urlquery - report: www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01

Passive DNS Source	Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
[Mnemonic Passive DNS]	www.portail-employes.com (17)	0	No data	No data	40.127.192.238	Unknown ranking
[Mnemonic Passive DNS]	content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2022-07-06 04:55:23 UTC	54.230.111.64
[Mnemonic Passive DNS]	contile.services.mozilla.com (1)	1114	No data	No data	34.117.237.239
[Mnemonic Passive DNS]	ocsp.digicert.com (1)	86	2012-11-29 12:49:49 UTC	2022-07-06 19:05:02 UTC	93.184.220.29
[Mnemonic Passive DNS]	push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2022-07-06 04:47:23 UTC	52.89.136.145
[Mnemonic Passive DNS]	img-getpocket.cdn.mozilla.net (7)	1631	2017-09-01 03:40:57 UTC	2022-07-06 17:02:11 UTC	34.120.237.76
[Mnemonic Passive DNS]	firefox.settings.services.mozilla.com (2)	867	2016-03-17 08:25:01 UTC	2020-05-25 20:01:47 UTC	54.230.111.65
[Mnemonic Passive DNS]	r3.o.lencr.org (4)	344	2020-12-02 08:52:13 UTC	2022-07-06 04:41:34 UTC	23.36.76.226
[Mnemonic Passive DNS]	secure2.terranovasite.com (1)	989114	No data	No data	52.169.6.85

Date	UQ / IDS / BL	URL	IP
2022-07-07 19:04:14 +0000	0 - 0 - 2	www.portail-employes.com/l/index.aspx?code=d0 (...)	40.127.192.238
2022-07-07 07:19:24 +0000	0 - 0 - 1	www.portail-employes.com/l/index.aspx?code=3b (...)	40.127.192.238
2022-07-07 06:22:25 +0000	0 - 0 - 1	www.portail-employes.com/l/index.aspx?code=54 (...)	40.127.192.238
2022-07-07 06:19:12 +0000	0 - 0 - 2	www.portail-employes.com/l/index.aspx?code=85 (...)	40.127.192.238
2022-07-07 04:33:20 +0000	0 - 0 - 1	www.portail-employes.com/l/index.aspx?code=29 (...)	40.127.192.238
2022-07-07 02:56:56 +0000	0 - 0 - 1	www.portail-employes.com/l/index.aspx?code=cf (...)	40.127.192.238
2022-07-07 01:43:17 +0000	0 - 0 - 2	www.portail-employes.com/l/index.aspx?code=22 (...)	40.127.192.238
2022-07-07 00:57:21 +0000	0 - 0 - 1	www.portail-employes.com/l/index.aspx?code=1e (...)	40.127.192.238
2022-07-06 23:40:55 +0000	0 - 0 - 1	www.portail-employes.com/l/index.aspx?code=ea (...)	40.127.192.238
2022-07-06 23:39:45 +0000	0 - 0 - 1	www.portail-employes.com/l/index.aspx?code=bc (...)	40.127.192.238

Date	UQ / IDS / BL	URL	IP
2022-08-09 14:21:05 +0000	2 - 0 - 2	postoipirangaweb.duckdns.org/daniel.xls	20.74.232.197
2022-08-09 13:55:39 +0000	0 - 0 - 1	com-archive.site/	40.112.253.185
2022-08-09 13:32:25 +0000	0 - 0 - 11	sindemail.com/c1369146dc63944/login.php?parti (...)	20.49.11.193
2022-08-09 13:32:08 +0000	0 - 0 - 4	livetrack.in/EmployeeMasterImages/qace.jpg	52.172.211.121
2022-08-09 13:08:38 +0000	2 - 0 - 0	myrealmttbnk3.duckdns.org/M&T%20(2).zip	52.186.137.222
2022-08-09 13:08:32 +0000	3 - 0 - 0	ch4se.ddnsking.com/292ef928f/Signin.php?ScrPg (...)	20.55.66.140
2022-08-09 12:39:22 +0000	0 - 0 - 1	loglmicrovoictransportxpcyvjx.audattvoicshare (...)	20.9.27.113
2022-08-09 12:38:22 +0000	0 - 0 - 1	52.165.230.106/MSOfficeUpdate.cab	52.165.230.106
2022-08-09 12:12:29 +0000	0 - 0 - 1	https://nagains.azurewebsites.net/wp-content/ (...)	52.176.6.0
2022-08-09 12:12:24 +0000	0 - 0 - 1	https://nagains.azurewebsites.net/wp-content/ (...)	52.176.6.0

