nbr391.keap-link007.com/v2/click/0aefc234071d4ea432b402f660f5e30f/eJyNj8EKgkAURf_lrS0zhdSdiIhoLqLWMeqAg9PMMD4LEf-9scJVQdt3zz2POwFSQQRmDYQgKu0GDligac0UowJjKZDUr3TveMHOP1jAmehSLQcF4fS1vQLL2fMdC3BU1BDnUxTnWZlei6zMDaiINj_-0zjuqkmOUVbAPP_00hvD5G7UPYSoB7oMapgZhRfNDd8iqtC2Kzlw0rAH2XSEc9mRbd9KZfpEKSqaz_acjm_L_AQVB2HM
301 Moved Permanently 0 B URL HTTP/1.1 nbr391.keap-link007.com/v2/click/0aefc234071d4ea432b402f660f5e30f/eJyNj8EKgkAURf_lrS0zhdSdiIhoLqLWMeqAg9PMMD4LEf-9scJVQdt3zz2POwFSQQRmDYQgKu0GDligac0UowJjKZDUr3TveMHOP1jAmehSLQcF4fS1vQLL2fMdC3BU1BDnUxTnWZlei6zMDaiINj_-0zjuqkmOUVbAPP_00hvD5G7UPYSoB7oMapgZhRfNDd8iqtC2Kzlw0rAH2XSEc9mRbd9KZfpEKSqaz_acjm_L_AQVB2HM
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/click/0aefc234071d4ea432b402f660f5e30f/eJyNj8EKgkAURf_lrS0zhdSdiIhoLqLWMeqAg9PMMD4LEf-9scJVQdt3zz2POwFSQQRmDYQgKu0GDligac0UowJjKZDUr3TveMHOP1jAmehSLQcF4fS1vQLL2fMdC3BU1BDnUxTnWZlei6zMDaiINj_-0zjuqkmOUVbAPP_00hvD5G7UPYSoB7oMapgZhRfNDd8iqtC2Kzlw0rAH2XSEc9mRbd9KZfpEKSqaz_acjm_L_AQVB2HM HTTP/1.1
Host: nbr391.keap-link007.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Cache-Control: private
Location: https://nbr391.keap-link007.com:443/v2/click/0aefc234071d4ea432b402f660f5e30f/eJyNj8EKgkAURf_lrS0zhdSdiIhoLqLWMeqAg9PMMD4LEf-9scJVQdt3zz2POwFSQQRmDYQgKu0GDligac0UowJjKZDUr3TveMHOP1jAmehSLQcF4fS1vQLL2fMdC3BU1BDnUxTnWZlei6zMDaiINj_-0zjuqkmOUVbAPP_00hvD5G7UPYSoB7oMapgZhRfNDd8iqtC2Kzlw0rAH2XSEc9mRbd9KZfpEKSqaz_acjm_L_AQVB2HM
Content-Length: 0
Date: Wed, 22 Mar 2023 13:44:06 GMT
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ec332b81a27117ce9c16b67a5a8e4fac
b6d2afa2c859d000ad830d3d8d73f57bac6ffce2
1dc32c78e4e850303813338fd4e9616a41c8c05d1063748a1e76a92c397a5e8f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1DC32C78E4E850303813338FD4E9616A41C8C05D1063748A1E76A92C397A5E8F"
Last-Modified: Mon, 20 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14636
Expires: Wed, 22 Mar 2023 17:48:03 GMT
Date: Wed, 22 Mar 2023 13:44:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 210a2a42cfc4f4aced144f5de9babcc6
ece6ecfb2db8d036c3bfc7f02f8ea387e3f965db
59553a312d3fb34f1f0aea469f7e7cc810ff9993481ddbd73ea5d461cf97ed51
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "59553A312D3FB34F1F0AEA469F7E7CC810FF9993481DDBD73EA5D461CF97ED51"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2693
Expires: Wed, 22 Mar 2023 14:29:00 GMT
Date: Wed, 22 Mar 2023 13:44:07 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4ad6984a756720fbfff47b37a75513a2
355e35258114452af8b9638985ed9d8ef3bf0aca
43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 22 Mar 2023 13:15:00 GMT
content-type: application/json
age: 1747
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 51a5d4696a6090c295850554508b51ce
c44e143c2223546e64b19f543b8101aaf3b11e97
8794223d5e8d4d276c35e2fdcc24bf99694240634dd749cd9b5bf874dec055cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8794223D5E8D4D276C35E2FDCC24BF99694240634DD749CD9B5BF874DEC055CF"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16996
Expires: Wed, 22 Mar 2023 18:27:23 GMT
Date: Wed, 22 Mar 2023 13:44:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash feae6b484e1564a05be87e8f0fd8ddd2
bdf43a9419890986f0d94abe65cfb50aa625291d
d9be8da60f7f1adc4703565804ba33c9a593e9b0ff8e392574d4a70278c2576a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D9BE8DA60F7F1ADC4703565804BA33C9A593E9B0FF8E392574D4A70278C2576A"
Last-Modified: Wed, 22 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3217
Expires: Wed, 22 Mar 2023 14:37:44 GMT
Date: Wed, 22 Mar 2023 13:44:07 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: hDguoGymtMOuqWOgMaOsRYxWigL7DQs+pUpzJyDSJ9uo96VD2Dk4oE2pnGCE6aoOk6ff6T12A4o=
x-amz-request-id: 0PR27800KH054NNJ
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 22 Mar 2023 12:53:38 GMT
age: 3029
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 13:44:07 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
nbr391.keap-link007.com/v2/click/0aefc234071d4ea432b402f660f5e30f/eJyNj8EKgkAURf_lrS0zhdSdiIhoLqLWMeqAg9PMMD4LEf-9scJVQdt3zz2POwFSQQRmDYQgKu0GDligac0UowJjKZDUr3TveMHOP1jAmehSLQcF4fS1vQLL2fMdC3BU1BDnUxTnWZlei6zMDaiINj_-0zjuqkmOUVbAPP_00hvD5G7UPYSoB7oMapgZhRfNDd8iqtC2Kzlw0rAH2XSEc9mRbd9KZfpEKSqaz_acjm_L_AQVB2HM
303 See Other 0 B URL HTTP/2 nbr391.keap-link007.com/v2/click/0aefc234071d4ea432b402f660f5e30f/eJyNj8EKgkAURf_lrS0zhdSdiIhoLqLWMeqAg9PMMD4LEf-9scJVQdt3zz2POwFSQQRmDYQgKu0GDligac0UowJjKZDUr3TveMHOP1jAmehSLQcF4fS1vQLL2fMdC3BU1BDnUxTnWZlei6zMDaiINj_-0zjuqkmOUVbAPP_00hvD5G7UPYSoB7oMapgZhRfNDd8iqtC2Kzlw0rAH2XSEc9mRbd9KZfpEKSqaz_acjm_L_AQVB2HM
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/click/0aefc234071d4ea432b402f660f5e30f/eJyNj8EKgkAURf_lrS0zhdSdiIhoLqLWMeqAg9PMMD4LEf-9scJVQdt3zz2POwFSQQRmDYQgKu0GDligac0UowJjKZDUr3TveMHOP1jAmehSLQcF4fS1vQLL2fMdC3BU1BDnUxTnWZlei6zMDaiINj_-0zjuqkmOUVbAPP_00hvD5G7UPYSoB7oMapgZhRfNDd8iqtC2Kzlw0rAH2XSEc9mRbd9KZfpEKSqaz_acjm_L_AQVB2HM HTTP/1.1
Host: nbr391.keap-link007.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 303 See Other
location: http://bouladiwa-kalloka.shop?inf_contact_key=87f0424c8e03c8aec517e9b37b03d144439ba9b9299d2556817aecd2c093d30d
date: Wed, 22 Mar 2023 13:44:07 GMT
x-envoy-upstream-service-time: 15
server: istio-envoy
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash feae6b484e1564a05be87e8f0fd8ddd2
bdf43a9419890986f0d94abe65cfb50aa625291d
d9be8da60f7f1adc4703565804ba33c9a593e9b0ff8e392574d4a70278c2576a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D9BE8DA60F7F1ADC4703565804BA33C9A593E9B0FF8E392574D4A70278C2576A"
Last-Modified: Wed, 22 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3217
Expires: Wed, 22 Mar 2023 14:37:44 GMT
Date: Wed, 22 Mar 2023 13:44:07 GMT
Connection: keep-alive
bouladiwa-kalloka.shop/?inf_contact_key=87f0424c8e03c8aec517e9b37b03d144439ba9b9299d2556817aecd2c093d30d
302 Found 307 B URL HTTP/1.1 bouladiwa-kalloka.shop/?inf_contact_key=87f0424c8e03c8aec517e9b37b03d144439ba9b9299d2556817aecd2c093d30d
IP
File type HTML document, ASCII text, with very long lines (305)
Hash a296886b706ffab7c1e80de36f5a45e1
ca9dd7b69d927e1e49b9e7b0896a4bb6c2fbd8ba
c2453c6003e33fa2143cb423b87fb25b24489fcc55cf5e987c7012ced64460f3
NIDS Severity Alert suricata low ET INFO Namecheap URL Forward
GET /?inf_contact_key=87f0424c8e03c8aec517e9b37b03d144439ba9b9299d2556817aecd2c093d30d HTTP/1.1
