8MH2IkHxI%3D&rst=34490&ck=0&s=6e5f733d69b586a4&ref=https://diganexa.com/ZA/1679942392 HTTP/1.1
Host: bam.eu01.nr-data.net
Connection: keep-alive
Content-Length: 316
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
content-type: text/plain
Accept: */*
Origin: https://diganexa.com
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 24
date: Thu, 16 Nov 2023 13:44:50 GMT
content-type: image/gif
access-control-allow-origin: https://diganexa.com
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
access-control-allow-credentials: true
x-served-by: cache-ams21044-AMS
POST

https://bam.eu01.nr-data.net/jserrors/1/NRBR-74c27739d3fa0d464e8?a=251773528&v=1.247.0&to=MhBSZQoZXhJRWxFZVwtac0QLDF8MH2IkHxI%3D&rst=45490&ck=0&s=6e5f733d69b586a4&ref=https://diganexa.com/ZA/1679942392

msedge.exe

Remote address:

185.221.87.23:443

Request

POST /jserrors/1/NRBR-74c27739d3fa0d464e8?a=251773528&v=1.247.0&to=MhBSZQoZXhJRWxFZVwtac0QLDF8MH2IkHxI%3D&rst=45490&ck=0&s=6e5f733d69b586a4&ref=https://diganexa.com/ZA/1679942392 HTTP/1.1
Host: bam.eu01.nr-data.net
Connection: keep-alive
Content-Length: 316
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
content-type: text/plain
Accept: */*
Origin: https://diganexa.com
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Connection: keep-alive
Content-Length: 24
date: Thu, 16 Nov 2023 13:45:01 GMT
content-type: image/gif
access-control-allow-origin: https://diganexa.com
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
access-control-allow-credentials: true
x-served-by: cache-ams21044-AMS
DNS

137.2.101.151.in-addr.arpa

Remote address:

8.8.8.8:53

Request

137.2.101.151.in-addr.arpa

IN PTR

Response
DNS

23.87.221.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

23.87.221.185.in-addr.arpa

IN PTR

Response
DNS

122.10.44.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

122.10.44.20.in-addr.arpa

IN PTR

Response

138.201.125.103:443

https://www.wichtel-o-mat.de/favicon.ico

tls, http2

msedge.exe

2.3kB
12.0kB
17
19

HTTP Request

GET https://www.wichtel-o-mat.de/de/parties/78d8da58-f72c-4aac-bb79-e4f1a2969592/participants/7cec603a-82dc-4ccb-a0bc-70ca446621ec/edit

HTTP Response

200

HTTP Request

GET https://www.wichtel-o-mat.de/favicon.ico

HTTP Response

200
88.221.25.169:80

http://apps.identrust.com/roots/dstrootcax3.p7c

http

msedge.exe

416 B
1.6kB
6
5

HTTP Request

GET http://apps.identrust.com/roots/dstrootcax3.p7c

HTTP Response

200
151.101.194.217:443

https://browser.sentry-cdn.com/6.14.3/bundle.min.js

tls, http2

msedge.exe

2.1kB
29.9kB
22
34

HTTP Request

GET https://browser.sentry-cdn.com/6.14.3/bundle.min.js

HTTP Response

200
18.65.40.188:443

https://d201e9jk75rru1.cloudfront.net/assets/bg_adframe-511c56a3098d719de89e475ffc0d2759ed88c721.png

tls, http

msedge.exe

6.4kB
94.0kB
50
80

HTTP Request

GET https://d201e9jk75rru1.cloudfront.net/assets/application-fbf07ca58b322fc336f049d8a900dd96012a8f21.css

HTTP Response

200

HTTP Request

GET https://d201e9jk75rru1.cloudfront.net/assets/wichtel_status-ab4de76e8e2bff02dd9e987102a53dcc14304751.png

HTTP Response

200

HTTP Request

GET https://d201e9jk75rru1.cloudfront.net/assets/bg_menu-5d1f1d9e83df4075709e365e1af9d73d249955b8.png

HTTP Response

200

HTTP Request

GET https://d201e9jk75rru1.cloudfront.net/assets/bg_content_bottom-4ac7eaff3985f6ace7ab29ebb4a44f65c813f2c3.jpg

HTTP Response

200

HTTP Request

GET https://d201e9jk75rru1.cloudfront.net/assets/bg_adframe-511c56a3098d719de89e475ffc0d2759ed88c721.png

HTTP Response

200
18.65.40.188:443

https://d201e9jk75rru1.cloudfront.net/assets/langswitch_en-2063d6ad2f67d5c83e5b0f8821d85d6934c6738c.png

tls, http

msedge.exe

4.6kB
86.0kB
43
70

HTTP Request

GET https://d201e9jk75rru1.cloudfront.net/assets/application-9f97c2363fdc1d0537a942e563b88c67bdb48e55.js

HTTP Response

200

HTTP Request

GET https://d201e9jk75rru1.cloudfront.net/assets/button_ok-1b69840a7c3225ff846d321b3dcd06eb255b6ecd.png

HTTP Response

200

HTTP Request

GET https://d201e9jk75rru1.cloudfront.net/assets/langswitch_en-2063d6ad2f67d5c83e5b0f8821d85d6934c6738c.png

HTTP Response

200
18.65.40.188:443

https://d201e9jk75rru1.cloudfront.net/assets/button_yes-a025d6dab8ffde69b4607f166e79f5ec1c0b8d3a.png

tls, http

msedge.exe

2.8kB
19.9kB
17
24

HTTP Request

GET https://d201e9jk75rru1.cloudfront.net/assets/bg_content-ca79b8660cbb3ae8d3f9e5085ba566e252a0cbcf.png

HTTP Response

200

HTTP Request

GET https://d201e9jk75rru1.cloudfront.net/assets/button_yes-a025d6dab8ffde69b4607f166e79f5ec1c0b8d3a.png