Request	Response
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 91dd975a7b17b2922dd23c0e49314e40$ 54.230.111.65 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 939 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Retry-After, Backoff, Content-Type, Content-Length, Alert Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Date: Wed, 06 Jul 2022 22:56:16 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Cache: Hit from cloudfront Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: 1hr01srJ1ik9qli24RoKxDsIkPTvB867upoQht1DmDnDaYgXMeHQ6g== Age: 2164 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 91dd975a7b17b2922dd23c0e49314e40 Sha1: 57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2 Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 HTTP/1.1 Host: www.portail-employes.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	$Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5424), with CRLF line terminators Size: 9615 Md5: 5bcb70a8ae8fbf4b0b5c51d3a395e2c7$ 40.127.192.238 HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: private Content-Encoding: gzip Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 Set-Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2; expires=Fri, 05-Aug-2022 23:32:20 GMT; path=/; HttpOnly X-ServerNo: 26 Date: Wed, 06 Jul 2022 23:32:19 GMT Content-Length: 9615 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5424), with CRLF line terminators Size: 9615 Md5: 5bcb70a8ae8fbf4b0b5c51d3a395e2c7 Sha1: f2a02cbe0582b75b43af6a1d913706c2bae2ae49 Sha256: 0ac7bc052f571a979e295e5f21796c3f197dd6e84f1904766e3e24f84814ec20
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "78A5DCFAF2D93D9C87CFB6DBC56100E9F22965D4500554BA65F71CB7D84DD666" Last-Modified: Wed, 06 Jul 2022 16:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12800 Expires: Thu, 07 Jul 2022 03:05:40 GMT Date: Wed, 06 Jul 2022 23:32:20 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 1bd93fff937cfdc8744b841243b93fd5 Sha1: 240c31be9cdaeb5d1e4f9e3558c812ba007e6d22 Sha256: 78a5dcfaf2d93d9c87cfb6dbc56100e9f22965d4500554ba65f71cb7d84dd666
GET /chains/remote-settings.content-signature.mozilla.org-2022-08-10-12-10-21.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	$Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 581454acdd98f34fd3fbabd0977ade29$ 54.230.111.64 HTTP/2 200 OK content-type: binary/octet-stream content-length: 5348 last-modified: Tue, 21 Jun 2022 12:10:22 GMT content-disposition: attachment accept-ranges: bytes server: AmazonS3 date: Wed, 06 Jul 2022 03:26:46 GMT etag: "581454acdd98f34fd3fbabd0977ade29" x-cache: Hit from cloudfront via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: 38Z8XskANakkx25efb-nt-O3iL35f2di67TKaZ7LRYdFY9AKDgfNug== age: 72335 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 581454acdd98f34fd3fbabd0977ade29 Sha1: d8d86c0b513137aeb85de01cea7b272c35eb6ab4 Sha256: e98f8f33ba5ed59c3cfdf2ae54957ed32652cf0899f3c8db4b5872e3ece1e4eb
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6$ 34.117.237.239 HTTP/2 200 OK server: nginx date: Wed, 06 Jul 2022 23:32:20 GMT content-type: application/json content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /common/css/rp_bubbles.css HTTP/1.1 Host: www.portail-employes.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2	40.127.192.238 HTTP/1.1 200 OK Content-Type: text/css Content-Encoding: gzip Last-Modified: Wed, 31 Jul 2019 13:26:12 GMT Accept-Ranges: bytes ETag: "0f25c85a347d51:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-ServerNo: 26 Date: Wed, 06 Jul 2022 23:32:20 GMT Content-Length: 2399 --- Additional Info --- Magic: Unicode text, UTF-8 text, with CRLF line terminators Size: 2399 Md5: 998520ca6091d722f92bf4e43cc432c5 Sha1: fced0d783ad48fa771ceb2f71be8e28a7e216bec Sha256: e72bf287204abe4f30e80aa7333e89aae62439d35be64d8bd887d4dfacdf3490
GET /common/css/rp_tooltips.css HTTP/1.1 Host: www.portail-employes.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2	40.127.192.238 HTTP/1.1 200 OK Content-Type: text/css Content-Encoding: gzip Last-Modified: Tue, 06 Aug 2019 19:41:54 GMT Accept-Ranges: bytes ETag: "0adebff8e4cd51:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-ServerNo: 26 Date: Wed, 06 Jul 2022 23:32:20 GMT Content-Length: 2514 --- Additional Info --- Magic: ASCII text, with CRLF line terminators Size: 2514 Md5: 8b8114809cde5e4742cc6785a474c240 Sha1: 60d1e1fb31be6327769765397c919080054c44f9 Sha256: bf320a92219eddd173a38da70dd388f88f811831ab875b9e0fd40c13a36c96d8
GET /common/jqueryui/jquery-ui.structure.min.css HTTP/1.1 Host: www.portail-employes.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2	40.127.192.238 HTTP/1.1 200 OK Content-Type: text/css Content-Encoding: gzip Last-Modified: Wed, 31 Jul 2019 13:26:12 GMT Accept-Ranges: bytes ETag: "0f25c85a347d51:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-ServerNo: 25 Date: Wed, 06 Jul 2022 23:32:20 GMT Content-Length: 6263 --- Additional Info --- Magic: ASCII text, with very long lines (15418), with CRLF line terminators Size: 6263 Md5: ebe8cfd0c73cb3fe66fd6079c8debeeb Sha1: fd2c0657d3392d2b9ce05c067b893839f65d8944 Sha256: 1f880536f32044406ca3fb6081fac158910776e930e87bd8d6c8943c5e57a674
GET /common/jqueryui/jquery-ui.theme.min.css HTTP/1.1 Host: www.portail-employes.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2	40.127.192.238 HTTP/1.1 200 OK Content-Type: text/css Content-Encoding: gzip Last-Modified: Wed, 31 Jul 2019 13:26:12 GMT Accept-Ranges: bytes ETag: "0f25c85a347d51:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-ServerNo: 25 Date: Wed, 06 Jul 2022 23:32:20 GMT Content-Length: 2971 --- Additional Info --- Magic: ASCII text, with very long lines (13746), with CRLF line terminators Size: 2971 Md5: 19ae6203b7faa6f8b8e23750c18e434a Sha1: 679d81d734c9fa6f7a42a309fd73dd3d0a04b3c6 Sha256: fc1f91f8cb94f90cd639b3dd60eb2713b9d83fc8f3b9e700b598ab851f6d3713
GET /common/jqueryui/jquery-ui.min.css HTTP/1.1 Host: www.portail-employes.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2	40.127.192.238 HTTP/1.1 200 OK Content-Type: text/css Content-Encoding: gzip Last-Modified: Wed, 31 Jul 2019 13:26:12 GMT Accept-Ranges: bytes ETag: "0f25c85a347d51:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-ServerNo: 25 Date: Wed, 06 Jul 2022 23:32:20 GMT Content-Length: 9859 --- Additional Info --- Magic: ASCII text, with very long lines (29164), with CRLF line terminators Size: 9859 Md5: 382ddfacddd8dc6dd2c0ab6c66e4ad5b Sha1: 81b37a84bbd840db9b09e7454f73a2e2fe68d1f1 Sha256: 43ae94c98183db207b10b0fda1d39dad2afed91053afda07a361908b2a4dec39