Host: bouladiwa-kalloka.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Wed, 22 Mar 2023 13:44:07 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 307
Connection: keep-alive
Location: https://track.groanoke.com/ofc/32bfe1ea-4c89750b-b5f2632f-f08d-c8a2/0aad1fe9-a2c81856-3644db2e-6cb0-fca5?Subid=%7BYOUR_PUBID_HERE%7D&externalid=%7BYOUR_CLICKID_HERE%7D&inf_contact_key=87f0424c8e03c8aec517e9b37b03d144439ba9b9299d2556817aecd2c093d30d&sub_pubid=%7BYOUR_SUB_PUBID_HERE%7D
X-Served-By: Namecheap URL Forward
Server: namecheap-nginx
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Last-Modified, Content-Length, Pragma, Expires, ETag, Backoff, Alert, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 22 Mar 2023 13:14:33 GMT
age: 1774
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 18b877ebbad1529e4bd91e12220d91c4
a3d64fb3d9cc1fe3a29b261c4ec9acfe134dfedc
7001d3ef847c7002ac15155f0dfcc0a369f19860e85c8e90530f1e7b2dd88f09
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7001D3EF847C7002AC15155F0DFCC0A369F19860E85C8E90530F1E7B2DD88F09"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7973
Expires: Wed, 22 Mar 2023 15:57:00 GMT
Date: Wed, 22 Mar 2023 13:44:07 GMT
Connection: keep-alive
track.groanoke.com/ofc/32bfe1ea-4c89750b-b5f2632f-f08d-c8a2/0aad1fe9-a2c81856-3644db2e-6cb0-fca5?Subid=%7BYOUR_PUBID_HERE%7D&externalid=%7BYOUR_CLICKID_HERE%7D&inf_contact_key=87f0424c8e03c8aec517e9b37b03d144439ba9b9299d2556817aecd2c093d30d&sub_pubid=%7BYOUR_SUB_PUBID_HERE%7D
303 See Other 345 B URL HTTP/2 track.groanoke.com/ofc/32bfe1ea-4c89750b-b5f2632f-f08d-c8a2/0aad1fe9-a2c81856-3644db2e-6cb0-fca5?Subid=%7BYOUR_PUBID_HERE%7D&externalid=%7BYOUR_CLICKID_HERE%7D&inf_contact_key=87f0424c8e03c8aec517e9b37b03d144439ba9b9299d2556817aecd2c093d30d&sub_pubid=%7BYOUR_SUB_PUBID_HERE%7D
IP
ASN #29119 ServiHosting Networks S.L.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (645)
Hash f721700b0a23fd2366499c8f234ad5e5
9e1b382652e19d8e05405790363ddb249a1f7395
2047bb4b2664294f663197bdafb8130518d5d4e2a40d1e82a9bd98066a13f28e
GET /ofc/32bfe1ea-4c89750b-b5f2632f-f08d-c8a2/0aad1fe9-a2c81856-3644db2e-6cb0-fca5?Subid=%7BYOUR_PUBID_HERE%7D&externalid=%7BYOUR_CLICKID_HERE%7D&inf_contact_key=87f0424c8e03c8aec517e9b37b03d144439ba9b9299d2556817aecd2c093d30d&sub_pubid=%7BYOUR_SUB_PUBID_HERE%7D HTTP/1.1
Host: track.groanoke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 303 See Other
date: Wed, 22 Mar 2023 13:44:07 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: no-cache, private
location: https://pompechaleur.economiselenergie.site/lp6?c=xmiiBBoVB&co=1&tx_id=M2023032213-2e17afd34f6559f53df312cb8411ef82&var4={YOUR_PUBID_HERE}/lp6?c=xmiiBBoVB&co=1&tx_id=M2023032213-2e17afd34f6559f53df312cb8411ef82&var4={YOUR_PUBID_HERE}&spub=32bfe1ea-4c89750b-b5f2632f-f08d-c8a2
tcdn-backend: c120_gasmobi
content-encoding: gzip
age: 0
vary: , Accept-Encoding
tp-cache: MISS
content-length: 345
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: yokw+DU7g7aCouJPtggwjQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: AL5MLpFXEonbOVNTtqAYQZ3e2oE=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 06adbc463c1bafb4b79a2d2f10791ef8
30a6d093719f89764805f62102b0a07c493016a0
64000d2bedca454efa1fc2de6083ca06cb3e94b33565427ba9ac7c9345a926fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 13:44:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 06adbc463c1bafb4b79a2d2f10791ef8
30a6d093719f89764805f62102b0a07c493016a0
64000d2bedca454efa1fc2de6083ca06cb3e94b33565427ba9ac7c9345a926fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 13:44:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3e968c0f4319273e79821cbabf3bdbdc
99f1127052594878d49370fdcc61b1e4fbb69e61
82ea5f81bec224fa88a6b83c50481d819586b5de2fbb435d522d24ce1250b6cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 13:44:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0086fc6b6b52670b2d7ca51fc65d8d44
1d906db50d0373e0e3e1e85031de970218264f4d
24a9078b3b1b7b060c8e68777d0baaa3651c18cebe9107a2598f07981086f830
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 13:44:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0086fc6b6b52670b2d7ca51fc65d8d44
1d906db50d0373e0e3e1e85031de970218264f4d
24a9078b3b1b7b060c8e68777d0baaa3651c18cebe9107a2598f07981086f830
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 13:44:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0086fc6b6b52670b2d7ca51fc65d8d44
1d906db50d0373e0e3e1e85031de970218264f4d
24a9078b3b1b7b060c8e68777d0baaa3651c18cebe9107a2598f07981086f830
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 13:44:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0086fc6b6b52670b2d7ca51fc65d8d44
1d906db50d0373e0e3e1e85031de970218264f4d
24a9078b3b1b7b060c8e68777d0baaa3651c18cebe9107a2598f07981086f830
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 13:44:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
200 OK 46 kB URL HTTP/2 fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Hash c1fd378f54921c75e4ae1821e7b8fff6
2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Mar 2023 17:34:01 GMT
expires: Fri, 15 Mar 2024 17:34:01 GMT
cache-control: public, max-age=31536000
age: 504607
last-modified: Mon, 18 Jul 2022 19:58:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-PRM6FKR
200 OK 75 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PRM6FKR
IP
File type ASCII text, with very long lines (9387)
Hash c70c0bcc4adee4a9d3ceca8b0049ca43
9620b0c09f306cbd78d33df75e95e64601029556
e763f49dd6023f07f7ca06a2f73c9db73dae31d0431ca9c870cb8e43034bae8f
GET /gtm.js?id=GTM-PRM6FKR HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 22 Mar 2023 13:44:08 GMT
expires: Wed, 22 Mar 2023 13:44:08 GMT
cache-control: private, max-age=900
last-modified: Wed, 22 Mar 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74925
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 1.6 kB IP
File type gzip compressed data, from Unix\012- data
Hash 22ed724ecc466469f363430df5e62862
485c1234e6c731742bd9654e0624c8081cb95797
6e6d53c63f2b18133be2cb0b973696075f141c96c41dd65522d08a2e3d4a42a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 13:44:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
unpkg.com/@lottiefiles/lottie-player@1.7.1/dist/lottie-player.js
200 OK 96 kB URL HTTP/2 unpkg.com/@lottiefiles/lottie-player@1.7.1/dist/lottie-player.js
IP
