Report - reurl.cc/GjerZp

Report Overview

Visited public
2024-05-06 15:30:52
Tags
URL
reurl.cc/GjerZp
Finishing URL
www.mediapart.fr/
IP / ASN
35.185.130.121
#396982 GOOGLE-CLOUD-PLATFORM
Title
Mediapart - Actualité, enquêtes et dossiers d’investigation en toute indépendance !

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ttd-cm.tagtoo.com.tw	541218	2013-01-11	2021-07-22 17:14:00	2024-02-27 10:23:51	538 B	290 B	34.160.218.201
www.mediapart.fr	345861	2007-09-04	2014-10-07 13:57:09	2024-01-30 20:11:33	9.4 kB	632 kB	151.101.66.132
static.mediapart.fr	603181	2007-09-04	2014-10-08 20:56:38	2024-02-07 19:21:28	4.1 kB	1.1 MB	151.101.66.132
uec.tagtoo.co	unknown	2010-12-03	2021-04-14 21:01:49	2024-03-10 13:17:31	388 B	4.5 kB	34.107.150.21
s.yimg.com	375	1997-05-14	2012-05-21 00:45:00	2024-05-05 19:14:48	415 B	3.0 kB	188.125.94.206
event.tagtoo.co	555291	2010-12-03	2022-06-27 04:18:19	2024-03-25 07:55:40	1.1 kB	727 B	34.96.83.10
gurfo.com	unknown	unknown	No data	No data	508 B	235 B	170.64.186.178
targetemsecure.blob.core.windows.net	20104	1995-08-10	2014-07-04 19:04:07	2024-05-06 07:43:16	486 B	4.2 kB	20.38.109.68
59eec75a75.nxcli.net	unknown	unknown	No data	No data	1.2 kB	2.8 MB	209.126.25.88
storage.reurl.cc	unknown	2017-07-20	2022-05-07 07:00:28	2024-04-09 14:37:53	1.2 kB	2.6 kB	34.149.98.30
reurl.cc	115186	2017-07-20	2017-10-13 03:32:26	2024-04-09 14:37:51	469 B	1.4 kB	35.185.130.121
ecs.tagtoo.co	258231	2010-12-03	2020-06-05 08:37:57	2024-04-09 14:37:55	788 B	24 kB	34.102.218.41

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (9)

	URL	From	Size	First Seen	Last Seen
	www.mediapart.fr/	ScriptElement	133 B	2023-03-07	2025-05-29
Pretty URL www.mediapart.fr/ IP 151.101.66.132 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:10 Last Seen2025-05-29 13:10 Times Seen1142 Hash bf4d8e443ba42a232328d4d38718b7f2 4108e40b101deb42f2d295b94e756a8e29e0a552 c132aecd2940f2d09b535e596136cd766a73b97d8b30cbf385291860b28983d0 Loading...

	www.mediapart.fr/	ScriptElement	2.6 kB	2024-08-20	2024-08-20
Pretty URL www.mediapart.fr/ IP 151.101.66.132 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-20 00:23 Last Seen2024-08-20 00:23 Times Seen1 Hash a26c1d36b4a0817c50ecd29f7edd5901 aae70891b59dd9756c4fb39465edc97493f32b33 33a491e731191e00e7a0147bfa169024e4933b800a41d08be1537ee3cdfdb6a2 Loading...

	www.mediapart.fr/assets/build/default/front/nouvelle_formule/js/home.0369bb6868f9b427.js	ScriptElement	252 B	2023-03-13	2025-01-16
Pretty URL www.mediapart.fr/assets/build/default/front/nouvelle_formule/js/home.0369bb6868f9b427.js IP 151.101.66.132 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 14:38 Last Seen2025-01-16 04:13 Times Seen1104 Hash 90d3d23bab9ae3ae93060094cd36f441 f39e738791965869d4a3032758e1661d4e158e40 47f57b3dc8c825ec056e32988b350f87ec1cb46e115f2cb6cd303370b337a3aa Loading...

	www.mediapart.fr/	ScriptElement	345 B	2023-03-07	2025-05-29
Pretty URL www.mediapart.fr/ IP 151.101.66.132 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:10 Last Seen2025-05-29 13:10 Times Seen1135 Hash 7176b428951069dd68b64fbfbfbd9cf3 35a5f6dcf8b31c95770f13b41e7044a5f5c1f238 d2104912c2bf3f034d5b8517cc9f9d6e532e9a19ffa75d7e5b0d4923b2af25d0 Loading...

	www.mediapart.fr/	ScriptElement	1.3 kB	2023-03-07	2025-01-19
Pretty URL www.mediapart.fr/ IP 151.101.66.132 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 21:48 Last Seen2025-01-19 01:43 Times Seen1111 Hash 9bd940ebc5cfb0c459d543eff5fe08b7 3139e8b8d476c413e095b88e2b797c7ae989700c a84edf79d6b947ed4d31cc231a2e459e9c641aea7f820574fa27545935168c83 Loading...

	www.mediapart.fr/	ScriptElement	510 B	2023-09-26	2025-05-29
Pretty URL www.mediapart.fr/ IP 151.101.66.132 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-09-26 02:18 Last Seen2025-05-29 13:10 Times Seen1024 Hash 2e4c4c8c21f87c72af4570eab69bae2e 5e917a74e25891c41f5df0b37c32e2b736fd41ec 1655f5ffe9c5cb27f213853d9ba48c2bc0db00723e3244a3fe939323ee7e32fe Loading...

	www.mediapart.fr/assets/build/default/front/nouvelle_formule/js/vendors.ae37ba9b33967246.js	ScriptElement	333 kB	2024-01-09	2024-08-20
Pretty URL www.mediapart.fr/assets/build/default/front/nouvelle_formule/js/vendors.ae37ba9b33967246.js IP 151.101.66.132 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-09 18:29 Last Seen2024-08-20 12:47 Times Seen276 Hash 55baf2b8e54df1252e9de779622cbe41 a49942b68338312396d12d419b128e761f3710c3 659d53b27af22e100e20baa4277f2abd277d0b83d8bc52430ae24a0909bfdf08 Loading...

	www.mediapart.fr/assets/build/default/front/nouvelle_formule/js/commons.e46d1af967542334.js	ScriptElement	143 kB	2024-03-18	2024-08-20
Pretty URL www.mediapart.fr/assets/build/default/front/nouvelle_formule/js/commons.e46d1af967542334.js IP 151.101.66.132 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-18 07:19 Last Seen2024-08-20 07:43 Times Seen33 Hash 47191bc76c3d27b91f170ff800d96d70 4f3fa597288a6c2b310680b435d1ca532dfb42ba cab46e6e13e7a133fd30d038339c7f8b7f5267726c05353fd494f460b2eae4a2 Loading...

	www.mediapart.fr/	ScriptElement	819 B	2024-02-19	2024-08-20
Pretty URL www.mediapart.fr/ IP 151.101.66.132 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-19 16:28 Last Seen2024-08-20 09:24 Times Seen85 Hash da3d14f2e855e647c3c8f4c73d5f931c 25c07d39a12d3acfca94ce0ded3808327f005400 11151fd7720d030b14c1e20c9fc9077c451cb0e1598493648016adb6cccc49af Loading...