GET /portal/FailedPhishing/dea0d801-e3f2-4cb9-be52-aec515c89b70/[T-GUID] HTTP/1.1 Host: secure2.terranovasite.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://www.portail-employes.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	52.169.6.85 HTTP/2 200 OK cache-control: private x-frame-options: SAMEORIGIN x-serverno: 26 x-ua-compatible: IE=edge x-xss-protection: 1; mode=block x-content-type-options: nosniff strict-transport-security: max-age=31536000 date: Wed, 06 Jul 2022 23:32:20 GMT content-length: 0 X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /common/bootstrap/js/bootstrap.min.js?tn=224772105 HTTP/1.1 Host: www.portail-employes.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2	40.127.192.238 HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Mon, 26 Oct 2020 17:43:22 GMT Accept-Ranges: bytes ETag: "0d97c7fbfabd61:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-ServerNo: 26 Date: Wed, 06 Jul 2022 23:32:20 GMT Content-Length: 14370 --- Additional Info --- Magic: ASCII text, with very long lines (39553), with CRLF line terminators Size: 14370 Md5: 7e5816fcef2ec7d0a31a0ab4e6a3b2f0 Sha1: 85ba190e2df5f193082903fa590f27c519585aa8 Sha256: b014aaa85f8a164cd093ca14eb26e7d79cc054ee69195318deeb33ec73d282e2
GET /common/bootstrap/css/bootstrap.css HTTP/1.1 Host: www.portail-employes.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2	40.127.192.238 HTTP/1.1 200 OK Content-Type: text/css Content-Encoding: gzip Last-Modified: Tue, 06 Aug 2019 19:41:54 GMT Accept-Ranges: bytes ETag: "0adebff8e4cd51:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-ServerNo: 26 Date: Wed, 06 Jul 2022 23:32:20 GMT Content-Length: 35164 --- Additional Info --- Magic: ASCII text, with very long lines (540), with CRLF line terminators Size: 35164 Md5: ab07c25d60bb7a6ad94854ef94ec3ea3 Sha1: 521c681fc8edb71c9b84089f8c90e17901ec9c19 Sha256: 62e435cdd402c49676cda8b76f998c684493017a7da42f37e850cbe63edfe797
GET /common/jqueryui/jquery-ui.min.js?tn=224772105 HTTP/1.1 Host: www.portail-employes.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2	40.127.192.238 HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Wed, 31 Jul 2019 13:26:12 GMT Accept-Ranges: bytes ETag: "0f25c85a347d51:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-ServerNo: 25 Date: Wed, 06 Jul 2022 23:32:20 GMT Content-Length: 68048 --- Additional Info --- Magic: ASCII text, with very long lines (32250), with CRLF line terminators Size: 68048 Md5: 93b2a681565f5fc8edce13b20cc895e8 Sha1: 0cd84dd2012c607af395b73f85ba6876b40232d3 Sha256: 10960686825cb1aaf00ba4c92904a095412295b7d5bdaea5b006963b875dfdbe Alerts: Blocklists: - fortinet: Phishing
GET /common/js/jquery.min.js?tn=224772105 HTTP/1.1 Host: www.portail-employes.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2	40.127.192.238 HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Mon, 14 Mar 2022 17:09:33 GMT Accept-Ranges: bytes ETag: "b617ae46c637d81:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-ServerNo: 26 Date: Wed, 06 Jul 2022 23:32:20 GMT Content-Length: 39759 --- Additional Info --- Magic: ASCII text, with very long lines (65446), with CRLF line terminators Size: 39759 Md5: 6af9c5c77d76d9f2c96f2ce1dc1114af Sha1: 86d016c96a73de3043d23b67d79621e8173f06f0 Sha256: 9493b3f519d0ce35740d1fc8edcf2ada98800225a8bc57493cf373c55712a449
GET /Media/public/button.png HTTP/1.1 Host: www.portail-employes.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2	$Magic: PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data Size: 2744 Md5: 27a3de89de3d9604d375cab92d05c683$ 40.127.192.238 HTTP/1.1 200 OK Content-Type: image/png Cache-Control: public, max-age=2886 Expires: Thu, 07 Jul 2022 00:20:27 GMT Last-Modified: Wed, 06 Jul 2022 23:20:27 GMT Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-ServerNo: 26 Date: Wed, 06 Jul 2022 23:32:20 GMT Content-Length: 2744 --- Additional Info --- Magic: PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data Size: 2744 Md5: 27a3de89de3d9604d375cab92d05c683 Sha1: 4d4c2b57264c7f7011f071d1e57ef42c113f8671 Sha256: 634506d6f67df53bd8bb6f1e5807173788d722e0f0d0db99e637294ded822743
GET /Media/tgmedia_EUcd359e4b08774492a6d3abe36ebc44a6/TN_Learning_Activity_Page_BGAXA.jpg HTTP/1.1 Host: www.portail-employes.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2	$Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators Size: 1245 Md5: 5343c1a8b203c162a3bf3870d9f50fd4$ 40.127.192.238 HTTP/1.1 404 Not Found Content-Type: text/html Cache-Control: public, max-age=3600 Expires: Thu, 07 Jul 2022 00:32:20 GMT Last-Modified: Wed, 06 Jul 2022 23:32:20 GMT Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-ServerNo: 25 Date: Wed, 06 Jul 2022 23:32:20 GMT Content-Length: 1245 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators Size: 1245 Md5: 5343c1a8b203c162a3bf3870d9f50fd4 Sha1: 04b5b886c20d88b57eea6d8ff882624a4ac1e51d Sha256: dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f
GET /Media/tgmedia_0b7443d9703d46d5a660d2428e6117b2/axa_logo_open_white_rgb.png HTTP/1.1 Host: www.portail-employes.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2	$Magic: PNG image data, 2363 x 2363, 8-bit/color RGBA, non-interlaced\012- data Size: 75746 Md5: 5ecbeb37e29a19f1f955d7665a95854b$ 40.127.192.238 HTTP/1.1 200 OK Content-Type: image/png Cache-Control: public, max-age=2876 Expires: Thu, 07 Jul 2022 00:20:16 GMT Last-Modified: Wed, 06 Jul 2022 23:20:16 GMT Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-ServerNo: 25 Date: Wed, 06 Jul 2022 23:32:20 GMT Content-Length: 75746 --- Additional Info --- Magic: PNG image data, 2363 x 2363, 8-bit/color RGBA, non-interlaced\012- data Size: 75746 Md5: 5ecbeb37e29a19f1f955d7665a95854b Sha1: 9404bcb72f0f23969ade924ba6df4bc9056a94a5 Sha256: 7388954f0409347295f1126e6a84585b73ff1ce2d0c650e3133375a3af4dc7cd
GET /Media/tgmedia_4b34c119df4f433b898280a8d567460c/AXA_PHI_FR_DossierCPF.jpg HTTP/1.1 Host: www.portail-employes.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2	$Magic: JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 893x763, components 3\012- data Size: 106731 Md5: d8ed922bd7cdab68743e763f18ef0271$ 40.127.192.238 HTTP/1.1 200 OK Content-Type: image/jpeg Cache-Control: public, max-age=34 Expires: Wed, 06 Jul 2022 23:32:55 GMT Last-Modified: Wed, 06 Jul 2022 22:32:55 GMT Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-ServerNo: 25 Date: Wed, 06 Jul 2022 23:32:20 GMT Content-Length: 106731 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 893x763, components 3\012- data Size: 106731 Md5: d8ed922bd7cdab68743e763f18ef0271 Sha1: 0539b1141cdb5cf57ef3480b6642489001270e5b Sha256: 19cd3b9c751de3833ff8c3a5ff491a78e113bc1a0263bd69ca5175ddc1af4512