HTTP Response

200
18.65.40.188:443

https://d201e9jk75rru1.cloudfront.net/assets/button_no-466077749021c10285a06736338c9e21ec99fda6.png

tls, http

msedge.exe

2.8kB
21.0kB
17
24

HTTP Request

GET https://d201e9jk75rru1.cloudfront.net/assets/bg_top-5d172b30897a45405046c5c0b191799176a2e637.png

HTTP Response

200

HTTP Request

GET https://d201e9jk75rru1.cloudfront.net/assets/button_no-466077749021c10285a06736338c9e21ec99fda6.png

HTTP Response

200
18.65.40.188:443

https://d201e9jk75rru1.cloudfront.net/assets/bg_bottom-4faec37b8d917b6430a7c45d10724ac333ca90ca.png

tls, http

msedge.exe

5.5kB
83.5kB
43
70

HTTP Request

GET https://d201e9jk75rru1.cloudfront.net/assets/logo_wichtel-o-mat-49857b89e193c70fb1469ae8450848cf9f3afa4c.png

HTTP Response

200

HTTP Request

GET https://d201e9jk75rru1.cloudfront.net/assets/bg_fieldset-42411f662375c3158b8429d4914118899d6e0e12.png

HTTP Response

200

HTTP Request

GET https://d201e9jk75rru1.cloudfront.net/assets/wichtel_geschenkliste-898e38b22dd7e8fd53436c57e6ed75466676d572.png

HTTP Response

200

HTTP Request

GET https://d201e9jk75rru1.cloudfront.net/assets/bg_bottom-4faec37b8d917b6430a7c45d10724ac333ca90ca.png

HTTP Response

200
18.65.40.188:443

https://d201e9jk75rru1.cloudfront.net/assets/bg_fieldset_top-78e269b7f8c4c62b87cbdaf3da7462a2f88fc6af.png

tls, http

msedge.exe

2.7kB
10.1kB
14
17

HTTP Request

GET https://d201e9jk75rru1.cloudfront.net/assets/bg_main-298bef47e84c095497d7de8e237ee834f1dce12f.jpg

HTTP Response

200

HTTP Request

GET https://d201e9jk75rru1.cloudfront.net/assets/bg_fieldset_top-78e269b7f8c4c62b87cbdaf3da7462a2f88fc6af.png

HTTP Response

200
138.201.125.103:443

https://sentry.mojocode.de/api/2/envelope/?sentry_key=b2fd7cf636314d759d0a2a92cbb130fb&sentry_version=7

tls, http2

msedge.exe

2.3kB
6.3kB
15
16

HTTP Request

POST https://sentry.mojocode.de/api/2/envelope/?sentry_key=b2fd7cf636314d759d0a2a92cbb130fb&sentry_version=7

HTTP Response

200
216.239.32.181:443

https://analytics.google.com/g/collect?v=2&tid=G-M3B1PE9R3Z&gtm=45je3b81v894962914&_p=1700142162934&_gaz=1&gcd=11l1l1l1l1&dma=0&cid=1605538676.1700142164&ul=en-us&sr=1280x720&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&_s=1&sid=1700142164&sct=1&seg=0&dl=https%3A%2F%2Fwww.wichtel-o-mat.de%2Fde%2Fparties%2F78d8da58-f72c-4aac-bb79-e4f1a2969592%2Fparticipants%2F7cec603a-82dc-4ccb-a0bc-70ca446621ec%2Fedit&dt=Online-Wichteln%20mit%20dem%20Wichtel-O-Mat%20%3A%3A%20Wichtel-Status%20bearbeiten&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=4587

tls, http2

msedge.exe

2.2kB
9.0kB
16
18

HTTP Request

POST https://analytics.google.com/g/collect?v=2&tid=G-M3B1PE9R3Z&gtm=45je3b81v894962914&_p=1700142162934&_gaz=1&gcd=11l1l1l1l1&dma=0&cid=1605538676.1700142164&ul=en-us&sr=1280x720&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&_s=1&sid=1700142164&sct=1&seg=0&dl=https%3A%2F%2Fwww.wichtel-o-mat.de%2Fde%2Fparties%2F78d8da58-f72c-4aac-bb79-e4f1a2969592%2Fparticipants%2F7cec603a-82dc-4ccb-a0bc-70ca446621ec%2Fedit&dt=Online-Wichteln%20mit%20dem%20Wichtel-O-Mat%20%3A%3A%20Wichtel-Status%20bearbeiten&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=4587
142.250.102.155:443

https://stats.g.doubleclick.net/g/collect?v=2&tid=G-M3B1PE9R3Z&cid=1605538676.1700142164&gtm=45je3b81v894962914&aip=1&dma=0&gcd=11l1l1l1l1

tls, http2

msedge.exe

1.9kB
6.6kB
14
14

HTTP Request

POST https://stats.g.doubleclick.net/g/collect?v=2&tid=G-M3B1PE9R3Z&cid=1605538676.1700142164&gtm=45je3b81v894962914&aip=1&dma=0&gcd=11l1l1l1l1
172.217.168.194:443

https://googleads.g.doubleclick.net/pagead/html/r20231109/r20190131/zrt_lookup_fy2021.html

tls, http2

msedge.exe

2.2kB
11.2kB
20
18

HTTP Request

GET https://googleads.g.doubleclick.net/pagead/html/r20231109/r20190131/zrt_lookup_fy2021.html
142.250.179.161:443