File type ASCII text, with very long lines (27447)
Hash b11027bae8b9dd967163b95f629bd2ec
04cc74afc1699afca9a77474df1ff9bc243a06fa
88a75841ef5d6930131b5196e96594298d69f159eec1e741047220b5b2518cc4
GET /@lottiefiles/lottie-player@1.7.1/dist/lottie-player.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pompechaleur.economiselenergie.site/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 13:44:08 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"59a07-9+ZSgdYoXPYwDfF2oh5cz4L42Ds"
via: 1.1 fly.io
fly-request-id: 01GTYJ110E12EM8QHXVY0H2AAF-fra
cf-cache-status: HIT
age: 1282377
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7abede1c0d1fb527-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 1.7 kB IP
File type gzip compressed data, from Unix\012- data
Hash 9284edbbcba5dce4e9839d3bc12c0e4d
8ad65322cb57d6f2052a3f5e5ddfa97138d4a2ad
64d59b5a3e6a96571c65a3ff0f70d651e80601bf704b227422a95c936b04223a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 13:44:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
amplify.outbrain.com/cp/obtp.js
200 OK 6.3 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (19718), with no line terminators
Hash e072c2eeb57e57e4a307195a51fc750a
3109ce8e5ccba038646b6ddc290f63a2d8edd98a
64f77a0e6f8760825a06da7538a6ea06a4723478e1b7895078a39f2671456138
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "d19ad32008c4bc3916ea7137df776b3d:1678969189.53513"
Last-Modified: Thu, 16 Mar 2023 09:30:47 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Wed, 22 Mar 2023 14:04:08 GMT
Date: Wed, 22 Mar 2023 13:44:08 GMT
Content-Length: 6278
Connection: keep-alive
X-RG: EU
X-CC: NO
ocsp.digicert.com/
200 OK 471 B IP
Hash e2ba316dbf0d1c231f12512204d0e832
16271f049892b4d07ab70043935b1873a2e423f9
99a5a7e359df4cc82ef7a931bc93c0252f28c938155c1a6bd886550a0709cb11
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6049
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 13:44:08 GMT
Last-Modified: Wed, 22 Mar 2023 12:03:19 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 471
googleads.g.doubleclick.net/pagead/viewthroughconversion/10895876200/?random=1679492654415&cv=11&fst=1679492654415&bg=ffffff&guid=ON&async=1>m=45He33k0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2&hn=www.googleadservices.com&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&auid=2020800559.1679492654&rfmt=3&fmt=4
200 OK 1.3 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/10895876200/?random=1679492654415&cv=11&fst=1679492654415&bg=ffffff&guid=ON&async=1>m=45He33k0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2&hn=www.googleadservices.com&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&auid=2020800559.1679492654&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (3065), with no line terminators
Hash 6f1f3b2cef8eaf72c6aad3d9d1de2573
b74be6cf4905e72690b7ad9471a7180b9254337d
28a0a081f66c1ecead2011a8b3959090e901538ae96ec166e0a45b2a6fbd78bb
GET /pagead/viewthroughconversion/10895876200/?random=1679492654415&cv=11&fst=1679492654415&bg=ffffff&guid=ON&async=1>m=45He33k0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2&hn=www.googleadservices.com&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&auid=2020800559.1679492654&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 22 Mar 2023 13:44:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1345
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 22-Mar-2023 13:59:08 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash e5f5bf796d91f271e383cf1ff3ee5af4
70ead02da19095ca752d55e89a48fcdf59d44d33
247f023e282f1556e668df0033858196d682f31f659d1b53ea6dcaeff56c401a
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: iHTR/03f2bdc+zCntwEvuUoQcHHV8knLghEa9lza/LMJLzNttTyQ630YAIRB0V2jQgnsLxOHnT80nan9DZqmEw==
content-length: 27907
x-fb-trip-id: 1679558926
date: Wed, 22 Mar 2023 13:44:08 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash e2ba316dbf0d1c231f12512204d0e832
16271f049892b4d07ab70043935b1873a2e423f9
99a5a7e359df4cc82ef7a931bc93c0252f28c938155c1a6bd886550a0709cb11
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6052
Cache-Control: max-age=88078
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 13:44:08 GMT
Etag: "6419a392-1d7"
Expires: Thu, 23 Mar 2023 14:12:06 GMT
Last-Modified: Tue, 21 Mar 2023 12:31:14 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f86da0dd278dab61512989673262b7b7
0a9e07a3e3001b0fd895cd6be56f4b6929048e7b
ac48a2d4cff37e533bcead879c78d3a6f937e6c07fe2aa71a7d0aa4cc5181752
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 13:44:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
analytics.tiktok.com/i18n/pixel/events.js?sdkid=C9P6BEBC77UADFMACDFG&lib=ttq
200 OK 1.4 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=C9P6BEBC77UADFMACDFG&lib=ttq
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (3098)
Hash 86c1e654e954a597f3c21a3f70084f5c
62d8410274ffeda49bc9d38b57e06e0f3de6322e
2699e84dd3f3865e80c7c9cf8a8bd1f32b5eaf51de5cc9ccdb1713d365dafebc
GET /i18n/pixel/events.js?sdkid=C9P6BEBC77UADFMACDFG&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20230322134409BC9B209BFB0F79E02F4F
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf6044faeb2b99c092c97016c61fe0db1beb9abb2357fe18c025e499762154e74ea0cd7a1453677cd69acd53edbc0c0e5adc6fc76a460348f58788718c0a11c70cab69404415720ad5dc3f55c4eff2bd39b93e6f892c3fc6d2c848be50ac5a243029
content-encoding: gzip
content-length: 1399
x-origin-response-time: 6,23.218.220.137
x-akamai-request-id: 6dc684b9.4291346c
expires: Wed, 22 Mar 2023 13:44:09 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 22 Mar 2023 13:44:09 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2-47081134) (-)
vary: Accept-Encoding
set-cookie: _ttp=2NN7NwyGiXSN2HWUcC5ssRdL39M; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-cache-remote: TCP_MISS from a23-218-220-137.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2-47081134) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=102, origin; dur=6, inner; dur=3
x-parent-response-time: 108,23.36.79.28
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/main.MTE3ZGZjMmFkMQ.js
200 OK 68 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/main.MTE3ZGZjMmFkMQ.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21891)
Hash d47309bed2ba8c7cb99710b610b7737b
354a2a912469cb6ae50cd52a822c5c50a89e9bf2
00def6b36c70bea0e50f5a9564483ba42892dcf6595f7d144c33044b2a67d64b
