nbr391.keap-link011.com/v2/click/2b25936ad842ec6485ec5cd3f6619414/eJyNj8EKgkAURf_lrSUxNXF2IiKiuYhax6gDDerMMD4LEf-9scJVQdt3zz2POwMyQQVmDRAQlXZDByzQrOaKM4GxFEjrV-r6YeB5vgUdF22q5aiAzF_bG7CeA8-xACfFDHE-RXGelem1yMrcgIpq8-MvzWHvbprkGGUFLMtPL-s5JnejHoCgHtk6qOFmFF50Z_gboiK2XdFeji3t6CTHB90N1WC6VCkmms_unE1vw_IEnG5ggA==
301 Moved Permanently 0 B URL HTTP/1.1 nbr391.keap-link011.com/v2/click/2b25936ad842ec6485ec5cd3f6619414/eJyNj8EKgkAURf_lrSUxNXF2IiKiuYhax6gDDerMMD4LEf-9scJVQdt3zz2POwMyQQVmDRAQlXZDByzQrOaKM4GxFEjrV-r6YeB5vgUdF22q5aiAzF_bG7CeA8-xACfFDHE-RXGelem1yMrcgIpq8-MvzWHvbprkGGUFLMtPL-s5JnejHoCgHtk6qOFmFF50Z_gboiK2XdFeji3t6CTHB90N1WC6VCkmms_unE1vw_IEnG5ggA==
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/click/2b25936ad842ec6485ec5cd3f6619414/eJyNj8EKgkAURf_lrSUxNXF2IiKiuYhax6gDDerMMD4LEf-9scJVQdt3zz2POwMyQQVmDRAQlXZDByzQrOaKM4GxFEjrV-r6YeB5vgUdF22q5aiAzF_bG7CeA8-xACfFDHE-RXGelem1yMrcgIpq8-MvzWHvbprkGGUFLMtPL-s5JnejHoCgHtk6qOFmFF50Z_gboiK2XdFeji3t6CTHB90N1WC6VCkmms_unE1vw_IEnG5ggA== HTTP/1.1
Host: nbr391.keap-link011.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Cache-Control: private
Location: https://nbr391.keap-link011.com:443/v2/click/2b25936ad842ec6485ec5cd3f6619414/eJyNj8EKgkAURf_lrSUxNXF2IiKiuYhax6gDDerMMD4LEf-9scJVQdt3zz2POwMyQQVmDRAQlXZDByzQrOaKM4GxFEjrV-r6YeB5vgUdF22q5aiAzF_bG7CeA8-xACfFDHE-RXGelem1yMrcgIpq8-MvzWHvbprkGGUFLMtPL-s5JnejHoCgHtk6qOFmFF50Z_gboiK2XdFeji3t6CTHB90N1WC6VCkmms_unE1vw_IEnG5ggA==
Content-Length: 0
Date: Thu, 23 Mar 2023 08:28:21 GMT
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bea3185dd820a31c1981317f37c3456d
1a548a5d27270fc11df9011837a7149571cedd78
469b97bf9f57401b3c9571039483589f2815f4794212b75c7c85cfefe0ae71e9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9"
Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4811
Expires: Thu, 23 Mar 2023 09:48:33 GMT
Date: Thu, 23 Mar 2023 08:28:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 65fc860bc043f3fb83bdc3debdcd322d
418010755deae099ef1284e402813c5837a10f42
d93d50c523c7f735987aba09db628259441eb75efe713a2df3c214e1fb8b5171
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D93D50C523C7F735987ABA09DB628259441EB75EFE713A2DF3C214E1FB8B5171"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13024
Expires: Thu, 23 Mar 2023 12:05:26 GMT
Date: Thu, 23 Mar 2023 08:28:22 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bc86ef2a0cee04915bc360f5821adc8f
3658f9028cce204d38f7f48fcfaa2a8e4f54383a
aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 23 Mar 2023 08:27:31 GMT
content-type: application/json
age: 51
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 51a5d4696a6090c295850554508b51ce
c44e143c2223546e64b19f543b8101aaf3b11e97
8794223d5e8d4d276c35e2fdcc24bf99694240634dd749cd9b5bf874dec055cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8794223D5E8D4D276C35E2FDCC24BF99694240634DD749CD9B5BF874DEC055CF"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13861
Expires: Thu, 23 Mar 2023 12:19:23 GMT
Date: Thu, 23 Mar 2023 08:28:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ee9e77d023f148127a27ad208c1088ac
d53a920e14c369d0b6c65256799beb711019dc43
f3c29129ca8ee66152a43c43ee188686725866f91d8ac335b829f9276baa0bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3C29129CA8EE66152A43C43EE188686725866F91D8AC335B829F9276BAA0BD8"
Last-Modified: Wed, 22 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2521
Expires: Thu, 23 Mar 2023 09:10:23 GMT
Date: Thu, 23 Mar 2023 08:28:22 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: m/xqHzZigC5b/Jj5IpZxLxcnKxmGWDgMhxKDTvMYG+i1J+X6ZI4tKRZOAlMvU1aHEiHUKmZbHuQ=
x-amz-request-id: 3JAN2XMPGR8S1G1Q
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 23 Mar 2023 07:53:58 GMT
age: 2064
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 23 Mar 2023 08:28:22 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
nbr391.keap-link011.com/v2/click/2b25936ad842ec6485ec5cd3f6619414/eJyNj8EKgkAURf_lrSUxNXF2IiKiuYhax6gDDerMMD4LEf-9scJVQdt3zz2POwMyQQVmDRAQlXZDByzQrOaKM4GxFEjrV-r6YeB5vgUdF22q5aiAzF_bG7CeA8-xACfFDHE-RXGelem1yMrcgIpq8-MvzWHvbprkGGUFLMtPL-s5JnejHoCgHtk6qOFmFF50Z_gboiK2XdFeji3t6CTHB90N1WC6VCkmms_unE1vw_IEnG5ggA==
303 See Other 0 B URL HTTP/2 nbr391.keap-link011.com/v2/click/2b25936ad842ec6485ec5cd3f6619414/eJyNj8EKgkAURf_lrSUxNXF2IiKiuYhax6gDDerMMD4LEf-9scJVQdt3zz2POwMyQQVmDRAQlXZDByzQrOaKM4GxFEjrV-r6YeB5vgUdF22q5aiAzF_bG7CeA8-xACfFDHE-RXGelem1yMrcgIpq8-MvzWHvbprkGGUFLMtPL-s5JnejHoCgHtk6qOFmFF50Z_gboiK2XdFeji3t6CTHB90N1WC6VCkmms_unE1vw_IEnG5ggA==
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/click/2b25936ad842ec6485ec5cd3f6619414/eJyNj8EKgkAURf_lrSUxNXF2IiKiuYhax6gDDerMMD4LEf-9scJVQdt3zz2POwMyQQVmDRAQlXZDByzQrOaKM4GxFEjrV-r6YeB5vgUdF22q5aiAzF_bG7CeA8-xACfFDHE-RXGelem1yMrcgIpq8-MvzWHvbprkGGUFLMtPL-s5JnejHoCgHtk6qOFmFF50Z_gboiK2XdFeji3t6CTHB90N1WC6VCkmms_unE1vw_IEnG5ggA== HTTP/1.1
Host: nbr391.keap-link011.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 303 See Other
location: http://bamoukalayouwa.sbs?inf_contact_key=7f417a41255fcffbd04e5aa67a9e91d256374244ed3079802af78ca168e4c2a0
date: Thu, 23 Mar 2023 08:28:22 GMT
x-envoy-upstream-service-time: 24
server: istio-envoy
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ee9e77d023f148127a27ad208c1088ac
d53a920e14c369d0b6c65256799beb711019dc43
f3c29129ca8ee66152a43c43ee188686725866f91d8ac335b829f9276baa0bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3C29129CA8EE66152A43C43EE188686725866F91D8AC335B829F9276BAA0BD8"
Last-Modified: Wed, 22 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2521
Expires: Thu, 23 Mar 2023 09:10:23 GMT
Date: Thu, 23 Mar 2023 08:28:22 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Last-Modified, Retry-After, Content-Length, Alert, Cache-Control, Expires, Content-Type, Backoff, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 23 Mar 2023 08:17:23 GMT
age: 659
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
bamoukalayouwa.sbs/?inf_contact_key=7f417a41255fcffbd04e5aa67a9e91d256374244ed3079802af78ca168e4c2a0
