r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2acd891dc6eb1f09f57a2b086791781
1e2088306501a61edcca1ade62c4d54f23b3b083
51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15263
Expires: Thu, 08 Dec 2022 14:06:11 GMT
Date: Thu, 08 Dec 2022 09:51:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 388f6fea5bafa378266622b72311a6ee
447f102dc12172ce1ba44c5e94e1d7bb49d43372
a597afb4d4f7f3c82f0f2857322226fc69dc92e099bfd0605f7a0cd562be9d21
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A597AFB4D4F7F3C82F0F2857322226FC69DC92E099BFD0605F7A0CD562BE9D21"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4153
Expires: Thu, 08 Dec 2022 11:01:01 GMT
Date: Thu, 08 Dec 2022 09:51:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 00e7703bd74975689fc9050356aaca6b
9788fe6a36d6f278e8da329ebc5dd87bcd212317
593bc437ff8a8233516c62613d50220fcb25b9f967ed5fb384c253f0db135103
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "593BC437FF8A8233516C62613D50220FCB25B9F967ED5FB384C253F0DB135103"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4075
Expires: Thu, 08 Dec 2022 10:59:43 GMT
Date: Thu, 08 Dec 2022 09:51:48 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 08 Dec 2022 09:08:11 GMT
content-type: application/json
age: 2617
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 9EEUNU7FgSoddMMjjihndI1bDnTfc8tFHGO9Vpzh+NaSjaeuwIA1bLgd77Jub6GTDACy6Eg+yZg=
x-amz-request-id: JZ7Z6X9WF9PC7RMC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 08 Dec 2022 09:49:44 GMT
age: 124
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 09:51:48 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
entrepriseimmobiliere.blogspot.com/2019/05/agence-immobiliere-entreprise-chalon.html
301 Moved Permanently 213 B URL HTTP/1.1 entrepriseimmobiliere.blogspot.com/2019/05/agence-immobiliere-entreprise-chalon.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 201ea37905dbb69c8acecf5f941b2f8f
d045952ae52b9ad0f9316213a18fa6464366f17d
35160406430d73262cd3bb18d7504f064db395195b0844d32a101cbf343501d5
GET /2019/05/agence-immobiliere-entreprise-chalon.html HTTP/1.1
Host: entrepriseimmobiliere.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://entrepriseimmobiliere.blogspot.com/2019/05/agence-immobiliere-entreprise-chalon.html
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Thu, 08 Dec 2022 09:51:48 GMT
Expires: Thu, 08 Dec 2022 09:51:48 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 213
Server: GSE
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 08 Dec 2022 09:07:58 GMT
age: 2630
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 657cc99dcf677bd6e64e82ac79e8068d
abf109679285d118b3ad71fc5b60ff37106de953
8d6696efdfbac41437bed499e16dd4c0e52c0f16bc321daaa31d0051eb4b2cca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 09:51:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 053aff7451e55d4269dd9610ab070f3f
b3376256d11d159b0c7280ba1515b78d7d9e12ca
24114ca560fe70d03185bd66985603fd5a03dc310aa9a8ea7a7b3723ed46ce3e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4770
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 09:51:48 GMT
Last-Modified: Thu, 08 Dec 2022 08:32:18 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: CoNvKFKSOhRiMCVFFGSHqg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: SyVHwOeynH1ztXk7RHOKfxJOQS4=
entrepriseimmobiliere.blogspot.com/2019/05/agence-immobiliere-entreprise-chalon.html
200 OK 18 kB URL HTTP/2 entrepriseimmobiliere.blogspot.com/2019/05/agence-immobiliere-entreprise-chalon.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (10140)
Hash d192c1b715710b989baff67a2dff1622
4e50c50ef54a2454f4fe5ab19b7b86f27c9003b1
d8551de7085052e3078608934c82401833841a0f265a00f3dbd0983ff31a6e4c
GET /2019/05/agence-immobiliere-entreprise-chalon.html HTTP/1.1
Host: entrepriseimmobiliere.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Thu, 08 Dec 2022 09:51:49 GMT
date: Thu, 08 Dec 2022 09:51:49 GMT
cache-control: private, max-age=0
last-modified: Wed, 21 Jul 2021 06:02:52 GMT
etag: W/"e35e64af5ebc4d4fce8ad40d32e0d60813a5f50d6a97f967a7565268e38dfb82"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 17646
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 657cc99dcf677bd6e64e82ac79e8068d
abf109679285d118b3ad71fc5b60ff37106de953
8d6696efdfbac41437bed499e16dd4c0e52c0f16bc321daaa31d0051eb4b2cca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 09:51:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4b1c4d797d1d2fef94993a69a7cb423a
d4d0f3b2eccd29dddef0f1ec51309de97c6c05a4
d2f98268392005d93b5bce9c019c360400b09ac369fc8e8cbc1edba7ed6d929d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 09:51:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
200 OK 7.8 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
IP
File type ASCII text, with very long lines (35959)
Hash 5aa2d3297bdc86bc81322aedecbb5e79
1c0a3c007e41726e167e79b70ddea76198650884
feae1fac625d0f30b5f10fa00b62df1a5600cd2178062c427e55f289b29cc630
GET /static/v1/widgets/2975350028-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 21:47:55 GMT
expires: Wed, 06 Dec 2023 21:47:55 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 05 Dec 2022 21:53:25 GMT
content-type: text/css
age: 129834
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/3222695235-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/3222695235-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 9f2f688aec73940034a0266a2a6266da
af9875c8064027204827b311250191c87e55366e
a78a0cfbae13cfc525657e31c2033d5c0281c5fbec2cf3e493ff75a7e097a02a
GET /static/v1/widgets/3222695235-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56718
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 02:14:06 GMT
expires: Thu, 07 Dec 2023 02:14:06 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 07 Dec 2022 00:52:16 GMT
content-type: text/javascript
age: 113863
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a938af990a97b9856e1174d11c72cbf7
b57716fd0ea9a1e9e0a0595ff593f939560c0abf
6ab769333b231097d077edfbc1c3fc9560de5ae9bfeb5b8360dea8b7fadbcb44
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 09:51:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4a5c2a2d50893431367319c3eb5fd0bc
c076b77d1c599d2711a212258ffd5dc4eca82925
0c98da58e2abb90a770dbd9d97277cd8836fb79fc15aace4a95d1fb5ee4c1db4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 09:51:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4a5c2a2d50893431367319c3eb5fd0bc
c076b77d1c599d2711a212258ffd5dc4eca82925
0c98da58e2abb90a770dbd9d97277cd8836fb79fc15aace4a95d1fb5ee4c1db4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 09:51:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
resources.blogblog.com/blogblog/data/1kt/ethereal/bird-2toned-blue-fade.png
200 OK 135 B URL HTTP/2 resources.blogblog.com/blogblog/data/1kt/ethereal/bird-2toned-blue-fade.png
IP
File type PNG image data, 2 x 103, 8-bit/color RGBA, non-interlaced\012- data
Hash f298020995c692cb2ce9afd9a5d6257e
f4301ab5b943f5c49f3b8fee825f157a52fc1611
4f97c4d5d5252e3495e1c998a66396d69ff1dc40e77e857bddb5106abcea6251
GET /blogblog/data/1kt/ethereal/bird-2toned-blue-fade.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 135
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 14:20:08 GMT
expires: Tue, 13 Dec 2022 14:20:08 GMT
cache-control: public, max-age=604800
last-modified: Tue, 06 Dec 2022 02:51:46 GMT
content-type: image/png
age: 156701
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4b1c4d797d1d2fef94993a69a7cb423a
d4d0f3b2eccd29dddef0f1ec51309de97c6c05a4
d2f98268392005d93b5bce9c019c360400b09ac369fc8e8cbc1edba7ed6d929d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 09:51:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i0.wp.com/www.neyrat-entreprise.fr/wp-content/uploads/2016/09/logo-blanc.png
200 OK 14 kB URL HTTP/2 i0.wp.com/www.neyrat-entreprise.fr/wp-content/uploads/2016/09/logo-blanc.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e9b30238aa2976eca616a801e9973a5c
001caa073c7f2be2562847b239c2a00640d5daa6
98148faed5d4d8d11400e43985743dcb91ae50c2bc40c9eeefa5d606dbeea246
GET /www.neyrat-entreprise.fr/wp-content/uploads/2016/09/logo-blanc.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 09:51:49 GMT
content-type: image/webp
content-length: 13968
last-modified: Thu, 08 Dec 2022 09:51:49 GMT
expires: Sat, 07 Dec 2024 21:51:49 GMT
cache-control: public, max-age=63115200
link: <http://www.neyrat-entreprise.fr/wp-content/uploads/2016/09/logo-blanc.png>; rel="canonical"
x-content-type-options: nosniff
etag: "8eda8345e3421653"
vary: Accept
x-nc: MISS arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4a5c2a2d50893431367319c3eb5fd0bc
c076b77d1c599d2711a212258ffd5dc4eca82925
0c98da58e2abb90a770dbd9d97277cd8836fb79fc15aace4a95d1fb5ee4c1db4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 09:51:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4a5c2a2d50893431367319c3eb5fd0bc
c076b77d1c599d2711a212258ffd5dc4eca82925
0c98da58e2abb90a770dbd9d97277cd8836fb79fc15aace4a95d1fb5ee4c1db4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 09:51:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i0.wp.com/www.neyrat-immobilier.fr/import/tag/photo-bureau-a-louer-chalon-sur-saone-centre-ville-ref---3-A.webp
200 OK 104 kB URL HTTP/2 i0.wp.com/www.neyrat-immobilier.fr/import/tag/photo-bureau-a-louer-chalon-sur-saone-centre-ville-ref---3-A.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x768, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 104 kB (104482 bytes)