GET /i18n/pixel/static/main.MTE3ZGZjMmFkMQ.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Cookie: _ttp=2NN7NwyGiXSN2HWUcC5ssRdL39M
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20230221145409FB9878CBA6BE9A62917C
x-tt-trace-host: 01f84846a243ec928f44598c479da931d886bc10cf04919b50fbd3365b689fd9f0492c4a077221ec0df058ac640b6b63212520c7cca20b8621352c0155137d22c48ad4c2f71d5867e4ec6bff2ada640d7530f7834fc77da50357651f9ddb23be74
content-encoding: gzip
date: Wed, 22 Mar 2023 13:44:09 GMT
content-length: 68414
x-cache: TCP_MEM_HIT from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2-47081134) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=4
x-akamai-request-id: 429135c5
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d8076782b7586aea6d69480d5434652e
6bd6f10f27f62711c6783bc8b5ea72cb74622e2f
ab660e165b0044aa0ca16ab2a42ac38a1922a24a6ae6e879d4e3e1e9c19822c2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 13:44:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8a237b3ec23da41b2cdefc39b643691f
322b5b2a4fb99140ac53a94058d34a4806133519
4d88ec2ff0cf38948e56dabbd03130bb35850d89921fe80e242e762fedde2468
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 13:44:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/10895876200/?random=1679492654415&cv=11&fst=1679490000000&bg=ffffff&guid=ON&async=1>m=45He33k0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&fmt=3&is_vtc=1&random=4191027103&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/10895876200/?random=1679492654415&cv=11&fst=1679490000000&bg=ffffff&guid=ON&async=1>m=45He33k0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&fmt=3&is_vtc=1&random=4191027103&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10895876200/?random=1679492654415&cv=11&fst=1679490000000&bg=ffffff&guid=ON&async=1>m=45He33k0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&fmt=3&is_vtc=1&random=4191027103&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 22 Mar 2023 13:44:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/10895876200/?random=1679492654415&cv=11&fst=1679490000000&bg=ffffff&guid=ON&async=1>m=45He33k0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&fmt=3&is_vtc=1&random=4191027103&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/10895876200/?random=1679492654415&cv=11&fst=1679490000000&bg=ffffff&guid=ON&async=1>m=45He33k0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&fmt=3&is_vtc=1&random=4191027103&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10895876200/?random=1679492654415&cv=11&fst=1679490000000&bg=ffffff&guid=ON&async=1>m=45He33k0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&fmt=3&is_vtc=1&random=4191027103&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 22 Mar 2023 13:44:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4229
Expires: Wed, 22 Mar 2023 14:54:38 GMT
Date: Wed, 22 Mar 2023 13:44:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4229
Expires: Wed, 22 Mar 2023 14:54:38 GMT
Date: Wed, 22 Mar 2023 13:44:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4229
Expires: Wed, 22 Mar 2023 14:54:38 GMT
Date: Wed, 22 Mar 2023 13:44:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4229
Expires: Wed, 22 Mar 2023 14:54:38 GMT
Date: Wed, 22 Mar 2023 13:44:09 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8a237b3ec23da41b2cdefc39b643691f
322b5b2a4fb99140ac53a94058d34a4806133519
4d88ec2ff0cf38948e56dabbd03130bb35850d89921fe80e242e762fedde2468
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 13:44:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6f0b9e85381489dcf646c251722b21d4
5f7ea91288a2170bcabdca6be296718c4191eacd
911f803271ad9053ebac3787bdde9b75ec604acc6aa28692cc8e4c5c4fb61483
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10480
x-amzn-requestid: 58aa8272-4b4e-4a2f-9d6e-d47f70891c49
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJptHG7JoAMFSwA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2320-2fd6502b1271d5c13b4ebbe9;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:28 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: hqGFdT1Sk0IcvaNqfvjz5RsGBK-qMBcNKbK9FyZ7OoiH30hDL9ekxA==
via: 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 de2dd11312f7d5ad3bcd0cb112c7fd0e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 21:59:52 GMT
age: 56657
etag: "5f7ea91288a2170bcabdca6be296718c4191eacd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f57fa6-bac5-42a3-be66-ebcc96d82ea2.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f57fa6-bac5-42a3-be66-ebcc96d82ea2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2062cf7a271d4ac7a04c0a746d443e07
3343851f2128c5f1fe4302c2aa53e8ce1fb661ac
e479263c1742d2597cf8948ef059b0bc97dbb97f47bb5cafee3d4af12069d2ce
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f57fa6-bac5-42a3-be66-ebcc96d82ea2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10407
x-amzn-requestid: 87aba2e6-d7e8-4456-a12f-e05ac556b839
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJqJhGnXIAMF1yA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a23d6-2b6c3d62366f47f506ce8415;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:38:30 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: d7wlX2p3nm1VAV3qxRv2S1VbjxRah6GciBVRgyds7qbK1yNltNmtMQ==
via: 1.1 b3cdce1c2fc39b89f45c98c417351f26.cloudfront.net (CloudFront), 1.1 1f41b5f27f3ec2e93db2155dbc56900c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 21:49:24 GMT
age: 57285
etag: "3343851f2128c5f1fe4302c2aa53e8ce1fb661ac"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9446303f24a6e8e8d138867549399aa2
410a03d7475ec879b8e346f1706aea491e3f1da5
f7d7017ca9dbdf1822739e9baa6f34868504e6ce0d827aeeef82517c5db72960
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 13:44:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb82c45e-4e2d-4710-a844-d72c20f8a55f.png
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb82c45e-4e2d-4710-a844-d72c20f8a55f.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 960d88f7af5f1490f5af8ee55ba1a4b5
3cfa883f31989cc1c84a685fcf29c2c1d473c0e3
ed0c1d5b5a43a5057b2be29d16366f7d451bc4fb87df9d52f5d1f8d14a06e42d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb82c45e-4e2d-4710-a844-d72c20f8a55f.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11729