302 Found 292 B URL HTTP/1.1 bamoukalayouwa.sbs/?inf_contact_key=7f417a41255fcffbd04e5aa67a9e91d256374244ed3079802af78ca168e4c2a0
IP
File type HTML document, ASCII text
Hash 1bc3134b56f77aa3c197931b333d649b
8f583784e1a2b5f39aa83330bb40c357dbf173b6
b5e7ed7a321e3d8b83acac05984c722b2cbc8695474eb1ea8a7c069f78b4b61d
NIDS Severity Alert suricata low ET INFO Namecheap URL Forward
GET /?inf_contact_key=7f417a41255fcffbd04e5aa67a9e91d256374244ed3079802af78ca168e4c2a0 HTTP/1.1
Host: bamoukalayouwa.sbs
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Thu, 23 Mar 2023 08:28:22 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 292
Connection: keep-alive
Location: https://adv.liliese.com/ofc/87f17afe-496f2ba2-157ada7a-30b8-c146/0aad1fe9-a2c81856-3644db2e-6cb0-fca5?Subid=815003233&externalid=%7BYOUR_CLICKID_HERE%7D&inf_contact_key=7f417a41255fcffbd04e5aa67a9e91d256374244ed3079802af78ca168e4c2a0&sub_pubid=%7BYOUR_SUB_PUBID_HERE%7D
X-Served-By: Namecheap URL Forward
Server: namecheap-nginx
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 050ca4dc2182e0a27573b0d9f32b7834
bec14dc5af0d0b32210470673511acd8db404308
b6129b9d1848f75265dca4446c5399927bdaf15c7b49c083765847b0fe276eaf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B6129B9D1848F75265DCA4446C5399927BDAF15C7B49C083765847B0FE276EAF"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7233
Expires: Thu, 23 Mar 2023 10:28:55 GMT
Date: Thu, 23 Mar 2023 08:28:22 GMT
Connection: keep-alive
adv.liliese.com/ofc/87f17afe-496f2ba2-157ada7a-30b8-c146/0aad1fe9-a2c81856-3644db2e-6cb0-fca5?Subid=815003233&externalid=%7BYOUR_CLICKID_HERE%7D&inf_contact_key=7f417a41255fcffbd04e5aa67a9e91d256374244ed3079802af78ca168e4c2a0&sub_pubid=%7BYOUR_SUB_PUBID_HERE%7D
303 See Other 331 B URL HTTP/2 adv.liliese.com/ofc/87f17afe-496f2ba2-157ada7a-30b8-c146/0aad1fe9-a2c81856-3644db2e-6cb0-fca5?Subid=815003233&externalid=%7BYOUR_CLICKID_HERE%7D&inf_contact_key=7f417a41255fcffbd04e5aa67a9e91d256374244ed3079802af78ca168e4c2a0&sub_pubid=%7BYOUR_SUB_PUBID_HERE%7D
IP
ASN #29119 ServiHosting Networks S.L.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (613)
Hash 8a9cba3e22a817ee4833d216dd677194
9350e6f92d720ac5fc7c379c3ce48de35e2bda8f
816a5ac49681bf6a39e14dd7a6b87f8584307166b8dc9164182c880ecbfc1646
GET /ofc/87f17afe-496f2ba2-157ada7a-30b8-c146/0aad1fe9-a2c81856-3644db2e-6cb0-fca5?Subid=815003233&externalid=%7BYOUR_CLICKID_HERE%7D&inf_contact_key=7f417a41255fcffbd04e5aa67a9e91d256374244ed3079802af78ca168e4c2a0&sub_pubid=%7BYOUR_SUB_PUBID_HERE%7D HTTP/1.1
Host: adv.liliese.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 303 See Other
date: Thu, 23 Mar 2023 08:28:23 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: no-cache, private
location: https://pompechaleur.economiselenergie.site/lp6?c=xmiiBBoVB&co=1&tx_id=M2023032308-66e7319404e85afceb60c1cb00cb8b30&var4=815003233/lp6?c=xmiiBBoVB&co=1&tx_id=M2023032308-66e7319404e85afceb60c1cb00cb8b30&var4=815003233&spub=87f17afe-496f2ba2-157ada7a-30b8-c146
tcdn-backend: c120_gasmobi
content-encoding: gzip
age: 0
vary: , Accept-Encoding
tp-cache: MISS
content-length: 331
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 7waTFQr1TxOU6YuO06u00Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: vh8eKcLX3dWc5hn66cB0iM6IJhU=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 342da587101df62e3e8f03dc4a87f93d
897c40f31b24adf281b804bbca7f0ffba5b86816
f6b8dde2c506c3ec03517324e93c04058e44e345dae5a52e5f49c97d77455aec
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 08:28:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 342da587101df62e3e8f03dc4a87f93d
897c40f31b24adf281b804bbca7f0ffba5b86816
f6b8dde2c506c3ec03517324e93c04058e44e345dae5a52e5f49c97d77455aec
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 08:28:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 23c054d3aee551b6fdc42a5a472a7040
b1a46c12ac7d65c979fd1998bdb243f3dba8f956
9e8b91ab91da9ea20dfb5f90c1c06239d2872b0eb80785534d0c59c3b51de404
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 08:28:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-PRM6FKR
200 OK 75 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PRM6FKR
IP
File type ASCII text, with very long lines (9387)
Hash 5d8150efad4d463f0062e6e29191734c
06fc55618ea9eb8e940f5932b1451b55632b08cb
3324cabddaa09b1519b65b9ebee7da7c127b1c6e5f5532085d79a7ec9c0e01f7
GET /gtm.js?id=GTM-PRM6FKR HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 23 Mar 2023 08:28:23 GMT
expires: Thu, 23 Mar 2023 08:28:23 GMT
cache-control: private, max-age=900
last-modified: Thu, 23 Mar 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74920
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 3.4 kB IP
File type gzip compressed data, from Unix\012- data
Hash 429f1862136bc8e738a21daab2f8ece9
bd4ec09b2a1dd8e3dee305264944939aefbbbf12
13276edd9362d62f564e3b07ce69f1e212617958171816736741072d5d363d1e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 08:28:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
200 OK 46 kB URL HTTP/2 fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Hash c1fd378f54921c75e4ae1821e7b8fff6
2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Mar 2023 18:05:11 GMT
expires: Thu, 21 Mar 2024 18:05:11 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Jul 2022 19:58:01 GMT
content-type: font/woff2
age: 51792
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 097d447e049e3b41f92a4695b1b0c3c7
f39c9ef8d22bee41d940bf719c75b2cfae9291d5
459e0e586fca9a4720e4e25fa59978368c9d373ee86575a7b40d0ef4262043ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 08:28:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 23c054d3aee551b6fdc42a5a472a7040
b1a46c12ac7d65c979fd1998bdb243f3dba8f956
9e8b91ab91da9ea20dfb5f90c1c06239d2872b0eb80785534d0c59c3b51de404
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 08:28:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 097d447e049e3b41f92a4695b1b0c3c7
f39c9ef8d22bee41d940bf719c75b2cfae9291d5
459e0e586fca9a4720e4e25fa59978368c9d373ee86575a7b40d0ef4262043ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 08:28:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
