nbr391.keap-link009.com/v2/click/72497440bc89d6973261fa34925d1f10/eJyNj8EKgkAURf_lrSUVLWt2IiKD5iJqHaMONKjjMD4LEf-9scJVQdt3zz2POwFyySTSCgjIQnsHFyzQvBRKcIlRJ5GVr9R3HH_vBRY0QtaJ7gYFZPraXoHl7DqOawGOihvkfAqjlObJNaN5akjFtHnylyfYbVdNfAxpBvP808tbgfHdqHsgqAe-LKqEWYUX3Rj-hqiIbRes7YaaNWzshgfb9EVvukwpLqvP8JSPb8P8BNIyYKI=
301 Moved Permanently 0 B URL HTTP/1.1 nbr391.keap-link009.com/v2/click/72497440bc89d6973261fa34925d1f10/eJyNj8EKgkAURf_lrSUVLWt2IiKD5iJqHaMONKjjMD4LEf-9scJVQdt3zz2POwFyySTSCgjIQnsHFyzQvBRKcIlRJ5GVr9R3HH_vBRY0QtaJ7gYFZPraXoHl7DqOawGOihvkfAqjlObJNaN5akjFtHnylyfYbVdNfAxpBvP808tbgfHdqHsgqAe-LKqEWYUX3Rj-hqiIbRes7YaaNWzshgfb9EVvukwpLqvP8JSPb8P8BNIyYKI=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/click/72497440bc89d6973261fa34925d1f10/eJyNj8EKgkAURf_lrSUVLWt2IiKD5iJqHaMONKjjMD4LEf-9scJVQdt3zz2POwFyySTSCgjIQnsHFyzQvBRKcIlRJ5GVr9R3HH_vBRY0QtaJ7gYFZPraXoHl7DqOawGOihvkfAqjlObJNaN5akjFtHnylyfYbVdNfAxpBvP808tbgfHdqHsgqAe-LKqEWYUX3Rj-hqiIbRes7YaaNWzshgfb9EVvukwpLqvP8JSPb8P8BNIyYKI= HTTP/1.1
Host: nbr391.keap-link009.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Cache-Control: private
Location: https://nbr391.keap-link009.com:443/v2/click/72497440bc89d6973261fa34925d1f10/eJyNj8EKgkAURf_lrSUVLWt2IiKD5iJqHaMONKjjMD4LEf-9scJVQdt3zz2POwFyySTSCgjIQnsHFyzQvBRKcIlRJ5GVr9R3HH_vBRY0QtaJ7gYFZPraXoHl7DqOawGOihvkfAqjlObJNaN5akjFtHnylyfYbVdNfAxpBvP808tbgfHdqHsgqAe-LKqEWYUX3Rj-hqiIbRes7YaaNWzshgfb9EVvukwpLqvP8JSPb8P8BNIyYKI=
Content-Length: 0
Date: Mon, 27 Mar 2023 06:51:29 GMT
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5d9435c884bf4a0777fdf4b57079ae09
7f04b9db47ffeec90ac6397416b7553e5336a550
fe77420ec3a11f547cf5172b68d30faa4fe0c13165ae305f0013b02914e61084
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE77420EC3A11F547CF5172B68D30FAA4FE0C13165AE305F0013B02914E61084"
Last-Modified: Sat, 25 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8432
Expires: Mon, 27 Mar 2023 09:12:02 GMT
Date: Mon, 27 Mar 2023 06:51:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfd491ebe7381221b3674c2c8bf9e566
d2ac5badf17f348c28a52e9db10e6eb80e5a231a
34a026664386054b0b73c36cd1ddfce023551ee41963df0e38248bac1e1eb56c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "34A026664386054B0B73C36CD1DDFCE023551EE41963DF0E38248BAC1E1EB56C"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10171
Expires: Mon, 27 Mar 2023 09:41:01 GMT
Date: Mon, 27 Mar 2023 06:51:30 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Alert, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 27 Mar 2023 06:27:57 GMT
content-type: application/json
age: 1413
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9bb70197d53617b5e6889b890dd2ae26
f3e9b8a743de494529baf2d078a622539f965307
a094a13905b7f1cd89475f9c83f9245580d4c3c7228d51d5c16622aec3c6aa45
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A094A13905B7F1CD89475F9C83F9245580D4C3C7228D51D5C16622AEC3C6AA45"
Last-Modified: Sat, 25 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9687
Expires: Mon, 27 Mar 2023 09:32:57 GMT
Date: Mon, 27 Mar 2023 06:51:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7107daa8db1e7cb7410a8a864a16058b
8ad627c31b1442512cacb14491dd06130853cdc3
cf98b37cfd89b5080174816833a86b131fe9ec0fe1b61754eedd8cab64eee0e3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CF98B37CFD89B5080174816833A86B131FE9EC0FE1B61754EEDD8CAB64EEE0E3"
Last-Modified: Fri, 24 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3283
Expires: Mon, 27 Mar 2023 07:46:13 GMT
Date: Mon, 27 Mar 2023 06:51:30 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ABRa4A6rm5h6wKHfpPLXO5/BkyJyhuYkQkqxVFkESAqhLqL3ZFnbFfZXY+mE3GZpZeoW2fy1evD/oHKkU+QMVw==
x-amz-request-id: RV87YJG0JX01EHCX
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 27 Mar 2023 05:55:40 GMT
age: 3350
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 27 Mar 2023 06:51:30 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
nbr391.keap-link009.com/v2/click/72497440bc89d6973261fa34925d1f10/eJyNj8EKgkAURf_lrSUVLWt2IiKD5iJqHaMONKjjMD4LEf-9scJVQdt3zz2POwFyySTSCgjIQnsHFyzQvBRKcIlRJ5GVr9R3HH_vBRY0QtaJ7gYFZPraXoHl7DqOawGOihvkfAqjlObJNaN5akjFtHnylyfYbVdNfAxpBvP808tbgfHdqHsgqAe-LKqEWYUX3Rj-hqiIbRes7YaaNWzshgfb9EVvukwpLqvP8JSPb8P8BNIyYKI=
303 See Other 0 B URL HTTP/2 nbr391.keap-link009.com/v2/click/72497440bc89d6973261fa34925d1f10/eJyNj8EKgkAURf_lrSUVLWt2IiKD5iJqHaMONKjjMD4LEf-9scJVQdt3zz2POwFyySTSCgjIQnsHFyzQvBRKcIlRJ5GVr9R3HH_vBRY0QtaJ7gYFZPraXoHl7DqOawGOihvkfAqjlObJNaN5akjFtHnylyfYbVdNfAxpBvP808tbgfHdqHsgqAe-LKqEWYUX3Rj-hqiIbRes7YaaNWzshgfb9EVvukwpLqvP8JSPb8P8BNIyYKI=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/click/72497440bc89d6973261fa34925d1f10/eJyNj8EKgkAURf_lrSUVLWt2IiKD5iJqHaMONKjjMD4LEf-9scJVQdt3zz2POwFyySTSCgjIQnsHFyzQvBRKcIlRJ5GVr9R3HH_vBRY0QtaJ7gYFZPraXoHl7DqOawGOihvkfAqjlObJNaN5akjFtHnylyfYbVdNfAxpBvP808tbgfHdqHsgqAe-LKqEWYUX3Rj-hqiIbRes7YaaNWzshgfb9EVvukwpLqvP8JSPb8P8BNIyYKI= HTTP/1.1
Host: nbr391.keap-link009.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 303 See Other
location: http://bamoukalayouwa.sbs?inf_contact_key=a4bfeded38b9f9ab6b726a935088d623e0dfad19307e4ab83e7f77a572748ece
date: Mon, 27 Mar 2023 06:51:30 GMT
x-envoy-upstream-service-time: 25
server: istio-envoy
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7107daa8db1e7cb7410a8a864a16058b
8ad627c31b1442512cacb14491dd06130853cdc3
cf98b37cfd89b5080174816833a86b131fe9ec0fe1b61754eedd8cab64eee0e3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CF98B37CFD89B5080174816833A86B131FE9EC0FE1B61754EEDD8CAB64EEE0E3"
Last-Modified: Fri, 24 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3283
Expires: Mon, 27 Mar 2023 07:46:13 GMT
Date: Mon, 27 Mar 2023 06:51:30 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Content-Type, Cache-Control, Pragma, Alert, Last-Modified, Retry-After, Backoff, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 27 Mar 2023 06:17:24 GMT
age: 2046
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
bamoukalayouwa.sbs/?inf_contact_key=a4bfeded38b9f9ab6b726a935088d623e0dfad19307e4ab83e7f77a572748ece
302 Found 292 B URL HTTP/1.1 bamoukalayouwa.sbs/?inf_contact_key=a4bfeded38b9f9ab6b726a935088d623e0dfad19307e4ab83e7f77a572748ece
IP
File type HTML document, ASCII text
Hash 904e75c6bd8ff8311c81e48ab1a22722
5cf6ec8384ebba1669a5c43a2ebda3b78a84e13c
4a7440952fcfbe92b5bf28e836a517777b7c4257d2b4b89fe804eef5398f4c0a
NIDS Severity Alert suricata low ET INFO Namecheap URL Forward