Hash 2f49f2b1e819e01d34691144c54b1673
0fad59bf70027451469fd0c45c354f543c1cd827
4762f520a1c96d03645a0f37aa6d1c430885d2024b12484fc68542642afd6ca7
GET /www.neyrat-immobilier.fr/import/tag/photo-bureau-a-louer-chalon-sur-saone-centre-ville-ref---3-A.webp HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 09:51:49 GMT
content-type: image/webp
content-length: 104482
last-modified: Thu, 08 Dec 2022 09:51:49 GMT
expires: Sat, 07 Dec 2024 21:51:49 GMT
cache-control: public, max-age=63115200
link: <http://www.neyrat-immobilier.fr/import/tag/photo-bureau-a-louer-chalon-sur-saone-centre-ville-ref---3-A.webp>; rel="canonical"
x-content-type-options: nosniff
etag: "59bda3a270ad2058"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/remax.azureedge.net/userimages/74/O_aab19a3e16204e77a14fa304952c5500_iList.jpg
200 OK 15 kB URL HTTP/2 i0.wp.com/remax.azureedge.net/userimages/74/O_aab19a3e16204e77a14fa304952c5500_iList.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 480b0608124557680da80fad586c1e7b
7dc7e1e48e015c82315162a636df261da259276e
433939182da4dadcfe451064bbbf0b83477499873ba358f0c1815ae97e25943c
GET /remax.azureedge.net/userimages/74/O_aab19a3e16204e77a14fa304952c5500_iList.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 09:51:49 GMT
content-type: image/webp
content-length: 14552
last-modified: Thu, 08 Dec 2022 09:51:49 GMT
expires: Sat, 07 Dec 2024 21:51:49 GMT
cache-control: public, max-age=63115200
link: <http://remax.azureedge.net/userimages/74/O_aab19a3e16204e77a14fa304952c5500_iList.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "f5c8583626a28506"
vary: Accept
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a938af990a97b9856e1174d11c72cbf7
b57716fd0ea9a1e9e0a0595ff593f939560c0abf
6ab769333b231097d077edfbc1c3fc9560de5ae9bfeb5b8360dea8b7fadbcb44
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 09:51:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i0.wp.com/www.century21.fr/imagesBien/202/3325/webmaster_1_202_3325_0_2_0.jpg
200 OK 31 kB URL HTTP/2 i0.wp.com/www.century21.fr/imagesBien/202/3325/webmaster_1_202_3325_0_2_0.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 458x305, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3bfd0dcdb9022023586906dc7489301e
889449062d78444809b977e0d88c3a4d51b69840
e88df2cadd724fc7503a05c3a3c76f764eafadb398f111dd4a1992b186a7f0a2
GET /www.century21.fr/imagesBien/202/3325/webmaster_1_202_3325_0_2_0.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 09:51:50 GMT
content-type: image/webp
content-length: 31156
last-modified: Thu, 08 Dec 2022 09:51:50 GMT
expires: Sat, 07 Dec 2024 21:51:50 GMT
cache-control: public, max-age=63115200
link: <http://www.century21.fr/imagesBien/202/3325/webmaster_1_202_3325_0_2_0.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "d6504bc304a954ee"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.century21.fr/imagesBien/202/3398/webmaster_1_202_3398_0_2_0.jpg
200 OK 27 kB URL HTTP/2 i0.wp.com/www.century21.fr/imagesBien/202/3398/webmaster_1_202_3398_0_2_0.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 458x305, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash de27d2a680a14eb9b96b6340a13d1b1f
1394a6653e3c26ea854d2f36e93eca27444f2ebc
2ff75279af7f1e236153eabd7ce0c3e3005ad4d0b36c7a1638d0209a32f7369f
GET /www.century21.fr/imagesBien/202/3398/webmaster_1_202_3398_0_2_0.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 09:51:50 GMT
content-type: image/webp
content-length: 26558
last-modified: Thu, 08 Dec 2022 09:51:50 GMT
expires: Sat, 07 Dec 2024 21:51:50 GMT
cache-control: public, max-age=63115200
link: <http://www.century21.fr/imagesBien/202/3398/webmaster_1_202_3398_0_2_0.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "1cd4e4189ce0446c"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/thbr.figarocms.net/external/sWHXvyBT0ufyYIdLymzMOX39U9k=/fit-in/350x264/filters:fill(white):quality(80):strip_icc()/https%3A%2F%2Fmedia.immobilier.notaires.fr%2Finotr%2Fmedia%2F0%2F71126%2F872857%2F29feebb2_VGA.jpg
200 OK 9.5 kB URL HTTP/2 i0.wp.com/thbr.figarocms.net/external/sWHXvyBT0ufyYIdLymzMOX39U9k=/fit-in/350x264/filters:fill(white):quality(80):strip_icc()/https%3A%2F%2Fmedia.immobilier.notaires.fr%2Finotr%2Fmedia%2F0%2F71126%2F872857%2F29feebb2_VGA.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 350x264, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6f6ee9faade43162a5758ee385c4b5a3
c3537541d0c8690cf5f27e7b032e4c52aa2306d4
fff44ae0d2b499459c62c8e5284b3a0f943c131bbdda00793f4c53197f45adcc
GET /thbr.figarocms.net/external/sWHXvyBT0ufyYIdLymzMOX39U9k=/fit-in/350x264/filters:fill(white):quality(80):strip_icc()/https%3A%2F%2Fmedia.immobilier.notaires.fr%2Finotr%2Fmedia%2F0%2F71126%2F872857%2F29feebb2_VGA.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 09:51:50 GMT
content-type: image/webp
content-length: 9450
last-modified: Thu, 08 Dec 2022 09:51:50 GMT
expires: Sat, 07 Dec 2024 21:51:50 GMT
cache-control: public, max-age=63115200
link: <http://thbr.figarocms.net/external/sWHXvyBT0ufyYIdLymzMOX39U9k=/fit-in/350x264/filters:fill(white):quality(80):strip_icc()/https%3A%2F%2Fmedia.immobilier.notaires.fr%2Finotr%2Fmedia%2F0%2F71126%2F872857%2F29feebb2_VGA.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "6bdd5f6d9c9500da"
vary: Accept
x-nc: MISS arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha3GAw1jYZZK000_gCK9OD5D_MAV_jVggpvc9ckR_FM07kDF4CW6sCWEB6FmEsv7sTYYHT6PZKvHkXL0qVas9MydUab3sFusY5xLZBIO1o8GQn6VtcJfoW80OYR1QfgGixbr16RXAj8MfOKG_ilnMT-9mg0BjGAosNumztCgEKc3iRUH6KK0e4ep=w72-h72-p-k-no-nu
200 OK 2.9 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha3GAw1jYZZK000_gCK9OD5D_MAV_jVggpvc9ckR_FM07kDF4CW6sCWEB6FmEsv7sTYYHT6PZKvHkXL0qVas9MydUab3sFusY5xLZBIO1o8GQn6VtcJfoW80OYR1QfgGixbr16RXAj8MfOKG_ilnMT-9mg0BjGAosNumztCgEKc3iRUH6KK0e4ep=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Picasa], baseline, precision 8, 72x72, components 3\012- data
Hash 3e87f28fb3394a43a5876812228d9c75
725ad433fc77199f20d1cee6d0469dbf7aa745b3
6dbbc50105f7195d3b63d9a9c08dc516efb4ccefac5b81b99e7f3d5b8b7de935
GET /blogger_img_proxy/ANbyha3GAw1jYZZK000_gCK9OD5D_MAV_jVggpvc9ckR_FM07kDF4CW6sCWEB6FmEsv7sTYYHT6PZKvHkXL0qVas9MydUab3sFusY5xLZBIO1o8GQn6VtcJfoW80OYR1QfgGixbr16RXAj8MfOKG_ilnMT-9mg0BjGAosNumztCgEKc3iRUH6KK0e4ep=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Fri, 09 Dec 2022 09:51:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 08 Dec 2022 09:51:50 GMT
server: fife
content-length: 2940
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i0.wp.com/static.orpi.com/images/ac3-media/estate-result-item/office6/orpi_73250/catalog/images/pr_p/5/5/7/0/8/0/3/5570803a--201903151801.jpg
200 OK 6.5 kB URL HTTP/2 i0.wp.com/static.orpi.com/images/ac3-media/estate-result-item/office6/orpi_73250/catalog/images/pr_p/5/5/7/0/8/0/3/5570803a--201903151801.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash cbbc8583f6537904b105ee9b841be0ad
43e934b51826ef02896421440e8552941aaa2fe3
24a2b3eaecf3f71aec5d276da9f4761f2933d3890423704f73f8f51cd71abdda
GET /static.orpi.com/images/ac3-media/estate-result-item/office6/orpi_73250/catalog/images/pr_p/5/5/7/0/8/0/3/5570803a--201903151801.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 09:51:50 GMT
content-type: image/webp
content-length: 6516
last-modified: Thu, 08 Dec 2022 09:51:50 GMT
expires: Sat, 07 Dec 2024 21:51:50 GMT
cache-control: public, max-age=63115200
link: <http://static.orpi.com/images/ac3-media/estate-result-item/office6/orpi_73250/catalog/images/pr_p/5/5/7/0/8/0/3/5570803a--201903151801.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "e134d3071bb98e42"
vary: Accept
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha0dkeXFtDWW9PWcrfESBlSYR00rTQ5v_Q29iQJr2UTIJsU_YL8cuewIenDR4lUirnCeQs4B3WusQaLc_FrlyCeCpBNM2p5L2Fr_l0aU33f_qCFAGGTiy4A3KR9i0upV1rnvYwp5qiKFe6iNUBU9bizgZDSaueuPh3dGh-I=w72-h72-p-k-no-nu
404 Not Found 1.8 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha0dkeXFtDWW9PWcrfESBlSYR00rTQ5v_Q29iQJr2UTIJsU_YL8cuewIenDR4lUirnCeQs4B3WusQaLc_FrlyCeCpBNM2p5L2Fr_l0aU33f_qCFAGGTiy4A3KR9i0upV1rnvYwp5qiKFe6iNUBU9bizgZDSaueuPh3dGh-I=w72-h72-p-k-no-nu
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 743902330ed417a6d183a94038d1b6d4
53474fe06c3d3d98f09ba2d1cdf2fb65dd9954ae
c1b14c27b066248abc68abbbc1fba5df50c729824ce7d7e8eb0cdcf21e88009a
GET /blogger_img_proxy/ANbyha0dkeXFtDWW9PWcrfESBlSYR00rTQ5v_Q29iQJr2UTIJsU_YL8cuewIenDR4lUirnCeQs4B3WusQaLc_FrlyCeCpBNM2p5L2Fr_l0aU33f_qCFAGGTiy4A3KR9i0upV1rnvYwp5qiKFe6iNUBU9bizgZDSaueuPh3dGh-I=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 08 Dec 2022 09:51:50 GMT
server: fife
content-length: 1768
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4a5c2a2d50893431367319c3eb5fd0bc
c076b77d1c599d2711a212258ffd5dc4eca82925
0c98da58e2abb90a770dbd9d97277cd8836fb79fc15aace4a95d1fb5ee4c1db4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 09:51:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i0.wp.com/api.tourism-system.com/resize/clip/782/400/80/aHR0cDovL2JvdXJnb2duZS5tZWRpYS50b3VyaW5zb2Z0LmNvbS91cGxvYWQvT3ByaS0tLUxvZ28tcG91ci1ndWlkZS1wYXBpZXItLS0yMDE4LmpwZw==/image.jpg
200 OK 15 kB URL HTTP/2 i0.wp.com/api.tourism-system.com/resize/clip/782/400/80/aHR0cDovL2JvdXJnb2duZS5tZWRpYS50b3VyaW5zb2Z0LmNvbS91cGxvYWQvT3ByaS0tLUxvZ28tcG91ci1ndWlkZS1wYXBpZXItLS0yMDE4LmpwZw==/image.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 587x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7703b3aeed2bfb70803635f81c14a6d2