analytics.tiktok.com/i18n/pixel/events.js?sdkid=C9P6BEBC77UADFMACDFG&lib=ttq
200 OK 1.4 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=C9P6BEBC77UADFMACDFG&lib=ttq
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (3098)
Hash 55fd35606bb2c7fcc32ee3b4ee4c3731
c41d86be692a54fc799488226b8b7e4c004bd043
de13914b149cd3d57fef37f6aa179ea79512cb017c760adde6dbf71801ec33e7
GET /i18n/pixel/events.js?sdkid=C9P6BEBC77UADFMACDFG&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 202303230828248A2612E4D0629501B4A9
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60787dee798e7afc9c5500f386c65d6ca1017a62155cfc5d688040557d9f3b94d6ae9c7ebb77267a4e5aee7dfdb9477aafedb19702b70368b25278e42fe8fdfcaad8153e9321e501ca0d29f01daf0c50c8
content-encoding: gzip
expires: Thu, 23 Mar 2023 08:28:24 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 23 Mar 2023 08:28:24 GMT
content-length: 1399
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2-47081134) (-)
vary: Accept-Encoding
set-cookie: _ttp=2NPK6ricCBV8grxfw24sO5oSWp6; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=2, cdn-cache; desc=MISS, edge; dur=1, origin; dur=99
x-origin-response-time: 99,23.36.79.28
x-akamai-request-id: 49c74895
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/main.MTE3ZGZjMmFkMQ.js
200 OK 68 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/main.MTE3ZGZjMmFkMQ.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21891)
Hash d47309bed2ba8c7cb99710b610b7737b
354a2a912469cb6ae50cd52a822c5c50a89e9bf2
00def6b36c70bea0e50f5a9564483ba42892dcf6595f7d144c33044b2a67d64b
GET /i18n/pixel/static/main.MTE3ZGZjMmFkMQ.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Cookie: _ttp=2NPK6ricCBV8grxfw24sO5oSWp6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20230221145409FB9878CBA6BE9A62917C
x-tt-trace-host: 01f84846a243ec928f44598c479da931d886bc10cf04919b50fbd3365b689fd9f0492c4a077221ec0df058ac640b6b63212520c7cca20b8621352c0155137d22c48ad4c2f71d5867e4ec6bff2ada640d7530f7834fc77da50357651f9ddb23be74
content-encoding: gzip
date: Thu, 23 Mar 2023 08:28:24 GMT
content-length: 68414
x-cache: TCP_MEM_HIT from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2-47081134) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=4
x-akamai-request-id: 49c74931
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
200 OK 6.3 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (19718), with no line terminators
Hash e072c2eeb57e57e4a307195a51fc750a
3109ce8e5ccba038646b6ddc290f63a2d8edd98a
64f77a0e6f8760825a06da7538a6ea06a4723478e1b7895078a39f2671456138
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "d19ad32008c4bc3916ea7137df776b3d:1678969189.53513"
Last-Modified: Thu, 16 Mar 2023 09:30:47 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Thu, 23 Mar 2023 08:48:24 GMT
Date: Thu, 23 Mar 2023 08:28:24 GMT
Content-Length: 6278
Connection: keep-alive
X-RG: EU
X-CC: NO
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d09ed5b5ccfa429cf3ded7d6634ce586
e1d26f666c2b0ecf75aa847b3ee907c41514b588
b5536c7e81811b1a5ffeb8dcc80a08f14b4c5ed5ddb2c53b4b52f84c721beeed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 08:28:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 6e965ba75b84abf96ca0d83da48d2fbb
4c2eb4c06cabee4d0f0606e88e9e074e2f767168
4b39bfe671df590e9c5baf75008d76f4272d8ffbafd7108e7592f8165b6806c6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 304
Cache-Control: max-age=107372
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 08:28:24 GMT
Etag: "641b0ce4-1d7"
Expires: Fri, 24 Mar 2023 14:17:56 GMT
Last-Modified: Wed, 22 Mar 2023 14:12:52 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 471
googleads.g.doubleclick.net/pagead/viewthroughconversion/10895876200/?random=1679560111455&cv=11&fst=1679560111455&bg=ffffff&guid=ON&async=1>m=45He33k0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&hn=www.googleadservices.com&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&auid=194115941.1679560111&rfmt=3&fmt=4
200 OK 1.3 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/10895876200/?random=1679560111455&cv=11&fst=1679560111455&bg=ffffff&guid=ON&async=1>m=45He33k0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&hn=www.googleadservices.com&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&auid=194115941.1679560111&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (3017), with no line terminators
Hash 2417f9df27feec2147a677a70ba2e303
1f6e3643ee4296b71d113f39995dddbd456c9918
cdd39ad8b7d978ed7f9140923b4b4ef3b055ea156a8ad05268a238b6531ac06f
GET /pagead/viewthroughconversion/10895876200/?random=1679560111455&cv=11&fst=1679560111455&bg=ffffff&guid=ON&async=1>m=45He33k0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&hn=www.googleadservices.com&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&auid=194115941.1679560111&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 08:28:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1324
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 23-Mar-2023 08:43:24 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d09ed5b5ccfa429cf3ded7d6634ce586
e1d26f666c2b0ecf75aa847b3ee907c41514b588
b5536c7e81811b1a5ffeb8dcc80a08f14b4c5ed5ddb2c53b4b52f84c721beeed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 08:28:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
unpkg.com/@lottiefiles/lottie-player@1.7.1/dist/lottie-player.js
200 OK 132 kB URL HTTP/2 unpkg.com/@lottiefiles/lottie-player@1.7.1/dist/lottie-player.js
IP
File type ASCII text, with very long lines (27447)
Size 132 kB (131567 bytes)
Hash 40cbfd7980aa2b42ce433775e3343218
8ca93c3b7a6f1ab0443479624163a4ee79304a48
8a21323f3e289b97581d2b02695e6b2bd73cc173331365a948b3b59887ba967e
GET /@lottiefiles/lottie-player@1.7.1/dist/lottie-player.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pompechaleur.economiselenergie.site/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Mar 2023 08:28:23 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"59a07-9+ZSgdYoXPYwDfF2oh5cz4L42Ds"
