lescrinsdeliberte.1fr1.net/t16710-dpt-59-gaia-chaussette-trait-2-an-et-demi-a-trouve-sa-famille
94.23.159.185200 OK 63 kB URL HTTP/1.1 lescrinsdeliberte.1fr1.net/t16710-dpt-59-gaia-chaussette-trait-2-an-et-demi-a-trouve-sa-famille
IP 94.23.159.185:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (36853)
Hash 4819fa8bfd646f2bc6fb916117458fe2
f6d9da8d3443ebee613e9c7ab1990fd5d7db858b
914463b5a7a14d782c46304e69a060f95265cd335db21f842dc6c92202c2791f
NIDS Severity Alert suricata low ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1
suricata low ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3
GET /t16710-dpt-59-gaia-chaussette-trait-2-an-et-demi-a-trouve-sa-famille HTTP/1.1
Host: lescrinsdeliberte.1fr1.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 12:41:46 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache
Pragma: no-cache
Expires: Sun, 08 Jan 2023 00:00:00 GMT
Last-Modified: Sun, 08 Jan 2023 12:41:43 GMT
Vary: User-Agent
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Access-Control-Allow-Origin: *
Content-Encoding: gzip
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b782882bdabaf3b08e64120922b4a4b7
2035ed7fc9fb5b6ee9715601ba43de5f94d0c0e9
3fe7d1a9a55b86ec25d02634749ccfae11f3477033ba8cd7ac4131b7948ba619
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3FE7D1A9A55B86EC25D02634749CCFAE11F3477033BA8CD7AC4131B7948BA619"
Last-Modified: Sat, 07 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10427
Expires: Sun, 08 Jan 2023 15:35:33 GMT
Date: Sun, 08 Jan 2023 12:41:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 516b9d6951b09439a51d5284994ed92f
5c78edb38bae36caa8e2db8ed6635a32e46c91dd
eaaf4ebc59d2a06d02b552154c5adb7c713ffc4a7f5caabcff1c2b4cd6ec5c7b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EAAF4EBC59D2A06D02B552154C5ADB7C713FFC4A7F5CAABCFF1C2B4CD6EC5C7B"
Last-Modified: Fri, 06 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13690
Expires: Sun, 08 Jan 2023 16:29:56 GMT
Date: Sun, 08 Jan 2023 12:41:46 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 08 Jan 2023 12:41:29 GMT
content-type: application/json
age: 17
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 75f0037a1d53a9a5321a796206ec3e24
70d42c9bf1334f20e1cea4ce3c8212e0e780ee77
80ec1e61f9563e799c9f44ea31e616c37daea1b9670091fbbc6efc39ebafe3d3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "80EC1E61F9563E799C9F44EA31E616C37DAEA1B9670091FBBC6EFC39EBAFE3D3"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4561
Expires: Sun, 08 Jan 2023 13:57:47 GMT
Date: Sun, 08 Jan 2023 12:41:46 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: eYGFjvMD0TdGEQdYN1bBMhf4g5c4cKC7x7LtQBbpHBHZnOmNWiYwqp7C6AmTBzEasAp6O3UWkRhAkpqZWU0FgA==
x-amz-request-id: KKSCXQQXK8EZ5TTR
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 08 Jan 2023 12:15:46 GMT
age: 1560
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 08 Jan 2023 12:41:46 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
lescrinsdeliberte.1fr1.net/0-ltr.css
94.23.159.185200 OK 55 kB URL HTTP/1.1 lescrinsdeliberte.1fr1.net/0-ltr.css
IP 94.23.159.185:0
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 0d4096e4ca32f5a2b93d8052b5e34ee9
49b6976f12ff2415daabbca04bf0b1ee69de45b0
6ac7529608a677d83a31393e1014657396c14fd13c0bf3f15dad98d5fe71cda3
GET /0-ltr.css HTTP/1.1
Host: lescrinsdeliberte.1fr1.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/t16710-dpt-59-gaia-chaussette-trait-2-an-et-demi-a-trouve-sa-famille
HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 12:41:46 GMT
Content-Type: text/css
Content-Length: 55100
Last-Modified: Sun, 08 Jan 2023 00:00:00 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Access-Control-Allow-Origin: *
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-MA: HIT
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 5dc2f2aed99c56ed17843de672f4eb99
3ff3b148dfca26b570987dc7879c6d30d9107317
9717b7bfb0e9dd891c689c06787f2e028c73e13931426deb535f30572b7c9aca
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3030
Cache-Control: max-age=104654
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:46 GMT
Etag: "63b9a402-118"
Expires: Mon, 09 Jan 2023 17:46:00 GMT
Last-Modified: Sat, 07 Jan 2023 16:55:30 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 23671a098219054aa2ff0345c0daac53
12a1616f83d369724df65ddba33ef1bb7a02cdab
360e708aac66daad3eef5155d324270336519c73e5fbd35ce65b147dcfc9e369
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6397
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:46 GMT
Last-Modified: Sun, 08 Jan 2023 10:55:09 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 63bccc1f66ce9e92e4b40dfb3d397e96
b256695f795919c1fa3d0de461cf4d44fb7573f3
739ed63c77b8f2f8ae1e929d2e6ce784986ea0d3230d2a65cc9f733837c8a581
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 315edeafe1715f46de7d38be371473a8
25e357166d0ddfff3e60f9042d56f37c1ab7163a
9869582721de4f610dca5030b9a703863d2eae2667061b2f722aebdaf60468e4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 23671a098219054aa2ff0345c0daac53
12a1616f83d369724df65ddba33ef1bb7a02cdab
360e708aac66daad3eef5155d324270336519c73e5fbd35ce65b147dcfc9e369
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3057
Cache-Control: max-age=150372