cdn.ampproject.org

tls, http2

msedge.exe

3.7kB
12.8kB
14
15
142.250.179.161:443

cdn.ampproject.org

tls, http2

msedge.exe

2.1kB
12.7kB
12
14
142.250.179.161:443

cdn.ampproject.org

tls, http2

msedge.exe

2.1kB
12.7kB
12
14
142.250.179.161:443

https://cdn.ampproject.org/rtv/012310301456000/v0/amp-gwd-animation-0.1.js

tls, http2

msedge.exe

7.0kB
144.1kB
98
113

HTTP Request

GET https://cdn.ampproject.org/rtv/012310301456000/amp4ads-v0.js

HTTP Request

GET https://cdn.ampproject.org/rtv/012310301456000/v0/amp-ad-exit-0.1.js

HTTP Request

GET https://cdn.ampproject.org/rtv/012310301456000/v0/amp-analytics-0.1.js

HTTP Request

GET https://cdn.ampproject.org/rtv/012310301456000/v0/amp-fit-text-0.1.js

HTTP Request

GET https://cdn.ampproject.org/rtv/012310301456000/v0/amp-form-0.1.js

HTTP Request

GET https://cdn.ampproject.org/rtv/012310301456000/v0/amp-gwd-animation-0.1.js
142.250.179.161:443

cdn.ampproject.org

tls, http2

msedge.exe

2.1kB
12.7kB
12
14
142.250.179.161:443

cdn.ampproject.org

tls, http2

msedge.exe

2.1kB
12.7kB
12
14
142.251.36.1:443

tpc.googlesyndication.com

tls, http2

msedge.exe

999 B
5.8kB
9
8
142.251.36.1:443

https://tpc.googlesyndication.com/sadbundle/16394311881675826595/65156b36029b56001185dae0.png

tls, http2

msedge.exe

2.4kB
11.6kB
22
22

HTTP Request

GET https://tpc.googlesyndication.com/pagead/images/adchoices/de.png

HTTP Request

GET https://tpc.googlesyndication.com/pagead/images/adchoices/icon.png

HTTP Request

GET https://tpc.googlesyndication.com/sadbundle/16394311881675826595/65156b36029b56001185dae0.png
142.251.36.1:443

tpc.googlesyndication.com

tls, http2

msedge.exe

999 B
5.8kB
9
8
131.253.33.239:443

https://edge.microsoft.com/translate/auth

tls, http2

msedge.exe

2.2kB
8.0kB
15
20

HTTP Request

OPTIONS https://edge.microsoft.com/translate/auth

HTTP Response

204

HTTP Request

GET https://edge.microsoft.com/translate/auth

HTTP Response

400
204.79.197.200:443

https://tse1.mm.bing.net/th?id=OADD2.10239317301721_1Y64UM4ZK2VT4MVP3&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

tls, http2

134.2kB
3.5MB
2547
2543

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239317301596_1DG6BQP8IZK93D1X4&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239317300915_11PL293NENO2DA53I&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239317301187_1ZYFA7XNBG4NK6SSZ&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239317301312_1T9ZATUOGPW0HJ7P7&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239317301348_1IGED3LPK164UYK70&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239317301721_1Y64UM4ZK2VT4MVP3&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

HTTP Response

200
204.79.197.200:443

tse1.mm.bing.net

tls, http2

1.2kB
8.2kB
16
13
204.79.197.200:443

tse1.mm.bing.net

tls, http2

1.2kB
8.3kB
16
14
204.79.197.200:443

tse1.mm.bing.net

tls, http2

1.2kB
8.3kB
16
14
204.79.197.200:443

tse1.mm.bing.net

tls, http2

1.2kB
8.3kB
16
14
142.250.179.130:443

https://adclick.g.doubleclick.net/aclk?sa=l&ai=ClFp4VxxWZd7LBoCEpt8Pge6VyAnpzMSddLzlxaL_Ebfaor3AARABILbH_xtgye7thoCAoBmgAcKPg5wqyAEJqQIpN_mFyi-yPqgDAcgDCKoE8AJP0OuALTu1gRueDQ3uWeskkLanOOIhUygVlIQLDb44WtdRjOPSLtYEOqHbmmWQ0l6Lf4TBiAx5IYeNVv__gvFV9FzhU8VVaVF-WLtpJ5-CdyVUtWfa0xCbcSiumjnQYqy6GzpIQ6JwblqNiB8U7LdjZpAQMJkYZUfHYPbL3KycU7M3_XBpIoDs6geL7oUl0GJkSCd03aulDopk5qmwjRDFuTSqy0uHH2shM1iNkZnWwxDv9SlvKe_gu3NY1X8K1P7--O9tRmgF9cQHIl1lX1zYX3XRnSSUqFblHBF_ytAiNkCG9iDWjSLt5xl8uFBeOJHXvAuInfP4Gmj4iX5agueXHQDSS_Gn_B_aJzyqlrDMUoM2j4ljjVJuIBh-UOFO_Mu-88KOSFmrToIvEgV8nP8EMWTD0RWhVSFz0sFOffNpn2WJybmVUhfCnIOAgik5l4Jwgl7cHVQag6XccxCnKMGfp09pPKtKtwJR6clS2VotmsAEuZmhps8EiAW54eydTaAGLoAHwsfT-wSoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggUCIBhEAEYHzICigI6AoBASL39wTqxCVhf6SsstutHgAoBmAsByAsBgAwBogwYKhYKFOS0sQLutbECtbixAuS0sQLutbECqg0CVVPIDQHYEwzQFQGYFgH4FgGAFwE&ae=1&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE&num=1&cid=CAQSTwDICaaNILPQGNpNIcEqebGoFZ8Hm81ZjG21dqxSneY_3NEH4m1CGBluPpdMRZAgR9Z-AHjr33ws5iJSKjgdJt0pvQY7m6xpHvtFQPBORXEYAQ&sig=AOD64_3XXwwi_amMQMWBP4bptFgEB43tRg&client=ca-pub-9085263631344051&rf=6&nb=_nb&nx=107&ny=21&act=1&ri=1&uap=Windows&uapv=10.0&uaa=x86&uam=&uafv=92.0.902.67&uab=&uaw=&uafvl=&adurl=https://diganexa.com/ZA/1679942392%3Ftrackid%3D699483749%26cid%3D632-738-7241%26placement%3Dwww.wichtel-o-mat.de%26target%3D%26campaignid%3D20732129465%26gclid%3DEAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE

tls, http2

msedge.exe

4.6kB
8.3kB
15
17

HTTP Request

POST https://adclick.g.doubleclick.net/aclk?sa=l&ai=ClFp4VxxWZd7LBoCEpt8Pge6VyAnpzMSddLzlxaL_Ebfaor3AARABILbH_xtgye7thoCAoBmgAcKPg5wqyAEJqQIpN_mFyi-yPqgDAcgDCKoE8AJP0OuALTu1gRueDQ3uWeskkLanOOIhUygVlIQLDb44WtdRjOPSLtYEOqHbmmWQ0l6Lf4TBiAx5IYeNVv__gvFV9FzhU8VVaVF-WLtpJ5-CdyVUtWfa0xCbcSiumjnQYqy6GzpIQ6JwblqNiB8U7LdjZpAQMJkYZUfHYPbL3KycU7M3_XBpIoDs6geL7oUl0GJkSCd03aulDopk5qmwjRDFuTSqy0uHH2shM1iNkZnWwxDv9SlvKe_gu3NY1X8K1P7--O9tRmgF9cQHIl1lX1zYX3XRnSSUqFblHBF_ytAiNkCG9iDWjSLt5xl8uFBeOJHXvAuInfP4Gmj4iX5agueXHQDSS_Gn_B_aJzyqlrDMUoM2j4ljjVJuIBh-UOFO_Mu-88KOSFmrToIvEgV8nP8EMWTD0RWhVSFz0sFOffNpn2WJybmVUhfCnIOAgik5l4Jwgl7cHVQag6XccxCnKMGfp09pPKtKtwJR6clS2VotmsAEuZmhps8EiAW54eydTaAGLoAHwsfT-wSoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggUCIBhEAEYHzICigI6AoBASL39wTqxCVhf6SsstutHgAoBmAsByAsBgAwBogwYKhYKFOS0sQLutbECtbixAuS0sQLutbECqg0CVVPIDQHYEwzQFQGYFgH4FgGAFwE&ae=1&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE&num=1&cid=CAQSTwDICaaNILPQGNpNIcEqebGoFZ8Hm81ZjG21dqxSneY_3NEH4m1CGBluPpdMRZAgR9Z-AHjr33ws5iJSKjgdJt0pvQY7m6xpHvtFQPBORXEYAQ&sig=AOD64_3XXwwi_amMQMWBP4bptFgEB43tRg&client=ca-pub-9085263631344051&rf=6&nb=_nb&nx=107&ny=21&act=1&ri=1&uap=Windows&uapv=10.0&uaa=x86&uam=&uafv=92.0.902.67&uab=&uaw=&uafvl=&adurl=https://diganexa.com/ZA/1679942392%3Ftrackid%3D699483749%26cid%3D632-738-7241%26placement%3Dwww.wichtel-o-mat.de%26target%3D%26campaignid%3D20732129465%26gclid%3DEAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE
172.64.171.4:443

diganexa.com

tls, http2

msedge.exe

989 B
5.0kB
9
8
172.64.171.4:443

https://diganexa.com/a/1679942392/img/favi-diganexa.svg

tls, http2

msedge.exe

36.8kB
1.3MB
618
959

HTTP Request

GET https://diganexa.com/ZA/1679942392?trackid=699483749&cid=632-738-7241&placement=www.wichtel-o-mat.de&target=&campaignid=20732129465&gclid=EAIaIQobChMIntPAj9PIggMVAILpBR0BdwWZEAEYASAAEgKOkvD_BwE

HTTP Response

200

HTTP Request

GET https://diganexa.com/tpl/Foundation/v5/static/stylesheets/foundation.min.css

HTTP Request

GET https://diganexa.com/tpl/Foundation/v5/static/javascripts/jquery/3.4.1/jquery.min.js

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://diganexa.com/a/1679942392/img/diganexa-logo.svg

HTTP Request

GET https://diganexa.com/a/1679942392/img/burger.svg

HTTP Request

GET https://diganexa.com/a/1679942392/img/user.svg

HTTP Response

200

HTTP Request

GET https://diganexa.com/a/1679942392/img/search.svg

HTTP Request

GET https://diganexa.com/a/1679942392/img/device-icon.svg

HTTP Request

GET https://diganexa.com/a/1679942392/img/stars-icon.svg

HTTP Request

GET https://diganexa.com/a/1679942392/img/lock-icon.svg

HTTP Request

GET https://diganexa.com/a/1679942392/img/devices_portal.png

HTTP Request

GET https://diganexa.com/a/1679942392/img/arrows-movies.png

HTTP Request

GET https://diganexa.com/a/1679942392/img/arrows-movies-mob.png

HTTP Request

GET https://diganexa.com/a/1679942392/img/arrows-music.png

HTTP Request

GET https://diganexa.com/a/1679942392/img/arrows-music-mob.png

HTTP Request

GET https://diganexa.com/a/1679942392/img/arrows-games.png

HTTP Request

GET https://diganexa.com/a/1679942392/img/arrows-games-mob.png

HTTP Request

GET https://diganexa.com/a/1679942392/img/arrows-audiobooks.png

HTTP Request

GET https://diganexa.com/a/1679942392/img/arrows-audiobooks-mob.png

HTTP Request

GET https://diganexa.com/a/1679942392/img/bullet-arrow.svg

HTTP Request

GET https://diganexa.com/a/1679942392/img/film-reel-new.svg

HTTP Request

GET https://diganexa.com/a/1679942392/img/mp3-new.svg

HTTP Request

GET https://diganexa.com/a/1679942392/img/controller-new.svg

HTTP Request

GET https://diganexa.com/a/1679942392/img/book-new.svg

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://diganexa.com/a/1679942392/img/favi-diganexa.svg