GET /?inf_contact_key=a4bfeded38b9f9ab6b726a935088d623e0dfad19307e4ab83e7f77a572748ece HTTP/1.1
Host: bamoukalayouwa.sbs
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Mon, 27 Mar 2023 06:51:30 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 292
Connection: keep-alive
Location: https://adv.liliese.com/ofc/87f17afe-496f2ba2-157ada7a-30b8-c146/0aad1fe9-a2c81856-3644db2e-6cb0-fca5?Subid=815003233&externalid=%7BYOUR_CLICKID_HERE%7D&inf_contact_key=a4bfeded38b9f9ab6b726a935088d623e0dfad19307e4ab83e7f77a572748ece&sub_pubid=%7BYOUR_SUB_PUBID_HERE%7D
X-Served-By: Namecheap URL Forward
Server: namecheap-nginx
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 70300b32357c46f3448d567189b64cb3
6ba66a5cf63cdbfeaec59b936151cc812bac56df
5a2b4f9fc5ebaa8062058bf68eae75fc28e06c6ef6a0e79c3c761c1d92f81cb9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5A2B4F9FC5EBAA8062058BF68EAE75FC28E06C6EF6A0E79C3C761C1D92F81CB9"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8428
Expires: Mon, 27 Mar 2023 09:11:58 GMT
Date: Mon, 27 Mar 2023 06:51:30 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 7fhdeuLXb+mku6yrPZvPpQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Wr5UR7c1+wy5fMnCL8lGWoj1yR4=
adv.liliese.com/ofc/87f17afe-496f2ba2-157ada7a-30b8-c146/0aad1fe9-a2c81856-3644db2e-6cb0-fca5?Subid=815003233&externalid=%7BYOUR_CLICKID_HERE%7D&inf_contact_key=a4bfeded38b9f9ab6b726a935088d623e0dfad19307e4ab83e7f77a572748ece&sub_pubid=%7BYOUR_SUB_PUBID_HERE%7D
303 See Other 332 B URL HTTP/2 adv.liliese.com/ofc/87f17afe-496f2ba2-157ada7a-30b8-c146/0aad1fe9-a2c81856-3644db2e-6cb0-fca5?Subid=815003233&externalid=%7BYOUR_CLICKID_HERE%7D&inf_contact_key=a4bfeded38b9f9ab6b726a935088d623e0dfad19307e4ab83e7f77a572748ece&sub_pubid=%7BYOUR_SUB_PUBID_HERE%7D
IP
ASN #29119 ServiHosting Networks S.L.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (613)
Hash 97903667c8b46e06f4606a266978f9aa
d4f6a6d83c719c79e7ad004e8da590289cb1b3c2
cd0d46b638c6d6e8162293095e64ca10a01b7dfa43943ea6c7cf182e236135ff
GET /ofc/87f17afe-496f2ba2-157ada7a-30b8-c146/0aad1fe9-a2c81856-3644db2e-6cb0-fca5?Subid=815003233&externalid=%7BYOUR_CLICKID_HERE%7D&inf_contact_key=a4bfeded38b9f9ab6b726a935088d623e0dfad19307e4ab83e7f77a572748ece&sub_pubid=%7BYOUR_SUB_PUBID_HERE%7D HTTP/1.1
Host: adv.liliese.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 303 See Other
date: Mon, 27 Mar 2023 06:51:31 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: no-cache, private
location: https://pompechaleur.economiselenergie.site/lp6?c=xmiiBBoVB&co=1&tx_id=M2023032706-f1db05e7be794eee859a8c2fec02d4c7&var4=815003233/lp6?c=xmiiBBoVB&co=1&tx_id=M2023032706-f1db05e7be794eee859a8c2fec02d4c7&var4=815003233&spub=87f17afe-496f2ba2-157ada7a-30b8-c146
tcdn-backend: c120_gasmobi
content-encoding: gzip
age: 0
vary: , Accept-Encoding
tp-cache: MISS
content-length: 332
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 338c42e4ccd475333da107485955b1cf
89223f304f86cb8c292a3acb7c640b5002b39690
333964f3284089e231f7cade16ba160392dd24eab8516c55588be6f513c7306d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 06:51:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 338c42e4ccd475333da107485955b1cf
89223f304f86cb8c292a3acb7c640b5002b39690
333964f3284089e231f7cade16ba160392dd24eab8516c55588be6f513c7306d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 06:51:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1eebd93ef4ace8f93b306d6a46d47288
e968b59494a1ec170444176e4a45733e34289be0
ac364c1480c475154359adb0bd62380d9f51d59d0617c77977001a0eb184d77e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 06:51:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js
302 Found 548 B URL HTTP/2 unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js
IP
Hash af1412cdca6dcfad313024cab5b4ca7b
a4fc3ef82132ecb24f2e2f78bc8053b14238a3fe
950f1eacbfac27a8b2d520d2eca6b2304f85f59eb268f662477be65a7c549186
GET /@lottiefiles/lottie-player@latest/dist/lottie-player.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 27 Mar 2023 06:51:31 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /@lottiefiles/lottie-player@1.7.1/dist/lottie-player.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GWGWZT7NG7T3ETZJDQBKH6R5-ams
cf-cache-status: HIT
age: 405
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7ae5b4929b5db515-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f118fb224d6a3feb68bb7296958d8fe
7ccaa3d7e3b47dec93f7ddb398615bd71227b26e
2f70628100003ab47f5fb5622f8951ec8f4bad4b88cc3c083983a5c31356b429
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 06:51:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f118fb224d6a3feb68bb7296958d8fe
7ccaa3d7e3b47dec93f7ddb398615bd71227b26e
2f70628100003ab47f5fb5622f8951ec8f4bad4b88cc3c083983a5c31356b429
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 06:51:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-PRM6FKR
200 OK 78 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PRM6FKR
IP
Hash 8ab48e14da99d780f449ee5fbb3a58bb
1545d63d6cbd90601cb5cb02438184951317fb10
13447b2945833d9f0b99b2d2aef5b97ac3e5825f4de28efa320c554f9e88a9a5
GET /gtm.js?id=GTM-PRM6FKR HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 27 Mar 2023 06:51:31 GMT
expires: Mon, 27 Mar 2023 06:51:31 GMT
cache-control: private, max-age=900
last-modified: Mon, 27 Mar 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74933
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f118fb224d6a3feb68bb7296958d8fe
7ccaa3d7e3b47dec93f7ddb398615bd71227b26e
2f70628100003ab47f5fb5622f8951ec8f4bad4b88cc3c083983a5c31356b429
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 06:51:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
200 OK 46 kB URL HTTP/2 fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Hash c1fd378f54921c75e4ae1821e7b8fff6
2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:26:47 GMT
expires: Sat, 23 Mar 2024 10:26:47 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Jul 2022 19:58:01 GMT
content-type: font/woff2
age: 246284
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1eebd93ef4ace8f93b306d6a46d47288
e968b59494a1ec170444176e4a45733e34289be0
ac364c1480c475154359adb0bd62380d9f51d59d0617c77977001a0eb184d77e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 06:51:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f118fb224d6a3feb68bb7296958d8fe
7ccaa3d7e3b47dec93f7ddb398615bd71227b26e