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:46 GMT
Etag: "63ba567d-118"
Expires: Tue, 10 Jan 2023 06:27:58 GMT
Last-Modified: Sun, 08 Jan 2023 05:37:01 GMT
Server: ECS (amb/6B8C)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 315edeafe1715f46de7d38be371473a8
25e357166d0ddfff3e60f9042d56f37c1ab7163a
9869582721de4f610dca5030b9a703863d2eae2667061b2f722aebdaf60468e4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 727 B IP 93.184.220.29:0
Hash a9d66db0efb8fb4b891765d724e4b9ec
2025a35380aa204504250a5961a1ddc167ce235e
6720f7afe86db9a5e5736ab3a5d818b61d52d4d8defc46267f95cfc89ebcdf77
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4824
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:46 GMT
Last-Modified: Sun, 08 Jan 2023 11:21:23 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 727
ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
216.58.207.202200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
IP 216.58.207.202:0
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash d989f35706c62ce4a5c561586c55566e
d32e7958e5765609bf08dcdefd0b2c2a8714ce34
375dfe942a03ee024b5cc827b3efda5550d13df7530281f50862ce3b33fcb716
GET /ajax/libs/jquery/1.7.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33845
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Jan 2023 20:38:32 GMT
expires: Sun, 07 Jan 2024 20:38:32 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 57794
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 574913e59dd942eb9a07a1beff303111
840a3c9448b870900ea88f2a6bd9996d56ca4c57
f5fd90d85b8c542c4f51bf17a5f1dd6aa111f14919c04ad61c0be61d9f3cebf6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6463
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:46 GMT
Last-Modified: Sun, 08 Jan 2023 10:54:03 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
www.googletagmanager.com/gtag/js?id=UA-144388882-1
142.250.74.40200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-144388882-1
IP 142.250.74.40:0
File type ASCII text, with very long lines (1759)
Hash 5fabc217d48813d70b835feb178e89c1
ed98d53d89a0e57fe63306fad0c989159888a814
ebcc399cad2dba12732e6dc5dd0bbc1a5d5ed2bae6be6350a55628f71dfc8965
GET /gtag/js?id=UA-144388882-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 08 Jan 2023 12:41:46 GMT
expires: Sun, 08 Jan 2023 12:41:46 GMT
cache-control: private, max-age=900
last-modified: Sun, 08 Jan 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45340
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 23671a098219054aa2ff0345c0daac53
12a1616f83d369724df65ddba33ef1bb7a02cdab
360e708aac66daad3eef5155d324270336519c73e5fbd35ce65b147dcfc9e369
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6398
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:47 GMT
Last-Modified: Sun, 08 Jan 2023 10:55:09 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 280
www.googletagmanager.com/gtag/js?id=UA-44618339-1
142.250.74.40200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-44618339-1
IP 142.250.74.40:0
File type ASCII text, with very long lines (1759)
Hash 0d3019ba74e918561e37aa89655bf8d5
0b2e2edf7535d58261e9ee6807348be3b28b74a9
55dc24351a86f9009c248b4d9ba64022b74b4abe45970186ee1a6154e0239fd9
GET /gtag/js?id=UA-44618339-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 08 Jan 2023 12:41:47 GMT
expires: Sun, 08 Jan 2023 12:41:47 GMT
cache-control: private, max-age=900
last-modified: Sun, 08 Jan 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45295
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 63bccc1f66ce9e92e4b40dfb3d397e96
b256695f795919c1fa3d0de461cf4d44fb7573f3
739ed63c77b8f2f8ae1e929d2e6ce784986ea0d3230d2a65cc9f733837c8a581
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lescrinsdeliberte.1fr1.net/users/3414/32/36/05/smiles/810840.gif
94.23.159.185200 OK 8.4 kB URL HTTP/1.1 lescrinsdeliberte.1fr1.net/users/3414/32/36/05/smiles/810840.gif
IP 94.23.159.185:0
File type GIF image data, version 89a, 81 x 47\012- data
Hash b97db80fe687ae5b36e58daf09d02074
7a0046b3da3426ba9d4b36e38c948ec0b3a84288
854c5bb0042a88afcdd69d8059a551aab0368192f94d23bf71eac5b52fb58a24
GET /users/3414/32/36/05/smiles/810840.gif HTTP/1.1
Host: lescrinsdeliberte.1fr1.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/t16710-dpt-59-gaia-chaussette-trait-2-an-et-demi-a-trouve-sa-famille
HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 12:41:47 GMT
Content-Type: image/gif
Content-Length: 8403
Last-Modified: Mon, 01 Jan 2001 00:00:00 GMT
ETag: "3a4fc880-20d3"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Access-Control-Allow-Origin: *
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 7441760ac156963807d2ca646d9f09c2
017e7774502c8ce8e70304329e05b2ca7e3eed83
9f1c0a147778f0dfc414633a143860c0636c6138d298716479b6ac5e81c7b7f8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5157
Cache-Control: max-age=154649
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:47 GMT
Etag: "63ba5eff-116"
Expires: Tue, 10 Jan 2023 07:39:16 GMT
Last-Modified: Sun, 08 Jan 2023 06:13:19 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 278
choices.consentframework.com/js/pa/24697/c/IxWav/cmp?lang=fr
51.158.28.83200 OK 141 kB URL HTTP/1.1 choices.consentframework.com/js/pa/24697/c/IxWav/cmp?lang=fr