fedf22f0ad06fd62be4ea337d9d2769e9492c1f6
3a245b030467187327f488c973078dba695573cd57777cd182ffe63095427cf6
GET /api.tourism-system.com/resize/clip/782/400/80/aHR0cDovL2JvdXJnb2duZS5tZWRpYS50b3VyaW5zb2Z0LmNvbS91cGxvYWQvT3ByaS0tLUxvZ28tcG91ci1ndWlkZS1wYXBpZXItLS0yMDE4LmpwZw==/image.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 09:51:50 GMT
content-type: image/webp
content-length: 15436
last-modified: Thu, 08 Dec 2022 09:51:50 GMT
expires: Sat, 07 Dec 2024 21:51:50 GMT
cache-control: public, max-age=63115200
link: <http://api.tourism-system.com/resize/clip/782/400/80/aHR0cDovL2JvdXJnb2duZS5tZWRpYS50b3VyaW5zb2Z0LmNvbS91cGxvYWQvT3ByaS0tLUxvZ28tcG91ci1ndWlkZS1wYXBpZXItLS0yMDE4LmpwZw==/image.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "f21266a8a1179908"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha0iZqhGV226tNQMjt6pkIruINXMLJCBqY2VbKme5GPj5w5_CN5ZrPoaElKpNjNkL-hrXD03Wqtaw5OVUN9h2kbR7F2aaWhj0NYIlDwMhh4A0IBVLAKEWSAjhHyefAyJLom8sxw=w72-h72-p-k-no-nu
404 Not Found 1.7 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha0iZqhGV226tNQMjt6pkIruINXMLJCBqY2VbKme5GPj5w5_CN5ZrPoaElKpNjNkL-hrXD03Wqtaw5OVUN9h2kbR7F2aaWhj0NYIlDwMhh4A0IBVLAKEWSAjhHyefAyJLom8sxw=w72-h72-p-k-no-nu
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash ee93e9098f4313efb8fb72a035aaf664
928195cf500220b2c2f946940f617b68e48c555f
88e511b2a3f3e88712a4c53aec8b60f134a6e50bffab6c6ae836cbd2517e87fe
GET /blogger_img_proxy/ANbyha0iZqhGV226tNQMjt6pkIruINXMLJCBqY2VbKme5GPj5w5_CN5ZrPoaElKpNjNkL-hrXD03Wqtaw5OVUN9h2kbR7F2aaWhj0NYIlDwMhh4A0IBVLAKEWSAjhHyefAyJLom8sxw=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 08 Dec 2022 09:51:50 GMT
server: fife
content-length: 1736
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i0.wp.com/www.neyrat-immobilier.fr/import/tag/photo-type-2-a-louer-chalon-sur-saone-ref---8818-A.jpg
200 OK 24 kB URL HTTP/2 i0.wp.com/www.neyrat-immobilier.fr/import/tag/photo-type-2-a-louer-chalon-sur-saone-ref---8818-A.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x682, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash fe21c67fd4ba221dd2d0be843a6e513d
895a75e5573151f8a71917e4fb13a0db06e93ded
de22b8c18e3363c5a5825177f62e85d571bda653fd2314d11a1492c8282bc16a
GET /www.neyrat-immobilier.fr/import/tag/photo-type-2-a-louer-chalon-sur-saone-ref---8818-A.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 09:51:50 GMT
content-type: image/webp
content-length: 24178
last-modified: Thu, 08 Dec 2022 09:51:50 GMT
expires: Sat, 07 Dec 2024 21:51:50 GMT
cache-control: public, max-age=63115200
link: <http://www.neyrat-immobilier.fr/import/tag/photo-type-2-a-louer-chalon-sur-saone-ref---8818-A.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "75b5c2b558fc170e"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha2DXcsh071vI1xXba3Mzgk7ajizNuBv7z_1RT8PCOz2qGOgQ6JVlbFGh4AiCYCGtU8zzpCyfWFhcoafQL23wxcBkKb5yg6pStT3rPkhKi1RoK2KWx7KjXs9uMZWWlvc-ouMqoGRWE9HjswneLAf6FouqBvbam5xJoFQbItXBPhzgYm6Mg=w72-h72-p-k-no-nu
200 OK 2.2 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha2DXcsh071vI1xXba3Mzgk7ajizNuBv7z_1RT8PCOz2qGOgQ6JVlbFGh4AiCYCGtU8zzpCyfWFhcoafQL23wxcBkKb5yg6pStT3rPkhKi1RoK2KWx7KjXs9uMZWWlvc-ouMqoGRWE9HjswneLAf6FouqBvbam5xJoFQbItXBPhzgYm6Mg=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash 79f6af745fa3882d11dbeaa42870d786
d03e25e222dcb21548ceefa824e685d8826892e0
5cd3db1c770679efa8bb063caccae01477c3837f586dc14d1e13e806ab79ae90
GET /blogger_img_proxy/ANbyha2DXcsh071vI1xXba3Mzgk7ajizNuBv7z_1RT8PCOz2qGOgQ6JVlbFGh4AiCYCGtU8zzpCyfWFhcoafQL23wxcBkKb5yg6pStT3rPkhKi1RoK2KWx7KjXs9uMZWWlvc-ouMqoGRWE9HjswneLAf6FouqBvbam5xJoFQbItXBPhzgYm6Mg=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Fri, 09 Dec 2022 09:51:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 08 Dec 2022 09:51:50 GMT
server: fife
content-length: 2202
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i0.wp.com/static4.pagesjaunes.fr/media/cviv/53151821_N_0002_photo.jpg
200 OK 28 kB URL HTTP/2 i0.wp.com/static4.pagesjaunes.fr/media/cviv/53151821_N_0002_photo.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 814x640, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a65698f070c0c92d6018b7e6d1a08b7a
0d3bba0bfb18064178a8761c6125c93cb5797364
c98e2fe7363c71c02f163ce77edc6f4d87c6f16e34d9d31153300c41811a2d91
GET /static4.pagesjaunes.fr/media/cviv/53151821_N_0002_photo.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 09:51:50 GMT
content-type: image/webp
content-length: 28444
last-modified: Thu, 08 Dec 2022 09:51:50 GMT
expires: Sat, 07 Dec 2024 21:51:50 GMT
cache-control: public, max-age=63115200
link: <http://static4.pagesjaunes.fr/media/cviv/53151821_N_0002_photo.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "5e5c06f87ce1bf40"
vary: Accept
x-nc: MISS arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/media2-js.nexity.fr/5_abaeb981-a6d4-4437-a05f-e42a7f6220e3.jpg?width=400&height=190&default_img=appartement.jpg
200 OK 55 kB URL HTTP/2 i0.wp.com/media2-js.nexity.fr/5_abaeb981-a6d4-4437-a05f-e42a7f6220e3.jpg?width=400&height=190&default_img=appartement.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1240x827, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a6bcfc50e8a9fba7e25b344ab288db80
b596749c47937c9a400f3eccdc8682dcfced3e9e
c8fb75853d2157bd888d3d9bacc2c54eab359c6fbe3726d0fb5e495f77062ba3
GET /media2-js.nexity.fr/5_abaeb981-a6d4-4437-a05f-e42a7f6220e3.jpg?width=400&height=190&default_img=appartement.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 09:51:50 GMT
content-type: image/webp
content-length: 54776
last-modified: Thu, 08 Dec 2022 09:51:50 GMT
expires: Sat, 07 Dec 2024 21:51:50 GMT
cache-control: public, max-age=63115200
link: <http://media2-js.nexity.fr/5_abaeb981-a6d4-4437-a05f-e42a7f6220e3.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "55672f377b7ae906"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/static.orpi.com/images/ac3-media/estate-result-item/office6/orpi_73659/catalog/images/pr_p/4/5/8/1/4/1/5/4581415a--201906041712.jpg
200 OK 6.5 kB URL HTTP/2 i0.wp.com/static.orpi.com/images/ac3-media/estate-result-item/office6/orpi_73659/catalog/images/pr_p/4/5/8/1/4/1/5/4581415a--201906041712.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash cbbc8583f6537904b105ee9b841be0ad
43e934b51826ef02896421440e8552941aaa2fe3
24a2b3eaecf3f71aec5d276da9f4761f2933d3890423704f73f8f51cd71abdda
GET /static.orpi.com/images/ac3-media/estate-result-item/office6/orpi_73659/catalog/images/pr_p/4/5/8/1/4/1/5/4581415a--201906041712.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 09:51:50 GMT
content-type: image/webp
content-length: 6516
last-modified: Thu, 08 Dec 2022 09:51:50 GMT
expires: Sat, 07 Dec 2024 21:51:50 GMT
cache-control: public, max-age=63115200
link: <http://static.orpi.com/images/ac3-media/estate-result-item/office6/orpi_73659/catalog/images/pr_p/4/5/8/1/4/1/5/4581415a--201906041712.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "e134d3071bb98e42"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15409
Expires: Thu, 08 Dec 2022 14:08:39 GMT
Date: Thu, 08 Dec 2022 09:51:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15409
Expires: Thu, 08 Dec 2022 14:08:39 GMT
Date: Thu, 08 Dec 2022 09:51:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15409
Expires: Thu, 08 Dec 2022 14:08:39 GMT
Date: Thu, 08 Dec 2022 09:51:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15409
Expires: Thu, 08 Dec 2022 14:08:39 GMT
Date: Thu, 08 Dec 2022 09:51:50 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3d44d17585c9a536c8da0e75ed90d175
9dc35d0f6b251004bc1ddc83aea9ee71c95aedd1
6d14a5b5c43b39244434560a83a2bfea6604a4d072943b6147293b7adfd1b7b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10164
x-amzn-requestid: a0cb7259-0a07-44f5-91cd-e96b8d9c9cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cnAPOGSnoAMFUUQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c472e-799b6ee425e29fb70ff7e4ea;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 07:07:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5Q2LRCrEYVZz_KldQARUQ26O1mv0G7rMAPQXGkBzUnERF-WjtZPMJA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 12:11:17 GMT
age: 78033
etag: "9dc35d0f6b251004bc1ddc83aea9ee71c95aedd1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3236488e-3e39-44b6-b864-0f7ede8ee3f5.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3236488e-3e39-44b6-b864-0f7ede8ee3f5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3cbac0c7e45d3f33c38dbf3af4de05ba
e9106fec14ddda290951c61eda64a69ada9a244a
98d3785eb167ea6bbba3782ab3cfd8cc9c7715f493265ac6d59494c00d3b002e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3236488e-3e39-44b6-b864-0f7ede8ee3f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9376
x-amzn-requestid: bf2f33a6-7f13-4f5b-ba9c-da33282135b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctERHFRSoAMFgYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638eb406-121af6ba1b7b6a3066ffa103;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 03:16:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: yTLFIBUWHjudn2h6VKM79RUnXfuUTmQBkYSCFrRuY7_biVW5bEKZfA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 18:39:08 GMT
age: 54762
etag: "e9106fec14ddda290951c61eda64a69ada9a244a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e6c8e9d-aef1-4772-8747-82ef7e4ceeb1.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e6c8e9d-aef1-4772-8747-82ef7e4ceeb1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fb1ea0161d261518c99909aff49e6f58