2f70628100003ab47f5fb5622f8951ec8f4bad4b88cc3c083983a5c31356b429
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 06:51:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
unpkg.com/@lottiefiles/lottie-player@1.7.1/dist/lottie-player.js
200 OK 2.0 MB URL HTTP/2 unpkg.com/@lottiefiles/lottie-player@1.7.1/dist/lottie-player.js
IP
File type ASCII text, with very long lines (27447)
Size 2.0 MB (2031058 bytes)
Hash 3b702aa7628729fff6dd3e03fcbe857d
3808ae726e1319d58fdfd8784a66498d445362e5
56d0d9d8d64e76b87488d3353f07c83d676d0a7083560b72629b54718c5a007f
GET /@lottiefiles/lottie-player@1.7.1/dist/lottie-player.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pompechaleur.economiselenergie.site/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 06:51:31 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"59a07-9+ZSgdYoXPYwDfF2oh5cz4L42Ds"
via: 1.1 fly.io
fly-request-id: 01GTYJ110E12EM8QHXVY0H2AAF-fra
cf-cache-status: HIT
age: 1689620
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7ae5b492cbcbb515-OSL
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be1cd1cf8e462ca6f6acb2f132e614d5
037f3bc7ab850fa2c69f2584bb24340b25bb6f3c
e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA"
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8711
Expires: Mon, 27 Mar 2023 09:16:43 GMT
Date: Mon, 27 Mar 2023 06:51:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be1cd1cf8e462ca6f6acb2f132e614d5
037f3bc7ab850fa2c69f2584bb24340b25bb6f3c
e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA"
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8711
Expires: Mon, 27 Mar 2023 09:16:43 GMT
Date: Mon, 27 Mar 2023 06:51:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be1cd1cf8e462ca6f6acb2f132e614d5
037f3bc7ab850fa2c69f2584bb24340b25bb6f3c
e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA"
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8711
Expires: Mon, 27 Mar 2023 09:16:43 GMT
Date: Mon, 27 Mar 2023 06:51:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be1cd1cf8e462ca6f6acb2f132e614d5
037f3bc7ab850fa2c69f2584bb24340b25bb6f3c
e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA"
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8711
Expires: Mon, 27 Mar 2023 09:16:43 GMT
Date: Mon, 27 Mar 2023 06:51:32 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d7ce900-ce9b-481b-9205-9748eeded2e8.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d7ce900-ce9b-481b-9205-9748eeded2e8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 22905e8a7c8b1741dd51842c114a6517
c5900fe2396e0ca371c4847af4e96149850c3577
1525f9f39c09370fcb1f58f079f2d741a4c6d13fba26e6dd5b79466153d7685e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d7ce900-ce9b-481b-9205-9748eeded2e8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10405
x-amzn-requestid: 0b8dad7a-2ec1-4eed-9a2c-06079ed46662
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CRi69E9xoAMFiJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641d4b79-2f606ac041c5db24583c8d51;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 07:04:25 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: I9R9-URMT91CKcoZj-ra9GifpVsbGA_EZ8HO2zjeE8MU8_WnLNAm9w==
via: 1.1 4b800f7fa2c3fbb9f4f3c505b0df315e.cloudfront.net (CloudFront), 1.1 42ef990e439ae115ff739f04e3945234.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Mar 2023 07:48:50 GMT
age: 82962
etag: "c5900fe2396e0ca371c4847af4e96149850c3577"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 85351059b67b0a42eda7e69a31b3b4b4
b798268806dc2f79f033e5872676019faf0e0cc1
86e163b7159b197d6358ab01333ac6da221de0ebe1c5da8d5cef2977d38625fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4000
x-amzn-requestid: 68dc01d7-3eed-48f6-8532-8efaa96cc1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEqyoAMFgNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-3852cc8961365a560d1fa02f;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: I3GuoZ4ZxAtz0sKe3wrW67aitLlCAbaZkiPw23fl0F3FoumJDEnXiQ==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 d90109c5a0c30f43223e0db85921c5c2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Mar 2023 08:56:14 GMT
age: 78918
etag: "b798268806dc2f79f033e5872676019faf0e0cc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe5805638-2902-4f40-8b73-ba33d9ca0491.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe5805638-2902-4f40-8b73-ba33d9ca0491.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0096dd7b1fa0020a7af8933c7520a42e
cdaab50fa72af06cb6d5ab1b3fd2e86e39f0d995
5a32929dd8fc2ad509b0d95e39531951f51a639dae4e744e25e6404af019802e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe5805638-2902-4f40-8b73-ba33d9ca0491.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7014
x-amzn-requestid: f959a37e-f462-4177-a994-649f35dcc580
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CU1_JGXXIAMFtTA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e9d2d-592e798168fdfc33048e38f9;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 07:05:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: r5FCNyZvw2g5Bwar-l62BPN27Ym4Xp7EO_Q1l-sdXkacJVLnDquQxg==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 b48dedcc55e63f14261aa92cf2d61522.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Mar 2023 07:48:45 GMT
age: 82967
etag: "cdaab50fa72af06cb6d5ab1b3fd2e86e39f0d995"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48af090e-bcf0-48ef-945a-a7c43705ebec.gif
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48af090e-bcf0-48ef-945a-a7c43705ebec.gif
IP
File type GIF image data, version 89a, 296 x 148\012- data
Hash 4f22df3b9748df65eb07542a76cda717
ff09f8dddd82a1137e92170fedb37b61c167e47a
f1fa4e623c3193688b4c45b3c910aabac044ee324539cffdfaadd6e484d6fb22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48af090e-bcf0-48ef-945a-a7c43705ebec.gif HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9490
x-amzn-requestid: ece83816-1754-47e5-9dcb-2a313c2c95a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CU19zG5qIAMFevQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e9d24-2ffc6d6220f774793c81f84c;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 07:05:08 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: fRKNKH0APoL4MY5pRbFqA3kyTtk9UBG1grMrdaI2W5HBgJCfMqi0Yw==
via: 1.1 8591441a35c0af61913aec9af012bc38.cloudfront.net (CloudFront), 1.1 27a84054de24e45f952ea4056a821764.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Mar 2023 07:21:48 GMT