IP 51.158.28.83:0
File type Unicode text, UTF-8 text, with very long lines (64633), with no line terminators
Size 141 kB (140677 bytes)
Hash 59a0d88e20c7cf5039483175e16e833e
685314f6987eb241fba1d745b3efdc09d131b1c3
e8b5ca16800f4b1328e2d06e759d0e343da11952a16e139f8f1075388e74a10d
GET /js/pa/24697/c/IxWav/cmp?lang=fr HTTP/1.1
Host: choices.consentframework.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 08 Jan 2023 12:41:47 GMT
Content-Type: text/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: private, max-age=3600
Set-Cookie: euconsent-v2=NO_CONSENT; Path=/; Domain=consentframework.com; Expires=Sun, 08 Jan 2023 12:46:47 GMT; Secure; SameSite=None
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Content-Encoding: gzip
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 7441760ac156963807d2ca646d9f09c2
017e7774502c8ce8e70304329e05b2ca7e3eed83
9f1c0a147778f0dfc414633a143860c0636c6138d298716479b6ac5e81c7b7f8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5157
Cache-Control: max-age=154649
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:47 GMT
Etag: "63ba5eff-116"
Expires: Tue, 10 Jan 2023 07:39:16 GMT
Last-Modified: Sun, 08 Jan 2023 06:13:19 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 315edeafe1715f46de7d38be371473a8
25e357166d0ddfff3e60f9042d56f37c1ab7163a
9869582721de4f610dca5030b9a703863d2eae2667061b2f722aebdaf60468e4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 7441760ac156963807d2ca646d9f09c2
017e7774502c8ce8e70304329e05b2ca7e3eed83
9f1c0a147778f0dfc414633a143860c0636c6138d298716479b6ac5e81c7b7f8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2977
Cache-Control: max-age=152469
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:47 GMT
Etag: "63ba5eff-116"
Expires: Tue, 10 Jan 2023 07:02:56 GMT
Last-Modified: Sun, 08 Jan 2023 06:13:19 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 278
lescrinsdeliberte.1fr1.net/users/3414/32/36/05/smiles/641894.gif
94.23.159.185200 OK 9.7 kB URL HTTP/1.1 lescrinsdeliberte.1fr1.net/users/3414/32/36/05/smiles/641894.gif
IP 94.23.159.185:0
File type GIF image data, version 89a, 50 x 50\012- data
Hash ef77abcb66ae77adec99e6a109c6d1d7
3b96727fe191e7af6f0efcb0487c4495dd8a0f9e
c7ca0e9f6ecd64a3507e0254cdd57646394123c75534ec8d944ee3aa3c3ef93a
GET /users/3414/32/36/05/smiles/641894.gif HTTP/1.1
Host: lescrinsdeliberte.1fr1.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/t16710-dpt-59-gaia-chaussette-trait-2-an-et-demi-a-trouve-sa-famille
HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 12:41:47 GMT
Content-Type: image/gif
Content-Length: 9652
Last-Modified: Mon, 01 Jan 2001 00:00:00 GMT
ETag: "3a4fc880-25b4"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Access-Control-Allow-Origin: *
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
www.googletagmanager.com/gtag/js?id=UA-44618339-1&l=dataLayer&cx=c
142.250.74.40200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-44618339-1&l=dataLayer&cx=c
IP 142.250.74.40:0
File type ASCII text, with very long lines (1759)
Hash 5c70bbb051a3790627b3a178f1c399bd
62b82a67a403f41043dcd8d68971246b3a493930
2cb710ff7a479fede4d629bada4b98d41bff187f3585b62c5b28aaca7659d85d
GET /gtag/js?id=UA-44618339-1&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 08 Jan 2023 12:41:47 GMT
expires: Sun, 08 Jan 2023 12:41:47 GMT
cache-control: private, max-age=900
last-modified: Sun, 08 Jan 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45323
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 7441760ac156963807d2ca646d9f09c2
017e7774502c8ce8e70304329e05b2ca7e3eed83
9f1c0a147778f0dfc414633a143860c0636c6138d298716479b6ac5e81c7b7f8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5157
Cache-Control: max-age=154649
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:47 GMT
Etag: "63ba5eff-116"
Expires: Tue, 10 Jan 2023 07:39:16 GMT
Last-Modified: Sun, 08 Jan 2023 06:13:19 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 3763e6566ad84290355e8e71534ea67c
1705daf77e6cb7c8e8241951cb877a2696063c54
b38f24adbd953b7d77959d77bb51cd7951c0fbf618ebdb4c7df43b32da995db3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5634
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:47 GMT
Last-Modified: Sun, 08 Jan 2023 11:07:53 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 3763e6566ad84290355e8e71534ea67c
1705daf77e6cb7c8e8241951cb877a2696063c54
b38f24adbd953b7d77959d77bb51cd7951c0fbf618ebdb4c7df43b32da995db3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5634
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:47 GMT
Last-Modified: Sun, 08 Jan 2023 11:07:53 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 3763e6566ad84290355e8e71534ea67c
1705daf77e6cb7c8e8241951cb877a2696063c54
b38f24adbd953b7d77959d77bb51cd7951c0fbf618ebdb4c7df43b32da995db3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5634
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:47 GMT
Last-Modified: Sun, 08 Jan 2023 11:07:53 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 3763e6566ad84290355e8e71534ea67c
1705daf77e6cb7c8e8241951cb877a2696063c54
b38f24adbd953b7d77959d77bb51cd7951c0fbf618ebdb4c7df43b32da995db3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5974