c3b915cb579b651db25442fea0bbedd0d292c0fc
d877a21abfd883a368da0136c4e56d7f590fa9e9ea09dec3675823211fe56385
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e6c8e9d-aef1-4772-8747-82ef7e4ceeb1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6110
x-amzn-requestid: ddb5c208-5bfe-4e8c-9fdd-55076fac9eb8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czg9FGl2IAMFxYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63914853-148fec9213f360520ff3c52a;Sampled=0
x-amzn-remapped-date: Thu, 08 Dec 2022 02:13:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: l8PbqnzJrf0uHiLE9iy5PSfKl8f4520ddTxkji7GyUyAWuX9Sc4U0w==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 04:20:38 GMT
age: 19872
etag: "c3b915cb579b651db25442fea0bbedd0d292c0fc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b87d6543345f73653ed4a49b37d7c959
c4f26846b8b72293368ff16915d49297cf12bbb9
aee6aa42e4b5b83b81f74801ff8f0039fc6d38036f42ee81875813c856cf5eef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8659
x-amzn-requestid: 6f420d07-65d5-4bb2-9f1f-e56025de497b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFSYFArIAMF46w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c0f-0a295e5c48228d5806b4f107;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TSh1BNzzIPhWCfYEiqvQJckSPAyhHobe-HK6msEVeEJ1ruX-_rMSSA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:35:32 GMT
age: 36978
etag: "c4f26846b8b72293368ff16915d49297cf12bbb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F234796b8-a59e-4174-a03a-b127b03b60eb.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F234796b8-a59e-4174-a03a-b127b03b60eb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 57a992ab666f21c6da0057fefb622ff2
c36381d6744ae44360b2a37ca7586028e980714b
afe4050d9b07dcab509c95eb8d75ca410db74bd59f39561e5d190550cb61503e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F234796b8-a59e-4174-a03a-b127b03b60eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13556
x-amzn-requestid: 3e79e2da-80ea-404c-8d87-939c7682dbe8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy4h8EuUIAMFkIQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639107a5-68318f164708882a43fb0f12;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:37:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7RZTh3iQHGp_XffXQQw13UUWqPNZQFJ_e4pIvNPgAaA1aGy_cXMueA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:13:24 GMT
etag: "c36381d6744ae44360b2a37ca7586028e980714b"
content-type: image/jpeg
age: 41906
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
200 OK 34 kB URL HTTP/2 translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
IP
Hash a78f20ee2a18cd970847fef5a0985cd1
a23edb8f963453c2064d7cec5a32d8c60901e95d
c0c7b39b6820a692105d3cb05ab5579429eb70afde612d8dd8e5bc21e0923f6f
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 08 Dec 2022 09:51:49 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+940; expires=Sat, 07-Dec-2024 09:51:49 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c5d16b538b89d05e8fee5631a2cee950
36fddcd3d56304cd3196a431b82fa38cf2776e2e
1f82c650b65b2b41e86fd7e581279801b97c834b0b0fbf8d496a6e9da95598f0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F82C650B65B2B41E86FD7E581279801B97C834B0B0FBF8D496A6E9DA95598F0"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14374
Expires: Thu, 08 Dec 2022 13:51:24 GMT
Date: Thu, 08 Dec 2022 09:51:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5d49532206251e26243a1bb0c4a9f1bc
c2f0611a189e2b23e4991ef7b9ceccb4110dcfb2
926e0a9875d05e61fee53019219b16c11ea5c5bc103ef07e2d1938ae3dd90e14
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "926E0A9875D05E61FEE53019219B16C11EA5C5BC103EF07E2D1938AE3DD90E14"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10920
Expires: Thu, 08 Dec 2022 12:53:50 GMT
Date: Thu, 08 Dec 2022 09:51:50 GMT
Connection: keep-alive
lh3.googleusercontent.com/blogger_img_proxy/ANbyha3nGqCfqyQ-SryGH1g28p6QYoKqWNVsnle7VGPujxoYBcCQZZQWdMZrIM7ZnAHr80pmWi8MaurrZcgPvePR_FMT_y9elH76aNqTq8pU0IZzEy8igr3QpQQIyqO4IQMCn82bcSZ7fo0qGz1Cy33_Ltz0=w72-h72-p-k-no-nu
200 OK 1.9 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha3nGqCfqyQ-SryGH1g28p6QYoKqWNVsnle7VGPujxoYBcCQZZQWdMZrIM7ZnAHr80pmWi8MaurrZcgPvePR_FMT_y9elH76aNqTq8pU0IZzEy8igr3QpQQIyqO4IQMCn82bcSZ7fo0qGz1Cy33_Ltz0=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash 92af8aaba6c13a1949e7da0823f6d2a3
1d2ef310f5c462d92a13531ea8f84c3fdc02a51c
702ca34eed56b660a1c538efc35dacff83a7cf813a27f80020f117d2ea3a5260
GET /blogger_img_proxy/ANbyha3nGqCfqyQ-SryGH1g28p6QYoKqWNVsnle7VGPujxoYBcCQZZQWdMZrIM7ZnAHr80pmWi8MaurrZcgPvePR_FMT_y9elH76aNqTq8pU0IZzEy8igr3QpQQIyqO4IQMCn82bcSZ7fo0qGz1Cy33_Ltz0=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Fri, 09 Dec 2022 09:51:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 08 Dec 2022 09:51:50 GMT
server: fife
content-length: 1892
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
themes.googleusercontent.com/image?id=1uS5otGCPn4U06i3j1zW77946guqKmvBnwB9rday4wkcuKQtnNQjJULvRym_0mj_drPw6&options=w1600
200 OK 302 kB URL HTTP/2 themes.googleusercontent.com/image?id=1uS5otGCPn4U06i3j1zW77946guqKmvBnwB9rday4wkcuKQtnNQjJULvRym_0mj_drPw6&options=w1600
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Picasa], baseline, precision 8, 1600x1067, components 3\012- data
Size 302 kB (301960 bytes)
Hash 4c10e6e5553f8f1682faacf87431c249
c4f9d7df658d9c2295863169f50b222c491e9423
90a9090bf8e87306ee0cc442f7245e8bc728795f5add5936153f0db5527390a6
GET /image?id=1uS5otGCPn4U06i3j1zW77946guqKmvBnwB9rday4wkcuKQtnNQjJULvRym_0mj_drPw6&options=w1600 HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 09 Dec 2022 09:51:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 08 Dec 2022 09:51:50 GMT
server: fife
content-length: 301960
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha0ISXTk4tYamAt5EYEdhH3oO4Dk3qPUYgh2b7CcOfiZIWSZA-o87stmIPfkN61HbNw46VoKy2jnradfDaH2kWIcloQ4KX2JaX2xA0xGpUtJRyHa7JZNmtImjIWS3bKm15_PXs_D1g=w72-h72-p-k-no-nu
200 OK 5.3 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha0ISXTk4tYamAt5EYEdhH3oO4Dk3qPUYgh2b7CcOfiZIWSZA-o87stmIPfkN61HbNw46VoKy2jnradfDaH2kWIcloQ4KX2JaX2xA0xGpUtJRyHa7JZNmtImjIWS3bKm15_PXs_D1g=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Picasa, copyright=\302\251 Vinci], baseline, precision 8, 72x72, components 3\012- data
Hash c9c4b074dba7ab6ede75ed1e898b5649
a164001264163638b6e0c571cba1e772a60d425d
54f72d895003fbc141142228607b20bb9864052f5685a070c752ff82afd683bd
GET /blogger_img_proxy/ANbyha0ISXTk4tYamAt5EYEdhH3oO4Dk3qPUYgh2b7CcOfiZIWSZA-o87stmIPfkN61HbNw46VoKy2jnradfDaH2kWIcloQ4KX2JaX2xA0xGpUtJRyHa7JZNmtImjIWS3bKm15_PXs_D1g=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Fri, 09 Dec 2022 09:51:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 08 Dec 2022 09:51:50 GMT
server: fife
content-length: 5331
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha3FZAZIfGkFXe87MTl2nTW_aHTxkf8LuL8h7jg2wGa7mL5UcgA-Lcaj2jjREgkSUSdmQCmYJ6JTL31QYkLIqGcu-7ntsDi_6EXPLbla9lMDtOSK-8puanC0fe259NLFbRJfWUodErySVNDv1mo_TXvAXad7RcE--RfEI7zXLKnf_ez6=w72-h72-p-k-no-nu
200 OK 2.2 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha3FZAZIfGkFXe87MTl2nTW_aHTxkf8LuL8h7jg2wGa7mL5UcgA-Lcaj2jjREgkSUSdmQCmYJ6JTL31QYkLIqGcu-7ntsDi_6EXPLbla9lMDtOSK-8puanC0fe259NLFbRJfWUodErySVNDv1mo_TXvAXad7RcE--RfEI7zXLKnf_ez6=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash 082d4f8569a740dbfccb42430369e1f3
816a3c103e45eff9425ac372be9da5dd969f19fe
f2f95ad78314c39507c0e3b817dcdc401031d35fb6ecced9ba384e62c0ee4e4b
GET /blogger_img_proxy/ANbyha3FZAZIfGkFXe87MTl2nTW_aHTxkf8LuL8h7jg2wGa7mL5UcgA-Lcaj2jjREgkSUSdmQCmYJ6JTL31QYkLIqGcu-7ntsDi_6EXPLbla9lMDtOSK-8puanC0fe259NLFbRJfWUodErySVNDv1mo_TXvAXad7RcE--RfEI7zXLKnf_ez6=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Fri, 09 Dec 2022 09:51:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 08 Dec 2022 09:51:50 GMT
server: fife
content-length: 2194
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i0.wp.com/v.poliris.com/s/width/400/visuels/0/m/3/5/0m357hc0uqmpjmfr84sfxngpxfdn6pkafjkhynibk.jpg
200 OK 10 kB URL HTTP/2 i0.wp.com/v.poliris.com/s/width/400/visuels/0/m/3/5/0m357hc0uqmpjmfr84sfxngpxfdn6pkafjkhynibk.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 32bf8d33d438e1097e1409a84c650420
68d3ade03c21ba4c8c3fd3bb2f81ae7b87500e1d
2a6a72a9d609d5cd39313a72b3310106c6a055c5a6d3b7c1d2a5212de9c4a0f4
GET /v.poliris.com/s/width/400/visuels/0/m/3/5/0m357hc0uqmpjmfr84sfxngpxfdn6pkafjkhynibk.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 09:51:50 GMT
content-type: image/webp
content-length: 10020
last-modified: Thu, 08 Dec 2022 09:51:50 GMT
expires: Sat, 07 Dec 2024 21:51:50 GMT
cache-control: public, max-age=63115200
link: <http://v.poliris.com/s/width/400/visuels/0/m/3/5/0m357hc0uqmpjmfr84sfxngpxfdn6pkafjkhynibk.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "7be12881b5090e57"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha2NT4TNOMuuMn8vcWa4OVHQSCGgJgIUTmpFbmO6-cBKKWTcJqR4HLlrEybnYx3fKrR55LhPM-1C3J4NTWeLB44v2j5v37sO9qRU-__QsgO0u0MF2f6KNrxt8Izy1rbQDSQE1VIWrOlm3MhD9ZLGbw1e4Ie9j0nd2xIhxr8GdGYRj3glZXHzoHAB886UhVo4Ts-M=w72-h72-p-k-no-nu
200 OK 3.7 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha2NT4TNOMuuMn8vcWa4OVHQSCGgJgIUTmpFbmO6-cBKKWTcJqR4HLlrEybnYx3fKrR55LhPM-1C3J4NTWeLB44v2j5v37sO9qRU-__QsgO0u0MF2f6KNrxt8Izy1rbQDSQE1VIWrOlm3MhD9ZLGbw1e4Ie9j0nd2xIhxr8GdGYRj3glZXHzoHAB886UhVo4Ts-M=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash 6d7610d99a459bb3363e1630ad707b09