POST /Handler/CountLearningTime.ashx?time=1657150340491&f=-1&s=0&crc=f3a26651c68640e1a8f8d0236d3eab01 HTTP/1.1 Host: www.portail-employes.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate X-Requested-With: XMLHttpRequest Origin: http://www.portail-employes.com Connection: keep-alive Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2 Content-Length: 0	$Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size: 118 Md5: be6129560973cba27f5456c131fa88e7$ 40.127.192.238 HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Cache-Control: private Transfer-Encoding: chunked Location: / Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 Set-Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=Oz_9-WMgHZsQcdfH63IM1emi2NSdIfK4J8pbxr6ByPljTwuYByPQqsf1Ee3wsUZyzM--QiB80DVC-UrHfuFMdUozNXhZQHEeUpBBpXx4J881&CurrentCampaignRecipientEventLogID=2jNyiehBBG6plGzoqLoUNC_mNLtvg5VUgk35aRycTOKaROlQ6Ltr9z_S6jijkB2Bgk5tZdGq3bQVk5uaUSQzzg2&TotalLearningTime=Hyl7E77Douzej2eW5GA6nKGcKOfEK1XpjHTw7xTQUDe5IZaDO0-oYBgfF0h8yPyLxEVOK8Tg9dd_IWj-a3rS6g2; expires=Fri, 05-Aug-2022 23:32:21 GMT; path=/; HttpOnly X-ServerNo: 25 Date: Wed, 06 Jul 2022 23:32:20 GMT --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size: 118 Md5: be6129560973cba27f5456c131fa88e7 Sha1: 023f243ec1fd615feddda0224d689374a557f8be Sha256: 1215e7423697337b85ed9ed8ac34c87d8f91d353f12ab270b99c2ebbd1afd836
GET /favicon.ico HTTP/1.1 Host: www.portail-employes.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2	$Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators Size: 1245 Md5: 5343c1a8b203c162a3bf3870d9f50fd4$ 40.127.192.238 HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/10.0 X-ServerNo: 25 Date: Wed, 06 Jul 2022 23:32:21 GMT Content-Length: 1245 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators Size: 1245 Md5: 5343c1a8b203c162a3bf3870d9f50fd4 Sha1: 04b5b886c20d88b57eea6d8ff882624a4ac1e51d Sha256: dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243$ 54.230.111.65 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 329 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Retry-After, ETag, Content-Type, Last-Modified, Alert, Backoff, Pragma, Expires, Content-Length, Cache-Control Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Date: Wed, 06 Jul 2022 22:34:56 GMT Cache-Control: max-age=3600 Expires: Wed, 06 Jul 2022 23:05:14 GMT ETag: "1648230346554" X-Cache: Hit from cloudfront Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: xVLrM0WDkO73uDAn3ktbj9Q0qEK8dlaLC3vS8ft_eLDfEqb7JlGKmg== Age: 3445 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET / HTTP/1.1 Host: www.portail-employes.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate X-Requested-With: XMLHttpRequest Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 Connection: keep-alive Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=Oz_9-WMgHZsQcdfH63IM1emi2NSdIfK4J8pbxr6ByPljTwuYByPQqsf1Ee3wsUZyzM--QiB80DVC-UrHfuFMdUozNXhZQHEeUpBBpXx4J881&CurrentCampaignRecipientEventLogID=2jNyiehBBG6plGzoqLoUNC_mNLtvg5VUgk35aRycTOKaROlQ6Ltr9z_S6jijkB2Bgk5tZdGq3bQVk5uaUSQzzg2&TotalLearningTime=Hyl7E77Douzej2eW5GA6nKGcKOfEK1XpjHTw7xTQUDe5IZaDO0-oYBgfF0h8yPyLxEVOK8Tg9dd_IWj-a3rS6g2	$Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators Size: 235 Md5: e2c9823067d339967ddd7a438602a28a$ 40.127.192.238 HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: private Content-Encoding: gzip Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-ServerNo: 25 Date: Wed, 06 Jul 2022 23:32:21 GMT Content-Length: 235 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators Size: 235 Md5: e2c9823067d339967ddd7a438602a28a Sha1: 6319f0fecd5cf5c83080330e4344e1ef1bb2bbe2 Sha256: a8cd92bcf025fa736d540603e5ad121af04b9531a9aac87b33549b52fd193268
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 4498 Cache-Control: max-age=121822 Date: Wed, 06 Jul 2022 23:32:21 GMT Etag: "62c542d1-1d7" Expires: Fri, 08 Jul 2022 09:22:43 GMT Last-Modified: Wed, 06 Jul 2022 08:07:45 GMT Server: ECS (ska/F719) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 54a5ebdb4e3b060878632555583e462f Sha1: df627b311d6276eabf36fe1390a8219714839aed Sha256: 5c77d20265a9a328455b745ec5191e036ec35814586c1e6bcd1c8b2de01b3ff2
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: oFiEMS6msJ003Au6782vbA== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	52.89.136.145 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: I7omo4r9uNs4gzBzTbQe9GWMm5M= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "E96EA592111AAC8DB4D301EA1E1DEF1043D15D8774C4224D707FB21885E98909" Last-Modified: Wed, 06 Jul 2022 19:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5825 Expires: Thu, 07 Jul 2022 01:09:27 GMT Date: Wed, 06 Jul 2022 23:32:22 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: c5a2dbe44b8c2efb78582d19feb5623d Sha1: 4d1990af3e155e664e056fa0ab2c88c3d6e7569d Sha256: e96ea592111aac8db4d301ea1e1def1043d15d8774c4224d707fb21885e98909
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "E96EA592111AAC8DB4D301EA1E1DEF1043D15D8774C4224D707FB21885E98909" Last-Modified: Wed, 06 Jul 2022 19:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5825 Expires: Thu, 07 Jul 2022 01:09:27 GMT Date: Wed, 06 Jul 2022 23:32:22 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: c5a2dbe44b8c2efb78582d19feb5623d Sha1: 4d1990af3e155e664e056fa0ab2c88c3d6e7569d Sha256: e96ea592111aac8db4d301ea1e1def1043d15d8774c4224d707fb21885e98909
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "E96EA592111AAC8DB4D301EA1E1DEF1043D15D8774C4224D707FB21885E98909" Last-Modified: Wed, 06 Jul 2022 19:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5825 Expires: Thu, 07 Jul 2022 01:09:27 GMT Date: Wed, 06 Jul 2022 23:32:22 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: c5a2dbe44b8c2efb78582d19feb5623d Sha1: 4d1990af3e155e664e056fa0ab2c88c3d6e7569d Sha256: e96ea592111aac8db4d301ea1e1def1043d15d8774c4224d707fb21885e98909