via: 1.1 fly.io
fly-request-id: 01GTYJ110E12EM8QHXVY0H2AAF-fra
cf-cache-status: HIT
age: 1349832
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7ac54cf768ddfabc-OSL
content-encoding: br
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash e5f5bf796d91f271e383cf1ff3ee5af4
70ead02da19095ca752d55e89a48fcdf59d44d33
247f023e282f1556e668df0033858196d682f31f659d1b53ea6dcaeff56c401a
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: owBS4hNYtUtGgQ/762cRAOMlrddAAeccbZwVMALOxIxyLBN88XzrnUY4Ju/2vn6n0vwAR9xmX2ZVGhUWEQH5OQ==
content-length: 27907
x-fb-trip-id: 1679558926
date: Thu, 23 Mar 2023 08:28:24 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 6e965ba75b84abf96ca0d83da48d2fbb
4c2eb4c06cabee4d0f0606e88e9e074e2f767168
4b39bfe671df590e9c5baf75008d76f4272d8ffbafd7108e7592f8165b6806c6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1636
Cache-Control: max-age=108704
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 08:28:24 GMT
Etag: "641b0ce4-1d7"
Expires: Fri, 24 Mar 2023 14:40:08 GMT
Last-Modified: Wed, 22 Mar 2023 14:12:52 GMT
Server: ECAcc (ska/F776)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8795e5b287f501dc39ee441cd6bd7125
9d420cfc40477940eff7fcfc1aee2c7731fd17a5
a2f6bc52d276e1f73a3e823606457e033bccf8eca8631940a55c298f952451ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 08:28:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 78815ec28cdd11dab4f66f2eaab35658
c6fd7f2a657d87c6e7641be6fc69913c427cd26a
f99b9d279c7ddfe7916dde9c7390be1f225e330ffa662bd7ae603ceed76e44c3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 08:28:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6144
Expires: Thu, 23 Mar 2023 10:10:48 GMT
Date: Thu, 23 Mar 2023 08:28:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6144
Expires: Thu, 23 Mar 2023 10:10:48 GMT
Date: Thu, 23 Mar 2023 08:28:24 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 85351059b67b0a42eda7e69a31b3b4b4
b798268806dc2f79f033e5872676019faf0e0cc1
86e163b7159b197d6358ab01333ac6da221de0ebe1c5da8d5cef2977d38625fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4000
x-amzn-requestid: 68dc01d7-3eed-48f6-8532-8efaa96cc1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEqyoAMFgNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-3852cc8961365a560d1fa02f;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: k6VaCG5oTQnKOvKJnleVqxIIc9yOgdOL0oPcL0ZSVw7DZQ8_GzFoZQ==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 4d8620b80ebe37d366388e117039aa8e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:47:43 GMT
age: 38441
etag: "b798268806dc2f79f033e5872676019faf0e0cc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c05bfdf1411a931d8ea9adc64b07bc74
156ef59e53564a4f2b27002b2695fafecd578d82
15d17c0df2d2b0625ecf5f576a7ff630ae8b923b28be354ad23aec6a284a801a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6692
x-amzn-requestid: 3a0f6a8d-89b1-43f4-8a15-8749bdbc047b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM9d9FcOoAMFaFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b75f2-3540256d6be3d4f85bba65ea;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:41:06 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Jj5lAwItWYm45j5kLqQnd3fhsiGsiuSiSVtrBUOolyHvPAmCc0S71A==
via: 1.1 e92cc925fc8895560cd0628c67f58828.cloudfront.net (CloudFront), 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 07:54:24 GMT
age: 2040
etag: "156ef59e53564a4f2b27002b2695fafecd578d82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32536e34-d62f-40f1-b196-c4bbe784cca6.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32536e34-d62f-40f1-b196-c4bbe784cca6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f148d2e3cd5679fe5cb9cd58630517c7
b312f7c6526254709a0f7424502952e9eaff9c78
6e98a90935a53caa8871238088e77269e5d7215d16dccabe7e9e4af09f39f7b0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32536e34-d62f-40f1-b196-c4bbe784cca6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5356
x-amzn-requestid: a49dca74-54fa-457c-a5b6-e347fd139d1d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM8ovEgAIAMFcnA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b749e-673461e13b7d2f4e7ad66e7f;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:35:26 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: ATbmD8auxaSsKlj6KDtI9biU-euAHDVEIVMiHR7hmroViIWghZUsKQ==
via: 1.1 88a7ff956a5b49ec3a35abfc0027af12.cloudfront.net (CloudFront), 1.1 7514e5e25722778fd4b1744d4ecc67e0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:43:45 GMT
age: 38679
etag: "b312f7c6526254709a0f7424502952e9eaff9c78"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffa9cba5-a508-44d3-b8ad-393590528e8b.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffa9cba5-a508-44d3-b8ad-393590528e8b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9a774aa1a206523471dfa75b624be2af
e41ca3e0550e74562b0374565225444ffb977c4e
208ea0f25d7bde64057701891811cdb8c0a67b6f60899ca514fbaf2e04d595bc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffa9cba5-a508-44d3-b8ad-393590528e8b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9550
x-amzn-requestid: 0c3d2b49-9407-4d12-930a-83e585c165b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CBF7kFvwIAMF43g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6416b6b0-59461f0119abb54f773150a0;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 07:16:00 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: wVn33PkqDp-KFwzsDiNz8uSRuW2lwBLllYsQevboO6qidq1OkL-X5Q==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 0a2ce08fa1ec3c33302a7547d3305978.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 22:33:44 GMT
age: 35680