age: 84584
etag: "ff09f8dddd82a1137e92170fedb37b61c167e47a"
content-type: image/gif
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb0254d-5c75-4e14-a0c6-04283194ce5b.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb0254d-5c75-4e14-a0c6-04283194ce5b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 668a8a17a1bb77ea7db7fa23c9df9690
242108539ff8694a3c557d07b2b000e764a77f24
100952573dc9eeba889a77f4d148b646accb99f277035f0607b1c6918f93a358
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb0254d-5c75-4e14-a0c6-04283194ce5b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10591
x-amzn-requestid: a55b3a74-b9f1-424b-8d53-3f49db443698
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CaIOwFW-oAMFgUA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6420ba5e-6c3e550d1a899e80394262e6;Sampled=0
x-amzn-remapped-date: Sun, 26 Mar 2023 21:34:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: SwHfiMdDkV5eSPbXEVlcIs_k1icXGn7aaScjTgDLyG0Uo_o-K0jIqg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 d0387b833e3ca8cb748a1296b4b4bf2a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Mar 2023 21:57:30 GMT
age: 32042
etag: "242108539ff8694a3c557d07b2b000e764a77f24"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4b00868-d4e4-49ee-b488-491632971243.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4b00868-d4e4-49ee-b488-491632971243.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 675f061936669e9de498cd16bfc96379
00235db033dbeb738db9633e50c8666add66dadb
7c26736fcd1bf736aba7d16534720e03e0527ef30f6efb98403ad17e8c11a7e2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4b00868-d4e4-49ee-b488-491632971243.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10282
x-amzn-requestid: 29110a42-55db-45a2-8abf-0270f02b3017
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CRi4YH3SIAMF31g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641d4b68-459f32fe475dc8d439aa8343;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 07:04:08 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: H0c7tei0dk0pJQQmcORCZ8Wq9J4SVtvKl8aePWY6mDqmZcL9ofUm_Q==
via: 1.1 8591441a35c0af61913aec9af012bc38.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Mar 2023 09:14:55 GMT
age: 77797
etag: "00235db033dbeb738db9633e50c8666add66dadb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/events.js?sdkid=C9P6BEBC77UADFMACDFG&lib=ttq
200 OK 1.4 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=C9P6BEBC77UADFMACDFG&lib=ttq
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (3098)
Hash e94bea8ecc8b290f3b169b9dfe502e66
dfcc506665940fdd567654ddb38033f68f036cb6
2c9f6f5b3022e7845ccff5f4e8f06809dd74ba9c398d9686fedbb52e9534f48b
GET /i18n/pixel/events.js?sdkid=C9P6BEBC77UADFMACDFG&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 202303270651320F31B1B0FC6B15159FBC
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60787dee798e7afc9c5500f386c65d6ca13c8da5b5ebac40eb758f7a8ae51f59e076ef461e7c233682ae4415210e6db7b5f1cdce0bc14ec64ee231387bb9a3d2d2a666d5e92a147f68fcff3fb4ed9b2fec
content-encoding: gzip
expires: Mon, 27 Mar 2023 06:51:32 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 27 Mar 2023 06:51:32 GMT
content-length: 1398
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2.2-47519392) (-)
vary: Accept-Encoding
set-cookie: _ttp=2NaQp9OS8zVwVyc14zfuXf4qiaL; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=3, cdn-cache; desc=MISS, edge; dur=0, origin; dur=99
x-origin-response-time: 99,23.36.79.28
x-akamai-request-id: 1eeb6e21
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/main.MTE3ZGZjMmFkMQ.js
200 OK 68 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/main.MTE3ZGZjMmFkMQ.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21891)
Hash d47309bed2ba8c7cb99710b610b7737b
354a2a912469cb6ae50cd52a822c5c50a89e9bf2
00def6b36c70bea0e50f5a9564483ba42892dcf6595f7d144c33044b2a67d64b
GET /i18n/pixel/static/main.MTE3ZGZjMmFkMQ.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Cookie: _ttp=2NaQp9OS8zVwVyc14zfuXf4qiaL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20230221145409FB9878CBA6BE9A62917C
x-tt-trace-host: 01f84846a243ec928f44598c479da931d886bc10cf04919b50fbd3365b689fd9f0492c4a077221ec0df058ac640b6b63212520c7cca20b8621352c0155137d22c48ad4c2f71d5867e4ec6bff2ada640d7530f7834fc77da50357651f9ddb23be74
content-encoding: gzip
date: Mon, 27 Mar 2023 06:51:32 GMT
content-length: 68414
x-cache: TCP_MEM_HIT from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2.2-47519392) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=4
x-akamai-request-id: 1eeb6ee5
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
200 OK 6.4 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (20183), with no line terminators
Hash 8fe038c10fe586e30698a6644ccd26e0
62311d0a818b84d8ce467e7d9a4fa2d7653a4d35
402c14d42c932eb09b7932fd384f7b921679e3142ed79c356f03f84c4958f290
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "f5b26a8a79c33830b47954a53cc355f9:1679753797.689802"
Last-Modified: Sat, 25 Mar 2023 14:14:18 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Mon, 27 Mar 2023 07:11:32 GMT
Date: Mon, 27 Mar 2023 06:51:32 GMT
Content-Length: 6385
Connection: keep-alive
X-RG: EU
X-CC: NO
ocsp.digicert.com/
200 OK 471 B IP
Hash 06953cb94ffd45b8c9cb07fe3e8836bd
90fa44e15c64a9529f024064e2b8c366d9942c15
d1f3d202380d47f1b6b6a993ca3efa0837df4e73fe0bdaa58f9a92d4184e42f5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5531
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 06:51:32 GMT
Last-Modified: Mon, 27 Mar 2023 05:19:21 GMT
Server: ECAcc (ska/F776)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64347)
Hash 7fc8bce5d342b4898e6c82cc61313763
4aa4da15b55d59fc1a3a640a443cbde675d5e407
e456006ad9bc83651e868be3c53fa3fe93247a23b4fedf3b8c836fdf2c0c7de2
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: zl6JPtwIypY1Her1+0RVuQQYRHpsuWL44aKbRtIjMM5uPuDF4raGPZ+0LJgljZX5gqPsuU7rDk9BRwTuqREjQw==
content-length: 27907
x-fb-trip-id: 1904183273
date: Mon, 27 Mar 2023 06:51:32 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/identify_cab4d.js
200 OK 31 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/identify_cab4d.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 681bc25d1e648965a9374cc7da238fd5
bb973302d1b656e343013fe741d0d54bfe33b15e
2d381181d954e35610fb06daba8df86d7abb4b823e87de97276e0bd81af03669