HTTP Response

200
104.22.76.145:443

https://st.at2010.net/a/1679942392/img/books-hex.png

tls, http2

msedge.exe

27.8kB
1.1MB
515
812

HTTP Request

GET https://st.at2010.net/a/1679942392/img/graphic3.svg

HTTP Request

GET https://st.at2010.net/a/1679942392/img/graphic4.svg

HTTP Request

GET https://st.at2010.net/a/1679942392/img/tiles-side.png

HTTP Request

GET https://st.at2010.net/a/1679942392/img/movies-hex.png

HTTP Request

GET https://st.at2010.net/a/1679942392/img/music-hex.png

HTTP Request

GET https://st.at2010.net/a/1679942392/img/games-hex.png

HTTP Request

GET https://st.at2010.net/a/1679942392/img/books-hex.png

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200
104.22.76.145:443

st.at2010.net

tls, http2

msedge.exe

2.0kB
5.1kB
10
8
104.22.76.145:443

st.at2010.net

tls, http2

msedge.exe

2.0kB
5.1kB
10
9
104.22.76.145:443

st.at2010.net

tls, http2

msedge.exe

2.0kB
5.1kB
10
9
104.22.76.145:443

st.at2010.net

tls, http2

msedge.exe

2.0kB
5.1kB
10
8
104.22.76.145:443

st.at2010.net

tls, http2

msedge.exe

2.0kB
5.1kB
10
8
151.101.2.137:443

https://js-agent.newrelic.com/nr-spa-1.247.0.min.js

tls, http2

msedge.exe

2.2kB
36.9kB
22
35

HTTP Request

GET https://js-agent.newrelic.com/nr-spa-1.247.0.min.js

HTTP Response

200
185.221.87.23:443

https://bam.eu01.nr-data.net/jserrors/1/NRBR-74c27739d3fa0d464e8?a=251773528&v=1.247.0&to=MhBSZQoZXhJRWxFZVwtac0QLDF8MH2IkHxI%3D&rst=45490&ck=0&s=6e5f733d69b586a4&ref=https://diganexa.com/ZA/1679942392

tls, http

msedge.exe

10.9kB
7.9kB
21
23

HTTP Request

POST https://bam.eu01.nr-data.net/1/NRBR-74c27739d3fa0d464e8?a=251773528&v=1.247.0&to=MhBSZQoZXhJRWxFZVwtac0QLDF8MH2IkHxI%3D&rst=2007&ck=0&s=6e5f733d69b586a4&ref=https://diganexa.com/ZA/1679942392&af=err,xhr,stn,ins,spa&ap=442&be=761&fe=978&dc=393&at=HldFE0IDTU0SWUcKQxgI&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1700142254622,%22n%22:0,%22f%22:25,%22dn%22:83,%22dne%22:83,%22c%22:83,%22s%22:121,%22ce%22:194,%22rq%22:196,%22rp%22:761,%22rpe%22:791,%22di%22:1152,%22ds%22:1152,%22de%22:1154,%22dc%22:1735,%22l%22:1735,%22le%22:1739%7D,%22navigation%22:%7B%7D%7D&fp=1232&fcp=1232

HTTP Response

200

HTTP Request

POST https://bam.eu01.nr-data.net/events/1/NRBR-74c27739d3fa0d464e8?a=251773528&v=1.247.0&to=MhBSZQoZXhJRWxFZVwtac0QLDF8MH2IkHxI%3D&rst=4490&ck=0&s=6e5f733d69b586a4&ref=https://diganexa.com/ZA/1679942392

HTTP Response

200

HTTP Request

POST https://bam.eu01.nr-data.net/events/1/NRBR-74c27739d3fa0d464e8?a=251773528&v=1.247.0&to=MhBSZQoZXhJRWxFZVwtac0QLDF8MH2IkHxI%3D&rst=12478&ck=0&s=6e5f733d69b586a4&ref=https://diganexa.com/ZA/1679942392

HTTP Response

200

HTTP Request

POST https://bam.eu01.nr-data.net/jserrors/1/NRBR-74c27739d3fa0d464e8?a=251773528&v=1.247.0&to=MhBSZQoZXhJRWxFZVwtac0QLDF8MH2IkHxI%3D&rst=12478&ck=0&s=6e5f733d69b586a4&ref=https://diganexa.com/ZA/1679942392

HTTP Response

200

HTTP Request

POST https://bam.eu01.nr-data.net/jserrors/1/NRBR-74c27739d3fa0d464e8?a=251773528&v=1.247.0&to=MhBSZQoZXhJRWxFZVwtac0QLDF8MH2IkHxI%3D&rst=23487&ck=0&s=6e5f733d69b586a4&ref=https://diganexa.com/ZA/1679942392

HTTP Response

200

HTTP Request

POST https://bam.eu01.nr-data.net/jserrors/1/NRBR-74c27739d3fa0d464e8?a=251773528&v=1.247.0&to=MhBSZQoZXhJRWxFZVwtac0QLDF8MH2IkHxI%3D&rst=34490&ck=0&s=6e5f733d69b586a4&ref=https://diganexa.com/ZA/1679942392

HTTP Response

200

HTTP Request

POST https://bam.eu01.nr-data.net/jserrors/1/NRBR-74c27739d3fa0d464e8?a=251773528&v=1.247.0&to=MhBSZQoZXhJRWxFZVwtac0QLDF8MH2IkHxI%3D&rst=45490&ck=0&s=6e5f733d69b586a4&ref=https://diganexa.com/ZA/1679942392