etag: "e41ca3e0550e74562b0374565225444ffb977c4e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/10895876200/?random=1679560111455&cv=11&fst=1679558400000&bg=ffffff&guid=ON&async=1>m=45He33k0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&fmt=3&is_vtc=1&random=3024814506&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/10895876200/?random=1679560111455&cv=11&fst=1679558400000&bg=ffffff&guid=ON&async=1>m=45He33k0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&fmt=3&is_vtc=1&random=3024814506&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10895876200/?random=1679560111455&cv=11&fst=1679558400000&bg=ffffff&guid=ON&async=1>m=45He33k0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&fmt=3&is_vtc=1&random=3024814506&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 08:28:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/10895876200/?random=1679560111455&cv=11&fst=1679558400000&bg=ffffff&guid=ON&async=1>m=45He33k0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&fmt=3&is_vtc=1&random=3024814506&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/10895876200/?random=1679560111455&cv=11&fst=1679558400000&bg=ffffff&guid=ON&async=1>m=45He33k0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&fmt=3&is_vtc=1&random=3024814506&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10895876200/?random=1679560111455&cv=11&fst=1679558400000&bg=ffffff&guid=ON&async=1>m=45He33k0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&fmt=3&is_vtc=1&random=3024814506&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 08:28:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a816157-9568-4e7f-a034-14b2f1982949.jpeg
200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a816157-9568-4e7f-a034-14b2f1982949.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f4a771935927950222124e14b56046df
d07fe53e4ac41048497b2732c017f6666c3eda9e
4e8388626074646c2336711be0a170ceab367c343648a32d2389dd87640251d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a816157-9568-4e7f-a034-14b2f1982949.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4912
x-amzn-requestid: d8fcf495-12af-42ae-ad69-0ea07b1a8669
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM8H3Fl1IAMFYgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b73cb-01cbd1981a57e53b3d3cde93;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:31:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: soxgrR0B6Rz79QysB7qbMTsNYmkYfG8doOMPpTEd9uLlrE6WTcDKdw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:47:44 GMT
age: 38440
etag: "d07fe53e4ac41048497b2732c017f6666c3eda9e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcbdd70a4-b533-4e87-84d2-c2122ca1cdc5.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcbdd70a4-b533-4e87-84d2-c2122ca1cdc5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 31ad983ec21e3dee7b6083bc04742aee
a98933e2845c02158175a54d9648f12086a96569
8cb18730db03dd8727b2ff42ecfa7885b9e8dbe3c37c08b1ad0c67e629338b95
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcbdd70a4-b533-4e87-84d2-c2122ca1cdc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5915
x-amzn-requestid: 1c6acb42-48cc-4113-a8d0-6a811cd16613
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B9xXaGUVoAMFwIw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64156295-0edcaad90df031882fa7457c;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 07:04:53 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 6f6NSPPmIBAP_pxmZuHRz6WJJjnp3NIO26SNyKYhq2FikQkP5hOe7w==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 599f04a365a179d553682d476509c388.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:58:52 GMT
age: 37772
etag: "a98933e2845c02158175a54d9648f12086a96569"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1455686/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1455686/tfa.js
IP
File type ASCII text, with very long lines (59028)
Hash 47e5601078400086790c7da181b34468
885a0c03336216e49018ff58a471077579e48d97
cbbc3952b9f9556e6bfc671841b6821b90253568cb19d653058fe0fc6b145b39
GET /libtrc/unip/1455686/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: dEsN3M8BOQ5b/8VJ7x7ZgESKpyiOaLh+5RUqQCGGXLIqFeRNbJEfbuRHao36RyuIzOyH4qgWr+s=
x-amz-request-id: QVA4Q7ND74DPMH9J
x-amz-replication-status: COMPLETED
last-modified: Sun, 19 Mar 2023 11:21:53 GMT
etag: "c66421c0f5f0e11a7ad5a193661eb6cd"
x-amz-server-side-encryption: AES256
x-amz-version-id: nqE4ckAb2KMr9exDw8VrRRbJ3Yxh4.oM
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 08:28:24 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1641-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1679560104.267545,VS0,VE201
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 47
access-control-allow-origin: *
content-length: 18169
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1000
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Cookie: _ttp=2NPK6ricCBV8grxfw24sO5oSWp6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 20230323082824979EBEC479E5A1018C8E
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf6044faeb2b99c092c97016c61fe0db1beb0b77946202a21fcba19117b6ae133d492347bf75bdc0b617e6632a50d7be6c9786da511c1dfcfcf6859cc9fa726389d8633b87d0c4c48a3ccc9c19d5d7787b2ce276d65ffd92ec63b9db86cd66379f69
x-origin-response-time: 20,23.218.220.145
x-akamai-request-id: 6a9ca621.49c74a52
expires: Thu, 23 Mar 2023 08:28:24 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 23 Mar 2023 08:28:24 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2-47081134) (-)
x-cache-remote: TCP_MISS from a23-218-220-145.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2-47081134) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=99, origin; dur=20, inner; dur=17
x-parent-response-time: 116,23.36.79.28
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1021
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Cookie: _ttp=2NPK6ricCBV8grxfw24sO5oSWp6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 2023032308282474C66BA9BD0CF00177AB
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf6044faeb2b99c092c97016c61fe0db1bebe8927e90ca994afe191be3f71e9f7df8bf7c6c29c2baf04cce0024d8bbf301c4005fb3b367a70e72fd27436ad84ad3442fe960f2efc1a4d442729984254f9b62013e39b6ab6d6dfc362a36af1911b29f
x-origin-response-time: 21,23.217.116.183
x-akamai-request-id: 4af033ab.49c74a50