a0d399477a640c7b33f27f76a57144f82398235a
27a34eea13d3a55ca4d52c1a646b7f2dedf5784e1f303d0264b89de2728904e2
GET /blogger_img_proxy/ANbyha2NT4TNOMuuMn8vcWa4OVHQSCGgJgIUTmpFbmO6-cBKKWTcJqR4HLlrEybnYx3fKrR55LhPM-1C3J4NTWeLB44v2j5v37sO9qRU-__QsgO0u0MF2f6KNrxt8Izy1rbQDSQE1VIWrOlm3MhD9ZLGbw1e4Ie9j0nd2xIhxr8GdGYRj3glZXHzoHAB886UhVo4Ts-M=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Fri, 09 Dec 2022 09:51:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 08 Dec 2022 09:51:50 GMT
server: fife
content-length: 3733
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
exposuremixed.com/74/d2/12/74d21250404842be8045dd0e282cb1d7.js
200 OK 13 kB URL HTTP/1.1 exposuremixed.com/74/d2/12/74d21250404842be8045dd0e282cb1d7.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (37167), with no line terminators
Hash 27485d2e0a87da4ea23c689c73f4ca9d
26d0c43f1f7dbbdb757f6f30f5251e2dd3bc53d3
5243f1e8e8ef956daadd647e682f9b9857e7e2fae2ed3eaf85ffe6635ca7d98f
GET /74/d2/12/74d21250404842be8045dd0e282cb1d7.js HTTP/1.1
Host: exposuremixed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Thu, 08 Dec 2022 09:51:50 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d21b4494f0398b8d34c1f2f6d07c02ca
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.blogger.com/dyn-css/authorization.css?targetBlogID=7735669598733170251&zx=18a8a420-76e1-4165-b239-b3ffb81bdac1
200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=7735669598733170251&zx=18a8a420-76e1-4165-b239-b3ffb81bdac1
IP
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=7735669598733170251&zx=18a8a420-76e1-4165-b239-b3ffb81bdac1 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 08 Dec 2022 09:51:50 GMT
last-modified: Thu, 08 Dec 2022 09:51:50 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
exposuremixed.com/9b/d2/73/9bd273276b902e0739f143dbb7b3e685.js
200 OK 21 kB URL HTTP/1.1 exposuremixed.com/9b/d2/73/9bd273276b902e0739f143dbb7b3e685.js
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document, ASCII text, with very long lines (60153), with no line terminators
Hash 6e33287c122570df1a67953e91e3fc14
d3cc670255b2eb9cdf45f6ea0e996fd18291a370
6304f1e8e7aa142eb2888b90131b0770d87563dc07128ba3e95ca8fbe450eb4f
GET /9b/d2/73/9bd273276b902e0739f143dbb7b3e685.js HTTP/1.1
Host: exposuremixed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Thu, 08 Dec 2022 09:51:50 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: cb9739fa16f4fd2dae1a7ae6ab185e59
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
i0.wp.com/lookaside.fbsbx.com/lookaside/crawler/media/?media_id=1595029147385018
404 Not Found 5.1 kB URL HTTP/2 i0.wp.com/lookaside.fbsbx.com/lookaside/crawler/media/?media_id=1595029147385018
IP
Hash b7c8a3f80aaebc1959868eca880ee057
4e0f595a0abb5845c73e9d186d1c18519d8c1f0f
9b0e0884150f4d407d4ace19bebda9ea626c6f075eb44ed9095f73167d844aa7
GET /lookaside.fbsbx.com/lookaside/crawler/media/?media_id=1595029147385018 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Thu, 08 Dec 2022 09:51:50 GMT
content-type: text/html; charset=utf-8
x-nc: HIT arn 7
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ec5f6261a8262e9f94b29627f54cefe
7ac766cf2ac8c2d960ec033388a767ff8a7d45e2
5f6ee11d840909fc5272c2c32f7874d55f49d831abc88d527e35562d218890f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 09:51:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ec5f6261a8262e9f94b29627f54cefe
7ac766cf2ac8c2d960ec033388a767ff8a7d45e2
5f6ee11d840909fc5272c2c32f7874d55f49d831abc88d527e35562d218890f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 09:51:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i0.wp.com/www.collier-immobilier.com/wp-content/uploads/2016/09/bandeau2.jpg
404 Not Found 3.7 kB URL HTTP/2 i0.wp.com/www.collier-immobilier.com/wp-content/uploads/2016/09/bandeau2.jpg
IP
Hash bf9679d9e0c0e674b61def24cf4530c9
dbcf25afb3b1efa3cce40b1518b126b1a4bec9bc
d08a62dca625b32834c5fb5a9314d9dd69cbc0ea362e74569963a255b8d0a597
GET /www.collier-immobilier.com/wp-content/uploads/2016/09/bandeau2.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Thu, 08 Dec 2022 09:51:50 GMT
content-type: text/html; charset=utf-8
x-nc: HIT arn 4
X-Firefox-Spdy: h2
i0.wp.com/s.avendrealouer.fr/account_logo/st-351609.jpg
400 Bad Request 75 kB URL HTTP/2 i0.wp.com/s.avendrealouer.fr/account_logo/st-351609.jpg
IP
Hash 961570aa4326fa75d392ced2724baebe
eed9332080003e07fc55fa6b48e777a6602c0639
a88e8edf72cab16aace3f7453ca6057c13b64636ec31be78eea3ba59257f620a
GET /s.avendrealouer.fr/account_logo/st-351609.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 400 Bad Request
server: nginx
date: Thu, 08 Dec 2022 09:51:50 GMT
content-type: text/html; charset=utf-8
x-nc: HIT arn 8
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 2a46aa002701ae54f4de0d876a5069e2
3cf1e45da11d6583fda708c041d8c309ebe9ff37
70a2ca6ae9b2777aad1261c935a075c256a7d920c98affa64c8affef5d5ff85b
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "70A2CA6AE9B2777AAD1261C935A075C256A7D920C98AFFA64C8AFFEF5D5FF85B"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19424
Expires: Thu, 08 Dec 2022 15:15:34 GMT
Date: Thu, 08 Dec 2022 09:51:50 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ec5f6261a8262e9f94b29627f54cefe
7ac766cf2ac8c2d960ec033388a767ff8a7d45e2
5f6ee11d840909fc5272c2c32f7874d55f49d831abc88d527e35562d218890f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 09:51:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2b30426b2ebadaeefe42e0df47296748
921c1e9f523c4ce527d56b6115c9ed68d5916757
abce6391e73f193d1338618d44d1e83403aeca6b58a280f08a6a6fa5baf6223a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=103022
Date: Thu, 08 Dec 2022 09:51:50 GMT
Etag: "63909596-1d7"
Expires: Fri, 09 Dec 2022 14:28:52 GMT
Last-Modified: Wed, 07 Dec 2022 13:31:02 GMT
Server: ECS (nyb/1D18)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: _KiqRfwSsgSfBnHK4OOkl-dITDETRGhGZ9iuhGn6Pv9K0lbr5THnNw==
Age: 3470
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 95f6432a683d9736b83e0d890c91008b
5570c136527ed225e11a98fc6ac6c095fef40557
9315ff1f4d7f7f80c8ede2492e6474f844bcd9939d543fea790d8aeb00b4dcce
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9315FF1F4D7F7F80C8EDE2492E6474F844BCD9939D543FEA790D8AEB00B4DCCE"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1919
Expires: Thu, 08 Dec 2022 10:23:49 GMT
Date: Thu, 08 Dec 2022 09:51:50 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2b30426b2ebadaeefe42e0df47296748
921c1e9f523c4ce527d56b6115c9ed68d5916757
abce6391e73f193d1338618d44d1e83403aeca6b58a280f08a6a6fa5baf6223a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 08 Dec 2022 09:51:50 GMT
Last-Modified: Thu, 08 Dec 2022 08:52:59 GMT
Server: ECS (bsa/EB20)
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: PwI9YEN2nDU8gnNp1BZuO4icVgG7Z8JoFcO5EEsq1O8XIP_R1rg66Q==
Age: 3531
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 95b5ba8bb052c77587ab09509629a522
79491acb3ec4d807a20e91725acedc0962ddf468
8ebe92ce117c82d62ddc88151ff6ac4f5f79e5e9e3585d93c16ef0717fa69901
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://entrepriseimmobiliere.blogspot.com
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Dec 2022 09:51:50 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://entrepriseimmobiliere.blogspot.com
access-control-allow-credentials: true
set-cookie: uid_id2=c8fe007c-dd6c-4377-9149-dc00faf35dd4:2:1; expires=Sun, 05 Dec 2032 09:51:50 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0e9eef4ed41ef94e9ea175ad243e294e
b6f83e508270413dabe55e2884b5409ca7978e24
0e741ca8d92717128bca7aed937bca43519a8d20a9d3dd8670da656ad51a695e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 09:51:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 18e942967e3673532358cf3eb9a166a7
fb53d8289a7b672a0263e5138107d47f6c73e437
529ac33182e649033ae1acc6a7a72914f62384196c2b4c99bbafcb07cba0a2e6
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://entrepriseimmobiliere.blogspot.com
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Dec 2022 09:51:50 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://entrepriseimmobiliere.blogspot.com
access-control-allow-credentials: true
set-cookie: uid_id2=8c3e54c1-a300-4317-acc6-064e055c4b14:2:1; expires=Sun, 05 Dec 2032 09:51:50 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0e9eef4ed41ef94e9ea175ad243e294e
b6f83e508270413dabe55e2884b5409ca7978e24
0e741ca8d92717128bca7aed937bca43519a8d20a9d3dd8670da656ad51a695e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 09:51:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/images/branding/product/2x/translate_24dp.png
200 OK 1.8 kB URL HTTP/2 www.gstatic.com/images/branding/product/2x/translate_24dp.png
IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash c69c796362406f9e11c7f4bf5bb628da
e489ce95ab56208090868882113d7416abf46775
4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://translate.googleapis.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Dec 2022 05:06:26 GMT
expires: Fri, 08 Dec 2023 05:06:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
age: 17124
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/images/branding/product/1x/translate_24dp.png
200 OK 846 B URL HTTP/2 www.gstatic.com/images/branding/product/1x/translate_24dp.png
IP
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash e9cd262114358f26b7608b56905185dc
6dbde0a96deaab2b529723ce26c62043cf9180ab
5a861509b658aa24fc3aed2867ac3c061e7d818d90b9990959afc6d1b5d4ff99