HTTP Response

200
185.221.87.23:443

bam.eu01.nr-data.net

tls

msedge.exe

787 B
631 B
4
4

8.8.8.8:53

68.32.126.40.in-addr.arpa

dns

71 B
157 B
1
1

DNS Request

68.32.126.40.in-addr.arpa
8.8.8.8:53

208.194.73.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

208.194.73.20.in-addr.arpa
8.8.8.8:53

www.wichtel-o-mat.de

dns

msedge.exe

66 B
82 B
1
1

DNS Request

www.wichtel-o-mat.de

DNS Response

138.201.125.103
8.8.8.8:53

1.202.248.87.in-addr.arpa

dns

71 B
116 B
1
1

DNS Request

1.202.248.87.in-addr.arpa
8.8.8.8:53

103.125.201.138.in-addr.arpa

dns

74 B
106 B
1
1

DNS Request

103.125.201.138.in-addr.arpa
8.8.8.8:53

241.154.82.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

241.154.82.20.in-addr.arpa
8.8.8.8:53

16.43.107.13.in-addr.arpa

dns

71 B
157 B
1
1

DNS Request

16.43.107.13.in-addr.arpa
8.8.8.8:53

apps.identrust.com

dns

msedge.exe

64 B
165 B
1
1

DNS Request

apps.identrust.com

DNS Response

88.221.25.169

88.221.25.153
8.8.8.8:53

d201e9jk75rru1.cloudfront.net

dns

msedge.exe

75 B
139 B
1
1

DNS Request

d201e9jk75rru1.cloudfront.net

DNS Response

18.65.40.188

18.65.40.118

18.65.40.195

18.65.40.55
8.8.8.8:53

browser.sentry-cdn.com

dns

msedge.exe

68 B
132 B
1
1

DNS Request

browser.sentry-cdn.com

DNS Response

151.101.194.217

151.101.130.217

151.101.2.217

151.101.66.217
8.8.8.8:53

169.25.221.88.in-addr.arpa

dns

72 B
137 B
1
1

DNS Request

169.25.221.88.in-addr.arpa
8.8.8.8:53

217.194.101.151.in-addr.arpa

dns

74 B
134 B
1
1

DNS Request

217.194.101.151.in-addr.arpa
8.8.8.8:53

188.40.65.18.in-addr.arpa

dns

71 B
126 B
1
1

DNS Request

188.40.65.18.in-addr.arpa
8.8.8.8:53

226.21.18.104.in-addr.arpa

dns

72 B
134 B
1
1

DNS Request

226.21.18.104.in-addr.arpa
8.8.8.8:53

113.39.65.18.in-addr.arpa

dns

71 B
126 B
1
1

DNS Request

113.39.65.18.in-addr.arpa
8.8.8.8:53

sentry.mojocode.de

dns

msedge.exe

64 B
101 B
1
1

DNS Request

sentry.mojocode.de

DNS Response

138.201.125.103
8.8.8.8:53

analytics.google.com

dns

msedge.exe

66 B
158 B
1
1

DNS Request

analytics.google.com

DNS Response

216.239.32.181

216.239.38.181

216.239.34.181

216.239.36.181
8.8.8.8:53

stats.g.doubleclick.net

dns

msedge.exe

69 B
133 B
1
1

DNS Request

stats.g.doubleclick.net

DNS Response

142.250.102.155

142.250.102.157

142.250.102.154

142.250.102.156
8.8.8.8:53

googleads.g.doubleclick.net

dns

msedge.exe

73 B
89 B
1
1

DNS Request

googleads.g.doubleclick.net

DNS Response

172.217.168.194
142.250.102.155:443

stats.g.doubleclick.net

https

msedge.exe

2.4kB
7.0kB
7
10
8.8.8.8:53

200.179.250.142.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

200.179.250.142.in-addr.arpa
8.8.8.8:53

194.23.217.172.in-addr.arpa

dns

73 B
171 B
1
1

DNS Request

194.23.217.172.in-addr.arpa
8.8.8.8:53

206.23.217.172.in-addr.arpa

dns

73 B
173 B
1
1

DNS Request

206.23.217.172.in-addr.arpa
8.8.8.8:53

181.32.239.216.in-addr.arpa

dns

73 B
133 B
1
1

DNS Request

181.32.239.216.in-addr.arpa
8.8.8.8:53

155.102.250.142.in-addr.arpa

dns

74 B
108 B
1
1

DNS Request

155.102.250.142.in-addr.arpa
172.217.168.194:443

googleads.g.doubleclick.net

https

msedge.exe

8.3kB
22.1kB
23
31
8.8.8.8:53

194.168.217.172.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

194.168.217.172.in-addr.arpa
8.8.8.8:53

cdn.ampproject.org

dns

msedge.exe

64 B
106 B
1
1

DNS Request

cdn.ampproject.org

DNS Response

142.250.179.161
8.8.8.8:53

tpc.googlesyndication.com

dns

msedge.exe

71 B
87 B
1
1

DNS Request

tpc.googlesyndication.com

DNS Response

142.251.36.1
142.251.36.1:443

tpc.googlesyndication.com

https

msedge.exe

1.8kB
6.5kB
7
7
8.8.8.8:53

39.142.81.104.in-addr.arpa

dns

72 B
137 B
1
1

DNS Request

39.142.81.104.in-addr.arpa
8.8.8.8:53

161.179.250.142.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

161.179.250.142.in-addr.arpa
8.8.8.8:53

106.208.58.216.in-addr.arpa

dns

73 B
143 B
1
1

DNS Request

106.208.58.216.in-addr.arpa
8.8.8.8:53

1.36.251.142.in-addr.arpa

dns

71 B
109 B
1
1

DNS Request

1.36.251.142.in-addr.arpa
142.250.179.161:443

cdn.ampproject.org

https

msedge.exe

2.4kB
17.6kB
10
17
8.8.8.8:53

131.179.250.142.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