expires: Thu, 23 Mar 2023 08:28:24 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 23 Mar 2023 08:28:24 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2-47081134) (-)
x-cache-remote: TCP_MISS from a23-217-116-183.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2-47081134) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=103, origin; dur=21, inner; dur=18
x-parent-response-time: 120,23.36.79.28
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8795e5b287f501dc39ee441cd6bd7125
9d420cfc40477940eff7fcfc1aee2c7731fd17a5
a2f6bc52d276e1f73a3e823606457e033bccf8eca8631940a55c298f952451ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 08:28:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9f0607231b4674d2bfb5a6798b0b4093
6c14f5c952e413365703144951b09b7126ff8e2d
869816689cb9507d294d69f953e8ea33452a177d405816ad86f729b123ceaa98
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 08:28:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
status.thawte.com/
200 OK 471 B IP
Hash 2b9a2424571f4974a7e5f834b1cbed1e
59328749b0b2898fc35a077a2bac7998cbb314a5
cc9ed984364ba7b1851b3ab75fa653bcaef592ac479356d99c5cbea9293c6b43
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2900
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 08:28:24 GMT
Etag: "641a0fed-1d7"
Last-Modified: Thu, 23 Mar 2023 07:40:04 GMT
Server: ECAcc (ska/F757)
X-Cache: HIT
Content-Length: 471
status.thawte.com/
200 OK 471 B IP
Hash 2b9a2424571f4974a7e5f834b1cbed1e
59328749b0b2898fc35a077a2bac7998cbb314a5
cc9ed984364ba7b1851b3ab75fa653bcaef592ac479356d99c5cbea9293c6b43
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4990
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 08:28:24 GMT
Last-Modified: Thu, 23 Mar 2023 07:05:14 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 471
region1.google-analytics.com/g/collect?v=2&tid=G-C39Y0BD3ZK>m=45je33k0&_p=1048181592&cid=1863658166.1679560112&ul=en-us&sr=1280x1024&_s=1&sid=1679560111&sct=1&seg=0&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&dt=Pompe%20%C3%A0%20Chaleur&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-C39Y0BD3ZK>m=45je33k0&_p=1048181592&cid=1863658166.1679560112&ul=en-us&sr=1280x1024&_s=1&sid=1679560111&sct=1&seg=0&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&dt=Pompe%20%C3%A0%20Chaleur&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-C39Y0BD3ZK>m=45je33k0&_p=1048181592&cid=1863658166.1679560112&ul=en-us&sr=1280x1024&_s=1&sid=1679560111&sct=1&seg=0&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&dt=Pompe%20%C3%A0%20Chaleur&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://pompechaleur.economiselenergie.site
date: Thu, 23 Mar 2023 08:28:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tr.outbrain.com/cachedClickId?marketerId=undefined
200 OK 35 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=undefined
IP
File type ASCII text, with no line terminators
Hash 75c843c7b717e7b722777907475c67a3
983d1c9a05b315288039b9d4694ce3b402259240
1d348f9f803c95305f63def9d75fd50e79e54a375e1a4a888edbbea366845580
GET /cachedClickId?marketerId=undefined HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 08:28:24 GMT
Content-Type: application/javascript
Content-Length: 35
X-TraceId: cfc28a7c2ba4accd1e65ae6083f77b8f
tr.outbrain.com/unifiedPixel?optOut=false&bust=08302582989340996&referrer=&marketerId=00f5931f6403d4985f007e737b55f318ac&name=PAGE_VIEW&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&g=1&obApiVersion=1.0-gtm&obtpVersion=2.0.5
200 OK 53 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?optOut=false&bust=08302582989340996&referrer=&marketerId=00f5931f6403d4985f007e737b55f318ac&name=PAGE_VIEW&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&g=1&obApiVersion=1.0-gtm&obtpVersion=2.0.5
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 414bd2a5161db03fdd910327b42c6daa
65d4cf50496813c5f1a34eddd5c50dc67d44ff47
b51f3497b0a65f1e1e87e75f5e7e823d871c23bcf76a5ee4101783c8f939e553
GET /unifiedPixel?optOut=false&bust=08302582989340996&referrer=&marketerId=00f5931f6403d4985f007e737b55f318ac&name=PAGE_VIEW&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&g=1&obApiVersion=1.0-gtm&obtpVersion=2.0.5 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 08:28:24 GMT
Content-Type: image/gif;
Content-Length: 53
Cache-Control: no-cache
X-TraceId: ea8ccffae3c33f90a1944c7bd633c0f3
www.facebook.com/tr/?id=408887930779663&ev=PageView&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&rl=&if=false&ts=1679560112183&sw=1280&sh=1024&v=2.9.99&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&cs_est=true&fbp=fb.1.1679560112182.820153563&it=1679560111985&coo=false&tm=1&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=408887930779663&ev=PageView&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&rl=&if=false&ts=1679560112183&sw=1280&sh=1024&v=2.9.99&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&cs_est=true&fbp=fb.1.1679560112182.820153563&it=1679560111985&coo=false&tm=1&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=408887930779663&ev=PageView&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&rl=&if=false&ts=1679560112183&sw=1280&sh=1024&v=2.9.99&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&cs_est=true&fbp=fb.1.1679560112182.820153563&it=1679560111985&coo=false&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 23 Mar 2023 08:28:24 GMT
X-Firefox-Spdy: h2
oneocsp.microsoft.com/ocsp
200 OK 1.8 kB URL HTTP/1.1 oneocsp.microsoft.com/ocsp
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 9fa139bc435bd69fe960565e04da1cf2
439beaa449f33aca613837fb9793129359932294
4c7504ff70a362704485cb6dd0eba3a4e3b86bc70ea04927b795e9794f492a25
POST /ocsp HTTP/1.1
Host: oneocsp.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=86400
Content-Length: 1777
Content-Type: application/ocsp-response
Expires: Tue, 28 Mar 2023 15:50:24 GMT
Last-Modified: Wed, 22 Mar 2023 09:08:23 GMT
ETag: "4c7504ff70a362704485cb6dd0eba3a4e3b86bc70ea04927b795e9794f492a25"
X-Powered-By: ASP.NET
x-content-type-options: nosniff
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: BA85988B633A46EC8DD059BF014C2B77 Ref B: OSL30EDGE0120 Ref C: 2023-03-23T08:28:24Z