x-amzn-requestid: 941c6632-5ad9-43e1-a64a-18f4085472ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CHqGrGCxIAMFkww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641956f7-571095cb756f262e1de16f8b;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 07:04:23 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: g06cBP0KOle--ynuIHtY5dcCDDa19L73o2ALlaxs_DPYzBwE7MeqXw==
via: 1.1 ee6ea1e4552345de209d26f9ffb35d4a.cloudfront.net (CloudFront), 1.1 ea699166e6ec77aa410ff505b0a8ce18.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 07:04:40 GMT
age: 23969
etag: "3cfa883f31989cc1c84a685fcf29c2c1d473c0e3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1455686/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1455686/tfa.js
IP
File type ASCII text, with very long lines (59028)
Hash 47e5601078400086790c7da181b34468
885a0c03336216e49018ff58a471077579e48d97
cbbc3952b9f9556e6bfc671841b6821b90253568cb19d653058fe0fc6b145b39
GET /libtrc/unip/1455686/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: dEsN3M8BOQ5b/8VJ7x7ZgESKpyiOaLh+5RUqQCGGXLIqFeRNbJEfbuRHao36RyuIzOyH4qgWr+s=
x-amz-request-id: QVA4Q7ND74DPMH9J
x-amz-replication-status: COMPLETED
last-modified: Sun, 19 Mar 2023 11:21:53 GMT
etag: "c66421c0f5f0e11a7ad5a193661eb6cd"
x-amz-server-side-encryption: AES256
x-amz-version-id: nqE4ckAb2KMr9exDw8VrRRbJ3Yxh4.oM
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Wed, 22 Mar 2023 13:44:09 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1626-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1679492649.235225,VS0,VE192
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 15
access-control-allow-origin: *
content-length: 18169
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22c3f36a-d800-4eab-8a32-e2b5ef86e386.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22c3f36a-d800-4eab-8a32-e2b5ef86e386.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 412bd6aea60211324e649d7d920601d2
a813976bda850a584b5ab94d9a70bfe0da69aca0
d36ef17fc6ab3cd4e5e43836f7df2c6fdf1781f1bac73e42c9a09e8594f797f9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22c3f36a-d800-4eab-8a32-e2b5ef86e386.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9459
x-amzn-requestid: 1b374321-f2df-404f-ab91-4e73d830fac9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJqmAEhHoAMFgRQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a248c-217d81154ecfe0c44ca70432;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:41:32 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: DL7vQgu72hwpt7yHbmIKnAZnoIaR4CQPE1JJAjq8M4jg0REUsq5lOw==
via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 446e26a256db1310ae719d818e420898.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 21:48:25 GMT
age: 57344
etag: "a813976bda850a584b5ab94d9a70bfe0da69aca0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F882a2ebf-b22a-46de-bf52-8b9a1aaa2743.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F882a2ebf-b22a-46de-bf52-8b9a1aaa2743.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aeb0d8069d746e467fecd886c0e42628
8229b537f84a7418dc67e30691e62db4cea67f0f
24705dc5b7eefd79a35323beee7c741aa041c3bf55801d13b4ffc2b202e6a394
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F882a2ebf-b22a-46de-bf52-8b9a1aaa2743.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8037
x-amzn-requestid: 7a9f7bb5-d810-4831-b5d2-3eead1af864a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJprcGY1IAMFSAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-53cdee4b645ed18e1dfeb92c;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: QW8T5AGg_L1mT4fE8IHeBG9TSiGpbBJpZE2yZdBtAQMJCPV8OKK5Dw==
via: 1.1 a87682502db4b394cc6ba84510da9f98.cloudfront.net (CloudFront), 1.1 ae06b19943a6bad1c1b12b79f7339498.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 21:43:22 GMT
age: 57647
etag: "8229b537f84a7418dc67e30691e62db4cea67f0f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1249d209-fb6d-4a02-9081-d8658b8ff632.jpeg
200 OK 2.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1249d209-fb6d-4a02-9081-d8658b8ff632.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 13917543b8b3f8cdd572aff9d898b6f5
7a6a1c68fdb21a228f55db88933e5c2f69c8ec42
b6eb766589c295c2a909e837fe1a6d9bdc4715baab77a4fe14d2a6f775e78e16
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1249d209-fb6d-4a02-9081-d8658b8ff632.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2909
x-amzn-requestid: 89330fce-b0cf-4f8e-b065-231ee439172f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJqPyHWLoAMFlww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a23fe-619e4e36404b1ee94212e2d1;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:39:10 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: GNF08Td2MDYTOGOVe-eNSQ-ftMAPX8JZznVEmHI4f4QfE9kOOFYEhw==
via: 1.1 17d76c2aee343249585a570f2d36d2ee.cloudfront.net (CloudFront), 1.1 b618c0f73dc30c968057784ed0185d7a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 22:01:12 GMT
etag: "7a6a1c68fdb21a228f55db88933e5c2f69c8ec42"
content-type: image/jpeg
age: 56577
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/identify_cab4d.js
200 OK 31 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/identify_cab4d.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 681bc25d1e648965a9374cc7da238fd5
bb973302d1b656e343013fe741d0d54bfe33b15e
2d381181d954e35610fb06daba8df86d7abb4b823e87de97276e0bd81af03669
GET /i18n/pixel/static/identify_cab4d.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Cookie: _ttp=2NN7NwyGiXSN2HWUcC5ssRdL39M
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 202302211453357ED32E9CB4A234CC4054
x-tt-trace-host: 015ddd7329836f23ed04aa0dd6eae000e61dfb35b73ddd0ea6d3f361692c7f8399f836da754548664a9d56a317cca937197d586aef26ea8efc3380c784f4b6030804835a6b84edf6ba964a401008dbe475da2a7be38cb7b795f8af41aeb5068142
content-encoding: gzip
date: Wed, 22 Mar 2023 13:44:09 GMT
content-length: 30779
x-cache: TCP_MEM_HIT from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2-47081134) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=3
x-akamai-request-id: 4291373a
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash ae2306fa902ae5d7b094bf05a5bd30b1
ff11dd8dd7c67ccbc8b27f2df8211639ce310d74
17b03f64eb112499434287dc84c38dc032d559da6b749734662a998edf377ef3
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3782
Cache-Control: max-age=113546
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 13:44:09 GMT