Cache-Control: max-age=126305
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:47 GMT
Etag: "63b9ed16-116"
Expires: Mon, 09 Jan 2023 23:46:52 GMT
Last-Modified: Sat, 07 Jan 2023 22:07:18 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 278
2img.net/i/fa/macinscott/icon_mini_search_fr.gif
104.21.235.176200 OK 1.5 kB URL HTTP/2 2img.net/i/fa/macinscott/icon_mini_search_fr.gif
IP 104.21.235.176:0
File type GIF image data, version 87a, 86 x 22\012- data
Hash 6ef169589c6223b3fc223948a90c6aa9
a1660cae1d4d5583e7042d2b6a12741ea28ab348
3306f15a37fc47f6af4f04d049cfb39c43f4193219c8c334a466500531436577
GET /i/fa/macinscott/icon_mini_search_fr.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-type: image/gif
content-length: 1451
last-modified: Sat, 01 Jan 2005 00:00:00 GMT
etag: "41d5e800-5ab"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 28769
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jI0criW1Zkq2%2F%2BwzknQdC%2FIUkxOmVPJX4vJgIpAs6P10PaVqK18PpOvkQZrSerI3TcM2vxFaJPBrdtKaNvo8LFvHVFUGmPOWiWyLyJi%2FPne%2FCht%2BotUcX6IAyw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78650266198674d9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cache.consentframework.com/js/pa/24697/c/IxWav/stub
172.67.74.105200 OK 10 kB URL HTTP/2 cache.consentframework.com/js/pa/24697/c/IxWav/stub
IP 172.67.74.105:0
File type ASCII text, with very long lines (1309), with no line terminators
Hash 468215363cac7b951382c645614ea257
7e33f11f2013b9dec4a0372b541fd0170b1f912a
7c1b84cb8d92017e5c331c148e21a6143bed3f0c506f746624bf029168ad01a4
GET /js/pa/24697/c/IxWav/stub HTTP/1.1
Host: cache.consentframework.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:46 GMT
content-type: text/javascript; charset=UTF-8
cache-control: max-age=3600
strict-transport-security: max-age=15724800; includeSubDomains; preload
cf-cache-status: HIT
age: 3193
last-modified: Sun, 08 Jan 2023 11:48:33 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7aAdYtZ95fadprL%2BE3VjFgKDnY4klHMCOQKJ3hqUyFGa8sjSzdHanu4RsVmWCb5KlnMKq3bSAPuZm%2Fe4fIvZRclLfwosnRwJ%2BXa8IvbF8C9S9v9gXve%2B172RxSkvhlRwBI0xMtDW8uuqm%2BCb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 786502645f6fb509-OSL
content-encoding: br
X-Firefox-Spdy: h2
2img.net/i/fa/macinscott/icon_mini_portal_fr.gif
104.21.235.176200 OK 1.2 kB URL HTTP/2 2img.net/i/fa/macinscott/icon_mini_portal_fr.gif
IP 104.21.235.176:0
File type GIF image data, version 87a, 60 x 22\012- data
Hash 2523546975296b39dd4ffd594531bf57
d38334922388bd258d15af06a12ef251ff5b9340
3aa39e3ac14843e15b3e684725a504f234547078ce406b0ea65130eef7599fa3
GET /i/fa/macinscott/icon_mini_portal_fr.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-type: image/gif
content-length: 1169
last-modified: Mon, 16 May 2016 11:00:00 GMT
etag: "5739a830-491"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 11277
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uR3e%2FI%2B9%2Brz%2BWWPvHisf7kfghui0T2SSVCBqrA2OOQSQk2h%2FN8yAKgTYlEgksUfyyZ%2FsEIpPCZKBkRrEV9YQyx0L%2F6dUe0Gmhd4kgbO4r%2FWQThcT4iCdEeef2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78650266299974d9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/sprite_icons.png
104.21.235.176200 OK 1.5 kB URL HTTP/2 2img.net/i/fa/sprite_icons.png
IP 104.21.235.176:0
File type PNG image data, 1395 x 12, 8-bit colormap, non-interlaced\012- data
Hash 6c31830c94fd2987aab8ed4af1e6b756
9bb52d402fd3cd4a0515c54b5061b655fdabfd96
b621467f74054e2999a7e213edf26895f9639e255f7c11b2047509fd0879f6c8
GET /i/fa/sprite_icons.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-type: image/png
content-length: 1459
last-modified: Mon, 16 May 2016 11:01:49 GMT
etag: "5739a89d-5b3"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3552663
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ipe45FXYSmSts0exZSpmecf9qy8uwmRxNzuBbvhsphaQTmQuxf8CkA7S3kLZQl%2BELome%2Bx0j4xhYcmFsiJN3TQ6wf2ocV1b3ErwavsQhizd5N3qF4ugZCgBoaw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78650266198d74d9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/macinscott/cellpic1.gif
104.21.235.176200 OK 269 B URL HTTP/2 2img.net/i/fa/macinscott/cellpic1.gif
IP 104.21.235.176:0
File type GIF image data, version 87a, 14 x 28\012- data
Hash a1f7025977f54145772ace4a791557ed
8f02770b73a7d013a3d3505c0c1b8eba03f03538
f341bf6ea75190ae7199125a0392dbc1b8b37788b2d13ada220b567db2df539d
GET /i/fa/macinscott/cellpic1.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-type: image/gif
content-length: 269
last-modified: Sat, 01 Jan 2005 00:00:00 GMT
etag: "41d5e800-10d"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 6753
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PIT%2Fy7XdjktUeU0H6Y4IUcr%2BgFAFD0iTOb%2FEuE51Hi0diVSXaW9oGPVGS6s%2FRrqaZetUqTkE7f4B9NE8VtfzYqEBzIyMxxNZ219zV%2BSE3lYQFsbiNXyE94dowg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78650266198874d9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 3763e6566ad84290355e8e71534ea67c
1705daf77e6cb7c8e8241951cb877a2696063c54
b38f24adbd953b7d77959d77bb51cd7951c0fbf618ebdb4c7df43b32da995db3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1410
Cache-Control: max-age=121741
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:47 GMT
Etag: "63b9ed16-116"
Expires: Mon, 09 Jan 2023 22:30:48 GMT
Last-Modified: Sat, 07 Jan 2023 22:07:18 GMT
Server: ECS (amb/6B8C)
X-Cache: HIT
Content-Length: 278
2img.net/i/fa/macinscott/icon_mini_index_fr.gif
104.21.235.176200 OK 1.2 kB URL HTTP/2 2img.net/i/fa/macinscott/icon_mini_index_fr.gif
IP 104.21.235.176:0
File type GIF image data, version 87a, 60 x 22\012- data
Hash bc72fc5e2a4563a44a653ba5e6e8f9da
dcb2e323c032f716b3b96d8d27d0c16d06e86e84
03cedcb0600bae84aa2c20e2d8fe6d6ccd1b174e292b1297024e89ea48ac9d18
GET /i/fa/macinscott/icon_mini_index_fr.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-type: image/gif
content-length: 1153
last-modified: Mon, 16 May 2016 11:00:00 GMT
etag: "5739a830-481"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 28769
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uT4Ec%2B75FTtAgy0ZdxDvXDHJhjqRgr611V0Jjgu3NqXFR6z3OfkZg1PQY1EoLVO5FjiRhqxsBlz7aIESv4go%2FKZrKvi6VWG%2BPeA62GZ84F2Tbgv7VFOAlDXctA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78650266299774d9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/macinscott/icon_mini_register_fr.gif
104.21.235.176200 OK 11 kB URL HTTP/2 2img.net/i/fa/macinscott/icon_mini_register_fr.gif
IP 104.21.235.176:0
File type GIF image data, version 89a, 100 x 22\012- data
Hash 3af995aed41be7866945cfe733a489da
a48c23794bc612617cc79981e47d823b6e547b27
fe5bf52f560b8e98689fc8dbdb8d4d1bd387b6311ff44ee380b7d0cf6f7ed641
GET /i/fa/macinscott/icon_mini_register_fr.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-type: image/gif
content-length: 11056
last-modified: Mon, 16 May 2016 11:00:00 GMT
etag: "5739a830-2b30"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 6753
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a7SbsphAq3k%2F31DzJUriZ%2B6qtY%2FWnEWQ%2BiXkJAw%2FnYQ%2BDDDUNeo4o%2BT0S6U4VAJ4e9qum61jVrFqw2%2BxGh%2B8%2B3WVUOGc4Y3DKVEc6YSnTa0r%2Fkkroewr01iU7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7865026639b274d9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/macinscott/icon_mini_gallery_fr.gif
104.21.235.176200 OK 1.3 kB URL HTTP/2 2img.net/i/fa/macinscott/icon_mini_gallery_fr.gif
IP 104.21.235.176:0
File type GIF image data, version 87a, 70 x 22\012- data
Hash 536b07e9ba98759872fa057e83909b8f
92295c0841e0794a3bf36b0ba0f819f2a3625b50
fe5e149a1835341c79f7df4085f40e2409fe27f4e33b54fc3479b6bab0496c52
GET /i/fa/macinscott/icon_mini_gallery_fr.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-type: image/gif
content-length: 1262
last-modified: Mon, 16 May 2016 11:00:00 GMT
etag: "5739a830-4ee"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3552105
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yeWYf2Ge2xI5RLDYXKI3eAMsl2Ffb0oh51CC0AN2IYNnosJ%2F%2BoX%2BVDkAytGFQ2U668DsPoxG2jzHHFsCmzYK%2Bc1YXaXIQFhjBnV0dheeqySCCkK8CTWkyUcK0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7865026649b874d9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/subsilver/icon_gender_female.gif
104.21.235.176200 OK 140 B URL HTTP/2 2img.net/i/fa/subsilver/icon_gender_female.gif
IP 104.21.235.176:0
File type GIF image data, version 89a, 11 x 11\012- data
Hash da4f413728cea4cb2af9ddb08313d88a
673a20957c3ccb1b1ec61f25587217ad413df8b6
8cfd21e82ac6c4d69ce84f5fcaf2b08e954d7b6bb7e4a8af1445ca0c6ef91772
GET /i/fa/subsilver/icon_gender_female.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-type: image/gif
content-length: 140
last-modified: Mon, 16 May 2016 11:01:55 GMT
etag: "5739a8a3-8c"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3552662
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yB%2FxKsPCFeX6zzzQuJLcIr66SY19le4bw0jI5d4lOWUW%2FfHneehikH%2FeDTFaYkHxuVYbix%2BD1eUsNpqqic9UakzspjVz6ej%2FXS0DCDZyMh9pJmQ%2BK4arzkyEVw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7865026649c174d9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 3763e6566ad84290355e8e71534ea67c
1705daf77e6cb7c8e8241951cb877a2696063c54
b38f24adbd953b7d77959d77bb51cd7951c0fbf618ebdb4c7df43b32da995db3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5634
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:47 GMT
Last-Modified: Sun, 08 Jan 2023 11:07:53 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 278
2img.net/u/3414/32/36/05/avatars/14505-53.jpg
104.21.235.176200 OK 18 kB URL HTTP/2 2img.net/u/3414/32/36/05/avatars/14505-53.jpg
IP 104.21.235.176:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 200x133, components 3\012- data
Hash 6c849e70c10df9bf57db77cfdb668a11
e5ad3b16b36335420e20d3afcba749cfc391dd6f
a8d433974828055bae1d0ae3c9830d219a94abbf63aad0262e19208c106968fc
GET /u/3414/32/36/05/avatars/14505-53.jpg HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-type: image/jpeg
content-length: 17620
last-modified: Sun, 26 Apr 2020 17:23:12 GMT
etag: "5ea5c380-44d4"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aYhzse3Bouy5R7q5bMTPNQBZO51jqF6fHcMVQQLJb5uPD9C0p6BSOH%2FQSANbntUv6HuFKF8XLpIvTJNKs1JuVdTNzRL3cgP73R102XzArnpcRoYim%2FXf%2B1YgEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78650266198c74d9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/empty.gif
104.21.235.176200 OK 43 B IP 104.21.235.176:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6d22e4f2d2057c6e8d6fab098e76e80f
b80b11203d97fe01c5597ca3be70406ea48f5709
afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
GET /i/empty.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 09 May 2016 08:45:50 GMT
etag: "57304e3e-2b"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3552677
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZUyJKQrqA46W3x%2BDbGh9t%2FOCiF7Y%2FQZlJwkwAZ8wcUn6i90XKu40iFIFp1%2BtqkbJjAB4%2FZvxhWaFlGmE3uHOwh6oCfci4Yhx3t3WV0F2xEt6jkhZ8mUJtxFHvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7865026679ec74d9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/u/3414/32/36/05/avatars/9947-7.jpg
104.21.235.176200 OK 26 kB URL HTTP/2 2img.net/u/3414/32/36/05/avatars/9947-7.jpg
IP 104.21.235.176:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 200x267, components 3\012- data
Hash e90fb231f225f91016677aee9528e6c5
732374a52c9ddd880af96187f252912873a6dcdd
0ba365a52097c59e0787441312da5d27fed8565b4b0440e1e6a15290834948af
GET /u/3414/32/36/05/avatars/9947-7.jpg HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-type: image/jpeg
content-length: 26315
last-modified: Mon, 10 Jan 2022 11:47:11 GMT
etag: "61dc1cbf-66cb"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eroDCU4QK4TiVbMrNxuZHjHl71%2BRlN%2Bg5lRUDzRprfRp74tDKxkYE9iegVHNd4%2Fr2%2BuZsY%2BVYxOkSLt3CAkDNpq%2BsW0snB2fLI1pX5CNUdZQHptdemCMEHF6xw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78650266198a74d9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.servimg.com/u/f58/11/26/41/24/captur10.jpg
172.67.178.62200 OK 119 kB URL HTTP/2 i.servimg.com/u/f58/11/26/41/24/captur10.jpg
IP 172.67.178.62:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x967, components 3\012- data
Size 119 kB (119065 bytes)
Hash 1096abae4c2e7d5d05c49ea29af2064b
202cfa4d5df8694e7b4b5ca5f69f6b9ffbb3dfad
59d254c30e9d62092faf6dfd81f8e58dad51e6b8b1ea11854c93a43536d24a80
GET /u/f58/11/26/41/24/captur10.jpg HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-type: image/jpeg
content-length: 119065
last-modified: Tue, 28 Mar 2017 13:06:17 GMT
etag: "58da5fc9-1d119"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Sun, 07 Jan 2024 12:52:09 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ao%2BbpBMtoBuRf%2FjK0REVtwnf%2BnC8rOSaoi%2Fk0eQBPBFvDdwjKPWbRZvmpVFoxsTnxCB4HL4aY%2Fx8b%2BFkTys5GxQCAEv4zTuKAtv2vSdk0Jy6EpQZaQAC2fO1jej2yyhf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78650265ed3bb527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.servimg.com/u/f86/20/06/25/45/gaia_l11.jpg
172.67.178.62200 OK 71 kB URL HTTP/2 i.servimg.com/u/f86/20/06/25/45/gaia_l11.jpg
IP 172.67.178.62:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 640x480, components 3\012- data
Hash e8f5390660f995d2ed199c5dce971388
68a921bc6ddc1334c1373534c16f49239866d917
9744248819028fff6c16f23dc0161f0087553222cabceb5756f3eebc41e81957
GET /u/f86/20/06/25/45/gaia_l11.jpg HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-type: image/jpeg
content-length: 71097
last-modified: Wed, 26 Jan 2022 15:27:47 GMT
etag: "61f16873-115b9"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Mon, 08 Jan 2024 12:41:47 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zRV67X9w%2BzoJdEoFTFy6W34QwJx72irWj43w1e%2FIgPpgOtlL6l9UW%2FbBT9GodWePgKC%2BHIlwa%2Bh%2FeMomtxcsxM2KA4dQ0zvcywhRQSF%2BOTBmrmGDGLkWllB8CO6DCE26"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78650265ed41b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 7441760ac156963807d2ca646d9f09c2
017e7774502c8ce8e70304329e05b2ca7e3eed83
9f1c0a147778f0dfc414633a143860c0636c6138d298716479b6ac5e81c7b7f8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5157
Cache-Control: max-age=154649
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:47 GMT
Etag: "63ba5eff-116"
Expires: Tue, 10 Jan 2023 07:39:16 GMT
Last-Modified: Sun, 08 Jan 2023 06:13:19 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 278
lescrinsdeliberte.1fr1.net/dx?a=26700
94.23.159.185200 OK 37 kB URL HTTP/1.1 lescrinsdeliberte.1fr1.net/dx?a=26700
IP 94.23.159.185:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 300x300, components 3\012- data
Hash 0e1f4389febac605fa083d68b488f858
64f8f9c0e92f147f3ae3b7cf6766dff2f85077d4
4a19bc2c5508d82558939fca59482c055a104ef4632e0cb240554e6e503780bb
GET /dx?a=26700 HTTP/1.1
Host: lescrinsdeliberte.1fr1.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/t16710-dpt-59-gaia-chaussette-trait-2-an-et-demi-a-trouve-sa-famille
Cookie: _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D
HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 12:41:47 GMT
Content-Type: image/jpg
Transfer-Encoding: chunked
Cache-Control: max-age=31536000
Expires: Mon, 08 Jan 2024 12:41:47 GMT
Last-Modified: Sun, 08 Jan 2023 00:00:00 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Access-Control-Allow-Origin: *
i.servimg.com/u/f40/18/76/75/49/img_2135.jpg
172.67.178.62200 OK 210 kB URL HTTP/2 i.servimg.com/u/f40/18/76/75/49/img_2135.jpg
IP 172.67.178.62:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=10, manufacturer=Crosscall, model=Core-X4, xresolution=152, yresolution=160, resolutionunit=2, software=L762-user 10 QKQ1.200407.002 L762.20.8 release-keys, datetime=2022:08:21 18:24:59, GPS-Data], baseline, precision 8, 640x853, components 3\012- data