Date: Thu, 23 Mar 2023 08:28:24 GMT
trc.taboola.com/1455686/trc/3/json?tim=1679560112063&data=%7B%22id%22%3A5%2C%22ii%22%3A%22%2Flp6%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1679560112059%2C%22cv%22%3A%2220230319-5-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dnomadsmedia-stilltrying-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1679560112062%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146%22%2C%22tos%22%3A0%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 1.5 kB URL HTTP/2 trc.taboola.com/1455686/trc/3/json?tim=1679560112063&data=%7B%22id%22%3A5%2C%22ii%22%3A%22%2Flp6%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1679560112059%2C%22cv%22%3A%2220230319-5-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dnomadsmedia-stilltrying-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1679560112062%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146%22%2C%22tos%22%3A0%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
File type Unicode text, UTF-8 text, with very long lines (2609), with no line terminators
Hash 4355e907e6545db0b1eb8eb3e17f97ed
a1aad9404568c0fb738993ed534ea7729590b108
1d6feb97b55f1e8198e84022f8ee1179ba3fd00515e91eabd7d4cfbc5d396653
GET /1455686/trc/3/json?tim=1679560112063&data=%7B%22id%22%3A5%2C%22ii%22%3A%22%2Flp6%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1679560112059%2C%22cv%22%3A%2220230319-5-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dnomadsmedia-stilltrying-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1679560112062%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146%22%2C%22tos%22%3A0%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 08:28:24 GMT
via: 1.1 varnish
x-served-by: cache-bma1641-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1679560105.563446,VS0,VE113
vary: Accept-Encoding
x-vcl-time-ms: 113
X-Firefox-Spdy: h2
y.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: y.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 694
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 23 Mar 2023 08:28:24 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://pompechaleur.economiselenergie.site
Vary: Origin
Request-Context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0
c.bing.com/c.gif?ctsa=mr&CtsSyncId=6B95D6D3F19147609B052AB5609BD9F0&RedC=c.clarity.ms&MXFR=101811C660446BB30918031B64446568
302 Found 624 B URL HTTP/2 c.bing.com/c.gif?ctsa=mr&CtsSyncId=6B95D6D3F19147609B052AB5609BD9F0&RedC=c.clarity.ms&MXFR=101811C660446BB30918031B64446568
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (624), with no line terminators
Hash a3044cb8f0f4215cde26ea88c3798892
0c9e7ffb92d7589d5bd5f9acea802e87ca3d6fcc
788aea7ed6be62b2e9bf69afe8e091fc0e9d2a7a9cc7130dcf4d01fc87b48365
GET /c.gif?ctsa=mr&CtsSyncId=6B95D6D3F19147609B052AB5609BD9F0&RedC=c.clarity.ms&MXFR=101811C660446BB30918031B64446568 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pompechaleur.economiselenergie.site/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?ctsa=mr&CtsSyncId=6B95D6D3F19147609B052AB5609BD9F0&MUID=0191F27292606CD4291AE0AF93376DF7
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: MUID=0191F27292606CD4291AE0AF93376DF7; domain=.bing.com; expires=Tue, 16-Apr-2024 08:28:25 GMT; path=/; SameSite=None; Secure; Priority=High;
MR=0; domain=c.bing.com; expires=Thu, 30-Mar-2023 08:28:25 GMT; path=/; SameSite=None; Secure;
SRM_B=0191F27292606CD4291AE0AF93376DF7; domain=c.bing.com; expires=Tue, 16-Apr-2024 08:28:25 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BEB780CD36764BE094F295459F5EC4B1 Ref B: OSL30EDGE0319 Ref C: 2023-03-23T08:28:25Z
date: Thu, 23 Mar 2023 08:28:24 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?ctsa=mr&CtsSyncId=6B95D6D3F19147609B052AB5609BD9F0&MUID=0191F27292606CD4291AE0AF93376DF7
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?ctsa=mr&CtsSyncId=6B95D6D3F19147609B052AB5609BD9F0&MUID=0191F27292606CD4291AE0AF93376DF7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?ctsa=mr&CtsSyncId=6B95D6D3F19147609B052AB5609BD9F0&MUID=0191F27292606CD4291AE0AF93376DF7 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pompechaleur.economiselenergie.site/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Thu, 16 Mar 2023 17:16:22 GMT
accept-ranges: bytes
etag: "c4b6d572b58d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Thu, 23-Mar-2023 08:38:25 GMT; path=/; SameSite=None; Secure;
date: Thu, 23 Mar 2023 08:28:24 GMT
content-length: 42
X-Firefox-Spdy: h2
y.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: y.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 28975
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 23 Mar 2023 08:28:25 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://pompechaleur.economiselenergie.site
Vary: Origin
Request-Context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0
trc-events.taboola.com/1455686/log/3/unip?en=pre_d_eng_tb&tos=1555&scd=0&ssd=1&est=1679560112060&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1679560113617&vi=1679560112059&ri=9f4a65cff73a1adff1a0236da0c87e47&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1455686/log/3/unip?en=pre_d_eng_tb&tos=1555&scd=0&ssd=1&est=1679560112060&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1679560113617&vi=1679560112059&ri=9f4a65cff73a1adff1a0236da0c87e47&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1455686/log/3/unip?en=pre_d_eng_tb&tos=1555&scd=0&ssd=1&est=1679560112060&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1679560113617&vi=1679560112059&ri=9f4a65cff73a1adff1a0236da0c87e47&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Thu, 23 Mar 2023 08:28:26 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://pompechaleur.economiselenergie.site
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
y.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: y.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 33899