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7394f5d-cdce-41b4-a77f-497fd53c5173.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6510 Md5: 35403bff40fe010a03fbbfa56185ef30$ 34.120.237.76 HTTP/2 200 OK server: nginx content-length: 6510 x-amzn-requestid: 94ccabe7-9fb8-4d91-beea-ebd9a669732b x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Uq6h8EV3oAMFZfQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-62c10ad9-0d787e463b15c84b2cca0df8;Sampled=0 x-amzn-remapped-date: Sun, 03 Jul 2022 03:19:53 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: KJSLnVrt4pTPuOocLg2Sr5uTfRyiaYyBh9Txohz4mMhsXQ262yfeIw== via: 1.1 d1d67b07408bba8c682597d8303642e2.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google date: Wed, 06 Jul 2022 06:32:58 GMT age: 61164 etag: "5e1dc99fa1b894ae83dd0ef04b3daa5ff820cd40" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6510 Md5: 35403bff40fe010a03fbbfa56185ef30 Sha1: 5e1dc99fa1b894ae83dd0ef04b3daa5ff820cd40 Sha256: 6c7efc03f6c3ebcf6ed69bff044d63ba19c832cb8ecb7ce291226b69cb7b3ac5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55296720-850d-4c76-80ba-8ba3ae30843c.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6616 Md5: 29efcb55217b2007c1327183550dd5c3$ 34.120.237.76 HTTP/2 200 OK server: nginx content-length: 6616 x-amzn-requestid: 5426d14d-8a96-416d-84ff-945c7ab3bd52 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: U3UCnGMiIAMFeGw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-62c60076-0b292802325c3c19636f8e1f;Sampled=0 x-amzn-remapped-date: Wed, 06 Jul 2022 21:36:54 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: 883npdST8d-8Cuudrppir5-eOqNE6Cz7pPqZoO_zP6E5Q-dsm0s1og== via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google date: Wed, 06 Jul 2022 21:54:16 GMT age: 5886 etag: "11f0210e88bbfbbd7a33d0722cd018522976cbcf" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6616 Md5: 29efcb55217b2007c1327183550dd5c3 Sha1: 11f0210e88bbfbbd7a33d0722cd018522976cbcf Sha256: 8042384ec61e8911986b04ca45a1088c96caff5196674dd8f529e667d1c89224
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1f48beb-da86-42f3-b5da-39fa82b568cb.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7249 Md5: 5c958b0c904620aff5f5f8a74f80d9f9$ 34.120.237.76 HTTP/2 200 OK server: nginx content-length: 7249 x-amzn-requestid: 74cbc653-182e-4ef0-9fe5-901ddaa4edaf x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: UoBIEGKqIAMFp8Q= x-content-type-options: nosniff x-amzn-trace-id: Root=1-62bfe233-383f73a750696511624ff453;Sampled=0 x-amzn-remapped-date: Sat, 02 Jul 2022 06:14:11 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: BVo4WA3x-2hGSrOBQTIcT5yjiYcdzQby4NDOrnrWpREFtHG5x52Jzg== via: 1.1 25b9a991f871f75614e7f92f97b136a4.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google date: Wed, 06 Jul 2022 09:18:45 GMT age: 51217 etag: "2f79d1e28bb827f7fa60b6675dba8022c28a1a3d" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7249 Md5: 5c958b0c904620aff5f5f8a74f80d9f9 Sha1: 2f79d1e28bb827f7fa60b6675dba8022c28a1a3d Sha256: 8bba608d028bbb678f021eaca3364856f930069f44b647346e649eca4c383955
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd6e3add8-7c66-432f-91a8-b098a733a73f.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7593 Md5: 28a3dfcff210ec6411fa257b11e70894$ 34.120.237.76 HTTP/2 200 OK server: nginx content-length: 7593 x-amzn-requestid: a7db6423-45d0-4083-9787-8a73ed9d4927 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: UoJNYE_RoAMFtZg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-62bfef22-436d8bad66b0b1810041ae7a;Sampled=0 x-amzn-remapped-date: Sat, 02 Jul 2022 07:09:22 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: JoeULtGR9G2xzoMWgm6MUgb1cuMyg2ychNMgAbTW_08GGS4JYbLIlQ== via: 1.1 a4479a6315f90864adc6175b280f8f44.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google date: Wed, 06 Jul 2022 13:20:04 GMT age: 36738 etag: "3cbb91fc08ee08d0c2d22430b85a5afd2191d2cd" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7593 Md5: 28a3dfcff210ec6411fa257b11e70894 Sha1: 3cbb91fc08ee08d0c2d22430b85a5afd2191d2cd Sha256: 5fe7fd11da970c3cd794623761a7bb4a740805e1feb25758e026b084d0b0d56f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ac08270-54ba-4f73-b0f7-aeafa1c8f6f2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8883 Md5: ec5268bbe1cfa280827c03fc8483ddfa$ 34.120.237.76 HTTP/2 200 OK server: nginx content-length: 8883 x-amzn-requestid: 31e215e3-ba56-4dc5-b128-6259c976cf85 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: UxckvH_LIAMFtNQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-62c3a7b7-0da8c70b0fecadb06927dc0d;Sampled=0 x-amzn-remapped-date: Tue, 05 Jul 2022 02:53:43 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: x4__nJNsWaQxPFPVNDRhaxCYpfIoG3-TXR_5jkDWIJ9WXynlrKIPjg== via: 1.1 040bad3c7f7db09654c66da40c719fb0.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google date: Wed, 06 Jul 2022 08:23:14 GMT age: 54548 etag: "dedb61705eb0330ad53922d1746bd159c2957f9d" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8883 Md5: ec5268bbe1cfa280827c03fc8483ddfa Sha1: dedb61705eb0330ad53922d1746bd159c2957f9d Sha256: bdb3c340ae635640a610a9d702fdf904a26ce5d8c6c750e9c8a76078abe19a01
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13136825-0301-44c6-8c81-faf21628fe4c.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6737 Md5: 44f59062cacc44be268845c493de29de$ 34.120.237.76 HTTP/2 200 OK server: nginx content-length: 6737 x-amzn-requestid: 9a9c33df-daa2-49fb-ba8e-fd5a3149828e x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: UeP9ZG93oAMFX6A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-62bbf9ef-248528170cf451be2662dbef;Sampled=0 x-amzn-remapped-date: Wed, 29 Jun 2022 07:06:23 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: GZWZ5vCdHbLeGN4FdZbd8ysfjqcGd-7MsBW_steUpJ38jyLd16JNtw== via: 1.1 4c48e9fb20d53d40e9fe273dbdae1098.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google date: Wed, 06 Jul 2022 03:53:29 GMT age: 70733 etag: "5e2f835320ab350cdd1c3ad1ceb71db2bb27b84f" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6737 Md5: 44f59062cacc44be268845c493de29de Sha1: 5e2f835320ab350cdd1c3ad1ceb71db2bb27b84f Sha256: c37305dfa7a241e526c7246a6eb71360dbfa2fe5d7f369f37ef7ddbfe1b97749
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5ba04b2-c104-4fac-8249-270ee1574999.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	$Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9584 Md5: 7e12ff38b93cd936b227ebc630da7c21$ 34.120.237.76 HTTP/2 200 OK server: nginx content-length: 9584 x-amzn-requestid: a8caf546-a8be-4625-965d-1ce79febe166 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: U3UEJFp_IAMFyAQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-62c60080-3ccff4541c02cfe21f8247fc;Sampled=0 x-amzn-remapped-date: Wed, 06 Jul 2022 21:37:04 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: jhnwq0r_lLWPaxV7tNT1ZbNJJLkZ2uf0gxU6XjUHS_W6aSWptDY_SA== via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google date: Wed, 06 Jul 2022 21:55:59 GMT etag: "e3c1ac5024fe0dfde1477fc11baca6eee7cf2ef3" content-type: image/jpeg age: 5789 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9584 Md5: 7e12ff38b93cd936b227ebc630da7c21 Sha1: e3c1ac5024fe0dfde1477fc11baca6eee7cf2ef3 Sha256: 7281ce812f0178e0e0e5387c055f234b890997e2f88568826ccfed55fc26eea3