HTTP Transactions (40)

	URL	IP	Response	Size
	storage.reurl.cc/javascripts/ga2.js	34.149.98.30		348 B
URL storage.reurl.cc/javascripts/ga2.js IP 34.149.98.30:0 ASN #396982 GOOGLE-CLOUD-PLATFORM File type JavaScript source, ASCII text, with very long lines (536), with no line terminators Size 348 B (348 bytes) Hash b62a9953b965481dc112622ba8aff6c4 8053e2d92e7c4f9a4b1d5c516b65e87acbde06e4 16cf673198b29bb08e83f5d8f74182d97d9c6dfa729c60f90f6195e739de9d20 HTTP Headers `GET /javascripts/ga2.js HTTP/1.1 Host: storage.reurl.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://reurl.cc/GjerZp DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK accept-ranges: bytes access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: *, Authorization, X-Authorization content-encoding: gzip referrer-policy: no-referrer-when-downgrade x-request-id: 97382634-c7d7-48d7-95bf-9eff33af5e80 content-length: 348 via: 1.1 google date: Mon, 06 May 2024 08:24:36 GMT age: 25549 last-modified: Thu, 29 Sep 2022 09:52:31 GMT content-type: text/javascript; charset=utf-8 vary: Accept-Encoding cache-control: public,max-age=28800 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	storage.reurl.cc/javascripts/tagtoo.js?v=3	34.149.98.30		297 B
URL storage.reurl.cc/javascripts/tagtoo.js?v=3 IP 34.149.98.30:0 ASN #396982 GOOGLE-CLOUD-PLATFORM File type ASCII text, with very long lines (615), with no line terminators Size 297 B (297 bytes) Hash b642f7ae9504efdd83375eee3a6c20cf 91b6d27ec4b2a07bfaab3df21167afe7b2254fe0 a1c2d36d3bc7059c195714b9b3c4fa4361cf97d7b015a06d6cf572798df786b8 HTTP Headers `GET /javascripts/tagtoo.js?v=3 HTTP/1.1 Host: storage.reurl.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://reurl.cc/GjerZp DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK accept-ranges: bytes access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: *, Authorization, X-Authorization content-encoding: gzip referrer-policy: no-referrer-when-downgrade x-request-id: 069d3fa0-dc46-4182-88bc-38a6652c53ea content-length: 297 via: 1.1 google date: Mon, 06 May 2024 12:04:00 GMT age: 12385 last-modified: Tue, 19 Dec 2023 13:17:58 GMT content-type: text/javascript; charset=utf-8 vary: Accept-Encoding cache-control: public,max-age=28800 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	storage.reurl.cc/javascripts/redirect.js	34.149.98.30		137 B
URL storage.reurl.cc/javascripts/redirect.js IP 34.149.98.30:0 ASN #396982 GOOGLE-CLOUD-PLATFORM File type ASCII text, with no line terminators Size 137 B (137 bytes) Hash b8d1b83cdeb3fc39033d345ee45fdea0 4bb7e64cd67345e8e60613c2f6c45c096706854f 0a01cd2c51200f878b658e08c0f37b095cb3ed34e61133f377632b29df9abdaa HTTP Headers `GET /javascripts/redirect.js HTTP/1.1 Host: storage.reurl.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://reurl.cc/GjerZp DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK accept-ranges: bytes access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: *, Authorization, X-Authorization content-encoding: gzip referrer-policy: no-referrer-when-downgrade x-request-id: 5cdcf31d-7488-45f3-b22c-42bd18f2c8cf content-length: 137 via: 1.1 google date: Mon, 06 May 2024 11:56:48 GMT age: 12817 last-modified: Thu, 29 Sep 2022 09:52:31 GMT content-type: text/javascript; charset=utf-8 vary: Accept-Encoding cache-control: public,max-age=28800 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	reurl.cc/GjerZp	35.185.130.121	200 OK	884 B
URL User Request GET HTTP/2 reurl.cc/GjerZp IP 35.185.130.121:443 ASN #396982 GOOGLE-CLOUD-PLATFORM Certificate IssuerLet's Encrypt Subjectreurl.cc Fingerprint7E:A8:AA:A6:64:E0:31:0D:FB:B3:C3:64:65:42:35:A2:A1:77:16:B9 ValidityMon, 18 Mar 2024 02:31:50 GMT - Sun, 16 Jun 2024 02:31:49 GMT File type HTML document, ASCII text, with very long lines (1595), with no line terminators Size 884 B (884 bytes) Hash 6871335a90d2892210496e9683ce52a8 94b86d5a851432c0e61288db5773e0f0aebcdee6 8a574e2819af796cc1bf589509caf4230a79640e8786ad13b9f70ef37381bf5e HTTP Headers `GET /GjerZp HTTP/1.1 Host: reurl.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx/1.18.0 (Ubuntu) date: Mon, 06 May 2024 15:30:25 GMT content-type: text/html; charset=utf-8 access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: *, Authorization, X-Authorization referrer-policy: no-referrer-when-downgrade target: https://gurfo.com/admiral/?p=lbnAV vary: Accept-Encoding, Origin x-request-id: 55d63796-8cf1-4b4b-86c0-bb50c479afec content-encoding: gzip X-Firefox-Spdy: h2`

	ecs.tagtoo.co/js/fp.min.js	34.102.218.41		13 kB
URL ecs.tagtoo.co/js/fp.min.js IP 34.102.218.41:0 ASN #396982 GOOGLE-CLOUD-PLATFORM File type JavaScript source, Unicode text, UTF-8 text, with very long lines (31370) Size 13 kB (12950 bytes) Hash cc9c5b0862e4e039957bbc0f6c08a3c9 e9edca8399e0b760271972bb37bf573fb224bbdd 561df1b2a900c7564a7c7ce397c38d145d1fd19e9dace210902125bd5b5a8df4 HTTP Headers `GET /js/fp.min.js HTTP/1.1 Host: ecs.tagtoo.co User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://reurl.cc/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK x-goog-generation: 1631784347603860 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 12950 content-encoding: gzip x-goog-hash: crc32c=paC+Ww==, md5=XZFZBzxE5IWLB9REWhrc6w== x-goog-storage-class: STANDARD accept-ranges: bytes content-length: 12950 access-control-allow-origin: * access-control-expose-headers: Content-Type, Access-Control-Allow-Origin x-guploader-uploadid: ABPtcPrywAj0mOrAZ1petqbL4epg4POlzuN--ZMpy7ScC6kBWGZjX9vhpaxUTiSWZb5GyVAcSZ1O4qQtQQ server: UploadServer date: Mon, 06 May 2024 15:27:27 GMT expires: Mon, 06 May 2024 15:32:27 GMT cache-control: public, max-age=300 age: 178 last-modified: Thu, 16 Sep 2021 09:25:47 GMT etag: "5d9159073c44e4858b07d4445a1adceb" content-type: text/javascript; charset=utf-8 vary: Accept-Encoding alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	uec.tagtoo.co/tuec.js	34.107.150.21		3.8 kB
URL uec.tagtoo.co/tuec.js IP 34.107.150.21:0 ASN #396982 GOOGLE-CLOUD-PLATFORM File type JavaScript source, ASCII text, with very long lines (9690) Size 3.8 kB (3770 bytes) Hash 9d94b7776bb6b8fcc6f9fd70c18341cf 2572e9682e3175c4ab6f5fc95a00ec01607b4cca 698fe0a6500f771d98d1ca713a5445d523fac649207572b69123699702854c0b HTTP Headers `GET /tuec.js HTTP/1.1 Host: uec.tagtoo.co User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://reurl.cc/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK x-goog-generation: 1702372126688115 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 3770 content-encoding: gzip x-goog-hash: crc32c=IxwxIw==, md5=L6Ez21DNgdh7j/uHKaarNQ== x-goog-storage-class: STANDARD accept-ranges: bytes content-length: 3770 x-guploader-uploadid: ABPtcPpXDj7RR3WtYZ1kt41ZLs3qEDpQMVBNvl5-q8bZky0wW2o6GY44QAH2W-_pppaL9iThSJC9x1xqIQ server: UploadServer date: Mon, 06 May 2024 14:51:14 GMT age: 2351 last-modified: Tue, 12 Dec 2023 09:08:46 GMT etag: "2fa133db50cd81d87b8ffb8729a6ab35" content-type: application/javascript vary: Accept-Encoding cache-control: public,max-age=3600 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	ecs.tagtoo.co/js/unitrack.js	34.102.218.41		8.7 kB
URL ecs.tagtoo.co/js/unitrack.js IP 34.102.218.41:0 ASN #396982 GOOGLE-CLOUD-PLATFORM File type JavaScript source, ASCII text, with very long lines (26114) Size 8.7 kB (8725 bytes) Hash 3598ca086dcade7dba871cdab47e3918 712fb1751cbd5c2ba2d549ef1a5b642387998b17 2eab2b7adfd71b5cf3fe3747f993d26520691d544bb7fc4338dc049b4f0d1c2c HTTP Headers `GET /js/unitrack.js HTTP/1.1 Host: ecs.tagtoo.co User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://reurl.cc/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK x-guploader-uploadid: ABPtcPq-rKx4GP7AklLVT8G9JpSN-YV37CUQ7iIidTcUuKRmmUo1x5DT8e5laQBwlvfB1aBzADRDNA4ftw x-goog-generation: 1684309132134575 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 8725 content-encoding: gzip x-goog-hash: crc32c=Uh9iNA==, md5=zNUT7b4+tmwX1zyU1kYlJg== x-goog-storage-class: STANDARD accept-ranges: bytes content-length: 8725 access-control-allow-origin: * access-control-expose-headers: Content-Type, Access-Control-Allow-Origin server: UploadServer date: Mon, 06 May 2024 14:02:50 GMT expires: Mon, 06 May 2024 15:32:50 GMT cache-control: public,max-age=5400 age: 5255 last-modified: Wed, 17 May 2023 07:38:52 GMT etag: "ccd513edbe3eb66c17d73c94d6462526" content-type: application/javascript; charset=utf-8 vary: Accept-Encoding alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	s.yimg.com/rz/l/favicon.ico	188.125.94.206		2.2 kB
URL s.yimg.com/rz/l/favicon.ico IP 188.125.94.206:0 ASN #10310 YAHOO-1 File type MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel Size 2.2 kB (2238 bytes) Hash 3a07174943f82046370997254100d870 ecb1e2e89af0ec6f45f875c22df0fbd45821ba80 c6f7ee2cadae2e121342a8c4245141175bfe887776206deb17149d46cf3aa827 HTTP Headers `GET /rz/l/favicon.ico HTTP/1.1 Host: s.yimg.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://reurl.cc/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK x-amz-id-2: ryGjWSAN+3QhU3lQY6HzIDSHmlBdf+01MBTh7G+e5mQGNgSVOpPvth/DaFY06H2U9aOwAwmciwI= x-amz-request-id: CWCGRF0E29KP5ZY4 date: Mon, 06 May 2024 14:45:49 GMT last-modified: Sun, 05 May 2024 21:30:59 GMT etag: "3a07174943f82046370997254100d870" x-amz-server-side-encryption: AES256 cache-control: private expires: Mon, 06 May 2024 23:00:00 GMT accept-ranges: bytes content-type: image/vnd.microsoft.icon server: ATS content-length: 2238 referrer-policy: no-referrer-when-downgrade vary: Origin age: 2677 ats-carp-promotion: 1 strict-transport-security: max-age=31536000 expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" x-xss-protection: 1; mode=block x-content-type-options: nosniff X-Firefox-Spdy: h2