Etag: "641a0fed-1d7"
Expires: Thu, 23 Mar 2023 21:16:35 GMT
Last-Modified: Tue, 21 Mar 2023 20:13:33 GMT
Server: ECAcc (ska/F7A3)
X-Cache: HIT
Content-Length: 471
status.thawte.com/
200 OK 471 B IP
Hash ae2306fa902ae5d7b094bf05a5bd30b1
ff11dd8dd7c67ccbc8b27f2df8211639ce310d74
17b03f64eb112499434287dc84c38dc032d559da6b749734662a998edf377ef3
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3782
Cache-Control: max-age=113546
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 13:44:09 GMT
Etag: "641a0fed-1d7"
Expires: Thu, 23 Mar 2023 21:16:35 GMT
Last-Modified: Tue, 21 Mar 2023 20:13:33 GMT
Server: ECAcc (ska/F7A3)
X-Cache: HIT
Content-Length: 471
tr.outbrain.com/cachedClickId?marketerId=undefined
200 OK 35 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=undefined
IP
File type ASCII text, with no line terminators
Hash 75c843c7b717e7b722777907475c67a3
983d1c9a05b315288039b9d4694ce3b402259240
1d348f9f803c95305f63def9d75fd50e79e54a375e1a4a888edbbea366845580
GET /cachedClickId?marketerId=undefined HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 13:44:09 GMT
Content-Type: application/javascript
Content-Length: 35
X-TraceId: 1642f0febc99e2d7ba03c3954488b672
tr.outbrain.com/unifiedPixel?optOut=false&bust=027947950646939723&referrer=&marketerId=00f5931f6403d4985f007e737b55f318ac&name=PAGE_VIEW&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2&g=1&obApiVersion=1.0-gtm&obtpVersion=2.0.5
200 OK 53 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?optOut=false&bust=027947950646939723&referrer=&marketerId=00f5931f6403d4985f007e737b55f318ac&name=PAGE_VIEW&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2&g=1&obApiVersion=1.0-gtm&obtpVersion=2.0.5
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 414bd2a5161db03fdd910327b42c6daa
65d4cf50496813c5f1a34eddd5c50dc67d44ff47
b51f3497b0a65f1e1e87e75f5e7e823d871c23bcf76a5ee4101783c8f939e553
GET /unifiedPixel?optOut=false&bust=027947950646939723&referrer=&marketerId=00f5931f6403d4985f007e737b55f318ac&name=PAGE_VIEW&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2&g=1&obApiVersion=1.0-gtm&obtpVersion=2.0.5 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 13:44:09 GMT
Content-Type: image/gif;
Content-Length: 53
Cache-Control: no-cache
X-TraceId: 5f1f0c5cdd8d40c7dcc45765b89534a8
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1037
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Cookie: _ttp=2NN7NwyGiXSN2HWUcC5ssRdL39M
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 202303221344094ACF0E31463A6AA0383A
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60f0f8705d0913ef2ab3aa01c72e35298f1f4fc78ed9a1e611d36f7a815f6467f067cc86033df397b986ac75c5c0eefd3e35c3a758bcedefc3009dabc5aa7c2bf6ed162b8231eaec07dc8a0221d079ad27b91284ecb6b1db59bda827fbee3a88ad
x-origin-response-time: 27,23.201.31.158
x-akamai-request-id: 627bce16.42913763
expires: Wed, 22 Mar 2023 13:44:09 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 22 Mar 2023 13:44:09 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2-47081134) (-)
x-cache-remote: TCP_MISS from a23-201-31-158.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2-47081134) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=105, origin; dur=27, inner; dur=24
x-parent-response-time: 128,23.36.79.28
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-C39Y0BD3ZK>m=45je33k0&_p=775069887&cid=461694988.1679492655&ul=en-us&sr=1280x1024&_s=1&sid=1679492654&sct=1&seg=0&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2&dt=Pompe%20%C3%A0%20Chaleur&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-C39Y0BD3ZK>m=45je33k0&_p=775069887&cid=461694988.1679492655&ul=en-us&sr=1280x1024&_s=1&sid=1679492654&sct=1&seg=0&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2&dt=Pompe%20%C3%A0%20Chaleur&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-C39Y0BD3ZK>m=45je33k0&_p=775069887&cid=461694988.1679492655&ul=en-us&sr=1280x1024&_s=1&sid=1679492654&sct=1&seg=0&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2&dt=Pompe%20%C3%A0%20Chaleur&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://pompechaleur.economiselenergie.site
date: Wed, 22 Mar 2023 13:44:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1016
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Cookie: _ttp=2NN7NwyGiXSN2HWUcC5ssRdL39M
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 20230322134409BE492ABF24D890674730
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60f0f8705d0913ef2ab3aa01c72e35298f1f4fc78ed9a1e611d36f7a815f6467f08dc86d2fc06f7c3904f3fe8e02f9f3a4c9b4580d32adcd88a8eb81d30a04fbbc494646f230d45da4f97d376f4425c31278f61a527798a5ae7a27112314253ca1
x-origin-response-time: 37,23.201.31.158
x-akamai-request-id: 627bcd8c.42913785
expires: Wed, 22 Mar 2023 13:44:09 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 22 Mar 2023 13:44:09 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2-47081134) (-)
x-cache-remote: TCP_MISS from a23-201-31-158.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2-47081134) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=118, origin; dur=37, inner; dur=24
x-parent-response-time: 150,23.36.79.28
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?ctsa=mr&CtsSyncId=BF8275F9C1A345A6968F6F6DD911C7AF&RedC=c.clarity.ms&MXFR=2D3242CE22D56E240019501226D56074
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=2D3242CE22D56E240019501226D56074; domain=.clarity.ms; expires=Mon, 15-Apr-2024 13:44:09 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Wed, 22 Mar 2023 13:44:09 GMT
content-length: 0
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=408887930779663&ev=PageView&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2&rl=&if=false&ts=1679492655310&sw=1280&sh=1024&v=2.9.99&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&cs_est=true&fbp=fb.1.1679492655308.1524722392&it=1679492654617&coo=false&tm=1&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=408887930779663&ev=PageView&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2&rl=&if=false&ts=1679492655310&sw=1280&sh=1024&v=2.9.99&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&cs_est=true&fbp=fb.1.1679492655308.1524722392&it=1679492654617&coo=false&tm=1&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=408887930779663&ev=PageView&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2&rl=&if=false&ts=1679492655310&sw=1280&sh=1024&v=2.9.99&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&cs_est=true&fbp=fb.1.1679492655308.1524722392&it=1679492654617&coo=false&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Wed, 22 Mar 2023 13:44:09 GMT