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.65

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/json

                                        

                                        
                                            
Content-Length: 939 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Access-Control-Expose-Headers: Retry-After, Backoff, Content-Type, Content-Length, Alert 

                                        
                                            
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
Date: Wed, 06 Jul 2022 22:56:16 GMT 

                                        
                                            
Strict-Transport-Security: max-age=31536000 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-P1 

                                        
                                            
X-Amz-Cf-Id: 1hr01srJ1ik9qli24RoKxDsIkPTvB867upoQht1DmDnDaYgXMeHQ6g== 

                                        
                                            
Age: 2164 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    91dd975a7b17b2922dd23c0e49314e40

                                                Sha1:   57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2

                                                Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         
                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "78A5DCFAF2D93D9C87CFB6DBC56100E9F22965D4500554BA65F71CB7D84DD666" 

                                        
                                            
Last-Modified: Wed, 06 Jul 2022 16:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=12800 

                                        
                                            
Expires: Thu, 07 Jul 2022 03:05:40 GMT 

                                        
                                            
Date: Wed, 06 Jul 2022 23:32:20 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    1bd93fff937cfdc8744b841243b93fd5

                                                Sha1:   240c31be9cdaeb5d1e4f9e3558c812ba007e6d22

                                                Sha256: 78a5dcfaf2d93d9c87cfb6dbc56100e9f22965d4500554ba65f71cb7d84dd666

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239

                                        
                                            HTTP/2 200 OK

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Wed, 06 Jul 2022 23:32:20 GMT 

                                        
                                            
content-type: application/json 

                                        
                                            
content-length: 12 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /common/css/rp_tooltips.css HTTP/1.1 

                                        
                                            
Host: www.portail-employes.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 

                                        
                                            
Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2

                                         
                                         40.127.192.238

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/css

                                        

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Last-Modified: Tue, 06 Aug 2019 19:41:54 GMT 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
ETag: "0adebff8e4cd51:0" 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: Microsoft-IIS/10.0 

                                        
                                            
X-ServerNo: 26 

                                        
                                            
Date: Wed, 06 Jul 2022 23:32:20 GMT 

                                        
                                            
Content-Length: 2514 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with CRLF line terminators

                                                Size:   2514

                                                Md5:    8b8114809cde5e4742cc6785a474c240

                                                Sha1:   60d1e1fb31be6327769765397c919080054c44f9

                                                Sha256: bf320a92219eddd173a38da70dd388f88f811831ab875b9e0fd40c13a36c96d8

                                        
                                            GET /common/jqueryui/jquery-ui.theme.min.css HTTP/1.1 

                                        
                                            
Host: www.portail-employes.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 

                                        
                                            
Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2

                                         
                                         40.127.192.238

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/css

                                        

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Last-Modified: Wed, 31 Jul 2019 13:26:12 GMT 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
ETag: "0f25c85a347d51:0" 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: Microsoft-IIS/10.0 

                                        
                                            
X-ServerNo: 25 

                                        
                                            
Date: Wed, 06 Jul 2022 23:32:20 GMT 

                                        
                                            
Content-Length: 2971 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (13746), with CRLF line terminators

                                                Size:   2971

                                                Md5:    19ae6203b7faa6f8b8e23750c18e434a

                                                Sha1:   679d81d734c9fa6f7a42a309fd73dd3d0a04b3c6

                                                Sha256: fc1f91f8cb94f90cd639b3dd60eb2713b9d83fc8f3b9e700b598ab851f6d3713

                                        
                                            GET /portal/FailedPhishing/dea0d801-e3f2-4cb9-be52-aec515c89b70/[T-GUID] HTTP/1.1 

                                        
                                            
Host: secure2.terranovasite.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www.portail-employes.com/ 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: iframe 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         
                                         52.169.6.85

                                        
                                            HTTP/2 200 OK

                                        

                                        
                                            
cache-control: private 

                                        
                                            
x-frame-options: SAMEORIGIN 

                                        
                                            
x-serverno: 26 

                                        
                                            
x-ua-compatible: IE=edge 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
date: Wed, 06 Jul 2022 23:32:20 GMT 

                                        
                                            
content-length: 0 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            GET /common/bootstrap/css/bootstrap.css HTTP/1.1 

                                        
                                            
Host: www.portail-employes.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 

                                        
                                            
Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2

                                         
                                         40.127.192.238

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/css

                                        

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Last-Modified: Tue, 06 Aug 2019 19:41:54 GMT 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
ETag: "0adebff8e4cd51:0" 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: Microsoft-IIS/10.0 

                                        
                                            
X-ServerNo: 26 

                                        
                                            
Date: Wed, 06 Jul 2022 23:32:20 GMT 

                                        
                                            
Content-Length: 35164 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (540), with CRLF line terminators

                                                Size:   35164

                                                Md5:    ab07c25d60bb7a6ad94854ef94ec3ea3

                                                Sha1:   521c681fc8edb71c9b84089f8c90e17901ec9c19

                                                Sha256: 62e435cdd402c49676cda8b76f998c684493017a7da42f37e850cbe63edfe797

                                        
                                            GET /common/js/jquery.min.js?tn=224772105 HTTP/1.1 

                                        
                                            
Host: www.portail-employes.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 

                                        
                                            
Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2

                                         
                                         40.127.192.238

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/javascript

                                        