GET /images/branding/product/1x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 846
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 21:45:39 GMT
expires: Thu, 07 Dec 2023 21:45:39 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
age: 43571
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0e9eef4ed41ef94e9ea175ad243e294e
b6f83e508270413dabe55e2884b5409ca7978e24
0e741ca8d92717128bca7aed937bca43519a8d20a9d3dd8670da656ad51a695e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 09:51:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
clergymanwonderful.com/pixel/purst?dl=0&th=0&sc=0&rs=2910&rd=2910&fd=953&bv=22.10.v.9&tmpl=70
200 OK 0 B URL HTTP/1.1 clergymanwonderful.com/pixel/purst?dl=0&th=0&sc=0&rs=2910&rd=2910&fd=953&bv=22.10.v.9&tmpl=70
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=2910&rd=2910&fd=953&bv=22.10.v.9&tmpl=70 HTTP/1.1
Host: clergymanwonderful.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 08 Dec 2022 09:51:51 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 583e393554c6c39e8b5e35445d44e256
ce70b1ecd95117cd989ff9b2f968afd16197f789
72d81586c02ab7ef1b7a89ca4611f72cfe6c023dede064ddb4b8cc8f1519490a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "72D81586C02AB7EF1B7A89CA4611F72CFE6C023DEDE064DDB4B8CC8F1519490A"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7175
Expires: Thu, 08 Dec 2022 11:51:26 GMT
Date: Thu, 08 Dec 2022 09:51:51 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 2a46aa002701ae54f4de0d876a5069e2
3cf1e45da11d6583fda708c041d8c309ebe9ff37
70a2ca6ae9b2777aad1261c935a075c256a7d920c98affa64c8affef5d5ff85b
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "70A2CA6AE9B2777AAD1261C935A075C256A7D920C98AFFA64C8AFFEF5D5FF85B"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19423
Expires: Thu, 08 Dec 2022 15:15:34 GMT
Date: Thu, 08 Dec 2022 09:51:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 381e31ff1da23abb91c67f66e74953fa
b48360134cbe5ec86eee6c3ae7720aee1ea3dc2d
52001e00ff051dd293d107dabffb6b7e680d5f1ff6ae866af7d71de03e888848
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52001E00FF051DD293D107DABFFB6B7E680D5F1FF6AE866AF7D71DE03E888848"
Last-Modified: Thu, 08 Dec 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10257
Expires: Thu, 08 Dec 2022 12:42:48 GMT
Date: Thu, 08 Dec 2022 09:51:51 GMT
Connection: keep-alive
banquetunarmedgrater.com/advertisers.js
200 OK 0 B URL HTTP/1.1 banquetunarmedgrater.com/advertisers.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Thu, 08 Dec 2022 09:51:51 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ab8fe2d0636fc6db87225cfbb9cc8dfa
Strict-Transport-Security: max-age=0; includeSubdomains
lh3.googleusercontent.com/blogger_img_proxy/ANbyha0zBcAqbaxLpL13_sdCQI_32_Ziz2oLmVmwjXs5EOMUCEZ8CMbkoVaNHQr65QcdXOG45G2-2rCd740ymYOQnWhdsXQv9rJZwMgQvwS04hP1ev0Vx4XunR4VH0YIZSPgG7Yw-ZS7tiWU3rPNXgAkaWdFP0fWrNtvOpDivO9SHjjy2Jdqv4MMcyaGG4klbgnTwZUDf0l99vrl-dZtXm9pWd-eJpkYtR9HattPXVDzXExvQpy6PQd05zoNsodqvWqDGfu63vDAU8jmEIST3MZbpjyrwZCJtTiTFOIeqYMUbRS8OSeftI6WAyG1qBjhbC4u42GsXosNpQA8VSLqPgnkVNnWZKtNsh8yIny1vGGP_CXXbtBFqgxD=w72-h72-p-k-no-nu
200 OK 1.3 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha0zBcAqbaxLpL13_sdCQI_32_Ziz2oLmVmwjXs5EOMUCEZ8CMbkoVaNHQr65QcdXOG45G2-2rCd740ymYOQnWhdsXQv9rJZwMgQvwS04hP1ev0Vx4XunR4VH0YIZSPgG7Yw-ZS7tiWU3rPNXgAkaWdFP0fWrNtvOpDivO9SHjjy2Jdqv4MMcyaGG4klbgnTwZUDf0l99vrl-dZtXm9pWd-eJpkYtR9HattPXVDzXExvQpy6PQd05zoNsodqvWqDGfu63vDAU8jmEIST3MZbpjyrwZCJtTiTFOIeqYMUbRS8OSeftI6WAyG1qBjhbC4u42GsXosNpQA8VSLqPgnkVNnWZKtNsh8yIny1vGGP_CXXbtBFqgxD=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash 027e6ed6472394f71d2f6b1a210fbad6
e8c54274da4ea8441381666ce3ad2c491d7173ff
217c457fe3b4f6facde84711c647c15284e4f5b1c56285505a65f18670f72724
GET /blogger_img_proxy/ANbyha0zBcAqbaxLpL13_sdCQI_32_Ziz2oLmVmwjXs5EOMUCEZ8CMbkoVaNHQr65QcdXOG45G2-2rCd740ymYOQnWhdsXQv9rJZwMgQvwS04hP1ev0Vx4XunR4VH0YIZSPgG7Yw-ZS7tiWU3rPNXgAkaWdFP0fWrNtvOpDivO9SHjjy2Jdqv4MMcyaGG4klbgnTwZUDf0l99vrl-dZtXm9pWd-eJpkYtR9HattPXVDzXExvQpy6PQd05zoNsodqvWqDGfu63vDAU8jmEIST3MZbpjyrwZCJtTiTFOIeqYMUbRS8OSeftI6WAyG1qBjhbC4u42GsXosNpQA8VSLqPgnkVNnWZKtNsh8yIny1vGGP_CXXbtBFqgxD=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Fri, 09 Dec 2022 09:51:51 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 08 Dec 2022 09:51:51 GMT
server: fife
content-length: 1342
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
verdictdisingenuousfruitless.com/sbar.json?key=74d21250404842be8045dd0e282cb1d7&uuid=c8fe007c-dd6c-4377-9149-dc00faf35dd4%3A2%3A1
200 OK 3.3 kB URL HTTP/1.1 verdictdisingenuousfruitless.com/sbar.json?key=74d21250404842be8045dd0e282cb1d7&uuid=c8fe007c-dd6c-4377-9149-dc00faf35dd4%3A2%3A1
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (6010), with no line terminators
Hash 402d8d0924abb72c2c8f53d327fdeca4
39157710099970f06177b9be16ec7662f5fae297
2058d03b916a553640e67c7cdb98912fb8f3343f3d30c2b227eb9f8918355268
Analyzer Verdict Alert quad9 Sinkholed
GET /sbar.json?key=74d21250404842be8045dd0e282cb1d7&uuid=c8fe007c-dd6c-4377-9149-dc00faf35dd4%3A2%3A1 HTTP/1.1
Host: verdictdisingenuousfruitless.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://entrepriseimmobiliere.blogspot.com
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 08 Dec 2022 09:51:51 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://entrepriseimmobiliere.blogspot.com
Access-Control-Allow-Origin: https://entrepriseimmobiliere.blogspot.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16336926; expires=Fri, 09 Dec 2022 09:51:51 GMT; secure; SameSite=None
uid_id2=c8fe007c-dd6c-4377-9149-dc00faf35dd4:2:1; expires=Thu, 15 Dec 2022 09:51:51 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 09 Dec 2022 09:51:51 GMT; secure; SameSite=None
uncs=1; expires=Fri, 09 Dec 2022 09:51:51 GMT; secure; SameSite=None
pdhtkv29=true; expires=Fri, 09 Dec 2022 09:51:51 GMT; secure; SameSite=None
uncs29=1; expires=Fri, 09 Dec 2022 09:51:51 GMT; secure; SameSite=None
slec74d21250404842be8045dd0e282cb1d7=[3842224]; expires=Thu, 08 Dec 2022 09:51:56 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: eb0130e11e7839feda773513cb2af98f
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c3ff49d31d8f6726ec6a9d75d60d5b6c
79743280f385b70a6fd5d8b31710b9a1d5e047e5
91012a151c327ce10bb22ceb7267662b284ceddf55fc6bfb2e73afab580723b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "91012A151C327CE10BB22CEB7267662B284CEDDF55FC6BFB2E73AFAB580723B1"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4220
Expires: Thu, 08 Dec 2022 11:02:11 GMT
Date: Thu, 08 Dec 2022 09:51:51 GMT
Connection: keep-alive
s10.histats.com/js15_as.js
200 OK 4.4 kB URL HTTP/2 s10.histats.com/js15_as.js
IP
File type HTML document, ASCII text, with very long lines (11440), with no line terminators
Hash ed192092c129db6123a3397855f42619
067e9b8e26cf6246eb84c6b9cf3da0c192ce7b3e
998fff486a7fb38b6ed445edc36c9b317b70950cd39efcf4012ca641312fcee1
GET /js15_as.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Dec 2022 09:50:12 GMT
etag: "-375139978"
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 165413865
content-type: application/javascript; charset=UTF-8
content-encoding: br
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 4364
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 96ffc94704e14c0a43103e77a67ea03c
16ac34abeb5c091f06142488f557b2aea78f146f
8ebd242e747c1d7010394568b6bc785cab76888767ebf9dea4e86e1951999efc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8EBD242E747C1D7010394568B6BC785CAB76888767EBF9DEA4E86E1951999EFC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4541
Expires: Thu, 08 Dec 2022 11:07:32 GMT
Date: Thu, 08 Dec 2022 09:51:51 GMT
Connection: keep-alive
verdictdisingenuousfruitless.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSwWskxRutzu4PfuhJEcSDOgcPCmZS3dOTmdlFFuMaDRuTsLuSc3VV9aRMdVdT1T09ySm4IHvwMHvz2HmTbFAX2cWDBxFk4kUCguNBczB%2FhMKCF5GZDIx%2Bh%2F6%2B1%2B87vPfq%2B%2BSwuCAUBTvf%2BsDsK63ZUrNOa69vq1SY0tU27tZ8WqfXa9sqXQ6v1%2FqTj%2B1d82mzTt%2BovSf5rlkKqE%2BpT%2F3aqrIyNv2lKQuVPer49Q6th0Hdb4bo2%2F9iV3hwzIPoXZDnocT4fzs%2FPoHiI6TJ45vS7eYme%2FPdpNAsNxY9cfJhupuaMkUyH2PrIU5PZtswbkzIZwsw6cnMAUzvaOIAkRoT71cfUXoyk4mod3ypNNKQKSLxLMreCFKPoNgI3NyDEj8TgAtsbCJNHm4YW7K9S5ZN2DG5%2BvRPqHJMrv7%2BAtLkqxWt%2BrU7Rhe5MqlDP66g%2BiOo7ghZcYp834MqT8Hzj6HET2Tp6TrS5GjTaQMlzl%2Fj7VhS2uKLQizzxbDRai12%2FLCzKDilMYsbTSHCaURKjaDiEbQcgLkFFM5DoTwUsYci85CI8xprdmJKW3EUNxrtkHPeaHDebC%2BLpmiE7Zii4BMPA%2BTZAFwPwO0BMnuAXTWALb6H26nghAeXE%2FREhVISlI6gZASlIihzgrJXHQvtAlc9FNoVkT%2Frwaw3qqHJu4fs2ORdmZLD7II8Nw3ur%2Fdfwa48r7VCEfhBk4Y0bIdBJNs0bApBZdAOeOSLFpyqoNwCmPOwr8bkxb%2BPkKkxWbh1jIidwulTcHUFrHgZrBy2Agq2MwzbFPvpt5rlku%2BkRpuukkE90qbrMpPXuUkgTIUsv4p8zzvUF%2BSlqaxr1WNIfnbjj3ha4LZCZit8pH4g6Or7w9umJEe3TenIk80sV4naZ5O3vpOzXF754pbcK40Vazfd4PO3%2BYSYjI%2FuSpevs1SotOvIlytKCGlXjeWSfLfmtmW0VbidlcKmRba%2B9c7qWpJZ6Zwy6Qhscrf%2Ffwtcjckz1W%2FTO35VfgplR7BFhaQ4I7OCMqfg2QFcNtfvDIHV850o81AW1dAG0fynVgRazjGLKrh%2F4Wg%2BH7r76FoPLL%2BHNKnQsxV6ugLTA7jiyjDP7NmNXxrTQqS9YaStdxRpqx9chuvUeU02YxpLGsgo7kRxi1HRicNOxDq%2BbEVN5iN3Y%2F7g62%2F%2BAQAA%2F%2F8BAAD%2F%2F6aNIB%2BfBAAA
200 OK 7 B URL HTTP/1.1 verdictdisingenuousfruitless.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSwWskxRutzu4PfuhJEcSDOgcPCmZS3dOTmdlFFuMaDRuTsLuSc3VV9aRMdVdT1T09ySm4IHvwMHvz2HmTbFAX2cWDBxFk4kUCguNBczB%2FhMKCF5GZDIx%2Bh%2F6%2B1%2B87vPfq%2B%2BSwuCAUBTvf%2BsDsK63ZUrNOa69vq1SY0tU27tZ8WqfXa9sqXQ6v1%2FqTj%2B1d82mzTt%2BovSf5rlkKqE%2BpT%2F3aqrIyNv2lKQuVPer49Q6th0Hdb4bo2%2F9iV3hwzIPoXZDnocT4fzs%2FPoHiI6TJ45vS7eYme%2FPdpNAsNxY9cfJhupuaMkUyH2PrIU5PZtswbkzIZwsw6cnMAUzvaOIAkRoT71cfUXoyk4mod3ypNNKQKSLxLMreCFKPoNgI3NyDEj8TgAtsbCJNHm4YW7K9S5ZN2DG5%2BvRPqHJMrv7%2BAtLkqxWt%2BrU7Rhe5MqlDP66g%2BiOo7ghZcYp834MqT8Hzj6HET2Tp6TrS5GjTaQMlzl%2Fj7VhS2uKLQizzxbDRai12%2FLCzKDilMYsbTSHCaURKjaDiEbQcgLkFFM5DoTwUsYci85CI8xprdmJKW3EUNxrtkHPeaHDebC%2BLpmiE7Zii4BMPA%2BTZAFwPwO0BMnuAXTWALb6H26nghAeXE%2FREhVISlI6gZASlIihzgrJXHQvtAlc9FNoVkT%2Frwaw3qqHJu4fs2ORdmZLD7II8Nw3ur%2Fdfwa48r7VCEfhBk4Y0bIdBJNs0bApBZdAOeOSLFpyqoNwCmPOwr8bkxb%2BPkKkxWbh1jIidwulTcHUFrHgZrBy2Agq2MwzbFPvpt5rlku%2BkRpuukkE90qbrMpPXuUkgTIUsv4p8zzvUF%2BSlqaxr1WNIfnbjj3ha4LZCZit8pH4g6Or7w9umJEe3TenIk80sV4naZ5O3vpOzXF754pbcK40Vazfd4PO3%2BYSYjI%2FuSpevs1SotOvIlytKCGlXjeWSfLfmtmW0VbidlcKmRba%2B9c7qWpJZ6Zwy6Qhscrf%2Ffwtcjckz1W%2FTO35VfgplR7BFhaQ4I7OCMqfg2QFcNtfvDIHV850o81AW1dAG0fynVgRazjGLKrh%2F4Wg%2BH7r76FoPLL%2BHNKnQsxV6ugLTA7jiyjDP7NmNXxrTQqS9YaStdxRpqx9chuvUeU02YxpLGsgo7kRxi1HRicNOxDq%2BbEVN5iN3Y%2F7g62%2F%2BAQAA%2F%2F8BAAD%2F%2F6aNIB%2BfBAAA
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSwWskxRutzu4PfuhJEcSDOgcPCmZS3dOTmdlFFuMaDRuTsLuSc3VV9aRMdVdT1T09ySm4IHvwMHvz2HmTbFAX2cWDBxFk4kUCguNBczB%2FhMKCF5GZDIx%2Bh%2F6%2B1%2B87vPfq%2B%2BSwuCAUBTvf%2BsDsK63ZUrNOa69vq1SY0tU27tZ8WqfXa9sqXQ6v1%2FqTj%2B1d82mzTt%2BovSf5rlkKqE%2BpT%2F3aqrIyNv2lKQuVPer49Q6th0Hdb4bo2%2F9iV3hwzIPoXZDnocT4fzs%2FPoHiI6TJ45vS7eYme%2FPdpNAsNxY9cfJhupuaMkUyH2PrIU5PZtswbkzIZwsw6cnMAUzvaOIAkRoT71cfUXoyk4mod3ypNNKQKSLxLMreCFKPoNgI3NyDEj8TgAtsbCJNHm4YW7K9S5ZN2DG5%2BvRPqHJMrv7%2BAtLkqxWt%2BrU7Rhe5MqlDP66g%2BiOo7ghZcYp834MqT8Hzj6HET2Tp6TrS5GjTaQMlzl%2Fj7VhS2uKLQizzxbDRai12%2FLCzKDilMYsbTSHCaURKjaDiEbQcgLkFFM5DoTwUsYci85CI8xprdmJKW3EUNxrtkHPeaHDebC%2BLpmiE7Zii4BMPA%2BTZAFwPwO0BMnuAXTWALb6H26nghAeXE%2FREhVISlI6gZASlIihzgrJXHQvtAlc9FNoVkT%2Frwaw3qqHJu4fs2ORdmZLD7II8Nw3ur%2Fdfwa48r7VCEfhBk4Y0bIdBJNs0bApBZdAOeOSLFpyqoNwCmPOwr8bkxb%2BPkKkxWbh1jIidwulTcHUFrHgZrBy2Agq2MwzbFPvpt5rlku%2BkRpuukkE90qbrMpPXuUkgTIUsv4p8zzvUF%2BSlqaxr1WNIfnbjj3ha4LZCZit8pH4g6Or7w9umJEe3TenIk80sV4naZ5O3vpOzXF754pbcK40Vazfd4PO3%2BYSYjI%2FuSpevs1SotOvIlytKCGlXjeWSfLfmtmW0VbidlcKmRba%2B9c7qWpJZ6Zwy6Qhscrf%2Ffwtcjckz1W%2FTO35VfgplR7BFhaQ4I7OCMqfg2QFcNtfvDIHV850o81AW1dAG0fynVgRazjGLKrh%2F4Wg%2BH7r76FoPLL%2BHNKnQsxV6ugLTA7jiyjDP7NmNXxrTQqS9YaStdxRpqx9chuvUeU02YxpLGsgo7kRxi1HRicNOxDq%2BbEVN5iN3Y%2F7g62%2F%2BAQAA%2F%2F8BAAD%2F%2F6aNIB%2BfBAAA HTTP/1.1
Host: verdictdisingenuousfruitless.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Cookie: u_pl=16336926; uid_id2=c8fe007c-dd6c-4377-9149-dc00faf35dd4:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec74d21250404842be8045dd0e282cb1d7=[3842224]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 08 Dec 2022 09:51:51 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c9c8b778d941cfc58e9db90800faa570
Strict-Transport-Security: max-age=0; includeSubdomains
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 86fc724a00926b02780c2d6459b90fb7
dbf925559b90d11e9bdfbbc171f3ac1fe3210322
a096e53a81068e99d5caa600d62ae48d28b3f841598dfd85bfb61d5e050f890e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "A096E53A81068E99D5CAA600D62AE48D28B3F841598DFD85BFB61D5E050F890E"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14387
Expires: Thu, 08 Dec 2022 13:51:39 GMT
Date: Thu, 08 Dec 2022 09:51:52 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 86fc724a00926b02780c2d6459b90fb7
dbf925559b90d11e9bdfbbc171f3ac1fe3210322
a096e53a81068e99d5caa600d62ae48d28b3f841598dfd85bfb61d5e050f890e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "A096E53A81068E99D5CAA600D62AE48D28B3F841598DFD85BFB61D5E050F890E"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14387
Expires: Thu, 08 Dec 2022 13:51:39 GMT
Date: Thu, 08 Dec 2022 09:51:52 GMT
Connection: keep-alive
verdictdisingenuousfruitless.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F18%2F52%2F6a%2F18526a6becad408914fcf53d946360f0%2F1651134763.html&l=1558&fd=96
200 OK 0 B URL HTTP/1.1 verdictdisingenuousfruitless.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F18%2F52%2F6a%2F18526a6becad408914fcf53d946360f0%2F1651134763.html&l=1558&fd=96
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F18%2F52%2F6a%2F18526a6becad408914fcf53d946360f0%2F1651134763.html&l=1558&fd=96 HTTP/1.1
Host: verdictdisingenuousfruitless.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Cookie: u_pl=16336926; uid_id2=c8fe007c-dd6c-4377-9149-dc00faf35dd4:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec74d21250404842be8045dd0e282cb1d7=[3842224]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 08 Dec 2022 09:51:52 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.creative-bars1.com/sb/ssp/utility/live-message/3-2/img/close.png
200 OK 6.0 kB URL HTTP/2 cdn.creative-bars1.com/sb/ssp/utility/live-message/3-2/img/close.png
IP
File type PNG image data, 522 x 391, 8-bit/color RGBA, non-interlaced\012- data
Hash c489ce2c491a22ee37a55e26a92dfd73
2fa588ab09e94dd902e5bd24b48f98ad1949c9d6
1eed147c7d5de6291c25fbc5274830c12d5549262fb144271576d4e15966e5bd
GET /sb/ssp/utility/live-message/3-2/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Dec 2022 09:51:52 GMT
content-type: image/png
content-length: 5982
last-modified: Thu, 28 Apr 2022 08:29:14 GMT
etag: "626a505a-175e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1972855
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cDEJ0YlzgwqBC26d9er6ArwGwbPzcwOYM4iLSuu1XQgjQpBpCVZACXYrJb%2FIQg1kQffhkJEAAmRpH8w8n83k8g2vGP4FfpD0chN%2BNbcGUz%2FR%2BCPpAVFrZ1StaOy%2Blvt7M2S5YQ%2BZK6ZF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77649adf0a7e8877-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 86fc724a00926b02780c2d6459b90fb7
dbf925559b90d11e9bdfbbc171f3ac1fe3210322
a096e53a81068e99d5caa600d62ae48d28b3f841598dfd85bfb61d5e050f890e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "A096E53A81068E99D5CAA600D62AE48D28B3F841598DFD85BFB61D5E050F890E"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14387
Expires: Thu, 08 Dec 2022 13:51:39 GMT
Date: Thu, 08 Dec 2022 09:51:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0c8f51dc9f0403e9a4e798b49f977948
34ce92d502b92fd964f80d4c331cca9e42546954
ec4b08d6a0c6fd5733c3ceaf542b37eba10869511c0a782ece7c75bd74ee1084
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC4B08D6A0C6FD5733C3CEAF542B37EBA10869511C0A782ECE7C75BD74EE1084"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16496
Expires: Thu, 08 Dec 2022 14:26:48 GMT
Date: Thu, 08 Dec 2022 09:51:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0c8f51dc9f0403e9a4e798b49f977948
34ce92d502b92fd964f80d4c331cca9e42546954
ec4b08d6a0c6fd5733c3ceaf542b37eba10869511c0a782ece7c75bd74ee1084
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC4B08D6A0C6FD5733C3CEAF542B37EBA10869511C0A782ECE7C75BD74EE1084"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16496
Expires: Thu, 08 Dec 2022 14:26:48 GMT
Date: Thu, 08 Dec 2022 09:51:52 GMT
Connection: keep-alive
cdn.cloudimagesb.com/si/f1/d0/83/f1d083b8e7c37a3c2076057db054ab5d/1670417365.png
200 OK 79 kB URL HTTP/2 cdn.cloudimagesb.com/si/f1/d0/83/f1d083b8e7c37a3c2076057db054ab5d/1670417365.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 906656d46a04025c62332a469592b141
d49734500d4944e6a094f8dd4c867d1a65e05aa6
6a99946eef7f4578626ba03218d1a3a37abb6824e21bd3a263e36c5814540e40
GET /si/f1/d0/83/f1d083b8e7c37a3c2076057db054ab5d/1670417365.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Dec 2022 09:51:52 GMT
content-type: image/png
content-length: 78590
server: nginx/1.17.6
last-modified: Wed, 07 Dec 2022 12:49:34 GMT
etag: "63908bde-132fe"
expires: Sat, 10 Dec 2022 09:51:52 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/7f/85/7f/7f857f52ec0313ee26f4aa5b075a3b20/1670417315.png
200 OK 68 kB URL HTTP/2 cdn.cloudimagesb.com/si/7f/85/7f/7f857f52ec0313ee26f4aa5b075a3b20/1670417315.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash cee9d197f40adc6e2a7302cc42f740f2
824b0a24ac21233a3d7343b204136a3137f60fa2
bd058c2e010ebc52cda3116b5363f61c063485ad1ae3045ffb2ead63172d8f16
GET /si/7f/85/7f/7f857f52ec0313ee26f4aa5b075a3b20/1670417315.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Dec 2022 09:51:52 GMT
content-type: image/png
content-length: 67928
server: nginx/1.17.6
last-modified: Wed, 07 Dec 2022 12:48:44 GMT
etag: "63908bac-10958"
expires: Sat, 10 Dec 2022 09:51:52 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/utility/live-message/3-2/css/animate.css
200 OK 4.8 kB URL HTTP/2 cdn.creative-bars1.com/sb/ssp/utility/live-message/3-2/css/animate.css
IP
Hash c91016401e0a0b7b3d7572de48c76597
12fb634abb5e708b4f55d1489055b4f626d3cdd1
2472e286e0bf6f54cef9d99e9c63301c873fa02bc4e3979e1a18587a6d973120
GET /sb/ssp/utility/live-message/3-2/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://entrepriseimmobiliere.blogspot.com
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Dec 2022 09:51:52 GMT
content-type: text/css
last-modified: Thu, 28 Apr 2022 08:29:13 GMT
etag: W/"626a5059-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BVxmfxTLa8g8RC3NhSJrCXTmSPMobYYlo2JJh0lhmu9VAXscH3E15zD8GRc5q1ZC2DULrRv%2FluS7ca8HTvLOe3CUImKgwcJsluaf95KxGyUIFDbqU23Nxp3pzF7YALIArLEDYwUIdPDH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77649adeea328877-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.barscreative1.com/sb/au/18/52/6a/18526a6becad408914fcf53d946360f0/1651134763.html
200 OK 2.1 kB URL HTTP/2 cdn.barscreative1.com/sb/au/18/52/6a/18526a6becad408914fcf53d946360f0/1651134763.html
IP
ASN #39572 DataWeb Global Group B.V.
Hash 3716c5599a50d3d01be2a89df02222f4
1de5c6debe9a4a4808cc896f5593304e4004d1f8
1d2c25ba3f73f990c213aaf57dc059592f55ac69e916e7509a31d3aaae069e46
Analyzer Verdict Alert fortinet Phishing
GET /sb/au/18/52/6a/18526a6becad408914fcf53d946360f0/1651134763.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://entrepriseimmobiliere.blogspot.com
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Dec 2022 09:51:51 GMT
content-type: text/html; charset=utf-8
server: nginx/1.17.6
last-modified: Sat, 07 May 2022 03:21:27 GMT
etag: W/"6275e5b7-616"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Thu, 08 Dec 2022 10:51:51 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
verdictdisingenuousfruitless.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Flive-message%2F3-2%2Fjs%2Fscript.js&l=1173&fd=264
200 OK 0 B URL HTTP/1.1 verdictdisingenuousfruitless.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Flive-message%2F3-2%2Fjs%2Fscript.js&l=1173&fd=264
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Flive-message%2F3-2%2Fjs%2Fscript.js&l=1173&fd=264 HTTP/1.1
Host: verdictdisingenuousfruitless.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Cookie: u_pl=16336926; uid_id2=c8fe007c-dd6c-4377-9149-dc00faf35dd4:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec74d21250404842be8045dd0e282cb1d7=[3842224]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 08 Dec 2022 09:51:52 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://entrepriseimmobiliere.blogspot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:33:54 GMT
expires: Thu, 07 Dec 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 51479
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://entrepriseimmobiliere.blogspot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:34:15 GMT
expires: Thu, 07 Dec 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 51458
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha3T3T8kEMMip8LBdyLbI6iYqq11-ANBKLbYyl-kJEI2y1K_J4vOghVuqKNabcvsuZMRhrkm-SZr9RyoKMBWgASdc0-snGwOrDcyKvD3qb-nrQOUWKWHltKLEJ2D5onkZBnYyH2FyJqgoMT2hBW8Ag=w72-h72-p-k-no-nu
404 Not Found 1.8 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha3T3T8kEMMip8LBdyLbI6iYqq11-ANBKLbYyl-kJEI2y1K_J4vOghVuqKNabcvsuZMRhrkm-SZr9RyoKMBWgASdc0-snGwOrDcyKvD3qb-nrQOUWKWHltKLEJ2D5onkZBnYyH2FyJqgoMT2hBW8Ag=w72-h72-p-k-no-nu
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 77af6185b631e2a671f4b57c0fe74a85
4e3f2b872fced93218fab90fb2ebb308b8dcd846
352dc1bab9b8097d90c4e9a50ec95ec98cc5e98eb485bac9ebcef6d14f2d491f
GET /blogger_img_proxy/ANbyha3T3T8kEMMip8LBdyLbI6iYqq11-ANBKLbYyl-kJEI2y1K_J4vOghVuqKNabcvsuZMRhrkm-SZr9RyoKMBWgASdc0-snGwOrDcyKvD3qb-nrQOUWKWHltKLEJ2D5onkZBnYyH2FyJqgoMT2hBW8Ag=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 08 Dec 2022 09:51:53 GMT
server: fife
content-length: 1751
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/utility/live-message/3-2/js/script.js
200 OK 433 B URL HTTP/2 cdn.creative-bars1.com/sb/ssp/utility/live-message/3-2/js/script.js
IP
Hash 2bafe9a20891dc3922f933b1957ce09e
8a68314303b51a6168350c955c2e5060fffc0c81
b14f776359fb1aca81882f37bc3418773e7e2b8c70b9e99cd37e5c698afe43da
GET /sb/ssp/utility/live-message/3-2/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://entrepriseimmobiliere.blogspot.com
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Dec 2022 09:51:52 GMT
content-type: application/javascript
last-modified: Thu, 28 Apr 2022 08:29:16 GMT
etag: W/"626a505c-495"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f0VoiOfSHvcj0owYrw34tA9zgc%2BPuZMhwQjOHcUsd4TkXFCyWWerjKmOTNBEdKP9k0KDw3LivqOLbpfrLY1tqh1BuF8lqjsqg64e5bMJpLqgDYZ1icbu5cDgpLdnFGLmFjU3RbZN%2Fzgl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77649adf8b2c8877-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
verdictdisingenuousfruitless.com/pixel/sbs?c=1
200 OK 0 B URL HTTP/1.1 verdictdisingenuousfruitless.com/pixel/sbs?c=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: verdictdisingenuousfruitless.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Cookie: u_pl=16336926; uid_id2=c8fe007c-dd6c-4377-9149-dc00faf35dd4:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec74d21250404842be8045dd0e282cb1d7=[3842224]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 08 Dec 2022 09:51:53 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
s4.histats.com/stats/4568849.php?4568849&@f16&@g1&@h1&@i1&@j1670493111321&@k0&@l1&@mEntreprise%20Immobili%C3%A8re&@n0&@o1000&@q0&@r0&@s4012&@ten-US&@u1280&@b1:95804496&@b3:1670493111&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fentrepriseimmobiliere.blogspot.com%2F2019%2F05%2Fagence-immobiliere-entreprise-chalon.html&@w
200 OK 100 B URL HTTP/1.1 s4.histats.com/stats/4568849.php?4568849&@f16&@g1&@h1&@i1&@j1670493111321&@k0&@l1&@mEntreprise%20Immobili%C3%A8re&@n0&@o1000&@q0&@r0&@s4012&@ten-US&@u1280&@b1:95804496&@b3:1670493111&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fentrepriseimmobiliere.blogspot.com%2F2019%2F05%2Fagence-immobiliere-entreprise-chalon.html&@w
IP
File type ASCII text, with no line terminators
Hash dca1aedf14241d632e587c956509564a
fdbe55f1c6f35d8d07b3f5989dec76778fecaaad
e961d929377153cc2de770b6ea8e1ca6737858e357f963f73ae032e6b7b42cbf
GET /stats/4568849.php?4568849&@f16&@g1&@h1&@i1&@j1670493111321&@k0&@l1&@mEntreprise%20Immobili%C3%A8re&@n0&@o1000&@q0&@r0&@s4012&@ten-US&@u1280&@b1:95804496&@b3:1670493111&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fentrepriseimmobiliere.blogspot.com%2F2019%2F05%2Fagence-immobiliere-entreprise-chalon.html&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 09:51:53 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 100
Connection: close
s10.histats.com/counters/cc_4012.js
200 OK 7.8 kB URL HTTP/2 s10.histats.com/counters/cc_4012.js
IP
File type HTML document, ASCII text, with very long lines (17999), with no line terminators
Hash cc3c52f4e29c9a8438ccc6c7e6ed49c2
a9a6a3317806d3311cb8abfc4835f0759dc50ee8
d054a717994bfbb1437dcd135d812bc54403ee531b6de1f398230909ff44fca7
GET /counters/cc_4012.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Dec 2022 09:26:39 GMT
etag: "-1457535600"
last-modified: Thu, 16 Apr 2020 10:45:32 GMT
x-request-id: 991003513
content-type: text/javascript
content-encoding: br
x-grace: full
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 7762
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43965e8362467edc064e07984ceb6468
6317037ffe022b657a87db808ae6641e7ca3325f
ff348f0f8947e883866aa8f1cab9b98eeb0ebcd4be85550d780c6282018f08c5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF348F0F8947E883866AA8F1CAB9B98EEB0EBCD4BE85550D780C6282018F08C5"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7265
Expires: Thu, 08 Dec 2022 11:52:58 GMT
Date: Thu, 08 Dec 2022 09:51:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43965e8362467edc064e07984ceb6468
6317037ffe022b657a87db808ae6641e7ca3325f
ff348f0f8947e883866aa8f1cab9b98eeb0ebcd4be85550d780c6282018f08c5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF348F0F8947E883866AA8F1CAB9B98EEB0EBCD4BE85550D780C6282018F08C5"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7265
Expires: Thu, 08 Dec 2022 11:52:58 GMT
Date: Thu, 08 Dec 2022 09:51:53 GMT
Connection: keep-alive
unseenreport.com/pxf.gif?uuid=8c3e54c1-a300-4317-acc6-064e055c4b14&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=9bd273276b902e0739f143dbb7b3e685&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=9
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=8c3e54c1-a300-4317-acc6-064e055c4b14&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=9bd273276b902e0739f143dbb7b3e685&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=9
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=8c3e54c1-a300-4317-acc6-064e055c4b14&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=9bd273276b902e0739f143dbb7b3e685&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=9 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 08 Dec 2022 09:51:54 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 77bc6e5ab1b918ac4692d82cb8688490
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=8c3e54c1-a300-4317-acc6-064e055c4b14&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=74d21250404842be8045dd0e282cb1d7&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=9
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=8c3e54c1-a300-4317-acc6-064e055c4b14&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=74d21250404842be8045dd0e282cb1d7&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=9
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=8c3e54c1-a300-4317-acc6-064e055c4b14&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=74d21250404842be8045dd0e282cb1d7&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=9 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 08 Dec 2022 09:51:54 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2adb808322851704e5a477d0520d734e
Strict-Transport-Security: max-age=0; includeSubdomains
i0.wp.com/s3-eu-west-1.amazonaws.com/hf-capi-data-stage/properties/tremplin/2838506/media/0550cd1e-3406-4dd8-83b0-7e7b61b69080.thumbnail.jpg
403 Forbidden 0 B URL HTTP/2 i0.wp.com/s3-eu-west-1.amazonaws.com/hf-capi-data-stage/properties/tremplin/2838506/media/0550cd1e-3406-4dd8-83b0-7e7b61b69080.thumbnail.jpg
IP
GET /s3-eu-west-1.amazonaws.com/hf-capi-data-stage/properties/tremplin/2838506/media/0550cd1e-3406-4dd8-83b0-7e7b61b69080.thumbnail.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
server: nginx
date: Thu, 08 Dec 2022 09:51:49 GMT
content-type: text/html; charset=utf-8
x-nc: MISS arn 2
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/utility/live-message/3-2/js/jquery.min.js
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/ssp/utility/live-message/3-2/js/jquery.min.js
IP
GET /sb/ssp/utility/live-message/3-2/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Dec 2022 09:51:52 GMT
content-type: application/javascript
last-modified: Thu, 28 Apr 2022 08:29:17 GMT
etag: W/"626a505d-15d94"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1972855
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8yNrk%2FYP7PqJjMJZGG1OtMK0RfkmNBVwgdpbH6Zdj%2BQTNTieC4C0AA5tk1qqj5yPniwPIOz5JvBnmk6wMZlcwFci8XTYegL4358KvAic31mkTTJm6E9MwUgsABeg4lL1tImg5%2FBp4NxX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77649adf0a808877-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i0.wp.com/www.collier-immobilier.com/wp-content/uploads/2016/09/bandeau2.jpg
404 Not Found 0 B URL HTTP/2 i0.wp.com/www.collier-immobilier.com/wp-content/uploads/2016/09/bandeau2.jpg
IP
GET /www.collier-immobilier.com/wp-content/uploads/2016/09/bandeau2.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Thu, 08 Dec 2022 09:51:49 GMT
content-type: text/html; charset=utf-8
x-nc: MISS arn 4
X-Firefox-Spdy: h2
i0.wp.com/s.avendrealouer.fr/account_logo/st-351609.jpg
400 Bad Request 0 B URL HTTP/2 i0.wp.com/s.avendrealouer.fr/account_logo/st-351609.jpg
IP
GET /s.avendrealouer.fr/account_logo/st-351609.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 400 Bad Request
server: nginx
date: Thu, 08 Dec 2022 09:51:50 GMT
content-type: text/html; charset=utf-8
x-nc: MISS arn 8
X-Firefox-Spdy: h2
i0.wp.com/lookaside.fbsbx.com/lookaside/crawler/media/?media_id=1595029147385018
404 Not Found 0 B URL HTTP/2 i0.wp.com/lookaside.fbsbx.com/lookaside/crawler/media/?media_id=1595029147385018
IP
GET /lookaside.fbsbx.com/lookaside/crawler/media/?media_id=1595029147385018 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Thu, 08 Dec 2022 09:51:50 GMT
content-type: text/html; charset=utf-8
x-nc: EXPIRED arn 7
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 08 Dec 2022 09:51:52 GMT
date: Thu, 08 Dec 2022 09:51:52 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i0.wp.com/www.century21-immobiliere-jaures-chalon-saone.com/imagesBien/202/3216/c21_202_3216_20616_1_E5EBA30A-D4F4-4A8B-A3A6-FE79E0A3699C.jpg
404 Not Found 0 B URL HTTP/2 i0.wp.com/www.century21-immobiliere-jaures-chalon-saone.com/imagesBien/202/3216/c21_202_3216_20616_1_E5EBA30A-D4F4-4A8B-A3A6-FE79E0A3699C.jpg
IP
GET /www.century21-immobiliere-jaures-chalon-saone.com/imagesBien/202/3216/c21_202_3216_20616_1_E5EBA30A-D4F4-4A8B-A3A6-FE79E0A3699C.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Thu, 08 Dec 2022 09:51:50 GMT
content-type: text/html; charset=utf-8
x-nc: MISS arn 5
X-Firefox-Spdy: h2
i0.wp.com/s3-eu-west-1.amazonaws.com/hf-capi-data-stage/properties/tremplin/2838506/media/0550cd1e-3406-4dd8-83b0-7e7b61b69080.thumbnail.jpg
403 Forbidden 0 B URL HTTP/2 i0.wp.com/s3-eu-west-1.amazonaws.com/hf-capi-data-stage/properties/tremplin/2838506/media/0550cd1e-3406-4dd8-83b0-7e7b61b69080.thumbnail.jpg
IP
GET /s3-eu-west-1.amazonaws.com/hf-capi-data-stage/properties/tremplin/2838506/media/0550cd1e-3406-4dd8-83b0-7e7b61b69080.thumbnail.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
server: nginx
date: Thu, 08 Dec 2022 09:51:50 GMT
content-type: text/html; charset=utf-8
x-nc: MISS arn 2
X-Firefox-Spdy: h2
i0.wp.com/www.century21-immobiliere-jaures-chalon-saone.com/imagesBien/202/3216/c21_202_3216_20616_1_E5EBA30A-D4F4-4A8B-A3A6-FE79E0A3699C.jpg
404 Not Found 0 B URL HTTP/2 i0.wp.com/www.century21-immobiliere-jaures-chalon-saone.com/imagesBien/202/3216/c21_202_3216_20616_1_E5EBA30A-D4F4-4A8B-A3A6-FE79E0A3699C.jpg
IP
GET /www.century21-immobiliere-jaures-chalon-saone.com/imagesBien/202/3216/c21_202_3216_20616_1_E5EBA30A-D4F4-4A8B-A3A6-FE79E0A3699C.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Thu, 08 Dec 2022 09:51:50 GMT
content-type: text/html; charset=utf-8
x-nc: HIT arn 5
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 0 B URL HTTP/2 friendshipmale.com/sfp.js
IP
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entrepriseimmobiliere.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Dec 2022 09:51:51 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 3d4c2d28294258ba9812b4309175406a
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 08 Dec 2022 09:51:50 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zr3EFfpA73QXRHpHem6v7fGm1EF4H%2BlxF%2BDLefPXtZd6NFw5Nm4pD7rW8X2LeUyf2dJ1bMEKzjoeWrlt9oM6AFAn77%2B7bCBrWbSFd1AV5zk80%2BktaZRj7LZr5V5540zNJqJ9Efk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77649ad6df51407e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
172.217.21.161
149.56.240.132
93.184.220.29
46.105.201.240
23.36.77.32
18.185.190.54
0.0.0.0