131.179.250.142.in-addr.arpa
224.0.0.251:5353

msedge.exe

509 B
8
142.251.36.1:443

tpc.googlesyndication.com

https

msedge.exe

3.1kB
19.7kB
16
24
8.8.8.8:53

100.39.251.142.in-addr.arpa

dns

73 B
111 B
1
1

DNS Request

100.39.251.142.in-addr.arpa
172.217.168.194:443

googleads.g.doubleclick.net

https

msedge.exe

3.1kB
6.5kB
5
7
8.8.8.8:53

edge.microsoft.com

dns

msedge.exe

64 B
189 B
1
1

DNS Request

edge.microsoft.com

DNS Response

131.253.33.239

13.107.22.239
8.8.8.8:53

239.33.253.131.in-addr.arpa

dns

73 B
143 B
1
1

DNS Request

239.33.253.131.in-addr.arpa
8.8.8.8:53

158.240.127.40.in-addr.arpa

dns

73 B
147 B
1
1

DNS Request

158.240.127.40.in-addr.arpa
8.8.8.8:53

26.35.223.20.in-addr.arpa

dns

71 B
157 B
1
1

DNS Request

26.35.223.20.in-addr.arpa
8.8.8.8:53

203.197.79.204.in-addr.arpa

dns

73 B
106 B
1
1

DNS Request

203.197.79.204.in-addr.arpa
216.239.32.181:443

analytics.google.com

https

msedge.exe

4.6kB
7.8kB
10
14
8.8.8.8:53

157.123.68.40.in-addr.arpa

dns

72 B
146 B
1
1

DNS Request

157.123.68.40.in-addr.arpa
8.8.8.8:53

18.31.95.13.in-addr.arpa

dns

70 B
144 B
1
1

DNS Request

18.31.95.13.in-addr.arpa
8.8.8.8:53

65.252.72.23.in-addr.arpa

dns

71 B
135 B
1
1

DNS Request

65.252.72.23.in-addr.arpa
8.8.8.8:53

55.36.223.20.in-addr.arpa

dns

71 B
157 B
1
1

DNS Request

55.36.223.20.in-addr.arpa
8.8.8.8:53

tse1.mm.bing.net

dns

62 B
173 B
1
1

DNS Request

tse1.mm.bing.net

DNS Response

204.79.197.200

13.107.21.200
8.8.8.8:53

200.197.79.204.in-addr.arpa

dns

73 B
106 B
1
1

DNS Request

200.197.79.204.in-addr.arpa
8.8.8.8:53

209.78.101.95.in-addr.arpa

dns

72 B
137 B
1
1

DNS Request

209.78.101.95.in-addr.arpa
8.8.8.8:53

240.221.184.93.in-addr.arpa

dns

73 B
144 B
1
1

DNS Request

240.221.184.93.in-addr.arpa
8.8.8.8:53

23.236.111.52.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

23.236.111.52.in-addr.arpa
8.8.8.8:53

adclick.g.doubleclick.net

dns

msedge.exe

71 B
87 B
1
1

DNS Request

adclick.g.doubleclick.net

DNS Response

142.250.179.130
8.8.8.8:53

diganexa.com

dns

msedge.exe

58 B
90 B
1
1

DNS Request

diganexa.com

DNS Response

172.64.171.4

172.64.170.4
8.8.8.8:53

130.179.250.142.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

130.179.250.142.in-addr.arpa
8.8.8.8:53

4.171.64.172.in-addr.arpa

dns

71 B
133 B
1
1

DNS Request

4.171.64.172.in-addr.arpa
8.8.8.8:53

162.179.250.142.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

162.179.250.142.in-addr.arpa
8.8.8.8:53

st.at2010.net

dns

msedge.exe

59 B
107 B
1
1

DNS Request

st.at2010.net

DNS Response

104.22.76.145

172.67.22.107

104.22.77.145
8.8.8.8:53

js-agent.newrelic.com

dns

msedge.exe

67 B
168 B
1
1

DNS Request

js-agent.newrelic.com

DNS Response

151.101.2.137

151.101.66.137

151.101.130.137

151.101.194.137
8.8.8.8:53

bam.eu01.nr-data.net

dns

msedge.exe

66 B
144 B
1
1

DNS Request

bam.eu01.nr-data.net

DNS Response

185.221.87.23
8.8.8.8:53

145.76.22.104.in-addr.arpa

dns

72 B
134 B
1
1

DNS Request

145.76.22.104.in-addr.arpa
8.8.8.8:53

137.2.101.151.in-addr.arpa

dns

72 B
132 B
1
1

DNS Request

137.2.101.151.in-addr.arpa
8.8.8.8:53

23.87.221.185.in-addr.arpa

dns

72 B
137 B
1
1

DNS Request

23.87.221.185.in-addr.arpa
216.239.32.181:443

analytics.google.com

https

msedge.exe

2.7kB
3.0kB
8
8
8.8.8.8:53

122.10.44.20.in-addr.arpa

dns

71 B
145 B
1
1

DNS Request

122.10.44.20.in-addr.arpa

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8f30b8232b170bdbc7d9c741c82c4a73

SHA1
9abfca17624e13728bd7fa6547e7e26e0695d411

SHA256
0916f816feace92a097267171f8aa8f944074530574a7aa1f9f0334899dfa3eb

SHA512
587d973b13b97c5b92621c776c18348a13ef451ccda32977baa529de33e47a27e7920a57fe7c4d0b2f0e4a8a3bca5c62cc5798cf97f19556028f88afb38b37be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
408B

MD5
e92507bfa1ed3ce490022b0df36362d7

SHA1
d31831dd980b7163733ffaa31d847b831e08ff24

SHA256
bdebfc2fe8a16fba02c6fb850e70db5c73c0b5d74182282271fa59cf9df6f9b6

SHA512
9234436841606868cb98b2e17ec2cce6b14e82f6d421c578758025655c7e4171749d0f47f109cc832b54e6571911f4e6da1889675e9ce653e1ebb281394368ac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
480B

MD5
2831dd7b1466c905240e01522d8728a9

SHA1
81df6305935ea1b8fdf167ee42fdf48969363ed2

SHA256
6a021d373c8831cd29d62730bfe2742e6f8d6162e168fba61caacc3f477fd53b

SHA512
2f6955c59a04bf64e01c85449cba8859acfb03e17ae534216984d7e97fec81d2c4fe4cc79c4c192755ab3e0122557320fe200ac563d1bbd3fdcc1d249cc76622

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
e3cdec10821af302002858e3c3da4088

SHA1
8f648bce6151eef124206db8ab0c5c9f4b30a320

SHA256
45a5ea0e846b30e508bfd1e3fc069b4a0504d8f7ffa26c6f0fae5f43f5c21de3

SHA512
3adff433f884ae2d8c421e4caab15385347c06f5ec10c26b18c61e75eb1652398a74321541e096e5d8e7adf0d4ec121d821957ba63bba4824d2a4d499c6b2739

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
46c82b81c4649a07cba8d917e3a37eb6

SHA1
f94b1862380ff2e090da1bf92f7153e5cd3798d4

SHA256
ae83ed7ee584861623e1ac546a06d993179c50b5ac2fc6eed2a0ec7b6f6b77a3

SHA512
fa0e43ced60c31464b1c72d0055a3bd72e68383566b7f680ac8199f85fa8fce83a8e63655af3b839ab595bf095d80d4e4f018f5e8ba0cc6ddf1cf08641e46603

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
edb18860c0efc2730057b367a6f82660

SHA1
6d2d2c648ec5c47c685fd2e01f648154e7f1b33c

SHA256
372628b781a69658fa9df7515da96bd03da4fa1234006d45bff33926e73583c5

SHA512
90caac8e9ee8bb2aea2168ac90aa41a86626c33d01db54044593f33c201092292d7fe4825a13b21355b019bc209190f32e0485f753d4db279b2b5f8bf51f7403

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
47daa616d1cc8dd83f7fe47bf295e79d

SHA1
6165f42845a0ac41a9fa5b9dbf4cecc443244b59

SHA256
8c04e0afdfe3f2fc78b7ef4d2d8bd5044b88465c1d63800a2b19fd53681cf5e7

SHA512
f9a9693f6b9d86105be6def1fecfd28b49aed9d6375250ae3d74a8975b192bf253a31bc6227ff003be753a52c4d9aa912ded13dbf52e6bab70e1978dc634d42a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3d00b12647da7f320c8c82d76c7470b9

SHA1
5e97da0d344c701189227d50724786d62a9b6079

SHA256
27555b516130b663ca0a209e4fdce0b71fe55c07978b3078a1b6ed0feb15a9ef

SHA512
4b97929f28816cb805a1884d4502dc2e952cc9f373a177906822904b34e55f6a1b3ba8834d04f69fe7695194c8e7751f2f1d6785e499f2ee076a6deee20763fc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
fce1fa124fdcb92a32473f89700931b8

SHA1
c20035cf7fa2f5320afe78a3cf0a3eb8f6045570

SHA256
39e46f1e9be16a8bfdd42a4561e88f1e541a22aac575562bd113c9c8ddadd351

SHA512
a89d89f4c0a1a4220083f2d450c1682accacd6fca0c94e84fe664fda793706175da5ee5918dabfde8595b6dd971dfe088e8fea82fbc07d5b4ecb22679cab3a37

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
0b8abe9b2d273da395ec7c5c0f376f32

SHA1
d7b266fb7310cc71ab5fdb0ef68f5788e702f2ec

SHA256
3751deeb9ad3db03e6b42dedcac68c1c9c7926a2beeaaa0820397b6ddb734a99

SHA512
3dd503ddf2585038aa2fedc53d20bb9576f4619c3dc18089d7aba2c12dc0288447b2a481327c291456d7958488ba2e2d4028af4ca2d30e92807c8b1cdcffc404

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
60f264008ad202f33ea893f986377299

SHA1
efb2d5fbdc9ea463a41589d12bff8511aca45d28

SHA256
458778e6177ec68366f5f982b1ad74f0ca285b0c61a001abfa5575bf7df11c8d

SHA512
bc75bae3f5d9f910d482db9614629f6aaaf40026050eb4103e89971901d936909bbe4cdaa1c4d35ee206449df06e808e7cc64debafea869b264871d33ca6b687

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe59454c.TMP

Filesize
1KB

MD5
f3f6d09c5c84ff101051a9ac91138594

SHA1
614b187c6e8c45e44fa534f17a3c30018bd46e82

SHA256
4c96dfb8953246aec42d18f0007fbec594cf30c054eeae9c061fbb4601d0e9c0

SHA512
b756530d0e30cf3338c68f86c4b9809ad1be05ace822076a4bbcfb28221547839df4c6b7137bdbd5c7850657b4926ffe07d05f17b1b20884460f29c7fd6809d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
1098e9a838afb9b670004807cb632cd2

SHA1
89ff8e1efbdcbb7c291ed31c5735a135b52a57f6

SHA256
9ade3d3ceccecaad71dd05f250f51d912b628640eaffd75b3b638bc458ec5d4f

SHA512
916d5875af8c0ced990f9788aea7ecf492bc0a93fbe0a1d74e6beeb0a380964e6dc30d64c554963255c4d108e1651dd735412de502741ec039629434f5f426e6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
faece1f5ca5d11cdcd1f37c056faac33

SHA1
68f5494096adbc249a4bf2a9d9268bf5fc03e567

SHA256
7d578967e2175835f0245dfabef34d40207f990112cfb66e011225c8b442829c

SHA512
ab1ff55b536cf8c91f554b4e45f8d9e0e0277533b5b7a1b49b2348e33e463e3ca081e1e841da2dbe66512375bb6c3c66c8ea7f1b2456549cb97839f9baecc4c3

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request