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Last-Modified: Mon, 14 Mar 2022 17:09:33 GMT 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
ETag: "b617ae46c637d81:0" 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: Microsoft-IIS/10.0 

                                        
                                            
X-ServerNo: 26 

                                        
                                            
Date: Wed, 06 Jul 2022 23:32:20 GMT 

                                        
                                            
Content-Length: 39759 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (65446), with CRLF line terminators

                                                Size:   39759

                                                Md5:    6af9c5c77d76d9f2c96f2ce1dc1114af

                                                Sha1:   86d016c96a73de3043d23b67d79621e8173f06f0

                                                Sha256: 9493b3f519d0ce35740d1fc8edcf2ada98800225a8bc57493cf373c55712a449

                                        
                                            GET /Media/tgmedia_EUcd359e4b08774492a6d3abe36ebc44a6/TN_Learning_Activity_Page_BGAXA.jpg HTTP/1.1 

                                        
                                            
Host: www.portail-employes.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 

                                        
                                            
Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2

                                         
                                         40.127.192.238

                                        
                                            HTTP/1.1 404 Not Found 

                                        
                                            
Content-Type: text/html

                                        

                                        
                                            
Cache-Control: public, max-age=3600 

                                        
                                            
Expires: Thu, 07 Jul 2022 00:32:20 GMT 

                                        
                                            
Last-Modified: Wed, 06 Jul 2022 23:32:20 GMT 

                                        
                                            
Server: Microsoft-IIS/10.0 

                                        
                                            
X-AspNet-Version: 4.0.30319 

                                        
                                            
X-ServerNo: 25 

                                        
                                            
Date: Wed, 06 Jul 2022 23:32:20 GMT 

                                        
                                            
Content-Length: 1245 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators

                                                Size:   1245

                                                Md5:    5343c1a8b203c162a3bf3870d9f50fd4

                                                Sha1:   04b5b886c20d88b57eea6d8ff882624a4ac1e51d

                                                Sha256: dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f

                                        
                                            GET /Media/tgmedia_4b34c119df4f433b898280a8d567460c/AXA_PHI_FR_DossierCPF.jpg HTTP/1.1 

                                        
                                            
Host: www.portail-employes.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 

                                        
                                            
Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2

                                         
                                         40.127.192.238

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/jpeg

                                        

                                        
                                            
Cache-Control: public, max-age=34 

                                        
                                            
Expires: Wed, 06 Jul 2022 23:32:55 GMT 

                                        
                                            
Last-Modified: Wed, 06 Jul 2022 22:32:55 GMT 

                                        
                                            
Server: Microsoft-IIS/10.0 

                                        
                                            
X-AspNet-Version: 4.0.30319 

                                        
                                            
X-ServerNo: 25 

                                        
                                            
Date: Wed, 06 Jul 2022 23:32:20 GMT 

                                        
                                            
Content-Length: 106731 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 893x763, components 3\012- data

                                                Size:   106731

                                                Md5:    d8ed922bd7cdab68743e763f18ef0271

                                                Sha1:   0539b1141cdb5cf57ef3480b6642489001270e5b

                                                Sha256: 19cd3b9c751de3833ff8c3a5ff491a78e113bc1a0263bd69ca5175ddc1af4512

                                        
                                            GET /favicon.ico HTTP/1.1 

                                        
                                            
Host: www.portail-employes.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 

                                        
                                            
Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=bk1GM8PniYuK7lt0oPneeg0rCZdzz7teuahsxx0RG1T6gtrqqnpkFAi0XpG45GEhI3tAZ71jwIvXKt2dTMf03Vg1DfLcB7UESlirCm1SC5g1&CurrentCampaignRecipientEventLogID=9oX1uhTGjWEEl6E4Ak2GErCaov_KxMcjiai1UeUhnsZYufhcJ0EiHGvIng8C5Ap-awFSFG7UQ1sK0wwpYUHDQg2&TotalLearningTime=p7TOX6y2-R5O2prHc3Gc-0i2fmDCv8lg0TG_AonThDCNp8xmfukIuNORbZLM_Hc8FPjt8rS0PlFaO-TcZG5dCA2

                                         
                                         40.127.192.238

                                        
                                            HTTP/1.1 404 Not Found 

                                        
                                            
Content-Type: text/html

                                        

                                        
                                            
Server: Microsoft-IIS/10.0 

                                        
                                            
X-ServerNo: 25 

                                        
                                            
Date: Wed, 06 Jul 2022 23:32:21 GMT 

                                        
                                            
Content-Length: 1245 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators

                                                Size:   1245

                                                Md5:    5343c1a8b203c162a3bf3870d9f50fd4

                                                Sha1:   04b5b886c20d88b57eea6d8ff882624a4ac1e51d

                                                Sha256: dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: www.portail-employes.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
X-Requested-With: XMLHttpRequest 

                                        
                                            
Referer: http://www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Cookie: Landing.enc=CurrentCampaignRecipientID=rrxQLcQjZAf9kY5l9qreLLv2dsf6IJd_3xy2Fxxjx5s2rik2ss1sNg6gkd_DkcWM5yqeGcHO2Bf5NEprkqGw4A2&ExpirationDate=Oz_9-WMgHZsQcdfH63IM1emi2NSdIfK4J8pbxr6ByPljTwuYByPQqsf1Ee3wsUZyzM--QiB80DVC-UrHfuFMdUozNXhZQHEeUpBBpXx4J881&CurrentCampaignRecipientEventLogID=2jNyiehBBG6plGzoqLoUNC_mNLtvg5VUgk35aRycTOKaROlQ6Ltr9z_S6jijkB2Bgk5tZdGq3bQVk5uaUSQzzg2&TotalLearningTime=Hyl7E77Douzej2eW5GA6nKGcKOfEK1XpjHTw7xTQUDe5IZaDO0-oYBgfF0h8yPyLxEVOK8Tg9dd_IWj-a3rS6g2

                                         
                                         40.127.192.238

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/html; charset=utf-8

                                        

                                        
                                            
Cache-Control: private 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: Microsoft-IIS/10.0 

                                        
                                            
X-AspNet-Version: 4.0.30319 

                                        
                                            
X-ServerNo: 25 

                                        
                                            
Date: Wed, 06 Jul 2022 23:32:21 GMT 

                                        
                                            
Content-Length: 235 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators

                                                Size:   235

                                                Md5:    e2c9823067d339967ddd7a438602a28a

                                                Sha1:   6319f0fecd5cf5c83080330e4344e1ef1bb2bbe2

                                                Sha256: a8cd92bcf025fa736d540603e5ad121af04b9531a9aac87b33549b52fd193268

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: oFiEMS6msJ003Au6782vbA== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         
                                         52.89.136.145