X-Firefox-Spdy: h2
c.bing.com/c.gif?ctsa=mr&CtsSyncId=BF8275F9C1A345A6968F6F6DD911C7AF&RedC=c.clarity.ms&MXFR=2D3242CE22D56E240019501226D56074
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?ctsa=mr&CtsSyncId=BF8275F9C1A345A6968F6F6DD911C7AF&RedC=c.clarity.ms&MXFR=2D3242CE22D56E240019501226D56074
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?ctsa=mr&CtsSyncId=BF8275F9C1A345A6968F6F6DD911C7AF&RedC=c.clarity.ms&MXFR=2D3242CE22D56E240019501226D56074 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pompechaleur.economiselenergie.site/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?ctsa=mr&CtsSyncId=BF8275F9C1A345A6968F6F6DD911C7AF&MUID=33093EE9B0A265E509632C35B157646D
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: MUID=33093EE9B0A265E509632C35B157646D; domain=.bing.com; expires=Mon, 15-Apr-2024 13:44:09 GMT; path=/; SameSite=None; Secure; Priority=High;
MR=0; domain=c.bing.com; expires=Wed, 29-Mar-2023 13:44:09 GMT; path=/; SameSite=None; Secure;
SRM_B=33093EE9B0A265E509632C35B157646D; domain=c.bing.com; expires=Mon, 15-Apr-2024 13:44:09 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5F46465CFA6D455DBC2D0B062DF8D933 Ref B: OSL30EDGE0209 Ref C: 2023-03-22T13:44:09Z
date: Wed, 22 Mar 2023 13:44:09 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?ctsa=mr&CtsSyncId=BF8275F9C1A345A6968F6F6DD911C7AF&MUID=33093EE9B0A265E509632C35B157646D
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?ctsa=mr&CtsSyncId=BF8275F9C1A345A6968F6F6DD911C7AF&MUID=33093EE9B0A265E509632C35B157646D
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?ctsa=mr&CtsSyncId=BF8275F9C1A345A6968F6F6DD911C7AF&MUID=33093EE9B0A265E509632C35B157646D HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pompechaleur.economiselenergie.site/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Thu, 16 Mar 2023 17:16:22 GMT
accept-ranges: bytes
etag: "c4b6d572b58d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Wed, 22-Mar-2023 13:54:09 GMT; path=/; SameSite=None; Secure;
date: Wed, 22 Mar 2023 13:44:09 GMT
content-length: 42
X-Firefox-Spdy: h2
oneocsp.microsoft.com/ocsp
200 OK 1.8 kB URL HTTP/1.1 oneocsp.microsoft.com/ocsp
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 727c9782315ca93d2070bc315f2cafaf
3e536ae3031e3d75ffdfa72d57c8bcc5de01780a
c549be943d04b024de57a14ffd686b1052adc904d9096cb7ef5f98b00d2f1315
POST /ocsp HTTP/1.1
Host: oneocsp.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=86400
Content-Length: 1777
Content-Type: application/ocsp-response
Expires: Tue, 28 Mar 2023 15:50:15 GMT
Last-Modified: Tue, 21 Mar 2023 21:08:23 GMT
ETag: "c549be943d04b024de57a14ffd686b1052adc904d9096cb7ef5f98b00d2f1315"
X-Powered-By: ASP.NET
x-content-type-options: nosniff
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: 6C8A624E657C4268BA18907A4426724A Ref B: OSL30EDGE0413 Ref C: 2023-03-22T13:44:09Z
Date: Wed, 22 Mar 2023 13:44:09 GMT
y.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: y.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 28078
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 22 Mar 2023 13:44:10 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://pompechaleur.economiselenergie.site
Vary: Origin
Request-Context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0
y.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: y.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 33805
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 22 Mar 2023 13:44:10 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://pompechaleur.economiselenergie.site
Vary: Origin
Request-Context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0
trc-events.taboola.com/1455686/log/3/unip?en=pre_d_eng_tb&tos=1578&scd=0&ssd=1&est=1679492655076&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1679492656657&vi=1679492655075&ri=70bab0e21550c9b124768591f1a128a2&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1455686/log/3/unip?en=pre_d_eng_tb&tos=1578&scd=0&ssd=1&est=1679492655076&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1679492656657&vi=1679492655075&ri=70bab0e21550c9b124768591f1a128a2&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1455686/log/3/unip?en=pre_d_eng_tb&tos=1578&scd=0&ssd=1&est=1679492655076&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1679492656657&vi=1679492655075&ri=70bab0e21550c9b124768591f1a128a2&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Wed, 22 Mar 2023 13:44:11 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://pompechaleur.economiselenergie.site
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
y.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: y.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 557
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 22 Mar 2023 13:44:13 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://pompechaleur.economiselenergie.site
Vary: Origin
Request-Context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0
trc-events.taboola.com/1455686/log/3/unip?en=pre_d_eng_tb&tos=4580&scd=0&ssd=1&est=1679492655076&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1679492659659&vi=1679492655075&ri=70bab0e21550c9b124768591f1a128a2&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1455686/log/3/unip?en=pre_d_eng_tb&tos=4580&scd=0&ssd=1&est=1679492655076&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1679492659659&vi=1679492655075&ri=70bab0e21550c9b124768591f1a128a2&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1455686/log/3/unip?en=pre_d_eng_tb&tos=4580&scd=0&ssd=1&est=1679492655076&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1679492659659&vi=1679492655075&ri=70bab0e21550c9b124768591f1a128a2&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Wed, 22 Mar 2023 13:44:14 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://pompechaleur.economiselenergie.site
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc.taboola.com/1455686/trc/3/json?tim=1679492655081&data=%7B%22id%22%3A379%2C%22ii%22%3A%22%2Flp6%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1679492655075%2C%22cv%22%3A%2220230319-5-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dnomadsmedia-stilltrying-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1679492655080%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1455686/trc/3/json?tim=1679492655081&data=%7B%22id%22%3A379%2C%22ii%22%3A%22%2Flp6%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1679492655075%2C%22cv%22%3A%2220230319-5-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dnomadsmedia-stilltrying-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1679492655080%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1455686/trc/3/json?tim=1679492655081&data=%7B%22id%22%3A379%2C%22ii%22%3A%22%2Flp6%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1679492655075%2C%22cv%22%3A%2220230319-5-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dnomadsmedia-stilltrying-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1679492655080%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032213-2e17afd34f6559f53df312cb8411ef82%26var4%3D%7BYOUR_PUBID_HERE%7D%26spub%3D32bfe1ea-4c89750b-b5f2632f-f08d-c8a2%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Wed, 22 Mar 2023 13:44:09 GMT
via: 1.1 varnish
x-served-by: cache-bma1626-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1679492650.600602,VS0,VE136
vary: Accept-Encoding
x-vcl-time-ms: 136
X-Firefox-Spdy: h2
pompechaleur.economiselenergie.site/lp6?c=xmiiBBoVB&co=1&tx_id=M2023032213-2e17afd34f6559f53df312cb8411ef82&var4={YOUR_PUBID_HERE}/lp6?c=xmiiBBoVB&co=1&tx_id=M2023032213-2e17afd34f6559f53df312cb8411ef82&var4={YOUR_PUBID_HERE}&spub=32bfe1ea-4c89750b-b5f2632f-f08d-c8a2
200 OK 0 B URL HTTP/2 pompechaleur.economiselenergie.site/lp6?c=xmiiBBoVB&co=1&tx_id=M2023032213-2e17afd34f6559f53df312cb8411ef82&var4={YOUR_PUBID_HERE}/lp6?c=xmiiBBoVB&co=1&tx_id=M2023032213-2e17afd34f6559f53df312cb8411ef82&var4={YOUR_PUBID_HERE}&spub=32bfe1ea-4c89750b-b5f2632f-f08d-c8a2
IP
GET /lp6?c=xmiiBBoVB&co=1&tx_id=M2023032213-2e17afd34f6559f53df312cb8411ef82&var4={YOUR_PUBID_HERE}/lp6?c=xmiiBBoVB&co=1&tx_id=M2023032213-2e17afd34f6559f53df312cb8411ef82&var4={YOUR_PUBID_HERE}&spub=32bfe1ea-4c89750b-b5f2632f-f08d-c8a2 HTTP/1.1
Host: pompechaleur.economiselenergie.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 22 Mar 2023 13:44:08 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6IkFXR0pCNC9BYXE0d1NGaUJnc1pYbXc9PSIsInZhbHVlIjoiMFdPYkJpQ3BvTDN3K2R6akZGODZLNDl5aytCbHdSbjZPZkVuN2E0U0ZzSVdRWlJTdkgzZjJmcUpZRzlOaE9pUXRTcWdyTmpMYUp4cXl3VjVkcFd5SmNraDZPRTUrbngzZXFGaEZORkpZMXpNNDFNYnYxbG5hV1dyUkJUYjJBV1QiLCJtYWMiOiI5MDA4ZDNjNWFkODgxMTY0MTQzNDczYzA5MzlkZjU1NTU3NjExMGE3NWQwOGNhZjljOTY1MWY4OTcyOTgzN2U1IiwidGFnIjoiIn0%3D; expires=Fri, 21-Apr-2023 23:44:08 GMT; Max-Age=2628000; path=/; samesite=lax
leadsmetal_session=eyJpdiI6IlNaMHZlUTRsSDFLVUZjSXR1ZzBLTXc9PSIsInZhbHVlIjoibUtOOVBkNGdlYTBHZHM2dkdHOVh1aUlTL1R6aFpJTXJnRXdFcVlWamFMbE1uTmNGZkRQMk9iaHFxTzVENHFXUVNieUpyVy9aemppLzVjb0Z6aGFteWIyVDZycFZIYTYrSkpkTjRvVXd6bjgzRkdBYkdCOTdOL1RCTkpPSHV6eDgiLCJtYWMiOiIzYjZmZjkzN2E4YTA4Y2Q1NWEzZTVlOTVkMWM5M2I4MWVlZmZkMDQzYzA2MGM1YTI2MWNkZjUzNmQ0Yjg2Njc4IiwidGFnIjoiIn0%3D; expires=Fri, 21-Apr-2023 23:44:08 GMT; Max-Age=2628000; path=/; httponly; samesite=lax
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OGuFZ%2F10lqoUhNaGTxr%2BTpKgBLRo5u8r%2FEp%2BE%2B3gK4HPx0UuZmLirTZaAalNepRZ0090C7imUMuV0U9iS3BfXcj9THceAg48239LYfTSirRla6Tz1tQnIQN1bxYifjD2T4SALAxSShPC%2BFVrhJ4ipFwGcUFIYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7abede196f05b529-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js
302 Found 0 B URL HTTP/2 unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js
IP
GET /@lottiefiles/lottie-player@latest/dist/lottie-player.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 22 Mar 2023 13:44:08 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /@lottiefiles/lottie-player@1.7.1/dist/lottie-player.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GW4RM4FKYZF2WTX6GKECWD3P-fra
cf-cache-status: HIT
age: 392
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7abede1becfdb527-OSL
X-Firefox-Spdy: h2
a.plerdy.com/public/js/click/main.js?v=0.03842987768488204
200 OK 0 B URL HTTP/2 a.plerdy.com/public/js/click/main.js?v=0.03842987768488204
IP
GET /public/js/click/main.js?v=0.03842987768488204 HTTP/1.1
Host: a.plerdy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Mar 2023 13:44:08 GMT
content-type: application/javascript
last-modified: Fri, 10 Mar 2023 09:18:40 GMT
etag: W/"640af5f0-18c4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k6VbZYw3emOTaCTx7F5RO5PtczjfMqgLHGizeZpYS1ubc9%2BIpExS8YP%2BmF9z2CCZoBWIeFK9UGu%2B6mX1IVV1EPWobYH%2BIQ8m5gf4ORcEvBP7nOnPdw1LHoP2bh4GTA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7abede1fbdb2b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Raleway:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Raleway:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
IP
GET /css2?family=Raleway:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 22 Mar 2023 13:44:08 GMT
date: Wed, 22 Mar 2023 13:44:08 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.clarity.ms/tag/bup7y7r655?ref=gtm2
200 OK 0 B URL HTTP/2 www.clarity.ms/tag/bup7y7r655?ref=gtm2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /tag/bup7y7r655?ref=gtm2 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=c5eda61764a04565bf69f1d686d29541.20230322.20240321; expires=Thu, 21 Mar 2024 13:44:09 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:3f60b293-70d6-4805-b0bb-3484f0a73bf0
x-cache: CONFIG_NOCACHE
x-azure-ref: 0KQYbZAAAAACGt4KWZ0lCTYRnJvv5jyzOQ1BIMzBFREdFMDQyMQA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Wed, 22 Mar 2023 13:44:08 GMT
X-Firefox-Spdy: h2
www.clarity.ms/eus-f-sc/s/0.7.4/clarity.js
200 OK 0 B URL HTTP/2 www.clarity.ms/eus-f-sc/s/0.7.4/clarity.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /eus-f-sc/s/0.7.4/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d95b289aeae9cd"
x-cache: TCP_HIT
request-context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0
x-azure-ref-originshield: 0dUIaZAAAAABhLWo+N2mKSKIjAN4BtrYrQU1TMDRFREdFMTkwOQA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
x-azure-ref: 0KQYbZAAAAABA08b9fvuiTIZ7I/MZBn5VQ1BIMzBFREdFMDQyMQA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Wed, 22 Mar 2023 13:44:08 GMT
X-Firefox-Spdy: h2
34.149.35.41
185.103.37.70
157.240.205.11
141.226.228.48
104.16.125.175
23.38.201.81