	event.tagtoo.co/permanent?fp=5db3a4e34790624df926db520a13f79f	34.96.83.10		2 B
URL event.tagtoo.co/permanent?fp=5db3a4e34790624df926db520a13f79f IP 34.96.83.10:0 ASN #396982 GOOGLE-CLOUD-PLATFORM File type ASCII text, with no line terminators Size 2 B (2 bytes) Hash e0aa021e21dddbd6d8cecec71e9cf564 9ce3bd4224c8c1780db56b4125ecf3f24bf748b7 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3 HTTP Headers OPTIONS /permanent?fp=5db3a4e34790624df926db520a13f79f HTTP/1.1 Host: event.tagtoo.co User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Access-Control-Request-Method: GET Access-Control-Request-Headers: x-token Referer: https://reurl.cc/ Origin: https://reurl.cc DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK date: Mon, 06 May 2024 15:30:25 GMT server: uvicorn access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS access-control-max-age: 600 access-control-allow-headers: Accept, Accept-Language, Content-Language, Content-Type, X-TOKEN content-length: 2 content-type: text/plain; charset=utf-8 via: 1.1 google alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2`

	event.tagtoo.co/permanent?fp=5db3a4e34790624df926db520a13f79f	34.96.83.10		48 B
URL event.tagtoo.co/permanent?fp=5db3a4e34790624df926db520a13f79f IP 34.96.83.10:0 ASN #396982 GOOGLE-CLOUD-PLATFORM File type JSON text data Size 48 B (48 bytes) Hash f93939fa179b3e825a05315bd6bd05b5 c4fd2f76ddd56c53e685606cfc81c151e2a77fe4 64053fa3efac1c12a839796ecd316ffd4d823d9bb18640aabb5f4383a1eb4dd2 HTTP Headers GET /permanent?fp=5db3a4e34790624df926db520a13f79f HTTP/1.1 Host: event.tagtoo.co User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br X-TOKEN: 4947f23b246ec00bfe183b09cb702d9e3593dddb6fcd42c2718236a4919a Origin: https://reurl.cc DNT: 1 Connection: keep-alive Referer: https://reurl.cc/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK date: Mon, 06 May 2024 15:30:26 GMT server: uvicorn content-length: 48 content-type: application/json access-control-allow-origin: * via: 1.1 google alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2`

	ttd-cm.tagtoo.com.tw/prn/uidm/?tuid=b7a8e221ba20b17ee16722d8ec5e4c50&pid=1009&puid=test_user_id&link=https%3A%2F%2Fgurfo.com%2Fadmiral%2F%3Fp%3DlbnAV	34.160.218.201		21 B
URL ttd-cm.tagtoo.com.tw/prn/uidm/?tuid=b7a8e221ba20b17ee16722d8ec5e4c50&pid=1009&puid=test_user_id&link=https%3A%2F%2Fgurfo.com%2Fadmiral%2F%3Fp%3DlbnAV IP 34.160.218.201:0 ASN #396982 GOOGLE-CLOUD-PLATFORM File type JSON text data Size 21 B (21 bytes) Hash 5ef316db61af8b9f385a47160ff7a943 af0b1f921d3b8da2f5975844ecaf43eedf0cda68 de8a41e157ef0da2ade162ac2dc3a95e99ae93f24be2e671deef7a0df9677c12 HTTP Headers GET /prn/uidm/?tuid=b7a8e221ba20b17ee16722d8ec5e4c50&pid=1009&puid=test_user_id&link=https%3A%2F%2Fgurfo.com%2Fadmiral%2F%3Fp%3DlbnAV HTTP/1.1 Host: ttd-cm.tagtoo.com.tw User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://reurl.cc DNT: 1 Connection: keep-alive Referer: https://reurl.cc/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: gunicorn/19.9.0 date: Mon, 06 May 2024 15:30:27 GMT content-type: application/json content-length: 21 vary: Origin access-control-allow-origin: * via: 1.1 google alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2`

	gurfo.com/admiral/?p=lbnAV	170.64.186.178	302 Found	0 B
URL User Request GET HTTP/2 gurfo.com/admiral/?p=lbnAV IP 170.64.186.178:443 ASN #14061 DIGITALOCEAN-ASN Certificate IssuerLet's Encrypt Subjectgurfo.com Fingerprint05:0B:31:9E:88:F4:48:AE:0D:98:63:46:E5:FE:BC:29:12:77:4A:CA ValidityTue, 02 Apr 2024 16:24:11 GMT - Mon, 01 Jul 2024 16:24:10 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /admiral/?p=lbnAV HTTP/1.1 Host: gurfo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://reurl.cc/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 302 Found server: nginx date: Mon, 06 May 2024 15:30:30 GMT content-type: text/html; charset=UTF-8 content-length: 0 location: https://59eec75a75.nxcli.net/bluehost/ x-powered-by: PHP/8.0.30, PleskLin X-Firefox-Spdy: h2`

	www.mediapart.fr/assets/build/default/front/nouvelle_formule/css/main.62e200263b4aff4f.css	151.101.66.132	200 OK	82 kB
URL GET HTTP/2 www.mediapart.fr/assets/build/default/front/nouvelle_formule/css/main.62e200263b4aff4f.css IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type ASCII text, with very long lines (65536), with no line terminators Size 82 kB (81782 bytes) Hash 8370d4d0ae3737d593c494abe95cfc65 a89442b72b1127404aa4f578680c5269701d1fb9 fc0adda16b5c21887df68b10c9a61fc2283f8b1d8520c8b2870cbfa131de11f7 HTTP Headers `GET /assets/build/default/front/nouvelle_formule/css/main.62e200263b4aff4f.css HTTP/1.1 Host: www.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.mediapart.fr/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK content-type: text/css last-modified: Thu, 11 Apr 2024 15:00:48 GMT etag: W/"6617fb20-81ebf" expires: Fri, 11 Apr 2025 15:05:07 GMT cache-control: max-age=31536000 content-encoding: gzip strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes age: 2161526 date: Mon, 06 May 2024 15:30:33 GMT vary: Accept-Encoding, Origin x-unique-req-id: b48de437-b552-4211-b074-806f39554e5f content-length: 81782 X-Firefox-Spdy: h2

	www.mediapart.fr/assets/build/default/front/nouvelle_formule/js/vendors.ae37ba9b33967246.js	151.101.66.132	200 OK	90 kB
URL GET HTTP/2 www.mediapart.fr/assets/build/default/front/nouvelle_formule/js/vendors.ae37ba9b33967246.js IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators Size 90 kB (89996 bytes) Hash 55baf2b8e54df1252e9de779622cbe41 a49942b68338312396d12d419b128e761f3710c3 659d53b27af22e100e20baa4277f2abd277d0b83d8bc52430ae24a0909bfdf08 HTTP Headers `GET /assets/build/default/front/nouvelle_formule/js/vendors.ae37ba9b33967246.js HTTP/1.1 Host: www.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.mediapart.fr/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK content-type: application/javascript last-modified: Fri, 05 Apr 2024 09:02:57 GMT etag: W/"660fbe41-515ee" expires: Sat, 05 Apr 2025 21:31:30 GMT cache-control: max-age=31536000 content-encoding: gzip strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes age: 2656743 date: Mon, 06 May 2024 15:30:33 GMT vary: Accept-Encoding, Origin x-unique-req-id: 00326a3d-742c-4e0f-97a4-b4e94f8dab2d content-length: 89996 X-Firefox-Spdy: h2

	www.mediapart.fr/assets/build/default/front/nouvelle_formule/js/commons.e46d1af967542334.js	151.101.66.132	200 OK	39 kB
URL GET HTTP/2 www.mediapart.fr/assets/build/default/front/nouvelle_formule/js/commons.e46d1af967542334.js IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators Size 39 kB (39018 bytes) Hash 47191bc76c3d27b91f170ff800d96d70 4f3fa597288a6c2b310680b435d1ca532dfb42ba cab46e6e13e7a133fd30d038339c7f8b7f5267726c05353fd494f460b2eae4a2 HTTP Headers `GET /assets/build/default/front/nouvelle_formule/js/commons.e46d1af967542334.js HTTP/1.1 Host: www.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.mediapart.fr/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK content-type: application/javascript last-modified: Fri, 05 Apr 2024 09:02:57 GMT etag: W/"660fbe41-22d62" expires: Sun, 06 Apr 2025 22:48:43 GMT cache-control: max-age=31536000 content-encoding: gzip strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes age: 2565711 date: Mon, 06 May 2024 15:30:33 GMT vary: Accept-Encoding, Origin x-unique-req-id: a5fb1bde-eec9-48b1-b8f4-b31ec661f37f content-length: 39018 X-Firefox-Spdy: h2

	www.mediapart.fr/assets/build/default/front/nouvelle_formule/js/home.0369bb6868f9b427.js	151.101.66.132	200 OK	202 B
URL GET HTTP/2 www.mediapart.fr/assets/build/default/front/nouvelle_formule/js/home.0369bb6868f9b427.js IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type JavaScript source, ASCII text, with no line terminators Size 202 B (202 bytes) Hash 90d3d23bab9ae3ae93060094cd36f441 f39e738791965869d4a3032758e1661d4e158e40 47f57b3dc8c825ec056e32988b350f87ec1cb46e115f2cb6cd303370b337a3aa HTTP Headers `GET /assets/build/default/front/nouvelle_formule/js/home.0369bb6868f9b427.js HTTP/1.1 Host: www.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.mediapart.fr/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK content-type: application/javascript last-modified: Tue, 23 Apr 2024 12:01:40 GMT etag: "6627a324-fc" expires: Wed, 30 Apr 2025 02:44:48 GMT cache-control: max-age=31536000 strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin content-encoding: gzip accept-ranges: bytes age: 564344 date: Mon, 06 May 2024 15:30:33 GMT vary: Origin, Accept-Encoding x-unique-req-id: eecb3b4b-f1f0-40d2-9795-7166d530ab9b content-length: 202 X-Firefox-Spdy: h2

	static.mediapart.fr/etmagine/navigation_highlight/files/2023/10/05/in-extremis-bloc-edito-112x112.png	151.101.66.132	200 OK	8.5 kB
URL GET HTTP/2 static.mediapart.fr/etmagine/navigation_highlight/files/2023/10/05/in-extremis-bloc-edito-112x112.png IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type PNG image data, 112 x 112, 8-bit colormap, interlaced Size 8.5 kB (8473 bytes) Hash 50bd620ed8cae26932c7c933903778d2 7529f415c6cfd46a6152cc021afad6c64cd4ff90 a504d474a55cbdb685840fe48cde705774c684880b72d7502e12245e6cc3d7b2 HTTP Headers `GET /etmagine/navigation_highlight/files/2023/10/05/in-extremis-bloc-edito-112x112.png HTTP/1.1 Host: static.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.mediapart.fr/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK content-type: image/png cache-control: max-age=31536000, public last-modified: Wed, 01 May 2024 00:56:22 GMT content-disposition: inline; filename=in-extremis-bloc-edito-112x112.png expires: Thu, 01 May 2025 00:56:22 GMT access-control-allow-origin: * strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes age: 484450 date: Mon, 06 May 2024 15:30:33 GMT x-unique-req-id: d5b5a583-44e8-40df-91b7-acad6b969391 content-length: 8473 X-Firefox-Spdy: h2

	static.mediapart.fr/etmagine/navigation_highlight/files/2024/04/24/capture-d-e-cran-2024-04-24-a-23-10-45.png	151.101.66.132	200 OK	22 kB
URL GET HTTP/2 static.mediapart.fr/etmagine/navigation_highlight/files/2024/04/24/capture-d-e-cran-2024-04-24-a-23-10-45.png IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type PNG image data, 112 x 112, 8-bit/color RGBA, interlaced Size 22 kB (22301 bytes) Hash e24baaa8e8ff0dc630ee65f9c08a3b70 b1e9a65e6e090f36e5e45330f474aca3871f170b 1eb62bd29d41c99d8797001f40e40dee29c64e6a0b341ba5500f73928f8db469 HTTP Headers GET /etmagine/navigation_highlight/files/2024/04/24/capture-d-e-cran-2024-04-24-a-23-10-45.png HTTP/1.1 Host: static.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.mediapart.fr/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-type: image/png cache-control: max-age=31536000, public last-modified: Wed, 24 Apr 2024 21:17:19 GMT content-disposition: inline; filename=capture-d-e-cran-2024-04-24-a-23-10-45.png expires: Thu, 24 Apr 2025 21:17:19 GMT access-control-allow-origin: * strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes age: 1015994 date: Mon, 06 May 2024 15:30:33 GMT x-unique-req-id: 929c85ce-9bca-47b2-974c-ce9a4c7b5281 content-length: 22301 X-Firefox-Spdy: h2

	static.mediapart.fr/etmagine/navigation_highlight/files/2024/04/30/billet-droits-voisins.png	151.101.66.132	200 OK	24 kB
URL GET HTTP/2 static.mediapart.fr/etmagine/navigation_highlight/files/2024/04/30/billet-droits-voisins.png IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type PNG image data, 112 x 112, 8-bit/color RGBA, interlaced Size 24 kB (24170 bytes) Hash 7f88bbdca3391d86a9a6730327715a99 e4e9b55f8271a584155c1a2aa353919496eee27b 85604454cd3baba3e5ab0410fc55cd4a5a56049fa4cabf61b470986dba0a1ce3 HTTP Headers `GET /etmagine/navigation_highlight/files/2024/04/30/billet-droits-voisins.png HTTP/1.1 Host: static.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.mediapart.fr/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK content-type: image/png cache-control: max-age=31536000, public last-modified: Tue, 30 Apr 2024 16:22:54 GMT content-disposition: inline; filename=billet-droits-voisins.png expires: Wed, 30 Apr 2025 16:22:54 GMT access-control-allow-origin: * strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes age: 515258 date: Mon, 06 May 2024 15:30:33 GMT x-unique-req-id: 9277635f-1560-4dd2-b21b-7b698ee722d7 content-length: 24170 X-Firefox-Spdy: h2

	static.mediapart.fr/etmagine/navigation_highlight/files/2024/02/14/lettre-club-mediapart.png	151.101.66.132	200 OK	12 kB
URL GET HTTP/2 static.mediapart.fr/etmagine/navigation_highlight/files/2024/02/14/lettre-club-mediapart.png IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type PNG image data, 112 x 112, 8-bit/color RGBA, interlaced Size 12 kB (11812 bytes) Hash 1acfc73205e373e511fbdf82095df18b 17f2e64e00a952fbc6bd3b19eaca2e1047f941f3 c037081137fdb9292c1c12912ef29fc9561a686d41449f45ea9974a60d0db21c HTTP Headers `GET /etmagine/navigation_highlight/files/2024/02/14/lettre-club-mediapart.png HTTP/1.1 Host: static.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.mediapart.fr/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK content-type: image/png cache-control: max-age=31536000, public last-modified: Sat, 06 Apr 2024 00:10:14 GMT content-disposition: inline; filename=lettre-club-mediapart.png expires: Sun, 06 Apr 2025 00:10:14 GMT access-control-allow-origin: * strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes age: 2647219 date: Mon, 06 May 2024 15:30:33 GMT x-unique-req-id: a28f4d5b-b46f-4a4a-a612-794593813c27 content-length: 11812 X-Firefox-Spdy: h2

	static.mediapart.fr/etmagine/default/files/2024/05/06/20240506-img-les-faux-semblants-du-bavardage-geo-industriel-demmanuel-macron.jpg	151.101.66.132	200 OK	46 kB
URL GET HTTP/2 static.mediapart.fr/etmagine/default/files/2024/05/06/20240506-img-les-faux-semblants-du-bavardage-geo-industriel-demmanuel-macron.jpg IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 661x430, components 3 Size 46 kB (46308 bytes) Hash df584a57c960786ba8f4481f33dbd3ab f5af929c00bec653c44d82449a93296d159e8a36 248e97c6a9d15efdc36813fafd27c7e32a67b8616b542f201d032e6605995c20 HTTP Headers GET /etmagine/default/files/2024/05/06/20240506-img-les-faux-semblants-du-bavardage-geo-industriel-demmanuel-macron.jpg HTTP/1.1 Host: static.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.mediapart.fr/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-type: image/jpeg cache-control: max-age=31536000, public last-modified: Mon, 06 May 2024 14:53:18 GMT content-disposition: inline; filename=20240506-img-les-faux-semblants-du-bavardage-geo-industriel-demmanuel-macron.jpg expires: Tue, 06 May 2025 14:53:18 GMT access-control-allow-origin: * strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes age: 2234 date: Mon, 06 May 2024 15:30:33 GMT x-unique-req-id: 5569a6fd-917b-4abb-9e06-d339721f1fff content-length: 46308 X-Firefox-Spdy: h2

	targetemsecure.blob.core.windows.net/84e5c880-8719-4773-8dad-7c722eb16350/84e5c880871947738dad7c722eb16350_1.js	20.38.109.68	200 OK	3.7 kB
URL GET HTTP/1.1 targetemsecure.blob.core.windows.net/84e5c880-8719-4773-8dad-7c722eb16350/84e5c880871947738dad7c722eb16350_1.js IP 20.38.109.68:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://www.mediapart.fr/ Certificate IssuerMicrosoft Corporation Subject.blob.core.windows.net FingerprintE2:96:A0:E2:7E:B9:40:56:F9:B5:C5:09:5E:53:F7:3F:E6:2F:AE:5D ValidityMon, 15 Apr 2024 02:23:18 GMT - Thu, 10 Apr 2025 02:23:18 GMT File type JavaScript source, ASCII text, with very long lines (35420) Size 3.7 kB (3695 bytes) Hash 04ca3c7b38accf40fb34036b4066c8e3 fa231bd18b1ec9e4685d138d74f1da2795699145 29a183534931b89b099a24368123f0f1f0112738c8ab3ebf21e5047dbc8e146e HTTP Headers `GET /84e5c880-8719-4773-8dad-7c722eb16350/84e5c880871947738dad7c722eb16350_1.js HTTP/1.1 Host: targetemsecure.blob.core.windows.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.mediapart.fr/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Cache-Control: public Content-Length: 3695 Content-Type: application/javascript Content-Encoding: gzip Content-MD5: dvUR+6C1qZJJ/yFjjr6HRQ== Last-Modified: Mon, 06 May 2024 13:17:17 GMT ETag: 0x8DC6DCEDA57D1D7 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 58688270-e01e-0037-22ca-9f7783000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Mon, 06 May 2024 15:30:32 GMT`

	www.mediapart.fr/assets/front/nouvelle_formule/maspero/fonts/PensumPro/PensumPro-Regular.2ff9bda49a5169c8.woff2	151.101.66.132	200 OK	40 kB
URL GET HTTP/2 www.mediapart.fr/assets/front/nouvelle_formule/maspero/fonts/PensumPro/PensumPro-Regular.2ff9bda49a5169c8.woff2 IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type Web Open Font Format (Version 2), TrueType, length 40192, version 1.0 Size 40 kB (40192 bytes) Hash 66cda9885097941521dec020e3fb8f5d bcc84f7efe1723d86d40081aaffb357d21e046bc 1fb9bd497dc3fc2edc7d9325a5b81d8e7aab5b033c15aeb41637c133981a0f1e HTTP Headers GET /assets/front/nouvelle_formule/maspero/fonts/PensumPro/PensumPro-Regular.2ff9bda49a5169c8.woff2 HTTP/1.1 Host: www.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Referer: https://www.mediapart.fr/assets/build/default/front/nouvelle_formule/css/main.62e200263b4aff4f.css DNT: 1 Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-type: font/woff2 last-modified: Fri, 05 Apr 2024 09:02:44 GMT etag: "660fbe34-9d00" expires: Sat, 05 Apr 2025 22:03:08 GMT cache-control: max-age=31536000, public strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes age: 2654845 date: Mon, 06 May 2024 15:30:33 GMT vary: Origin x-unique-req-id: 39132199-c52d-43ed-8104-05c5e9f9c0a9 content-length: 40192 X-Firefox-Spdy: h2

	www.mediapart.fr/assets/front/nouvelle_formule/maspero/fonts/AtlasGrotesk/AtlasGrotesk-Medium.1146894aacc91f99.woff2	151.101.66.132	200 OK	30 kB
URL GET HTTP/2 www.mediapart.fr/assets/front/nouvelle_formule/maspero/fonts/AtlasGrotesk/AtlasGrotesk-Medium.1146894aacc91f99.woff2 IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type Web Open Font Format (Version 2), CFF, length 30324, version 1.65 Size 30 kB (30324 bytes) Hash 7fcfd6b429c286be50bbed9c42cde50e 60847a48790921c71add140f803d0db4a11c891f 96d3230f99a379b518d6bf499265344ca8afb3988655193c4863191e49b526b0 HTTP Headers GET /assets/front/nouvelle_formule/maspero/fonts/AtlasGrotesk/AtlasGrotesk-Medium.1146894aacc91f99.woff2 HTTP/1.1 Host: www.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Referer: https://www.mediapart.fr/assets/build/default/front/nouvelle_formule/css/main.62e200263b4aff4f.css DNT: 1 Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-type: font/woff2 last-modified: Tue, 16 Apr 2024 10:16:52 GMT etag: "661e5014-7674" expires: Thu, 17 Apr 2025 03:33:18 GMT cache-control: max-age=31536000, public strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes age: 1684635 date: Mon, 06 May 2024 15:30:33 GMT vary: Origin x-unique-req-id: aae343d6-8f0b-40b3-84cc-5d22df8fec5f content-length: 30324 X-Firefox-Spdy: h2

	www.mediapart.fr/assets/front/nouvelle_formule/maspero/fonts/AtlasGrotesk/AtlasGrotesk-Regular.5c9abd840b8f13e8.woff2	151.101.66.132	200 OK	27 kB
URL GET HTTP/2 www.mediapart.fr/assets/front/nouvelle_formule/maspero/fonts/AtlasGrotesk/AtlasGrotesk-Regular.5c9abd840b8f13e8.woff2 IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type Web Open Font Format (Version 2), CFF, length 27252, version 1.65 Size 27 kB (27252 bytes) Hash 3c409a43084fcd90b893351acbc4bc68 68909044a5e2d8dcaf91f3ea9808e974e41beffe c7d02da2f4e087d51aefca2d2948d499414797a3d1fa23fa307d3b1ee4f93ef6 HTTP Headers GET /assets/front/nouvelle_formule/maspero/fonts/AtlasGrotesk/AtlasGrotesk-Regular.5c9abd840b8f13e8.woff2 HTTP/1.1 Host: www.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Referer: https://www.mediapart.fr/assets/build/default/front/nouvelle_formule/css/main.62e200263b4aff4f.css DNT: 1 Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-type: font/woff2 last-modified: Fri, 05 Apr 2024 09:02:44 GMT etag: "660fbe34-6a74" expires: Mon, 07 Apr 2025 02:59:03 GMT cache-control: max-age=31536000, public strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes age: 2550690 date: Mon, 06 May 2024 15:30:33 GMT vary: Origin x-unique-req-id: 35d0e355-f8b7-4bda-838b-701ea1142c28 content-length: 27252 X-Firefox-Spdy: h2

	www.mediapart.fr/	151.101.66.132	200 OK	120 kB
URL User Request GET HTTP/2 www.mediapart.fr/ IP 151.101.66.132:443 ASN #54113 FASTLY Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type gzip compressed data, max compression, from Unix Size 120 kB (119806 bytes) Hash bae029ccf430308dc2b448651c1faee6 2699a51327c6d5c4b847d2db765e90a29b4e8243 38134702dadc210eaad91cebe8eb0d8a1cd949c972f64c1041556193aa6c4b5e HTTP Headers `GET / HTTP/1.1 Host: www.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://reurl.cc/ DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/html; charset=UTF-8 cache-control: public, s-maxage=14400 x-ua-compatible: IE=Edge x-frame-options: DENY content-encoding: gzip age: 34 accept-ranges: bytes strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin x-unique-req-id: be415f23-4b80-4d54-9210-d9eb0d07eec2 date: Mon, 06 May 2024 15:30:33 GMT vary: Accept-Encoding X-Firefox-Spdy: h2

	www.mediapart.fr/assets/front/nouvelle_formule/maspero/fonts/PensumPro/PensumPro-ExtraBold.2f15d1ec02926c4e.woff2	151.101.66.132	200 OK	41 kB
URL GET HTTP/2 www.mediapart.fr/assets/front/nouvelle_formule/maspero/fonts/PensumPro/PensumPro-ExtraBold.2f15d1ec02926c4e.woff2 IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type Web Open Font Format (Version 2), TrueType, length 41396, version 1.0 Size 41 kB (41396 bytes) Hash 541cb86b05f64f026342fc3ede7009c1 dbcd5c5779c8c4ad55d0ecdb39227411fd5174d9 d26f089a886fc072a188ec86b0eb4c7cd3f5e6501a8d547dd803c923bb02d78a HTTP Headers GET /assets/front/nouvelle_formule/maspero/fonts/PensumPro/PensumPro-ExtraBold.2f15d1ec02926c4e.woff2 HTTP/1.1 Host: www.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Referer: https://www.mediapart.fr/assets/build/default/front/nouvelle_formule/css/main.62e200263b4aff4f.css DNT: 1 Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-type: font/woff2 last-modified: Tue, 23 Apr 2024 12:01:05 GMT etag: "6627a301-a1b4" expires: Thu, 24 Apr 2025 04:03:50 GMT cache-control: max-age=31536000, public strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes date: Mon, 06 May 2024 15:30:33 GMT age: 1078002 vary: Origin x-unique-req-id: d1352b27-6307-4ce3-92d7-feadabc05723 content-length: 41396 X-Firefox-Spdy: h2

	www.mediapart.fr/assets/front/nouvelle_formule/maspero/fonts/PensumPro/PensumPro-Bold.ee3bf407b24cc9d2.woff2	151.101.66.132	200 OK	41 kB
URL GET HTTP/2 www.mediapart.fr/assets/front/nouvelle_formule/maspero/fonts/PensumPro/PensumPro-Bold.ee3bf407b24cc9d2.woff2 IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type Web Open Font Format (Version 2), TrueType, length 40888, version 1.0 Size 41 kB (40888 bytes) Hash 0368e204be560dd9ae6c2b7438c66075 f071a5c1cad40653529e70cc37505307a50d52ee e77c5a2dd12f6673952edf6cf236b148f73f0d88552c77e9214ea6bdef021d04 HTTP Headers GET /assets/front/nouvelle_formule/maspero/fonts/PensumPro/PensumPro-Bold.ee3bf407b24cc9d2.woff2 HTTP/1.1 Host: www.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Referer: https://www.mediapart.fr/assets/build/default/front/nouvelle_formule/css/main.62e200263b4aff4f.css DNT: 1 Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-type: font/woff2 last-modified: Tue, 23 Apr 2024 12:01:05 GMT etag: "6627a301-9fb8" expires: Wed, 30 Apr 2025 04:07:55 GMT cache-control: max-age=31536000, public strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes age: 559358 date: Mon, 06 May 2024 15:30:33 GMT vary: Origin x-unique-req-id: 8dca3f0a-f626-41f4-ab99-9de61ec71ade content-length: 40888 X-Firefox-Spdy: h2

	www.mediapart.fr/assets/front/nouvelle_formule/maspero/fonts/PensumDisplay/PensumDisplay-Black.0f16031e9dbed0bf.woff2	151.101.66.132	200 OK	34 kB
URL GET HTTP/2 www.mediapart.fr/assets/front/nouvelle_formule/maspero/fonts/PensumDisplay/PensumDisplay-Black.0f16031e9dbed0bf.woff2 IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type Web Open Font Format (Version 2), TrueType, length 34196, version 1.0 Size 34 kB (34196 bytes) Hash 23ae96a64c5a6e86511b9880ab3c3b78 50c4467cb5df6a8379eb9bee999e99838f1d08fe 8fd1b1c0586e1e75c0e6399a3ebca0df3270a73ae6bd551cdb9d8ca36ed4e0eb HTTP Headers GET /assets/front/nouvelle_formule/maspero/fonts/PensumDisplay/PensumDisplay-Black.0f16031e9dbed0bf.woff2 HTTP/1.1 Host: www.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Referer: https://www.mediapart.fr/assets/build/default/front/nouvelle_formule/css/main.62e200263b4aff4f.css DNT: 1 Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-type: font/woff2 last-modified: Fri, 05 Apr 2024 09:02:44 GMT etag: "660fbe34-8594" expires: Sun, 06 Apr 2025 23:53:59 GMT cache-control: max-age=31536000, public strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes age: 2561794 date: Mon, 06 May 2024 15:30:33 GMT vary: Origin x-unique-req-id: ed168010-89bc-4684-bda5-3edb3b287ec8 content-length: 34196 X-Firefox-Spdy: h2

	www.mediapart.fr/assets/build/default/front/nouvelle_formule/images/banner/112x112/banner_newsletter.47abbf66491113af.jpg	151.101.66.132	200 OK	2.3 kB
URL GET HTTP/2 www.mediapart.fr/assets/build/default/front/nouvelle_formule/images/banner/112x112/banner_newsletter.47abbf66491113af.jpg IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 112x112, components 3 Size 2.3 kB (2258 bytes) Hash a4513f69717db808ec98e539e8eecc79 ac60cea24a40572a20bf82edf98b8a156cc25817 1db9de0a3c5e440fed08ed6101b6d2ca157df35405b098ee01c3f78a954fdfd2 HTTP Headers GET /assets/build/default/front/nouvelle_formule/images/banner/112x112/banner_newsletter.47abbf66491113af.jpg HTTP/1.1 Host: www.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.mediapart.fr/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-type: image/jpeg last-modified: Tue, 26 Mar 2024 08:57:26 GMT etag: "66028df6-8d2" expires: Wed, 02 Apr 2025 05:12:28 GMT cache-control: max-age=31536000 strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes age: 2974685 date: Mon, 06 May 2024 15:30:33 GMT vary: Origin,Accept x-unique-req-id: 61b3258a-26ec-4ea6-9865-9bf703ef7f25 content-length: 2258 X-Firefox-Spdy: h2

	www.mediapart.fr/assets/build/default/front/nouvelle_formule/images/banner/112x112/banner_mobile.e8ae17b0e8f4f68d.jpg	151.101.66.132	200 OK	2.7 kB
URL GET HTTP/2 www.mediapart.fr/assets/build/default/front/nouvelle_formule/images/banner/112x112/banner_mobile.e8ae17b0e8f4f68d.jpg IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 112x112, components 3 Size 2.7 kB (2727 bytes) Hash 7fe405f9d25b5cccb09f05493fb30b05 ded8fbe2cc2298ad3277b4db4cbb425a95f0c594 23570c822840af88faca87b71dca4dac49e4893d4205d249bedc7b2c87377d44 HTTP Headers GET /assets/build/default/front/nouvelle_formule/images/banner/112x112/banner_mobile.e8ae17b0e8f4f68d.jpg HTTP/1.1 Host: www.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.mediapart.fr/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-type: image/jpeg last-modified: Mon, 22 Apr 2024 13:55:19 GMT etag: "66266c47-aa7" expires: Wed, 23 Apr 2025 04:44:46 GMT cache-control: max-age=31536000 strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes age: 1161948 date: Mon, 06 May 2024 15:30:33 GMT vary: Origin,Accept x-unique-req-id: e8a821c5-2509-406f-b52a-9918c297e253 content-length: 2727 X-Firefox-Spdy: h2

	static.mediapart.fr/etmagine/default/files/2024/05/01/gre-ce-thessalie-agriculture-innondations-05.jpg	151.101.66.132	200 OK	78 kB
URL GET HTTP/2 static.mediapart.fr/etmagine/default/files/2024/05/01/gre-ce-thessalie-agriculture-innondations-05.jpg IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, progressive, precision 8, 661x441, components 3 Size 78 kB (77911 bytes) Hash a8e802082d8f13e03855c71858e04d0c 9103c49cd89b40aa12969187d00042c08c8e034a 38443cd4580f24032ec183af74d0f8d47df7ea989ac1342c087bb8988bef3f91 HTTP Headers `GET /etmagine/default/files/2024/05/01/gre-ce-thessalie-agriculture-innondations-05.jpg HTTP/1.1 Host: static.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.mediapart.fr/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK content-type: image/jpeg cache-control: max-age=31536000, public last-modified: Wed, 01 May 2024 12:29:16 GMT content-disposition: inline; filename=gre-ce-thessalie-agriculture-innondations-05.jpg expires: Thu, 01 May 2025 12:29:16 GMT access-control-allow-origin: * strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes date: Mon, 06 May 2024 15:30:33 GMT age: 442878 x-unique-req-id: b2417f19-c859-4e21-a90c-87f236182ee8 content-length: 77911 X-Firefox-Spdy: h2

	www.mediapart.fr/assets/build/default/front/nouvelle_formule/images/mkt_banner/no_abo.083fe04de110e5e2.png	151.101.66.132	200 OK	32 kB
URL GET HTTP/2 www.mediapart.fr/assets/build/default/front/nouvelle_formule/images/mkt_banner/no_abo.083fe04de110e5e2.png IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced Size 32 kB (32148 bytes) Hash 662b97481797840fa8177d0162ce8491 c30d27d227fc482302d5cb35cac8a4ba47d842a0 e3eefa1ba85abe59d5c003986037789a978e27223a8e4e201014f5d43be5630d HTTP Headers GET /assets/build/default/front/nouvelle_formule/images/mkt_banner/no_abo.083fe04de110e5e2.png HTTP/1.1 Host: www.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.mediapart.fr/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-type: image/png last-modified: Mon, 08 Apr 2024 09:21:24 GMT etag: "6613b714-7d94" expires: Tue, 08 Apr 2025 12:07:08 GMT cache-control: max-age=31536000 strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes age: 2431405 date: Mon, 06 May 2024 15:30:33 GMT vary: Origin,Accept x-unique-req-id: 868c3aff-65b0-446a-a949-7790198c3262 content-length: 32148 X-Firefox-Spdy: h2

	static.mediapart.fr/etmagine/default/files/2024/04/30/play-rozenn-abonnezvous-16-9avant.png	151.101.66.132	200 OK	459 kB
URL GET HTTP/2 static.mediapart.fr/etmagine/default/files/2024/04/30/play-rozenn-abonnezvous-16-9avant.png IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type PNG image data, 661 x 372, 8-bit/color RGBA, interlaced Size 459 kB (458754 bytes) Hash b8941e3279b5671069a842c0a1978447 33ccab96fbb0555f71e09475ef48524b938b5526 4f81ad450bfcfa511986dcd614097960b0d01627637ee0e05c6839e3a6e0cb39 HTTP Headers `GET /etmagine/default/files/2024/04/30/play-rozenn-abonnezvous-16-9avant.png HTTP/1.1 Host: static.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.mediapart.fr/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK content-type: image/png cache-control: max-age=31536000, public last-modified: Tue, 30 Apr 2024 12:46:31 GMT content-disposition: inline; filename=play-rozenn-abonnezvous-16-9avant.png expires: Wed, 30 Apr 2025 12:46:31 GMT access-control-allow-origin: * strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes age: 528242 date: Mon, 06 May 2024 15:30:33 GMT x-unique-req-id: b4eb0426-6833-43f4-9b42-fce549a05741 content-length: 458754 X-Firefox-Spdy: h2

	static.mediapart.fr/etmagine/default/files/2024/05/06/240503-ecrans-parentalite-l1500xh1000px.png	151.101.66.132	200 OK	462 kB
URL GET HTTP/2 static.mediapart.fr/etmagine/default/files/2024/05/06/240503-ecrans-parentalite-l1500xh1000px.png IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type PNG image data, 661 x 441, 8-bit/color RGBA, interlaced Size 462 kB (461578 bytes) Hash 4f993f524dd18eba6dbfbc4ef272893b 50ad7e030bc3f5dc1f1ecda8ceb17d35693d928b 84f329258cc6aca73683c6ac5bf995336a7d6923b14abe476d5bb0cd70941033 HTTP Headers `GET /etmagine/default/files/2024/05/06/240503-ecrans-parentalite-l1500xh1000px.png HTTP/1.1 Host: static.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.mediapart.fr/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK content-type: image/png cache-control: max-age=31536000, public last-modified: Mon, 06 May 2024 08:56:04 GMT content-disposition: inline; filename=240503-ecrans-parentalite-l1500xh1000px.png expires: Tue, 06 May 2025 08:56:04 GMT access-control-allow-origin: * strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes age: 23670 date: Mon, 06 May 2024 15:30:33 GMT x-unique-req-id: 8a7243da-51a4-4980-8b98-3c1e5f76da4b content-length: 461578 X-Firefox-Spdy: h2

	www.mediapart.fr/assets/build/default/front/nouvelle_formule/images/favicon/apple-touch-icon.298a4f01a8aa6924.png	151.101.66.132	200 OK	8.3 kB
URL GET HTTP/2 www.mediapart.fr/assets/build/default/front/nouvelle_formule/images/favicon/apple-touch-icon.298a4f01a8aa6924.png IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced Size 8.3 kB (8343 bytes) Hash 2a4b9ca5b7354a97bd55df1bdd92bef4 56b60dca616a1f07e1c11b22c0d48f865a4d3e1b d0db94831170ec9e48a1a2841e14fb0d892af99d1647b81f628ea9994a231e9a HTTP Headers GET /assets/build/default/front/nouvelle_formule/images/favicon/apple-touch-icon.298a4f01a8aa6924.png HTTP/1.1 Host: www.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.mediapart.fr/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-type: image/png last-modified: Wed, 13 Mar 2024 11:13:04 GMT etag: "65f18a40-2097" expires: Fri, 14 Mar 2025 00:41:46 GMT cache-control: max-age=31536000 strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes age: 4632528 date: Mon, 06 May 2024 15:30:34 GMT vary: Origin,Accept x-unique-req-id: c4490a67-55c5-4265-8cf3-2a6893c30323 content-length: 8343 X-Firefox-Spdy: h2

	www.mediapart.fr/assets/build/default/front/nouvelle_formule/images/favicon/favicon-16x16.22d5d309d20824ab.png	151.101.66.132	200 OK	542 B
URL GET HTTP/2 www.mediapart.fr/assets/build/default/front/nouvelle_formule/images/favicon/favicon-16x16.22d5d309d20824ab.png IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Size 542 B (542 bytes) Hash 1bae5c12b6fd8d6d116c1e9968d6eb03 f9b41183a7c63cfa816138ddfbca9e7d8be28ec3 f2f36c037d0b1935bcfda087354de5e989c148efe01f86ced5c0bdd4c0fdd724 HTTP Headers GET /assets/build/default/front/nouvelle_formule/images/favicon/favicon-16x16.22d5d309d20824ab.png HTTP/1.1 Host: www.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.mediapart.fr/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-type: image/png last-modified: Mon, 08 Apr 2024 09:21:24 GMT etag: "6613b714-21e" expires: Tue, 08 Apr 2025 11:38:15 GMT cache-control: max-age=31536000 strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes age: 2433139 date: Mon, 06 May 2024 15:30:34 GMT vary: Origin,Accept x-unique-req-id: f29725d4-e0ef-494e-b78e-4c374192b0a9 content-length: 542 X-Firefox-Spdy: h2

	www.mediapart.fr/assets/front/nouvelle_formule/maspero/fonts/AtlasGrotesk/AtlasGrotesk-Bold.557dd86a35fb5755.woff2	151.101.66.132	200 OK	31 kB
URL GET HTTP/2 www.mediapart.fr/assets/front/nouvelle_formule/maspero/fonts/AtlasGrotesk/AtlasGrotesk-Bold.557dd86a35fb5755.woff2 IP 151.101.66.132:443 ASN #54113 FASTLY Requested by https://www.mediapart.fr/ Certificate IssuerLet's Encrypt Subject.mediapart.fr Fingerprint15:04:32:D7:A2:A6:22:88:80:76:C9:2F:35:D0:56:4B:82:A3:05:C7 ValidityTue, 26 Mar 2024 12:35:07 GMT - Mon, 24 Jun 2024 12:35:06 GMT File type Web Open Font Format (Version 2), CFF, length 30904, version 1.65 Size 31 kB (30904 bytes) Hash 1af4c72284fbc3bde4796cc42b5d601d dee1ce145416a73c479a8d1a0be80722a14589bf b471d04bcecebb1bc83a10b4f2fa7afcf397b56efddadfb72604f4cb7090acf0 HTTP Headers GET /assets/front/nouvelle_formule/maspero/fonts/AtlasGrotesk/AtlasGrotesk-Bold.557dd86a35fb5755.woff2 HTTP/1.1 Host: www.mediapart.fr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Referer: https://www.mediapart.fr/assets/build/default/front/nouvelle_formule/css/main.62e200263b4aff4f.css DNT: 1 Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: font/woff2 last-modified: Fri, 05 Apr 2024 09:02:44 GMT etag: "660fbe34-78b8" expires: Sun, 06 Apr 2025 00:39:55 GMT cache-control: max-age=31536000, public strict-transport-security: max-age=31557600; includeSubDomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin accept-ranges: bytes date: Mon, 06 May 2024 15:30:33 GMT age: 2645438 vary: Origin x-unique-req-id: 80f76f74-a322-417d-8b13-f3cc081bdfc1 content-length: 30904 X-Firefox-Spdy: h2

	59eec75a75.nxcli.net/bluehost/cc.php?searchvalue=LA646105747HU&token=f81d80af9cbeb0011316fbba3da8002b32251f7a	209.126.25.88	302 Found	1.4 MB
URL User Request GET HTTP/2 59eec75a75.nxcli.net/bluehost/cc.php?searchvalue=LA646105747HU&token=f81d80af9cbeb0011316fbba3da8002b32251f7a IP 209.126.25.88:443 ASN #36444 NEXCESS-NET Certificate IssuerLet's Encrypt Subject59eec75a75.nxcli.net Fingerprint8E:A5:29:59:2D:DD:B4:30:D8:B1:84:46:D8:A7:30:7A:B0:1F:6E:AD ValidityMon, 29 Apr 2024 07:11:16 GMT - Sun, 28 Jul 2024 07:11:15 GMT File type Size 1.4 MB (1407239 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /bluehost/cc.php?searchvalue=LA646105747HU&token=f81d80af9cbeb0011316fbba3da8002b32251f7a HTTP/1.1 Host: 59eec75a75.nxcli.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://reurl.cc/ DNT: 1 Connection: keep-alive Cookie: PHPSESSID=54b8c3841ccea4c4bf805333f76c983a Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 302 Found server: nginx date: Mon, 06 May 2024 15:30:32 GMT content-type: text/html; charset=UTF-8 location: https://www.mediapart.fr/ x-cache-nxaccel: BYPASS X-Firefox-Spdy: h2`

	59eec75a75.nxcli.net/bluehost/	209.126.25.88	302 Found	1.4 MB
URL User Request GET HTTP/2 59eec75a75.nxcli.net/bluehost/ IP 209.126.25.88:443 ASN #36444 NEXCESS-NET Certificate IssuerLet's Encrypt Subject59eec75a75.nxcli.net Fingerprint8E:A5:29:59:2D:DD:B4:30:D8:B1:84:46:D8:A7:30:7A:B0:1F:6E:AD ValidityMon, 29 Apr 2024 07:11:16 GMT - Sun, 28 Jul 2024 07:11:15 GMT File type Size 1.4 MB (1407239 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /bluehost/ HTTP/1.1 Host: 59eec75a75.nxcli.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://reurl.cc/ DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 302 Found server: nginx date: Mon, 06 May 2024 15:30:32 GMT content-type: text/html; charset=UTF-8 location: ./cc.php?searchvalue=LA646105747HU&token=f81d80af9cbeb0011316fbba3da8002b32251f7a set-cookie: PHPSESSID=54b8c3841ccea4c4bf805333f76c983a; path=/ expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache x-cache-nxaccel: BYPASS X-Firefox-Spdy: h2`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (40)

URL

IP

ASN