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: I7omo4r9uNs4gzBzTbQe9GWMm5M= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         
                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "E96EA592111AAC8DB4D301EA1E1DEF1043D15D8774C4224D707FB21885E98909" 

                                        
                                            
Last-Modified: Wed, 06 Jul 2022 19:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=5825 

                                        
                                            
Expires: Thu, 07 Jul 2022 01:09:27 GMT 

                                        
                                            
Date: Wed, 06 Jul 2022 23:32:22 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    c5a2dbe44b8c2efb78582d19feb5623d

                                                Sha1:   4d1990af3e155e664e056fa0ab2c88c3d6e7569d

                                                Sha256: e96ea592111aac8db4d301ea1e1def1043d15d8774c4224d707fb21885e98909

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7394f5d-cdce-41b4-a77f-497fd53c5173.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76

                                        
                                            HTTP/2 200 OK

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 6510 

                                        
                                            
x-amzn-requestid: 94ccabe7-9fb8-4d91-beea-ebd9a669732b 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: Uq6h8EV3oAMFZfQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-62c10ad9-0d787e463b15c84b2cca0df8;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sun, 03 Jul 2022 03:19:53 GMT 

                                        
                                            
x-amz-cf-pop: SEA73-P1 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: KJSLnVrt4pTPuOocLg2Sr5uTfRyiaYyBh9Txohz4mMhsXQ262yfeIw== 

                                        
                                            
via: 1.1 d1d67b07408bba8c682597d8303642e2.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Wed, 06 Jul 2022 06:32:58 GMT 

                                        
                                            
age: 61164 

                                        
                                            
etag: "5e1dc99fa1b894ae83dd0ef04b3daa5ff820cd40" 

                                        
                                            
content-type: image/jpeg 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   6510

                                                Md5:    35403bff40fe010a03fbbfa56185ef30

                                                Sha1:   5e1dc99fa1b894ae83dd0ef04b3daa5ff820cd40

                                                Sha256: 6c7efc03f6c3ebcf6ed69bff044d63ba19c832cb8ecb7ce291226b69cb7b3ac5

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1f48beb-da86-42f3-b5da-39fa82b568cb.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76

                                        
                                            HTTP/2 200 OK

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7249 

                                        
                                            
x-amzn-requestid: 74cbc653-182e-4ef0-9fe5-901ddaa4edaf 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: UoBIEGKqIAMFp8Q= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-62bfe233-383f73a750696511624ff453;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 02 Jul 2022 06:14:11 GMT 

                                        
                                            
x-amz-cf-pop: SEA73-P1 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: BVo4WA3x-2hGSrOBQTIcT5yjiYcdzQby4NDOrnrWpREFtHG5x52Jzg== 

                                        
                                            
via: 1.1 25b9a991f871f75614e7f92f97b136a4.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Wed, 06 Jul 2022 09:18:45 GMT 

                                        
                                            
age: 51217 

                                        
                                            
etag: "2f79d1e28bb827f7fa60b6675dba8022c28a1a3d" 

                                        
                                            
content-type: image/jpeg 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7249

                                                Md5:    5c958b0c904620aff5f5f8a74f80d9f9

                                                Sha1:   2f79d1e28bb827f7fa60b6675dba8022c28a1a3d

                                                Sha256: 8bba608d028bbb678f021eaca3364856f930069f44b647346e649eca4c383955

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ac08270-54ba-4f73-b0f7-aeafa1c8f6f2.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76

                                        
                                            HTTP/2 200 OK

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 8883 

                                        
                                            
x-amzn-requestid: 31e215e3-ba56-4dc5-b128-6259c976cf85 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: UxckvH_LIAMFtNQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-62c3a7b7-0da8c70b0fecadb06927dc0d;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 05 Jul 2022 02:53:43 GMT 

                                        
                                            
x-amz-cf-pop: SEA73-P1 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: x4__nJNsWaQxPFPVNDRhaxCYpfIoG3-TXR_5jkDWIJ9WXynlrKIPjg== 

                                        
                                            
via: 1.1 040bad3c7f7db09654c66da40c719fb0.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Wed, 06 Jul 2022 08:23:14 GMT 

                                        
                                            
age: 54548 

                                        
                                            
etag: "dedb61705eb0330ad53922d1746bd159c2957f9d" 

                                        
                                            
content-type: image/jpeg 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8883

                                                Md5:    ec5268bbe1cfa280827c03fc8483ddfa

                                                Sha1:   dedb61705eb0330ad53922d1746bd159c2957f9d

                                                Sha256: bdb3c340ae635640a610a9d702fdf904a26ce5d8c6c750e9c8a76078abe19a01

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5ba04b2-c104-4fac-8249-270ee1574999.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         
                                         34.120.237.76

                                        
                                            HTTP/2 200 OK

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 9584 

                                        
                                            
x-amzn-requestid: a8caf546-a8be-4625-965d-1ce79febe166 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: U3UEJFp_IAMFyAQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-62c60080-3ccff4541c02cfe21f8247fc;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Wed, 06 Jul 2022 21:37:04 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA73-P1 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: jhnwq0r_lLWPaxV7tNT1ZbNJJLkZ2uf0gxU6XjUHS_W6aSWptDY_SA== 

                                        
                                            
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Wed, 06 Jul 2022 21:55:59 GMT 

                                        
                                            
etag: "e3c1ac5024fe0dfde1477fc11baca6eee7cf2ef3" 

                                        
                                            
content-type: image/jpeg 

                                        
                                            
age: 5789 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   9584

                                                Md5:    7e12ff38b93cd936b227ebc630da7c21

                                                Sha1:   e3c1ac5024fe0dfde1477fc11baca6eee7cf2ef3

                                                Sha256: 7281ce812f0178e0e0e5387c055f234b890997e2f88568826ccfed55fc26eea3

URL	www.portail-employes.com/l/index.aspx?code=f3a26651c68640e1a8f8d0236d3eab01
IP	40.127.192.238
ASN	MICROSOFT-CORP-MSN-AS-BLOCK
Location	Ireland
Report completed	2022-07-06 23:32:33 UTC
Status	Loading report..
urlquery Alerts	No alerts detected

Overview

Settings

Intrusion Detection Systems

Blocklists

Files

No files detected

Passive DNS (9)

Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 40.127.192.238

Last 10 reports on ASN: MICROSOFT-CORP-MSN-AS-BLOCK

No other reports on domain: portail-employes.com

JavaScript

Executed Scripts (5)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (35)

UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer