firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 04 Sep 2022 21:44:24 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: lWoA4O1QI2jE7UjfeQjssbuWXSnDfgxZ76lgm8JmLDTGBqXONgpuKg==
Age: 1505
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d931e0142ef5ffe9cdb4c4c6bfcb9bc9
d9c4caf525e8926b042a14f38d374cc4033ed768
f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5547
Expires: Sun, 04 Sep 2022 23:41:56 GMT
Date: Sun, 04 Sep 2022 22:09:29 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 04 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eF3LiEObUtH965An4pA87mSpz9KeIz5XlKMSYvM_R_V61KTg6WGa6Q==
age: 75252
X-Firefox-Spdy: h2
beynawaili.me/3ldrjf2/l8ofdpfzlaq
302 Found 70 B URL HTTP/1.1 beynawaili.me/3ldrjf2/l8ofdpfzlaq
IP
File type HTML document, ASCII text
Hash 79d04da6b19a8c4170fdd5d89a4f32fb
b99ddbd172c94229480dbd8ad9dc3177e7a2a181
94a5e76d96528d86e030cb63a06a78863313b8668664bdae4685e390d7fac81e
GET /3ldrjf2/l8ofdpfzlaq HTTP/1.1
Host: beynawaili.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Sun, 04 Sep 2022 22:09:29 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 70
Connection: keep-alive
Location: http://try.lookatmysjhe.me/3ldrjf2/l8ofdpfzlaq?
X-Served-By: Namecheap URL Forward
Server: namecheap-nginx
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 22:09:30 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
try.lookatmysjhe.me/3ldrjf2/l8ofdpfzlaq?
302 Found 49 B URL HTTP/1.1 try.lookatmysjhe.me/3ldrjf2/l8ofdpfzlaq?
IP
File type HTML document, ASCII text
Hash ecd202475f5d7bd5a1473d6b4d46ffb4
42a34e26a98266e1273b0decca6a1c7e055c594a
5e5dd8e71d2585d026c2861561c2cfc8e49c14976df6cd1351c64c468266db34
Analyzer Verdict Alert fortinet Malware
GET /3ldrjf2/l8ofdpfzlaq? HTTP/1.1
Host: try.lookatmysjhe.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Sun, 04 Sep 2022 22:09:30 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 49
Connection: keep-alive
Location: http://vas.lookatmysjhe.me
X-Served-By: Namecheap URL Forward
Server: namecheap-nginx
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sun, 04 Sep 2022 21:38:16 GMT
Cache-Control: max-age=3600
Expires: Sun, 04 Sep 2022 22:08:19 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Y1QekFRSk6lfhH8BHXiPWX5rrHT-k1_5vTvNfWSPhF4Lz9wlgcTkew==
Age: 1874
ocsp.digicert.com/
200 OK 471 B IP
Hash 77d035f38a45e8a1ec30d5fe9611880b
01cf34de95257da64dac90edf5a86203f1160271
7dc687d6bb1679ba5567e58b4f8c1e78766e7ee36273ba7f62068c595d57f7f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5049
Cache-Control: max-age=127284
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 22:09:30 GMT
Etag: "63145c96-1d7"
Expires: Tue, 06 Sep 2022 09:30:54 GMT
Last-Modified: Sun, 04 Sep 2022 08:06:46 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
vas.lookatmysjhe.me/
302 Found 176 B IP
File type HTML document, ASCII text
Hash d2f80ff63c51ba13fd1089f87584d95c
94260e47a14eb6f08cef154b0ae25e5a7ce90c65
619fd7855dca9a2d40d4debb75976c072f51690cd117ff6d92a32258cf1e7634
GET / HTTP/1.1
Host: vas.lookatmysjhe.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Sun, 04 Sep 2022 22:09:30 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 176
Connection: keep-alive
Location: https://track.grantige.com/ofsy/ae5890dc-2c784904-47987784-9377-1819/a1c08f70-05c8e548-f6f0b223-06c2-534f?Subid=ka1tos&sub_pubid=ka1tos&externalid=ka1tos
X-Served-By: Namecheap URL Forward
Server: namecheap-nginx
track.grantige.com/ofsy/ae5890dc-2c784904-47987784-9377-1819/a1c08f70-05c8e548-f6f0b223-06c2-534f?Subid=ka1tos&sub_pubid=ka1tos&externalid=ka1tos
303 See Other 267 B URL HTTP/1.1 track.grantige.com/ofsy/ae5890dc-2c784904-47987784-9377-1819/a1c08f70-05c8e548-f6f0b223-06c2-534f?Subid=ka1tos&sub_pubid=ka1tos&externalid=ka1tos
IP
ASN #201942 Soltia Consulting SL
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b9b7d72dca2522d8ba309b29196ee7af
552c37bd084b5b7d5a3e94baf630a4f76afa9b9a
541a441bcf392cdbc8bc2e834028d7f24b8abe3e8ac5732bdb60a7b290f99557
GET /ofsy/ae5890dc-2c784904-47987784-9377-1819/a1c08f70-05c8e548-f6f0b223-06c2-534f?Subid=ka1tos&sub_pubid=ka1tos&externalid=ka1tos HTTP/1.1
Host: track.grantige.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 303 See Other
Server: nginx
Date: Sun, 04 Sep 2022 22:09:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Cache-Control: no-cache, private
Location: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
X-Device: desktop
Content-Encoding: gzip
Age: 0
TP-Cache: MISS
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: VIVxGVDw/nUctzwq15ntmA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: gQtTwbmNX1F8DD/7qgk4V6x3de8=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 230ee24ecafffdc398b3bb99a3b624ff
1b3f288943459dcfc33eb798011ab27367da6120
3209008e7e3c237513148023607dea0c91d96f3bb0597de41fb4bcf0131b16d3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3209008E7E3C237513148023607DEA0C91D96F3BB0597DE41FB4BCF0131B16D3"
Last-Modified: Sun, 04 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21465
Expires: Mon, 05 Sep 2022 04:07:16 GMT
Date: Sun, 04 Sep 2022 22:09:31 GMT
Connection: keep-alive
desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
200 OK 9.2 kB URL HTTP/1.1 desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4417)
Hash 62b768c686eef456b096ccc2b0170bd4
2e4654c4cb60560ec6525106d93a00a705959b77
8105bfd289888abc1ac3d396912f2a0bc0f077ac3f38f07254f67f877234d7f9
GET /index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:31 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Set-Cookie: dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Length: 9188
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a73c40e0fed317f31e35a24d5b5e2d0d
fb19e9d403e37956762ebb527260576860161872
4a38f2cc8997dada402e2cce06bbd8776cbad2075b00696d00efa59ad5388644
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 22:09:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
desformationscertifiantes.com/css/bootstrap-grid.css
200 OK 4.0 kB URL HTTP/1.1 desformationscertifiantes.com/css/bootstrap-grid.css
IP
Hash a13e41b0dfc56ebcc3f693ec8458b285
314ce43d877795383d11824f417591ec457a2abe
03096457170785a854821411d97ccc870844b9dd0788f929a8a963c96c435345
GET /css/bootstrap-grid.css HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:31 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "930c-5e10629f5c3c3-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Length: 3963
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 194d72d26ddeaa8a8a266839eb707300
86427a0db92a3b4bd2690ad361109559c7212992
ab77f42ccfa0c649217777139f0d14a6742039596ee37a045c5fe96e7ca32338
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 22:09:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a73c40e0fed317f31e35a24d5b5e2d0d
fb19e9d403e37956762ebb527260576860161872
4a38f2cc8997dada402e2cce06bbd8776cbad2075b00696d00efa59ad5388644
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 22:09:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 194d72d26ddeaa8a8a266839eb707300
86427a0db92a3b4bd2690ad361109559c7212992
ab77f42ccfa0c649217777139f0d14a6742039596ee37a045c5fe96e7ca32338
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 22:09:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
desformationscertifiantes.com/css/bootstrap.css
200 OK 23 kB URL HTTP/1.1 desformationscertifiantes.com/css/bootstrap.css
IP
Hash 53e782e09efbd01262455f40699f698b
cc12e8d71fbb8eb5b504f4f1fac6d3cc76c9f54c
80ccabcec702552f7b9c0491a077d1e6c00ad4cae28301e9d6383f84453ccbaf
GET /css/bootstrap.css HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:31 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "2a61d-5e10629f5e303-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Length: 22936
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8eac5d74737c636281db1f62aa69e325
07770c6e3eeabc1992db04bd2f79203a52045d3a
afad5f076b7090c0c05afee217ea33c94699ec347bbd24d2b4b44987a8ad4d04
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=109252
Date: Sun, 04 Sep 2022 22:09:31 GMT
Etag: "63141856-1d7"
Expires: Tue, 06 Sep 2022 04:30:23 GMT
Last-Modified: Sun, 04 Sep 2022 03:15:34 GMT
Server: ECS (nyb/1D1A)
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: _Oz3Zk5NIzhDqpj5dNreqyr9DZOcuhOqdLH3ce_3VouOJJ5l1fszxQ==
Age: 4489
cdn.lordicon.com/libs/mssddfmo/lord-icon-2.1.0.js
301 Moved Permanently 185 B URL HTTP/2 cdn.lordicon.com/libs/mssddfmo/lord-icon-2.1.0.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4c555068310076e85908835c721911f5
9ec990aabb4391e139034f68e5e657e0f1d0b74d
568b4de0ad30e85670e724dc30ccb675924353b77807356c5ad7f29c8c38f510
GET /libs/mssddfmo/lord-icon-2.1.0.js HTTP/1.1
Host: cdn.lordicon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 185
location: https://cdn.lordicon.com/mssddfmo.js
server: nginx/1.14.2
date: Sun, 04 Sep 2022 18:16:12 GMT
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QLAxv7CJQwuPgv01sJdjnhbrbw4K04Dznj4ewdCkL5dE218WkAtmbA==
age: 13999
X-Firefox-Spdy: h2
desformationscertifiantes.com/css/style.css
200 OK 2.9 kB URL HTTP/1.1 desformationscertifiantes.com/css/style.css
IP
Hash 56f3e79f3df5b4852396a55953e6befe
ecf086127961438e1dcb2c95463ece212f751cd3
f00ccfb9e9a7b35556bd7db2e08786970f68eec6760ae9bbb6587d75e8ca9e1d
GET /css/style.css HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:31 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:18:15 GMT
ETag: "337f-5e1062b46fa58-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Length: 2892
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
desformationscertifiantes.com/css/animate.css
200 OK 4.2 kB URL HTTP/1.1 desformationscertifiantes.com/css/animate.css
IP
File type ASCII text, with very long lines (460)
Hash 5825f815bdac8edfeeba9230075f5400
25253516ce0cbd5e7281b5975ec704a195f05a84
eb6b2035f6d861339ebca5ff91e20e83efb19bdefa03503aa285e991bd80fd5d
GET /css/animate.css HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:31 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "b2c6-5e10629f5b423-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Length: 4244
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
desformationscertifiantes.com/js/showHide.js
200 OK 602 B URL HTTP/1.1 desformationscertifiantes.com/js/showHide.js
IP
Hash 01a1862e0c3734015e2581ead953c55b
c304a339ea087b3c529dc20cb0ac1eaa989efa4a
066207c47a2667c94c6fdcce7aaa1206fcebfa2a2c064e890d32ce122f9947b9
GET /js/showHide.js HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:31 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "56c-5e10629f74a61-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Length: 602
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/javascript
sc-static.net/scevent.min.js
200 OK 7.9 kB URL HTTP/2 sc-static.net/scevent.min.js
IP
File type ASCII text, with very long lines (22702), with no line terminators
Hash 8017b8af70af76a9e0d8249a8e360db4
f1a1b2fa8d6ca01469cdee79ebc8f8d91bb03a54
1ecf4b2988b08fb2daecfd7c318f60b4a7aaf1463f846a448ac96242aefd182d
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/
Cookie: X-AB=0d6e407936704bd380072f5891d28b0e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 7905
server: CloudFront
date: Sun, 04 Sep 2022 00:16:09 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: public, s-maxage=86400, max-age=600
etag: 0d6e407936704bd380072f5891d28b0e
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4us6iGHVJ4x5tdkjfAaTS1X4F4GpPAp3MTkk6hyRn6-6B1l0fX29Aw==
age: 78802
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3958546039b436bd448017432b45c949
45aadab2339c0718b57200a1b2849073c04f08f5
903f9b9e0ccec46513fb56991790db64f79dd2548f6240c4905cf9f19bdaa783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 22:09:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
desformationscertifiantes.com/js/scroll.js
200 OK 862 B URL HTTP/1.1 desformationscertifiantes.com/js/scroll.js
IP
Hash c908cca3c8e2445f5220f14b34835bb6
6e659278b9715476c791b7709c6f7d49a896872d
447c67572e53c47529aa4736da7db70711453eb96ff00ed53db483fb8e4cf81f
GET /js/scroll.js HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:31 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "b44-5e10629f74a61-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Length: 862
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript
desformationscertifiantes.com/js/wow.js
200 OK 2.7 kB URL HTTP/1.1 desformationscertifiantes.com/js/wow.js
IP
File type ASCII text, with very long lines (8096)
Hash 932ac0535b165fbc6de8ef1e514486c9
b805a31cd481e58d3e84deeff543cdca14295865
ea94b579b8319a47e89e52ef1c74f5183ba4d8a30acd8df444463551329370ce
GET /js/wow.js HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:31 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "2015-5e10629f75a01-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Length: 2723
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/javascript
desformationscertifiantes.com/js/jquery.min.js
200 OK 33 kB URL HTTP/1.1 desformationscertifiantes.com/js/jquery.min.js
IP
File type ASCII text, with very long lines (32038)
Hash 52b94c239ac654d524aedfea51652120
5e2f762ca56010473d633225f4c5c34ce2f62197
e7da358d6cfe51b08ebf16f2085a31018016b02db285c8c08984300e599ef9d4
GET /js/jquery.min.js HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:31 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "176f8-5e10629f74a61-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Length: 33303
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/javascript
desformationscertifiantes.com/js/bootstrap.js
200 OK 21 kB URL HTTP/1.1 desformationscertifiantes.com/js/bootstrap.js
IP
File type ASCII text, with very long lines (317)
Hash f08651a8a2e293903687a294a67a1b1c
4541376dccd26305f05ab798a6adfbac5872a2a0
6049dd331f1e621ca3075e682a3fb5c3271e23f0c9d241a8919e41efc1c485df
GET /js/bootstrap.js HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:31 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "1e375-5e10629f70be2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Length: 20999
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/javascript
cdn.lordicon.com/mssddfmo.js
200 OK 90 kB URL HTTP/2 cdn.lordicon.com/mssddfmo.js
IP
Hash 2569cee8a03603e0311c945e9bc6c528
73c63afd92e43dc3e4077fce2da9f0c1cdebbced
dd516710ff819e2fb9a03fccd4c556551aa6c76e4f7e98c062074c03c68125e9
GET /mssddfmo.js HTTP/1.1
Host: cdn.lordicon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://desformationscertifiantes.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
server: nginx/1.14.2
date: Wed, 31 Aug 2022 14:49:46 GMT
x-powered-by: lordicon
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=432000
accept-ranges: bytes
last-modified: Wed, 16 Feb 2022 20:01:24 GMT
etag: W/"44383-17f04200e97"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DjW2gVD1JsIwJAUCdPRjLuc66Gn9qkkts7bXpSi5ptc_eVC22HrvTQ==
age: 371985
X-Firefox-Spdy: h2
desformationscertifiantes.com/js/inputmask.min.js
200 OK 32 kB URL HTTP/1.1 desformationscertifiantes.com/js/inputmask.min.js
IP
File type ASCII text, with very long lines (65352)
Hash bacbd3758c10e7d63a2e39a9dfc5a198
41255d053a1acd4d5ca3c9b7077be32468ef25a3
2bd6dde8a67dbe8e8b6e16ed241a5da73b99725c940097ed4db3c9da742940e1
GET /js/inputmask.min.js HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:31 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "229b4-5e10629f73ac1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Length: 32300
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript
desformationscertifiantes.com/js/bootstrap.bundle.js
200 OK 43 kB URL HTTP/1.1 desformationscertifiantes.com/js/bootstrap.bundle.js
IP
File type ASCII text, with very long lines (307)
Hash 25d0fc5fd0eba32c86358b733cdf729f
a692d2ac4f35b98a492d6eed1acafc85cb959d50
5b9ebaf998f2ff76832fe98f3a0bb1bb0650012de93ab23df22d07eb417948c9
GET /js/bootstrap.bundle.js HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:31 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "33d79-5e10629f6eca2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Length: 43435
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/javascript
desformationscertifiantes.com/img/project-bg-2.jpg
200 OK 6.5 kB URL HTTP/1.1 desformationscertifiantes.com/img/project-bg-2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1170x230, components 3\012- data
Hash 51a1df3e2485d5d6b64fd830eb7c9d0c
78c477157c76b5f1ea901558bde62a3db5cc2ae2
dc2728cc97697b427ae12dc985791b1c4fa736b63a5d1a45caa0826bc4640cba
GET /img/project-bg-2.jpg HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/css/style.css
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:31 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "195e-5e10629f66002"
Accept-Ranges: bytes
Content-Length: 6494
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
desformationscertifiantes.com/img/banner.jpg
200 OK 11 kB URL HTTP/1.1 desformationscertifiantes.com/img/banner.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x730, components 3\012- data
Hash 78e52dbdf74603151c5c98ef65dea86c
44b4c369e1398c5c32db5804dc1741c84d048b69
3e19e40d0885c4dfd49d089492b20f39ba95cc1481cf9659046f53add0a9ada5
GET /img/banner.jpg HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/css/style.css
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:31 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "2a66-5e10629f5f2a3"
Accept-Ranges: bytes
Content-Length: 10854
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
desformationscertifiantes.com/mentions.html
200 OK 8.9 kB URL HTTP/1.1 desformationscertifiantes.com/mentions.html
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 7f8d208d12e0fb1b742006b8bdb4bb67
4e6fbb0daf616c3ef513da4358917495c5688150
c05b0e4e985a8af703d8ba09c8aea53eb4d7871d2c7e456638f7c2cf327264e1
GET /mentions.html HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:31 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "75a4-5e10629f75a01-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Length: 8921
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html
desformationscertifiantes.com/img/rejdkqs.png
200 OK 37 kB URL HTTP/1.1 desformationscertifiantes.com/img/rejdkqs.png
IP
File type PNG image data, 533 x 532, 8-bit/color RGBA, non-interlaced\012- data
Hash bda0db33a0e01fd9859a4a6f3a73e25e
fb69127d1c4914ec3966b501c75739eaad0ea4d4
312b49e0f6ea156f3a742e055958ce505a6731c6067ac54967e467daafc17f7b
GET /img/rejdkqs.png HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:31 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:18:15 GMT
ETag: "8f87-5e1062b46fa58"
Accept-Ranges: bytes
Content-Length: 36743
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
desformationscertifiantes.com/img/office-application.png
200 OK 34 kB URL HTTP/1.1 desformationscertifiantes.com/img/office-application.png
IP
File type PNG image data, 512 x 512, 16-bit/color RGBA, non-interlaced\012- data
Hash 69a571e00e27ea3a71c2c6f7af0a879f
c9c1d1e23b7211e52a32f5e3d753d153bc91b51c
f380502dcb03380da19940930be1734d6de95284044022272f095e03bd4ecb08
GET /img/office-application.png HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:31 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "862f-5e10629f65062"
Accept-Ranges: bytes
Content-Length: 34351
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
desformationscertifiantes.com/img/germany.png
200 OK 12 kB URL HTTP/1.1 desformationscertifiantes.com/img/germany.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash a25c8f7162154368473055a9899f83d0
d45ac805eb29b2a11dd95fedeec8cce2076a14ba
7522b00a0cd5e1028a28c142a113074bdb15de6d24a613cbcccc0d6242d86a30
GET /img/germany.png HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:31 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "2d84-5e10629f60243"
Accept-Ranges: bytes
Content-Length: 11652
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
desformationscertifiantes.com/img/spain.png
200 OK 13 kB URL HTTP/1.1 desformationscertifiantes.com/img/spain.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash cd2f27e52bb7592e28676a86a3309158
796b9f96cbd568743713d06478e26c8e690e3723
0e656966f1958200ae6fbba050fc6eaebb9b1c60edaaffca31d26525bc59c826
GET /img/spain.png HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:31 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "3123-5e10629f66002"
Accept-Ranges: bytes
Content-Length: 12579
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
desformationscertifiantes.com/img/italien.png
200 OK 8.7 kB URL HTTP/1.1 desformationscertifiantes.com/img/italien.png
IP
File type PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced\012- data
Hash fa0d3fd45b799f28c09b4f784338fd67
a211680f2949654249b48ac3a6d7586f044cb20b
288f18e1c4cd7256360d3a96471715801c08b0fab8529cc3ceedda24ea55b23d
GET /img/italien.png HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:31 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "21f5-5e10629f66fa2"
Accept-Ranges: bytes
Content-Length: 8693
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
desformationscertifiantes.com/img/uk.png
200 OK 20 kB URL HTTP/1.1 desformationscertifiantes.com/img/uk.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash a0f21f7bff7a0eb9ce4ebf9af7ef03c7
68cb32da14d6010c7cb2fb7cd83da713566edcc2
150d834f8224e78a8bb24c1386ca1142c2b13ce2e1d141323f3e972a9adc99ef
GET /img/uk.png HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:31 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "4c87-5e10629f66fa2"
Accept-Ranges: bytes
Content-Length: 19591
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
desformationscertifiantes.com/img/photoshop.png
200 OK 22 kB URL HTTP/1.1 desformationscertifiantes.com/img/photoshop.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 6793474b36b8348d9f3494324f553bf0
9d64242952d7c9bcb21a4b93cdd3e0eb20b7f437
b758aa9397190855525f5ce0039263ec52f133f62b64acf0e762f3721303dad9
GET /img/photoshop.png HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:32 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "572f-5e10629f66002"
Accept-Ranges: bytes
Content-Length: 22319
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
desformationscertifiantes.com/img/ecommerce.jpg
200 OK 40 kB URL HTTP/1.1 desformationscertifiantes.com/img/ecommerce.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 900x600, components 3\012- data
Hash 6a5805f4c71355594d12f855f353086c
1199ae2f0e27251377b01466c6c822bd7a71629e
d4e8baedb4eac15e1710c5161b7bbcfb0c942207e70afba9db7733665a5b7927
GET /img/ecommerce.jpg HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:32 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "9cfc-5e10629f69e82"
Accept-Ranges: bytes
Content-Length: 40188
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/jpeg
desformationscertifiantes.com/img/wordpress.png
200 OK 17 kB URL HTTP/1.1 desformationscertifiantes.com/img/wordpress.png
IP
File type PNG image data, 512 x 512, 8-bit colormap, non-interlaced\012- data
Hash db4298ab4dbd04c9e9a2395533a01082
507a6ac3a84400172686cec9511965f01b81079a
19466439f97145616eeccc5e2cf409e7671cdd4f6c2ab62e293e40b3f58ce938
GET /img/wordpress.png HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:32 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "4169-5e10629f66fa2"
Accept-Ranges: bytes
Content-Length: 16745
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
desformationscertifiantes.com/img/social-media.png
200 OK 46 kB URL HTTP/1.1 desformationscertifiantes.com/img/social-media.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 0b0f48cfbe48c9b51d52cd1191c8f77c
c52297ed7787717e7c5a7106fc43733f2164d85f
93bcbf5907cf860a162eb6ecda97f7d3f8f4f915e2db8587666882cc60493b5e
GET /img/social-media.png HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:32 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "b4e6-5e10629f6bdc2"
Accept-Ranges: bytes
Content-Length: 46310
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14585
Expires: Mon, 05 Sep 2022 02:12:37 GMT
Date: Sun, 04 Sep 2022 22:09:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14585
Expires: Mon, 05 Sep 2022 02:12:37 GMT
Date: Sun, 04 Sep 2022 22:09:32 GMT
Connection: keep-alive
desformationscertifiantes.com/img/receptionist.png
200 OK 16 kB URL HTTP/1.1 desformationscertifiantes.com/img/receptionist.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 165ee12c3a7b2efc0442de7fce25387a
d11844477567db516331adf9aeaea12fd371723d
3b2f366ec636a1ff4e6c645651bbe6530ebf73737dfe3b99c1ea5b8461b34f8b
GET /img/receptionist.png HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:32 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "3f65-5e10629f66002"
Accept-Ranges: bytes
Content-Length: 16229
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14585
Expires: Mon, 05 Sep 2022 02:12:37 GMT
Date: Sun, 04 Sep 2022 22:09:32 GMT
Connection: keep-alive
desformationscertifiantes.com/img/programming.png
200 OK 15 kB URL HTTP/1.1 desformationscertifiantes.com/img/programming.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 7cb8fcd768c7538bd9c9efd457a0df18
4aa42cbfa7db7f611a0d28deda1699e83038bec9
7868692c82dcf92f3f1cb9272542cb852a66726a718944c0b72fc413d6478adc
GET /img/programming.png HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:32 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "3b6c-5e10629f6ae22"
Accept-Ranges: bytes
Content-Length: 15212
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/png
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14585
Expires: Mon, 05 Sep 2022 02:12:37 GMT
Date: Sun, 04 Sep 2022 22:09:32 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6bb4b1d74f1443bc3328301ab3ae6464
2768253dacaaad6cb498c6b2eb7694208b0ce0a6
07dcc95dab7757402998a5a61b540c965ce95c8bd51a814a09438981693b563a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8688
x-amzn-requestid: 1c5fbc89-8ce8-4792-b713-f2c0ceeab737
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wifFJYoAMFi0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7a9-214311e155c661ff77d89906;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:21 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qWfbakQgavws0aT7URut5AdyniAYkEZcd3nz2mtU2zzT7ZhipObNEg==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 21:44:32 GMT
age: 1500
etag: "2768253dacaaad6cb498c6b2eb7694208b0ce0a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1bdfdf7e36f78f2f0e4d7ede9fdb76a8
babb88202741bbf2d4fd25e0731a4a7a6fcc28f8
949ea108642789e1014150909060f11d99608f082760d0e868a90282f2768d43
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9690
x-amzn-requestid: 614c99f8-116a-4603-bcde-3fbd5bfa14d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wx1HInIAMFiYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c80b-25c09c3227d72395408782f0;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: yzPHrri8V02gVOmIBfBfEiny6w522Ycn9U0Z_-L3VnHgUuhVkuWVdg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 21:51:41 GMT
age: 1071
etag: "babb88202741bbf2d4fd25e0731a4a7a6fcc28f8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fc4ceb10dd9fcaab21ae58dcf10c401f
6ce530af682094dc5413db9de02565691fab4da7
84ad58e126cce2ab6b1568ffe89a116bc1de0310bb72d4530eead2fb8191572c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11380
x-amzn-requestid: 61f37e21-33a8-49e6-b384-4ca1fcfbffa5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xz8TLFA3oAMFQjg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63117414-42de5c4128eb9e011d848356;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 03:10:12 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: s0voKdiDdj0mq8-VRFSWcYcQXaWti7929bpdKSQMWDoVCmOAPepuDg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 03:48:57 GMT
age: 66035
etag: "6ce530af682094dc5413db9de02565691fab4da7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09148d75-a4a3-47e6-8d91-01e8dfad4bc7.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09148d75-a4a3-47e6-8d91-01e8dfad4bc7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0eecb70391b63b662d13355e32d95ea1
5d5c724e26af57967b9a132a77d3986ba8d6ed9c
2c7f2aa1c725a5d39daf44ee746bb24b5c15aab41c67cf160814f7f87d1aacdf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09148d75-a4a3-47e6-8d91-01e8dfad4bc7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8931
x-amzn-requestid: cfc0940f-ad6a-4535-91b7-70b200af68d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wwGEVEoAMFriw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c800-5b6e6e5e3401eba533fb63df;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:48 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: aa71ssSsXM8Z0Q2V4AitycF3hefEZXNqIYsr0vsJyhpE9cDpNEwh6Q==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 22:14:56 GMT
age: 86076
etag: "5d5c724e26af57967b9a132a77d3986ba8d6ed9c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37a5a560-36c9-4ce4-9cd9-c63ef9dd80e0.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37a5a560-36c9-4ce4-9cd9-c63ef9dd80e0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b827f0dcea3d5bfab9139d239e9f0155
ffe21e93486c5763ae6ee17fe39c6dbb0cb3e714
de9a30cf34ccda6ee06845151a41f489b42a0f9072b481b717abef90095e3f35
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37a5a560-36c9-4ce4-9cd9-c63ef9dd80e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10349
x-amzn-requestid: a1564fd3-2042-449b-baa8-7e06abf02fd2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5w-6EHXIAMFQaw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c85f-26179fef7b74e89f05022fe7;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:34:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RTb9HYlXQLizx__DP8Pd9FGTylC1RDwk_YoqL8ZbcFnAAu4s0EmTKQ==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 22:13:00 GMT
age: 86192
etag: "ffe21e93486c5763ae6ee17fe39c6dbb0cb3e714"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
desformationscertifiantes.com/img/img2.png
200 OK 319 kB URL HTTP/1.1 desformationscertifiantes.com/img/img2.png
IP
File type PNG image data, 560 x 370, 8-bit/color RGB, interlaced\012- data
Size 319 kB (318929 bytes)
Hash f0366d93cee73d9ad9ff96af3503fe83
2961d5c8448bfe48be1ee133b2597e35c1d87032
6b03be43a135c88b5cac1e43d23b8a2f46e655c3f23ead75cc169bad4dd2f3f8
GET /img/img2.png HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:31 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "4ddd1-5e10629f640c3"
Accept-Ranges: bytes
Content-Length: 318929
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
desformationscertifiantes.com/img/social-network.png
200 OK 49 kB URL HTTP/1.1 desformationscertifiantes.com/img/social-network.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 6dde4efef0e6b9330eaa6d22bcdb9528
d87c45067a2023bbf2c541b30c247c0d3143a5e3
022befad2debadb748086a0f48d4ee4b094f9bff8e134c8a076d3650f10414d3
GET /img/social-network.png HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:32 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "bfcc-5e10629f6bdc2"
Accept-Ranges: bytes
Content-Length: 49100
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
desformationscertifiantes.com/img/businessman.png
200 OK 22 kB URL HTTP/1.1 desformationscertifiantes.com/img/businessman.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash d7609c5c37a6544fc19f80ebb7f3d69c
0fc4b56506f8ffa97ca986ce99524e29f2e7cf0b
fda6402580fbde97edbda19a8a26655f99a6db1837ba69248e8c37fd47e18b00
GET /img/businessman.png HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:32 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "5698-5e10629f60243"
Accept-Ranges: bytes
Content-Length: 22168
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ca50f9c56ff869b0b63ca71b1a9f8170
13b16ca74113dfd52ccf23e6bb39307fc713f984
76b85dd7e018ab4b3d4b2610f90dbca61d0f05d38a3b905fee789af131ae7538
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14855
x-amzn-requestid: 65cf850b-227a-4318-a00e-d7cd4ef81489
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wjuGtpoAMFvvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7b1-54bc36741984491b0509d173;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: M9Y8U9vqVs1ATiPP9jLPybTJ-xwC--5oiRUpj9-imTWfh6_rmtL5Kw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 14:29:26 GMT
age: 27606
etag: "13b16ca74113dfd52ccf23e6bb39307fc713f984"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
desformationscertifiantes.com/img/www.png
200 OK 40 kB URL HTTP/1.1 desformationscertifiantes.com/img/www.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 0cd892a9ffdfe8972c821f8d28ab82bc
ea657616eac91102131a92c54139c437e9d07365
b33f28eb30f0506dd487a377eabafe7dc92957c0adb134b6b4a1623faee2d489
GET /img/www.png HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:32 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "9c5e-5e10629f6cd62"
Accept-Ranges: bytes
Content-Length: 40030
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 420a6ffc72857f7132a9065de7c844a9
dee617384561d0790b72f096336b73ade7950579
c98bdc53f1f22291c4b954e9bd5f6432cfe3d5b24e3680b4ada3fc3a696e79d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 22:09:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Hash 293ae3e0fc8b0d5c143fdf9d8490228d
3976c659b908e70818a3a1ac71860b497fe2d1a9
04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11367
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=2EF772104F226670286F60054E75677C; domain=.bing.com; expires=Fri, 29-Sep-2023 22:09:32 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 81F56A38258545229FF05D041B0E57B2 Ref B: OSL30EDGE0408 Ref C: 2022-09-04T22:09:32Z
date: Sun, 04 Sep 2022 22:09:32 GMT
X-Firefox-Spdy: h2
desformationscertifiantes.com/favicon.png
200 OK 4.0 kB URL HTTP/1.1 desformationscertifiantes.com/favicon.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, interlaced\012- data
Hash 8604b4e2501cb5928e40d0623400e361
c94dbb348dd0222aa31c1ddc93793f889c18ff70
d3bb00c4c958c19ee9504845c697ab7d6315a1654604e816b795883b8c4d986f
GET /favicon.png HTTP/1.1
Host: desformationscertifiantes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/index.php?p=gm&t=ka1tos&s=M2022090422-4e0c960fc99218902acce08a915885ea
Cookie: _gcl_au=1.1.1761277810.1662329315; _uetsid=1ef42a002c9e11ed959f7b75192d3c8d; _uetvid=1ef44a302c9e11ed8343ebc65484727a; _clck=t6tyg2|1|f4l|0; _scid=d092f15e-e2c4-4918-aee0-051ca404d42e; _clsk=iwasa0|1662329316628|1|1|b.clarity.ms/collect; dedecotagmanagerdesformationscertifiantescom=i9bbe7k7v7flgplvstqnv8vjau
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 22:09:32 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
Last-Modified: Thu, 09 Jun 2022 16:17:53 GMT
ETag: "f95-5e10629f75a01"
Accept-Ranges: bytes
Content-Length: 3989
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
bat.bing.com/action/0?ti=134002144&Ver=2&mid=a9e13aa4-3bab-4e8d-9cfd-5f729a8b5033&sid=1ef42a002c9e11ed959f7b75192d3c8d&vid=1ef44a302c9e11ed8343ebc65484727a&vids=0&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=D%C3%A9veloppez%20vos%20comp%C3%A9tences%20gratuitement%20gr%C3%A2ce%20au%20dispositif%20CPF&p=https%3A%2F%2Fdesformationscertifiantes.com%2Findex.php%3Fp%3Dgm%26t%3Dka1tos%26s%3DM2022090422-4e0c960fc99218902acce08a915885ea&r=<=2318&evt=pageLoad&sv=1&rn=158766
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=134002144&Ver=2&mid=a9e13aa4-3bab-4e8d-9cfd-5f729a8b5033&sid=1ef42a002c9e11ed959f7b75192d3c8d&vid=1ef44a302c9e11ed8343ebc65484727a&vids=0&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=D%C3%A9veloppez%20vos%20comp%C3%A9tences%20gratuitement%20gr%C3%A2ce%20au%20dispositif%20CPF&p=https%3A%2F%2Fdesformationscertifiantes.com%2Findex.php%3Fp%3Dgm%26t%3Dka1tos%26s%3DM2022090422-4e0c960fc99218902acce08a915885ea&r=<=2318&evt=pageLoad&sv=1&rn=158766
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=134002144&Ver=2&mid=a9e13aa4-3bab-4e8d-9cfd-5f729a8b5033&sid=1ef42a002c9e11ed959f7b75192d3c8d&vid=1ef44a302c9e11ed8343ebc65484727a&vids=0&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=D%C3%A9veloppez%20vos%20comp%C3%A9tences%20gratuitement%20gr%C3%A2ce%20au%20dispositif%20CPF&p=https%3A%2F%2Fdesformationscertifiantes.com%2Findex.php%3Fp%3Dgm%26t%3Dka1tos%26s%3DM2022090422-4e0c960fc99218902acce08a915885ea&r=<=2318&evt=pageLoad&sv=1&rn=158766 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=3C415F59A6BB612904DF4D4CA7EC605F; domain=.bing.com; expires=Fri, 29-Sep-2023 22:09:32 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B4F096C7A5FC4A50932F583D8AC5ECB6 Ref B: OSL30EDGE0408 Ref C: 2022-09-04T22:09:32Z
date: Sun, 04 Sep 2022 22:09:32 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1931a32d83e4feb5268887bcb07fcc1e
6fb75c21ced29544dd6d7c3b0ef79adf65718a39
d794fae0b82097a2e97af2f21b6c243832081f88036a2a56bbeeabb08790d88d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 22:09:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/776566705/?random=1662329368577&cv=9&fst=1662329368577&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8v0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fdesformationscertifiantes.com%2Findex.php%3Fp%3Dgm%26t%3Dka1tos%26s%3DM2022090422-4e0c960fc99218902acce08a915885ea&tiba=D%C3%A9veloppez%20vos%20comp%C3%A9tences%20gratuitement%20gr%C3%A2ce%20au%20dispositif%20CPF&auid=1761277810.1662329315&hn=www.google.com&async=1&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/776566705/?random=1662329368577&cv=9&fst=1662329368577&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8v0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fdesformationscertifiantes.com%2Findex.php%3Fp%3Dgm%26t%3Dka1tos%26s%3DM2022090422-4e0c960fc99218902acce08a915885ea&tiba=D%C3%A9veloppez%20vos%20comp%C3%A9tences%20gratuitement%20gr%C3%A2ce%20au%20dispositif%20CPF&auid=1761277810.1662329315&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2572), with no line terminators
Hash 7680e89eb9294ea81012c878fe515e0c
59ba11f4d313b365b753ea726fae5914a28b2bc4
e31d309db791b9ed2ad110d0c2e8e0c149c2b3494934327d11bbfcb8a69bcd4c
GET /pagead/viewthroughconversion/776566705/?random=1662329368577&cv=9&fst=1662329368577&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8v0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fdesformationscertifiantes.com%2Findex.php%3Fp%3Dgm%26t%3Dka1tos%26s%3DM2022090422-4e0c960fc99218902acce08a915885ea&tiba=D%C3%A9veloppez%20vos%20comp%C3%A9tences%20gratuitement%20gr%C3%A2ce%20au%20dispositif%20CPF&auid=1761277810.1662329315&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 04 Sep 2022 22:09:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1142
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 04-Sep-2022 22:24:32 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1931a32d83e4feb5268887bcb07fcc1e
6fb75c21ced29544dd6d7c3b0ef79adf65718a39
d794fae0b82097a2e97af2f21b6c243832081f88036a2a56bbeeabb08790d88d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 22:09:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/p/action/134002144.js
200 OK 668 B URL HTTP/2 bat.bing.com/p/action/134002144.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Hash fa7f0d6edd434a035abfba069ce815a0
41f942fab32be717285e16050b8aa607ee3d29c3
627756f939b0f59664c1490be123c0bbdbc102bcd41f385e2f45e4acc78eaf03
GET /p/action/134002144.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private,max-age=60
content-length: 668
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=30632EAD20D764D801033CB82180656A; domain=.bing.com; expires=Fri, 29-Sep-2023 22:09:32 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 68BC443480B94F0C8486E358A963A65B Ref B: OSL30EDGE0408 Ref C: 2022-09-04T22:09:32Z
date: Sun, 04 Sep 2022 22:09:32 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eebb383a38a8f985b59a62820595689b
4d7bbcdeaa48e211743257c973ae2559b404d561
c8cf6bfc6865d4b25e7ef0df77478f47c4043b639aed462a2c6a0ba5439c3522
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 22:09:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.clarity.ms/tag/uet/134002144
200 OK 1.5 kB URL HTTP/2 www.clarity.ms/tag/uet/134002144
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (1542), with no line terminators
Hash cb020a025a2aed7ccc57c3c5db3104f2
250d73a3929fea9edb91032b236952818b06d7b4
85da88f9b7b743978c0992338827a529f97d82aedb27fe2be334b7a482e6443b
GET /tag/uet/134002144 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-length: 1542
content-type: application/x-javascript
expires: -1
set-cookie: CLID=7e2d998cf03041d98384653c1fe8da12.20220904.20230904; expires=Mon, 04 Sep 2023 22:09:32 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:3d284f99-f285-495c-ac33-dedd7ecf1ac8
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 0HCIVYwAAAADkQ2HOo5/2RpD48BIz+TLQUk9NMzBFREdFMDgxMwA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Sun, 04 Sep 2022 22:09:32 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash b9d94986a0a269613d340a45882fb901
31c245eb169af9841f6a2fa047d3672d95927fed
151c2c2a73cbb77468983362ac81e3ae2ababeb39d8d6f6189b4e51f2929e390
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2020
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 22:09:33 GMT
Last-Modified: Sun, 04 Sep 2022 21:35:53 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash b9d94986a0a269613d340a45882fb901
31c245eb169af9841f6a2fa047d3672d95927fed
151c2c2a73cbb77468983362ac81e3ae2ababeb39d8d6f6189b4e51f2929e390
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2004
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 22:09:33 GMT
Last-Modified: Sun, 04 Sep 2022 21:36:09 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
tr.snapchat.com/cm/i?pid=f6d9c6a5-38db-4190-8f6c-d7f27ceb559e&u_scsid=3b53156d-4836-4b35-ba95-6bb02208b782&u_sclid=e3e7dd33-1325-4044-88b4-9cba1edbeb98
200 OK 0 B URL HTTP/2 tr.snapchat.com/cm/i?pid=f6d9c6a5-38db-4190-8f6c-d7f27ceb559e&u_scsid=3b53156d-4836-4b35-ba95-6bb02208b782&u_sclid=e3e7dd33-1325-4044-88b4-9cba1edbeb98
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/i?pid=f6d9c6a5-38db-4190-8f6c-d7f27ceb559e&u_scsid=3b53156d-4836-4b35-ba95-6bb02208b782&u_sclid=e3e7dd33-1325-4044-88b4-9cba1edbeb98 HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/
Cookie: sc_at=v2|H4sIAAAAAAAAAAXBiQ0AIAgEsIlI+DzDOKIwBcPb7mq9CCZPLvJ2UIY9UjFfp4CFnBFATcMkhj+cSC26MgAAAA==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 22:09:33 GMT
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.clarity.ms/eus2/s/0.6.40/clarity.js
200 OK 24 kB URL HTTP/2 www.clarity.ms/eus2/s/0.6.40/clarity.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (54745)
Hash dac81dc432a7964b5bd5f86f5fbf014e
7bee5e9480cb6d61eb32de957ba742f78d9965ac
1d8536080a992d9212a6c18c63a1db28077f588709d4313cabeee2fd67ff113c
GET /eus2/s/0.6.40/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8bd4806fdad30"
vary: Accept-Encoding
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 0HCIVYwAAAABpAwK/czgUQ7Q4+seCO3kWUk9NMzBFREdFMDgxMwA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Sun, 04 Sep 2022 22:09:32 GMT
X-Firefox-Spdy: h2
tr.snapchat.com/p
200 OK 68 B IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
POST /p HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 544
Origin: https://desformationscertifiantes.com
Connection: keep-alive
Referer: https://desformationscertifiantes.com/
Cookie: sc_at=v2|H4sIAAAAAAAAAAXBiQ0AIAgEsIlI+DzDOKIwBcPb7mq9CCZPLvJ2UIY9UjFfp4CFnBFATcMkhj+cSC26MgAAAA==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 22:09:33 GMT
access-control-allow-origin: https://desformationscertifiantes.com
cache-control: no-cache, no-transform
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 1
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://desformationscertifiantes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=D501F9B90B414868B42DDF2373812761&RedC=c.clarity.ms&MXFR=3F66E437C35867B6353FF622C7586922
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=3F66E437C35867B6353FF622C7586922; domain=.clarity.ms; expires=Fri, 29-Sep-2023 22:09:33 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Sun, 04 Sep 2022 22:09:32 GMT
content-length: 0
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=D501F9B90B414868B42DDF2373812761&RedC=c.clarity.ms&MXFR=3F66E437C35867B6353FF622C7586922
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=D501F9B90B414868B42DDF2373812761&RedC=c.clarity.ms&MXFR=3F66E437C35867B6353FF622C7586922
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=D501F9B90B414868B42DDF2373812761&RedC=c.clarity.ms&MXFR=3F66E437C35867B6353FF622C7586922 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://desformationscertifiantes.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=D501F9B90B414868B42DDF2373812761&MUID=11B8C43D73076B202E73D62872506A79
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=11B8C43D73076B202E73D62872506A79; domain=c.bing.com; expires=Fri, 29-Sep-2023 22:09:33 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 3C28BA0FE5BD42F98F9BAAA414E96319 Ref B: OSL30EDGE0408 Ref C: 2022-09-04T22:09:33Z
date: Sun, 04 Sep 2022 22:09:33 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=D501F9B90B414868B42DDF2373812761&MUID=11B8C43D73076B202E73D62872506A79
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=D501F9B90B414868B42DDF2373812761&MUID=11B8C43D73076B202E73D62872506A79
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=D501F9B90B414868B42DDF2373812761&MUID=11B8C43D73076B202E73D62872506A79 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://desformationscertifiantes.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Wed, 17 Aug 2022 23:56:46 GMT
accept-ranges: bytes
etag: "de363c295b2d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Sun, 04-Sep-2022 22:19:33 GMT; path=/; SameSite=None; Secure;
date: Sun, 04 Sep 2022 22:09:32 GMT
content-length: 42
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1228
Origin: https://desformationscertifiantes.com
Connection: keep-alive
Referer: https://desformationscertifiantes.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://desformationscertifiantes.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Sun, 04 Sep 2022 22:09:32 GMT
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 234506
Origin: https://desformationscertifiantes.com
Connection: keep-alive
Referer: https://desformationscertifiantes.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://desformationscertifiantes.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Sun, 04 Sep 2022 22:09:33 GMT
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 81431
Origin: https://desformationscertifiantes.com
Connection: keep-alive
Referer: https://desformationscertifiantes.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://desformationscertifiantes.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Sun, 04 Sep 2022 22:09:36 GMT
X-Firefox-Spdy: h2
cdn.lordicon.com/gqdnbnwt.json
200 OK 0 B URL HTTP/2 cdn.lordicon.com/gqdnbnwt.json
IP
GET /gqdnbnwt.json HTTP/1.1
Host: cdn.lordicon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://desformationscertifiantes.com/
Origin: https://desformationscertifiantes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
server: nginx/1.14.2
date: Wed, 31 Aug 2022 21:54:00 GMT
x-powered-by: lordicon
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=432000
etag: W/"5709-Q74jOxx/0TTChQEylrX/ar5FXEs"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: S3b_yyk8jYoz1KnJU8aQdmmJkgku2Xiea5oXp1KnezPW4s6Zn8-bcg==
age: 346531
X-Firefox-Spdy: h2
cdn.lordicon.com/yeallgsa.json
200 OK 0 B URL HTTP/2 cdn.lordicon.com/yeallgsa.json
IP
GET /yeallgsa.json HTTP/1.1
Host: cdn.lordicon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://desformationscertifiantes.com/
Origin: https://desformationscertifiantes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
server: nginx/1.14.2
x-powered-by: lordicon
access-control-allow-origin: *
access-control-expose-headers: *
content-encoding: gzip
date: Fri, 02 Sep 2022 20:17:21 GMT
cache-control: public, max-age=432000
etag: W/"9ab0-5vIXXjCvDaBT81QJOZQsoZrqWFI"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Gu5cOrVxe-8pm15B_5SxEYDY3KHecSDWYHpWtSquHiYNKpToMnfLvA==
age: 179530
X-Firefox-Spdy: h2
tr.snapchat.com/collector/is_enabled?pids=f6d9c6a5-38db-4190-8f6c-d7f27ceb559e&tld=com
200 OK 0 B URL HTTP/2 tr.snapchat.com/collector/is_enabled?pids=f6d9c6a5-38db-4190-8f6c-d7f27ceb559e&tld=com
IP
GET /collector/is_enabled?pids=f6d9c6a5-38db-4190-8f6c-d7f27ceb559e&tld=com HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://desformationscertifiantes.com/
Origin: https://desformationscertifiantes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 22:09:33 GMT
access-control-allow-origin: https://desformationscertifiantes.com
content-type: application/json
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
kit.fontawesome.com/4ac95da7a5.js
200 OK 0 B URL HTTP/2 kit.fontawesome.com/4ac95da7a5.js
IP
GET /4ac95da7a5.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://desformationscertifiantes.com
Connection: keep-alive
Referer: https://desformationscertifiantes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 22:09:31 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: FxGwRt5iomJ0WGVGqqAh
cf-cache-status: HIT
age: 53
server: cloudflare
cf-ray: 745a0ccb0b6c1c16-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.lordicon.com/nocovwne.json
200 OK 0 B URL HTTP/2 cdn.lordicon.com/nocovwne.json
IP
GET /nocovwne.json HTTP/1.1
Host: cdn.lordicon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://desformationscertifiantes.com/
Origin: https://desformationscertifiantes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
server: nginx/1.14.2
date: Wed, 31 Aug 2022 02:20:13 GMT
x-powered-by: lordicon
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=432000
etag: W/"79f1-UxsAyfYh7xT5Xf90JpQfrIKBCcg"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 07lm8G5NmVcjRGXuMyq3UC5Z6wZrUfb6jOT7zZB8FfLqlI_qA5SPig==
age: 416958
X-Firefox-Spdy: h2
192.64.119.24
23.36.77.32
93.184.220.29
104.18.22.52
31.170.100.126