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 23 Mar 2023 08:28:26 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://pompechaleur.economiselenergie.site
Vary: Origin
Request-Context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0
trc-events.taboola.com/1455686/log/3/unip?en=pre_d_eng_tb&tos=4558&scd=0&ssd=1&est=1679560112060&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1679560116619&vi=1679560112059&ri=9f4a65cff73a1adff1a0236da0c87e47&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1455686/log/3/unip?en=pre_d_eng_tb&tos=4558&scd=0&ssd=1&est=1679560112060&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1679560116619&vi=1679560112059&ri=9f4a65cff73a1adff1a0236da0c87e47&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1455686/log/3/unip?en=pre_d_eng_tb&tos=4558&scd=0&ssd=1&est=1679560112060&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1679560116619&vi=1679560112059&ri=9f4a65cff73a1adff1a0236da0c87e47&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032308-66e7319404e85afceb60c1cb00cb8b30%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 23 Mar 2023 08:28:29 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://pompechaleur.economiselenergie.site
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
y.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: y.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 597
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 23 Mar 2023 08:28:30 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://pompechaleur.economiselenergie.site
Vary: Origin
Request-Context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0
pompechaleur.economiselenergie.site/lp6?c=xmiiBBoVB&co=1&tx_id=M2023032308-66e7319404e85afceb60c1cb00cb8b30&var4=815003233/lp6?c=xmiiBBoVB&co=1&tx_id=M2023032308-66e7319404e85afceb60c1cb00cb8b30&var4=815003233&spub=87f17afe-496f2ba2-157ada7a-30b8-c146
200 OK 0 B URL HTTP/2 pompechaleur.economiselenergie.site/lp6?c=xmiiBBoVB&co=1&tx_id=M2023032308-66e7319404e85afceb60c1cb00cb8b30&var4=815003233/lp6?c=xmiiBBoVB&co=1&tx_id=M2023032308-66e7319404e85afceb60c1cb00cb8b30&var4=815003233&spub=87f17afe-496f2ba2-157ada7a-30b8-c146
IP
GET /lp6?c=xmiiBBoVB&co=1&tx_id=M2023032308-66e7319404e85afceb60c1cb00cb8b30&var4=815003233/lp6?c=xmiiBBoVB&co=1&tx_id=M2023032308-66e7319404e85afceb60c1cb00cb8b30&var4=815003233&spub=87f17afe-496f2ba2-157ada7a-30b8-c146 HTTP/1.1
Host: pompechaleur.economiselenergie.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Thu, 23 Mar 2023 08:28:23 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6IitwblZjUFhFd3dXSzhIRUdaSTZRdmc9PSIsInZhbHVlIjoiK0pHR2psL1RZMElnVEhabXpzODZGbnRsRlVnYXZJOXFaU1crNmpCMFlTZE1GZys0NDdWSWNEL0tYN05XbWpOMHFKYVNGc1BhM1lhZUZ5azZKWVR4UVVmaWUyTEx2Y2psT3QzbkQ4bU80ZmkxUjZHMGc1ZUw5bEV5MnhzUzBvZ1kiLCJtYWMiOiJkMTNhMThlODJkYjk2NTliNzVhMTc4MTYyYTMxNTdhZDdkN2FkMzEzZTVmMTAxOWEzMGQ3Y2VhNDQ4MThiOTViIiwidGFnIjoiIn0%3D; expires=Sat, 22-Apr-2023 18:28:23 GMT; Max-Age=2628000; path=/; samesite=lax
leadsmetal_session=eyJpdiI6IjlZUGFCNFJrcEc0MUdxSHRkZTZlblE9PSIsInZhbHVlIjoiZXR5THJjaENhVTlVeGYzN2ZNUWRZN3l5R09qeWFwMkhRQzdDRmVKT2pibjRlY24wTXkwYWVCUUpDNkgwSUg0VzFHdHV1eGt5S01vbDFIQmZLNEV5Vjdvb0llQkxhQnpPSkxCUGFPU21jOXlNRFB1WjBVM01mWnNVMXVNOFQyUnYiLCJtYWMiOiIwNWMwMGQ2NmFhZjUyOTk1YWIwYTRiYzM1N2NiYmQwOTQ1NDcwOGYxZGE0Y2Q3Nzc2MTE3ZjhmYjhmMTU1M2RkIiwidGFnIjoiIn0%3D; expires=Sat, 22-Apr-2023 18:28:23 GMT; Max-Age=2628000; path=/; httponly; samesite=lax
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0%2FkSHR4lLmN4Kd1SQdsUcnuN093S4%2FrcA80nPeUZhnQBKkkVuLWU%2F7JYb2UGOwPhyZlmHzQVGuHpWb1HcQFJT5xAVTpgxfhfxSbln8fhTVxphT6dwEBzFPspWFDMhPn%2BPhQOPkCd9vQcVY2CJucbVgeonBpvMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ac54cf52f3bb500-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js
302 Found 0 B URL HTTP/2 unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js
IP
GET /@lottiefiles/lottie-player@latest/dist/lottie-player.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 23 Mar 2023 08:28:23 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /@lottiefiles/lottie-player@1.7.1/dist/lottie-player.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GW6RYFP05063FWD6X32NFQ1M-fra
cf-cache-status: HIT
age: 399
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7ac54cf758c0fabc-OSL
X-Firefox-Spdy: h2
www.clarity.ms/eus-f-sc/s/0.7.5/clarity.js
200 OK 0 B URL HTTP/2 www.clarity.ms/eus-f-sc/s/0.7.5/clarity.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /eus-f-sc/s/0.7.5/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d95b289aeae9cd"
server: nginx/1.18.0 (Ubuntu)
x-cache: TCP_HIT
request-context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0
x-azure-ref-originshield: 029kbZAAAAAASRR7bl4/6QZdd1ykOyNDEQU1TMDRFREdFMTkxMQA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
x-azure-ref: 0qA0cZAAAAACILupxvP77R5ku4aoW4lipU1ZHMjBFREdFMDUyMgA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Thu, 23 Mar 2023 08:28:23 GMT
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Raleway:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Raleway:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
IP
GET /css2?family=Raleway:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 23 Mar 2023 08:28:23 GMT
date: Thu, 23 Mar 2023 08:28:23 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
a.plerdy.com/public/js/click/main.js?v=0.1811729165525544
200 OK 0 B URL HTTP/2 a.plerdy.com/public/js/click/main.js?v=0.1811729165525544
IP
GET /public/js/click/main.js?v=0.1811729165525544 HTTP/1.1
Host: a.plerdy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 08:28:24 GMT
content-type: application/javascript
last-modified: Fri, 10 Mar 2023 09:18:40 GMT
etag: W/"640af5f0-18c4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iFEr8Qbpttvtypeb2gD%2FiFhaNb5HUkoEbWJVgZ86TdG7Q35IvcChnCoCjNMhsznD%2F%2BFpSJqMbMCjl%2FoYA7%2BvH8LaOC3nVb%2FAPVxeBAq8OOvVewxlJRJ7ZCCP2eGtLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac54cf9eb2eb4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
34.149.35.41
141.226.228.48
23.36.79.32
104.16.126.175
157.240.200.14
185.103.37.69