GET /i18n/pixel/static/identify_cab4d.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Cookie: _ttp=2NaQp9OS8zVwVyc14zfuXf4qiaL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 202302211453357ED32E9CB4A234CC4054
x-tt-trace-host: 015ddd7329836f23ed04aa0dd6eae000e61dfb35b73ddd0ea6d3f361692c7f8399f836da754548664a9d56a317cca937197d586aef26ea8efc3380c784f4b6030804835a6b84edf6ba964a401008dbe475da2a7be38cb7b795f8af41aeb5068142
content-encoding: gzip
date: Mon, 27 Mar 2023 06:51:32 GMT
content-length: 30779
x-cache: TCP_MEM_HIT from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2.2-47519392) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=3
x-akamai-request-id: 1eeb6f92
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/10895876200/?random=1679899909575&cv=11&fst=1679899909575&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&hn=www.googleadservices.com&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&auid=1896546306.1679899910&rfmt=3&fmt=4
200 OK 5.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/10895876200/?random=1679899909575&cv=11&fst=1679899909575&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&hn=www.googleadservices.com&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&auid=1896546306.1679899910&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2045)
Hash 33989b347454533609ad3aff99524633
b34ad1f008d1764c3314e93ddae7820bd6b9ad3e
b926024e4cc48006c123b3cfca057390717f32ab51029fa63598d0d474214b9b
GET /pagead/viewthroughconversion/10895876200/?random=1679899909575&cv=11&fst=1679899909575&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&hn=www.googleadservices.com&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&auid=1896546306.1679899910&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 06:51:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1322
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 27-Mar-2023 07:06:32 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 06953cb94ffd45b8c9cb07fe3e8836bd
90fa44e15c64a9529f024064e2b8c366d9942c15
d1f3d202380d47f1b6b6a993ca3efa0837df4e73fe0bdaa58f9a92d4184e42f5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1284
Cache-Control: max-age=118501
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 06:51:32 GMT
Etag: "642063d5-1d7"
Expires: Tue, 28 Mar 2023 15:46:33 GMT
Last-Modified: Sun, 26 Mar 2023 15:25:09 GMT
Server: ECAcc (ska/F7A3)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b50726fcf63dc2a413d062eecac1e7c6
a5d32e8ed0099d8502141ce1696e61ccf3a0bff5
e0ac38764545d1dade860bb61c891b8c601ed05f241128c9463f11af0396e0f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 06:51:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.taboola.com/libtrc/unip/1455686/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1455686/tfa.js
IP
File type ASCII text, with very long lines (59085)
Hash e8a4a3f88af356cdfb709389a638d786
895718c00844aab41783b97ac5f2f6ae04acbc33
865663a6736001a07501d34bfc9568c9e120b8614e4735ec45284fe7b421011b
GET /libtrc/unip/1455686/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: cy4UP6Iap6nCqt6WkP+zTDpUL121CwB4ZH3lcU7XXTAg91kSOo9BPbyM+z7I9n0sqFBS8z0RAyM=
x-amz-request-id: KZVGEV6W9HE4DKEX
x-amz-replication-status: COMPLETED
last-modified: Sun, 26 Mar 2023 11:04:59 GMT
etag: "51c688a29bdf24948711ac9cf3353df3"
x-amz-server-side-encryption: AES256
x-amz-version-id: KyYwbXM.kx7.K19TrvHI6N61g53GLp8j
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Mon, 27 Mar 2023 06:51:32 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1656-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1679899893.568449,VS0,VE105
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 12
access-control-allow-origin: *
content-length: 18198
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash aacadb94b44e557195c202f9eac3d422
ae45e0a668927354b659a0050ec4f37421acfc12
e3efec2ec99be9c753808134094e95ea88d59e2898a180327a5a0818050a3859
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 06:51:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 46deddb8b844851da2d68cdb99372c7d
f52730dfe273dff574d1421d8c7178c2d296aaa2
6dfc153b2d0e0b53820d77a059a342f07bf691771ae91c31bc4d45cdbcebf2a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 06:51:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/10895876200/?random=1679899909575&cv=11&fst=1679896800000&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&fmt=3&is_vtc=1&random=371220691&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/10895876200/?random=1679899909575&cv=11&fst=1679896800000&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&fmt=3&is_vtc=1&random=371220691&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10895876200/?random=1679899909575&cv=11&fst=1679896800000&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&fmt=3&is_vtc=1&random=371220691&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 06:51:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/10895876200/?random=1679899909575&cv=11&fst=1679896800000&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&fmt=3&is_vtc=1&random=371220691&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/10895876200/?random=1679899909575&cv=11&fst=1679896800000&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&fmt=3&is_vtc=1&random=371220691&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10895876200/?random=1679899909575&cv=11&fst=1679896800000&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&frm=0&tiba=Pompe%20%C3%A0%20Chaleur&fmt=3&is_vtc=1&random=371220691&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 06:51:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
a.plerdy.com/public/js/click/main.js?v=0.9769937977382517
200 OK 2.3 kB URL HTTP/2 a.plerdy.com/public/js/click/main.js?v=0.9769937977382517
IP
File type ASCII text, with very long lines (1918)
Hash fc2dffa0c9986c6ba0e8f25b7dfd6ab8
b72b63dbcbfe5cb664348cb48fa0b7b1da158718
85a63781408308b5e3c7ad2197749c80cc29018836229a51cc447c2f92a5b5c4
GET /public/js/click/main.js?v=0.9769937977382517 HTTP/1.1
Host: a.plerdy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 06:51:32 GMT
content-type: application/javascript
last-modified: Fri, 10 Mar 2023 09:18:40 GMT
etag: W/"640af5f0-18c4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gJP3FUwfLqJfICmfrV2nTiL20JSmIlLyZGCi5gsXsCLEyp9St0ykHfc7SDUh2Imx%2F6dVvIx%2FtRpN91LPOrrxyzZeS5cyORxvXJ4tfeajg3%2BD%2FfwIb%2FzXHtnixoiRpw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ae5b4973ee4b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1021
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Cookie: _ttp=2NaQp9OS8zVwVyc14zfuXf4qiaL
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 20230327065132132B60AADCFA0D6D7E44
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf602f4e8f28fd518fbd62b4f0adef0d7f17aa686e79813a11ab167aef45aa4434dd54fb21bb0d4cbd64f588b1d444905ae262fa4918b1aa18ce9abc2750bf121d5c887ae6c58e0e1d888bbd2441b360f27ffd47772c7d9ddcbeb06c38f60fae62df
x-origin-response-time: 28,104.96.220.13
x-akamai-request-id: 210196b5.1eeb6fba
expires: Mon, 27 Mar 2023 06:51:32 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 27 Mar 2023 06:51:32 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2.2-47519392) (-)
x-cache-remote: TCP_MISS from a104-96-220-13.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2.2-47519392) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=119, origin; dur=28, inner; dur=18
x-parent-response-time: 142,23.36.79.28
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 46deddb8b844851da2d68cdb99372c7d
f52730dfe273dff574d1421d8c7178c2d296aaa2
6dfc153b2d0e0b53820d77a059a342f07bf691771ae91c31bc4d45cdbcebf2a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 06:51:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash aee967595d5b11fc508d102c6c93dd93
1b51ae5b5f9a4b7e3c51bb4307c9eacd4ea2a85e
3cbc3af47f5b1e142bb6cb5fed8154476b773f1b9a95623b5bb5ba94957ff309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 06:51:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
status.thawte.com/
200 OK 471 B IP
Hash bc0de21c57f1a31f0992d527944201ce
44fabc8677ef55f6aba34bb70a66c60e3a2ed871
9b217da693366b3910031bc392dcaa4aa0f466d0b92af5d54c57b997cfb9312d
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5181
Cache-Control: max-age=139680
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 06:51:32 GMT
Etag: "6420a757-1d7"
Expires: Tue, 28 Mar 2023 21:39:32 GMT
Last-Modified: Sun, 26 Mar 2023 20:13:11 GMT
Server: ECAcc (ska/F757)
X-Cache: HIT
Content-Length: 471
status.thawte.com/
200 OK 471 B IP
Hash bc0de21c57f1a31f0992d527944201ce
44fabc8677ef55f6aba34bb70a66c60e3a2ed871
9b217da693366b3910031bc392dcaa4aa0f466d0b92af5d54c57b997cfb9312d
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5910
Cache-Control: max-age=140409
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 06:51:32 GMT
Etag: "6420a757-1d7"
Expires: Tue, 28 Mar 2023 21:51:41 GMT
Last-Modified: Sun, 26 Mar 2023 20:13:11 GMT
Server: ECAcc (ska/F77E)
X-Cache: HIT
Content-Length: 471
region1.google-analytics.com/g/collect?v=2&tid=G-C39Y0BD3ZK>m=45je33m0&_p=849600715&cid=1490197566.1679899910&ul=en-us&sr=1280x1024&_s=1&sid=1679899909&sct=1&seg=0&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&dt=Pompe%20%C3%A0%20Chaleur&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-C39Y0BD3ZK>m=45je33m0&_p=849600715&cid=1490197566.1679899910&ul=en-us&sr=1280x1024&_s=1&sid=1679899909&sct=1&seg=0&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&dt=Pompe%20%C3%A0%20Chaleur&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-C39Y0BD3ZK>m=45je33m0&_p=849600715&cid=1490197566.1679899910&ul=en-us&sr=1280x1024&_s=1&sid=1679899909&sct=1&seg=0&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&dt=Pompe%20%C3%A0%20Chaleur&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://pompechaleur.economiselenergie.site
date: Mon, 27 Mar 2023 06:51:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tr.outbrain.com/cachedClickId?marketerId=00f5931f6403d4985f007e737b55f318ac
200 OK 35 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=00f5931f6403d4985f007e737b55f318ac
IP
File type ASCII text, with no line terminators
Hash 75c843c7b717e7b722777907475c67a3
983d1c9a05b315288039b9d4694ce3b402259240
1d348f9f803c95305f63def9d75fd50e79e54a375e1a4a888edbbea366845580
GET /cachedClickId?marketerId=00f5931f6403d4985f007e737b55f318ac HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 06:51:33 GMT
Content-Type: application/javascript
Content-Length: 35
X-TraceId: febe281ecf8a9527195a3cd681763edf
tr.outbrain.com/unifiedPixel?optOut=false&bust=007239114506460997&referrer=&marketerId=00f5931f6403d4985f007e737b55f318ac&name=PAGE_VIEW&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&g=1&obApiVersion=1.0-gtm&obtpVersion=2.0.5
200 OK 53 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?optOut=false&bust=007239114506460997&referrer=&marketerId=00f5931f6403d4985f007e737b55f318ac&name=PAGE_VIEW&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&g=1&obApiVersion=1.0-gtm&obtpVersion=2.0.5
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 414bd2a5161db03fdd910327b42c6daa
65d4cf50496813c5f1a34eddd5c50dc67d44ff47
b51f3497b0a65f1e1e87e75f5e7e823d871c23bcf76a5ee4101783c8f939e553
GET /unifiedPixel?optOut=false&bust=007239114506460997&referrer=&marketerId=00f5931f6403d4985f007e737b55f318ac&name=PAGE_VIEW&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&g=1&obApiVersion=1.0-gtm&obtpVersion=2.0.5 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 06:51:33 GMT
Content-Type: image/gif;
Content-Length: 53
Cache-Control: no-cache
X-TraceId: 2c320a1a390512ee19e08395d4c0edf9
www.facebook.com/tr/?id=408887930779663&ev=PageView&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&rl=&if=false&ts=1679899910539&sw=1280&sh=1024&v=2.9.100&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&cs_est=true&fbp=fb.1.1679899910537.1241145058&it=1679899910112&coo=false&tm=1&rqm=GET
200 OK 143 B URL HTTP/2 www.facebook.com/tr/?id=408887930779663&ev=PageView&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&rl=&if=false&ts=1679899910539&sw=1280&sh=1024&v=2.9.100&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&cs_est=true&fbp=fb.1.1679899910537.1241145058&it=1679899910112&coo=false&tm=1&rqm=GET
IP
Hash b82b4578f0ad84a2d8b4567e7eed8b66
2a493fecc333e5d90c81c1d556956ed77f11eee7
e421a82ee4119e6f469121e4df823098e3dc527401cc8c6f82536695ecaa8071
GET /tr/?id=408887930779663&ev=PageView&dl=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146&rl=&if=false&ts=1679899910539&sw=1280&sh=1024&v=2.9.100&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&cs_est=true&fbp=fb.1.1679899910537.1241145058&it=1679899910112&coo=false&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Mon, 27 Mar 2023 06:51:33 GMT
X-Firefox-Spdy: h2
oneocsp.microsoft.com/ocsp
200 OK 1.8 kB URL HTTP/1.1 oneocsp.microsoft.com/ocsp
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash c44ae6b1704ba64b0df4821cd6a64c9e
7a9ab0a57913cd0b0867df541d0f2a448f4845c8
c426864b0d8345b8b809fba310521e7b3603649fc9a0de6008e073ccd11acf8a
POST /ocsp HTTP/1.1
Host: oneocsp.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=86400
Content-Length: 1777
Content-Type: application/ocsp-response
Expires: Sat, 01 Apr 2023 15:50:16 GMT
Last-Modified: Sun, 26 Mar 2023 21:08:23 GMT
ETag: "c426864b0d8345b8b809fba310521e7b3603649fc9a0de6008e073ccd11acf8a"
X-Powered-By: ASP.NET
x-content-type-options: nosniff
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: 7DEDDADCAABC489890291F8EE3140F72 Ref B: OSL30EDGE0317 Ref C: 2023-03-27T06:51:33Z
Date: Mon, 27 Mar 2023 06:51:33 GMT
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?ctsa=mr&CtsSyncId=F875290799E1405C953779FD49315B07&RedC=c.clarity.ms&MXFR=13EE34F1D7BD6D2632D52610D3BD6388
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=13EE34F1D7BD6D2632D52610D3BD6388; domain=.clarity.ms; expires=Sat, 20-Apr-2024 06:51:33 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Mon, 27 Mar 2023 06:51:32 GMT
content-length: 0
X-Firefox-Spdy: h2
trc.taboola.com/1455686/trc/3/json?tim=1679899910156&data=%7B%22id%22%3A112%2C%22ii%22%3A%22%2Flp6%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1679899910147%2C%22cv%22%3A%2220230326-2-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dnomadsmedia-stilltrying-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1679899910156%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146%22%2C%22tos%22%3A2%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 1.5 kB URL HTTP/2 trc.taboola.com/1455686/trc/3/json?tim=1679899910156&data=%7B%22id%22%3A112%2C%22ii%22%3A%22%2Flp6%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1679899910147%2C%22cv%22%3A%2220230326-2-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dnomadsmedia-stilltrying-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1679899910156%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146%22%2C%22tos%22%3A2%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
File type Unicode text, UTF-8 text, with very long lines (2586), with no line terminators
Hash 2b3e15af1fdcce454f304c1514b6198e
452dd02f9a4fc0bec39e6c56d07e589a68982cf9
5584f4b4238c33f80997adeefac78b45b824003e1a1fee3f815487109bc15ca5
GET /1455686/trc/3/json?tim=1679899910156&data=%7B%22id%22%3A112%2C%22ii%22%3A%22%2Flp6%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1679899910147%2C%22cv%22%3A%2220230326-2-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dnomadsmedia-stilltrying-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1679899910156%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146%22%2C%22tos%22%3A2%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Mon, 27 Mar 2023 06:51:32 GMT
via: 1.1 varnish
x-served-by: cache-bma1656-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1679899893.746818,VS0,VE117
vary: Accept-Encoding
x-vcl-time-ms: 117
X-Firefox-Spdy: h2
c.bing.com/c.gif?ctsa=mr&CtsSyncId=F875290799E1405C953779FD49315B07&RedC=c.clarity.ms&MXFR=13EE34F1D7BD6D2632D52610D3BD6388
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?ctsa=mr&CtsSyncId=F875290799E1405C953779FD49315B07&RedC=c.clarity.ms&MXFR=13EE34F1D7BD6D2632D52610D3BD6388
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?ctsa=mr&CtsSyncId=F875290799E1405C953779FD49315B07&RedC=c.clarity.ms&MXFR=13EE34F1D7BD6D2632D52610D3BD6388 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pompechaleur.economiselenergie.site/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?ctsa=mr&CtsSyncId=F875290799E1405C953779FD49315B07&MUID=0A3C81CD83B36E240E66932C82E46F22
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: MUID=0A3C81CD83B36E240E66932C82E46F22; domain=.bing.com; expires=Sat, 20-Apr-2024 06:51:33 GMT; path=/; SameSite=None; Secure; Priority=High;
MR=0; domain=c.bing.com; expires=Mon, 03-Apr-2023 06:51:33 GMT; path=/; SameSite=None; Secure;
SRM_B=0A3C81CD83B36E240E66932C82E46F22; domain=c.bing.com; expires=Sat, 20-Apr-2024 06:51:33 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 1D576B3781C84ECFADDBB74337F66CB0 Ref B: OSL30EDGE0309 Ref C: 2023-03-27T06:51:33Z
date: Mon, 27 Mar 2023 06:51:32 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?ctsa=mr&CtsSyncId=F875290799E1405C953779FD49315B07&MUID=0A3C81CD83B36E240E66932C82E46F22
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?ctsa=mr&CtsSyncId=F875290799E1405C953779FD49315B07&MUID=0A3C81CD83B36E240E66932C82E46F22
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?ctsa=mr&CtsSyncId=F875290799E1405C953779FD49315B07&MUID=0A3C81CD83B36E240E66932C82E46F22 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pompechaleur.economiselenergie.site/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Thu, 16 Mar 2023 17:16:22 GMT
accept-ranges: bytes
etag: "c4b6d572b58d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Mon, 27-Mar-2023 07:01:33 GMT; path=/; SameSite=None; Secure;
date: Mon, 27 Mar 2023 06:51:32 GMT
content-length: 42
X-Firefox-Spdy: h2
y.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: y.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 33158
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 27 Mar 2023 06:51:33 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://pompechaleur.economiselenergie.site
Vary: Origin
Request-Context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0
trc-events.taboola.com/1455686/log/3/unip?en=pre_d_eng_tb&tos=1684&scd=0&ssd=1&est=1679899910149&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1679899911838&vi=1679899910147&ri=c5536d15b6396c32d4f58f3eee3d5e03&ref=null&cv=20230326-2-RELEASE&item-url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1455686/log/3/unip?en=pre_d_eng_tb&tos=1684&scd=0&ssd=1&est=1679899910149&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1679899911838&vi=1679899910147&ri=c5536d15b6396c32d4f58f3eee3d5e03&ref=null&cv=20230326-2-RELEASE&item-url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1455686/log/3/unip?en=pre_d_eng_tb&tos=1684&scd=0&ssd=1&est=1679899910149&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1679899911838&vi=1679899910147&ri=c5536d15b6396c32d4f58f3eee3d5e03&ref=null&cv=20230326-2-RELEASE&item-url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Mon, 27 Mar 2023 06:51:34 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://pompechaleur.economiselenergie.site
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
y.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: y.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 28140
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 27 Mar 2023 06:51:35 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://pompechaleur.economiselenergie.site
Vary: Origin
Request-Context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0
trc-events.taboola.com/1455686/log/3/unip?en=pre_d_eng_tb&tos=4686&scd=0&ssd=1&est=1679899910149&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1679899914840&vi=1679899910147&ri=c5536d15b6396c32d4f58f3eee3d5e03&ref=null&cv=20230326-2-RELEASE&item-url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146
204 No Content 41 B URL HTTP/2 trc-events.taboola.com/1455686/log/3/unip?en=pre_d_eng_tb&tos=4686&scd=0&ssd=1&est=1679899910149&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1679899914840&vi=1679899910147&ri=c5536d15b6396c32d4f58f3eee3d5e03&ref=null&cv=20230326-2-RELEASE&item-url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146
IP
ASN #200478 Taboola.com ltd
Hash 5801ae975070b1e3f8f758e538fe46f3
65a70a1dec18e30e94779ef825cc7140e9438437
ac750772069ccfdbe8b06ddc7bb2edd8edf6659720185ed3476df17044ff92e2
GET /1455686/log/3/unip?en=pre_d_eng_tb&tos=4686&scd=0&ssd=1&est=1679899910149&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1679899914840&vi=1679899910147&ri=c5536d15b6396c32d4f58f3eee3d5e03&ref=null&cv=20230326-2-RELEASE&item-url=https%3A%2F%2Fpompechaleur.economiselenergie.site%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%2Flp6%3Fc%3DxmiiBBoVB%26co%3D1%26tx_id%3DM2023032706-f1db05e7be794eee859a8c2fec02d4c7%26var4%3D815003233%26spub%3D87f17afe-496f2ba2-157ada7a-30b8-c146 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Mon, 27 Mar 2023 06:51:37 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://pompechaleur.economiselenergie.site
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
y.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: y.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 596
Origin: https://pompechaleur.economiselenergie.site
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 27 Mar 2023 06:51:38 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://pompechaleur.economiselenergie.site
Vary: Origin
Request-Context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0
fonts.googleapis.com/css2?family=Raleway:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Raleway:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
IP
GET /css2?family=Raleway:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 27 Mar 2023 06:51:31 GMT
date: Mon, 27 Mar 2023 06:51:31 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.clarity.ms/eus-f-sc/s/0.7.5/clarity.js
200 OK 0 B URL HTTP/2 www.clarity.ms/eus-f-sc/s/0.7.5/clarity.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /eus-f-sc/s/0.7.5/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d95d062a00a927"
x-cache: TCP_HIT
request-context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0
x-azure-ref-originshield: 09BMhZAAAAAC2oGFBUaC5TKanmJoxh3PwQU1TMDRFREdFMTgwNgA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
x-azure-ref: 09DwhZAAAAAAkdST0EsoiSrqXJYsXCMmTU1ZHMjBFREdFMDYxNwA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Mon, 27 Mar 2023 06:51:32 GMT
X-Firefox-Spdy: h2
pompechaleur.economiselenergie.site/lp6?c=xmiiBBoVB&co=1&tx_id=M2023032706-f1db05e7be794eee859a8c2fec02d4c7&var4=815003233/lp6?c=xmiiBBoVB&co=1&tx_id=M2023032706-f1db05e7be794eee859a8c2fec02d4c7&var4=815003233&spub=87f17afe-496f2ba2-157ada7a-30b8-c146
200 OK 0 B URL HTTP/2 pompechaleur.economiselenergie.site/lp6?c=xmiiBBoVB&co=1&tx_id=M2023032706-f1db05e7be794eee859a8c2fec02d4c7&var4=815003233/lp6?c=xmiiBBoVB&co=1&tx_id=M2023032706-f1db05e7be794eee859a8c2fec02d4c7&var4=815003233&spub=87f17afe-496f2ba2-157ada7a-30b8-c146
IP
GET /lp6?c=xmiiBBoVB&co=1&tx_id=M2023032706-f1db05e7be794eee859a8c2fec02d4c7&var4=815003233/lp6?c=xmiiBBoVB&co=1&tx_id=M2023032706-f1db05e7be794eee859a8c2fec02d4c7&var4=815003233&spub=87f17afe-496f2ba2-157ada7a-30b8-c146 HTTP/1.1
Host: pompechaleur.economiselenergie.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 27 Mar 2023 06:51:31 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6Im92LzBSR2xCRTUxM3RFWFlWQ096dmc9PSIsInZhbHVlIjoiUTRzb1o1N0VWMjVZWnFscHJqOTBnRmI2M1EyY2J2NUdCM0NjdVZISnpKeHcvM05haWVLa0JDalA3ZzFjQ0Ixc1JXbkR1aDZnVXBxaDAwUzBDalllcTZZejJObGo0N1lBVXkweG5NWXFvWFNUbmxuSk04a0RSZHhCMC9nN0VPWVAiLCJtYWMiOiJkMzNiYzhiMzMzNzEyYTE0ZDg3MDkyMDA3NTI2MmUxMGIyNTk0NGViYTMxMmYzMWUyZmUxMWJmOTQ0Yzk2NDM0IiwidGFnIjoiIn0%3D; expires=Wed, 26-Apr-2023 16:51:31 GMT; Max-Age=2628000; path=/; samesite=lax
leadsmetal_session=eyJpdiI6IjdjTklmM29USGZnUjJldXVRS1RWU2c9PSIsInZhbHVlIjoibWpGNVFpRHp6N1laY01yd2NITkhOOE1lUDI0OW55eFJlQkhSRWZTZ2N4NURrWnFqV2h4ejM0d0xWUEFteFhKZklJaU1mcDcyZ05aaDhLbGxRQm5KWk4zSTJFTmZlZVBtVFBGS0FPVEZyaWw3OWYxNEVIeUZYbUJwV3Z1WWp3OEoiLCJtYWMiOiI2NzYyNDI1NWU0YTEwZTdhMjFhNGI0MzAwOWYzYzQ3YjQxOTJhYzVmZThkMThlMDBlZGM1MjliZTgxYzg5MzQwIiwidGFnIjoiIn0%3D; expires=Wed, 26-Apr-2023 16:51:31 GMT; Max-Age=2628000; path=/; httponly; samesite=lax
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PmBcQRrkeW306%2Bvzk7qwzpsfQ4Y5GtqCsNHN7MaOd%2Bpu870Q9kb4t8YrvJCKcPFqYZxAhJiaCiG9hAU5NkDS5TtiX76H5bqG32K9wM5EBVvQ2y0jAOOdetvDNUZFWncfD0MYLL6xL0UVFMqWlkvVqntaSS54zQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ae5b490aebab52d-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.clarity.ms/tag/bup7y7r655?ref=gtm2
200 OK 0 B URL HTTP/2 www.clarity.ms/tag/bup7y7r655?ref=gtm2
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /tag/bup7y7r655?ref=gtm2 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pompechaleur.economiselenergie.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=5fe690ae11dd48aab7f926808dd7a55a.20230327.20240326; expires=Tue, 26 Mar 2024 06:51:32 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0
x-cache: CONFIG_NOCACHE
x-azure-ref: 09DwhZAAAAABz1niW45KpT4lvNCOVu8BoU1ZHMjBFREdFMDYxNwA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Mon, 27 Mar 2023 06:51:32 GMT
X-Firefox-Spdy: h2
34.149.35.41
185.103.37.69
104.16.126.175
188.114.99.234
23.38.201.81
31.13.72.12
141.226.228.48