Size 210 kB (210334 bytes)
Hash 299a5f87a7f2d448ce5777c328daba6d
3e949bd1a8b32098e840074e0916c6391e264011
9f3f3f2ca553b8e90e895c6bfb83ce1e427913262a6dddf832324f553a7f0ac5
GET /u/f40/18/76/75/49/img_2135.jpg HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-type: image/jpeg
content-length: 210334
last-modified: Sun, 28 Aug 2022 07:03:30 GMT
etag: "630b1342-3359e"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Mon, 08 Jan 2024 12:41:47 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BMdHokg%2F72j9erQ6dFaPTX%2FnjLfQqPqiAbtPi2LCCMTnaL1JMqsObuxVm1f6s8xoJ805DTZXOo0CoVGkM9sn77BFZ7JJ%2BxPY2pkTB0P0iQ4VkJxZS1zEqTT9tkFO3z1x"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 786502660d58b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
connect.topicit.net/scripts/connect.js
104.21.90.171200 OK 1.3 kB URL HTTP/2 connect.topicit.net/scripts/connect.js
IP 104.21.90.171:0
File type ASCII text, with very long lines (615)
Hash 3c9eb99927c91bcfb64d98b090a69850
153e7082bc0a1e2a4508650ee6d02fe1003113a2
587c2b1cee42fecc4dfef5fbad6fb0b71d48ed8ffc464d5cdab2713cddb1f100
GET /scripts/connect.js HTTP/1.1
Host: connect.topicit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5437
access-control-allow-origin: *
etag: W/"5d653880-153d"
last-modified: Tue, 27 Aug 2019 14:04:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=86400
cf-cache-status: HIT
age: 1398
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZIo0Xg2c%2B%2FxFll3yMOLbwcSFacH33oTLfgaAOkXDQlXNFjiv2MEdFDJp2CcCYYXaTFQYYFSnktc1HvnWSFPLa3o0CGfqyovLgTpk1T8IOPnjsAptL5D030krV7sN4dnbG3%2B4IfnS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 786502671811b506-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.servimg.com/u/f86/20/06/25/45/screen27.jpg
172.67.178.62200 OK 83 kB URL HTTP/2 i.servimg.com/u/f86/20/06/25/45/screen27.jpg
IP 172.67.178.62:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, height=2400, orientation=upper-left, software=Android RP1A.200720.012.A715FXXS7BUJ1, datetime=2022:01:26 20:29:07, width=1080], baseline, precision 8, 639x357, components 3\012- data
Hash 074b487cfd41fa7127c77102a155aa9c
14c22dd39b0e030165779b2ab3ec6581f4846ba0
7f310d33f12fa72a5355b74397148fb189f8df4093d8f25486d616600b634a84
GET /u/f86/20/06/25/45/screen27.jpg HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-type: image/jpeg
content-length: 82929
last-modified: Wed, 26 Jan 2022 19:30:18 GMT
etag: "61f1a14a-143f1"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Mon, 08 Jan 2024 12:41:47 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qiA0bcxVWouYPBEZUHfyLU4H1LV%2B3NBqxsU6RXqcir2DKnH6o604pRBwcw52xQsNjl0XJXFq4KcnZOliwgTJGdOssg3Guk4V8yWlR2tAXRpjYEWqKtdeCUcAhSN9iWiu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78650265cd0cb527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.servimg.com/u/f86/20/06/25/45/gaia_310.jpg
172.67.178.62200 OK 89 kB URL HTTP/2 i.servimg.com/u/f86/20/06/25/45/gaia_310.jpg
IP 172.67.178.62:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 640x480, components 3\012- data
Hash f81f445bce3f8e03590fa67728969154
919f665913af02670c1b1d4534da40b7f65c83f6
cbd2ee4e2a6ab8e50aaa4e00b6c0cce37931d9384b89dc5a9e0d9248fb996aaa
GET /u/f86/20/06/25/45/gaia_310.jpg HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-type: image/jpeg
content-length: 88629
last-modified: Wed, 26 Jan 2022 15:27:47 GMT
etag: "61f16873-15a35"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Mon, 08 Jan 2024 12:41:47 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s4etFxIIuXBecvEzUjdZNa4s%2BT9LrW%2BSBVEPULZV9CAU58CH6hxyfOCjwh9%2F8XzAF01QYwxC00jpgU%2F8Nniet3Bzk618nh9WTPtS3XURia1iH2zPpezcUu9Y7ydmHiH%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78650265ed40b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.servimg.com/u/f86/20/06/25/45/gaia_l10.jpg
172.67.178.62200 OK 110 kB URL HTTP/2 i.servimg.com/u/f86/20/06/25/45/gaia_l10.jpg
IP 172.67.178.62:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 640x480, components 3\012- data
Size 110 kB (110135 bytes)
Hash 24bd38223cce83e85bff520e4b81a848
0d7fc0a0eba504410da3a054c6bca19fa53e9843
edf9a8adc7621f69d444707fc0cebfe3d82b42ebad7af6b42d7f4c246edf2b9e
GET /u/f86/20/06/25/45/gaia_l10.jpg HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-type: image/jpeg
content-length: 110135
last-modified: Wed, 26 Jan 2022 15:25:58 GMT
etag: "61f16806-1ae37"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Mon, 08 Jan 2024 12:41:47 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5lo1QCO1PWu07LYL7u8zmRW8gzypmeRg%2BKcWRjn6lLnapDVu3o8PCMG3H54CMaY4MtEzPyvw02IgK3uK6HHjbI588bX%2FzfHMzXXL1FoKS29NcWENnRZeDMBJzgDFYXR0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78650265cd0fb527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.servimg.com/u/f27/11/26/41/24/0610.jpg
172.67.178.62200 OK 150 kB URL HTTP/2 i.servimg.com/u/f27/11/26/41/24/0610.jpg
IP 172.67.178.62:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=9, manufacturer=NIKON CORPORATION, model=NIKON D5500, orientation=upper-left, xresolution=152, yresolution=160, resolutionunit=2, software=Photos 4.0, datetime=2021:05:24 22:29:54], baseline, precision 8, 800x533, components 3\012- data
Size 150 kB (150017 bytes)
Hash a1f52959e525050fb698b41fd47f4558
ed556b75cfa75671b1017accff833debfa649495
124e4d4bc47e69858b2fa955d768450cd7098d8f6c3c540716cd41c7843c4368
GET /u/f27/11/26/41/24/0610.jpg HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-type: image/jpeg
content-length: 150017
last-modified: Tue, 07 Jun 2022 15:29:22 GMT
etag: "629f6ed2-24a01"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Tue, 31 Oct 2023 08:51:11 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JcecYBuyNLI%2FYnN%2FrkhhaN116osjAyHUlnlgN8AG%2F8fWEDo0lXvNFHkTU7b%2BUO4kJtHkI76uVqXl4BTZob5%2BCh3tKxPy2%2B%2BEvj8k0K6iJT2J5wudjbqdhPutt3YevEGR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78650266de5db527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f8f0f19c885cb3e9fd5c2ed7f4482c74
09d29ee17764170ec5b1b09992f442dd50bd1192
6942cd5faf73deaebe2aba45f9d1419471314c207104cb9b45ea2568bb780094
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6942CD5FAF73DEAEBE2ABA45F9D1419471314C207104CB9B45EA2568BB780094"
Last-Modified: Sun, 08 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1148
Expires: Sun, 08 Jan 2023 13:00:55 GMT
Date: Sun, 08 Jan 2023 12:41:47 GMT
Connection: keep-alive
i.servimg.com/u/f40/18/76/75/49/img_2134.jpg
172.67.178.62200 OK 242 kB URL HTTP/2 i.servimg.com/u/f40/18/76/75/49/img_2134.jpg
IP 172.67.178.62:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=10, manufacturer=Crosscall, model=Core-X4, xresolution=152, yresolution=160, resolutionunit=2, software=L762-user 10 QKQ1.200407.002 L762.20.8 release-keys, datetime=2022:08:21 18:23:14, GPS-Data], baseline, precision 8, 640x853, components 3\012- data
Size 242 kB (241617 bytes)
Hash b8c7d126afff8d4528278e7bc62b42e8
f348977d60334aefd598214d32b1638a82b3f054
62b764b2be826b4a11088fc8f9c9bbf17aa55467d024e2f4c1922ceeac98ac21
GET /u/f40/18/76/75/49/img_2134.jpg HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-type: image/jpeg
content-length: 241617
last-modified: Sun, 28 Aug 2022 07:03:28 GMT
etag: "630b1340-3afd1"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Mon, 08 Jan 2024 12:41:47 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v%2FAtU6dZKzasFO%2FdiKlNVo%2BiB9q8RMQ0y4a0%2FuNwQTSnc3K0lieg%2BZBSWqdXTlCU%2B2rsW0Aq3qsGnI35ZeguERTrKaQ0Sipl5%2Bffr8lq6DvVFdhV9EJ0iqPMmKEXGQNu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78650265dd1eb527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.servimg.com/u/f40/18/76/75/49/img_2136.jpg
172.67.178.62200 OK 264 kB URL HTTP/2 i.servimg.com/u/f40/18/76/75/49/img_2136.jpg
IP 172.67.178.62:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=10, manufacturer=Crosscall, model=Core-X4, xresolution=152, yresolution=160, resolutionunit=2, software=L762-user 10 QKQ1.200407.002 L762.20.8 release-keys, datetime=2022:08:21 18:27:29, GPS-Data], baseline, precision 8, 640x853, components 3\012- data
Size 264 kB (263563 bytes)
Hash 3fbc3db7e4ae27545b269edee0adf6b5
91be1b6ecd906d6b03c53c798ed091fa0b434656
ced30a0fccbcf6f586938b12834c452228e49fb8394968f0f3257c4080135026
GET /u/f40/18/76/75/49/img_2136.jpg HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-type: image/jpeg
content-length: 263563
last-modified: Sun, 28 Aug 2022 07:03:31 GMT
etag: "630b1343-4058b"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Mon, 08 Jan 2024 12:41:47 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7T2qif7kzOQaOvno%2FJtHrZbcftgQ8qmAWAQPURRgjKVA36iXpdy%2FTsDblHhoBjg2xUtaWleZFyeAcZXKTVg506VnlSRj9Yr2sANyh7MwHCQ9Zp9Zz7f%2BANstEcq7J3ME"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78650265cd19b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ads.sportslocalmedia.com/slm.prebid.forumactif.js
46.105.202.207200 OK 9.0 kB URL HTTP/2 ads.sportslocalmedia.com/slm.prebid.forumactif.js
IP 46.105.202.207:0
File type C source, ASCII text, with very long lines (31387), with no line terminators
Hash d55f61c61ed420f28a3d12ea2f847ee2
fb3559830c02de96f382332cd01cb6ac5fb62a8d
a1bc871f7ed9ee8b4856445f68cb7a66698cf926e7d3e793fafbb01631921dd3
GET /slm.prebid.forumactif.js HTTP/1.1
Host: ads.sportslocalmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 08 Jan 2023 10:15:38 GMT
last-modified: Thu, 05 Jan 2023 12:50:27 GMT
etag: "63b6c793-7a9b"
expires: Sun, 08 Jan 2023 13:15:38 GMT
cache-control: max-age=10800
x-iplb-request-id: 894A780C:E176_91EFC0E2:01BB_63BA97CA_1988344:13EF1
x-iplb-instance: 37064
x-request-id: 617219217
content-type: application/javascript
content-encoding: br
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 9034
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 08 Jan 2023 12:33:43 GMT
age: 484
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ads.sportslocalmedia.com/slmadshb.js
46.105.202.207200 OK 169 kB URL HTTP/2 ads.sportslocalmedia.com/slmadshb.js
IP 46.105.202.207:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 169 kB (169282 bytes)
Hash 0fa53e3ca260c4fb4d746b1ed989cffb
c4d986f009d3a15bea63a8aa0143906a70aa13b0
c67e474bd7575a9326bd6488aecc34f953f569c1a5c1c22b3fcab4879fc0a68a
GET /slmadshb.js HTTP/1.1
Host: ads.sportslocalmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Jan 2023 09:53:48 GMT
last-modified: Thu, 05 Jan 2023 12:50:31 GMT
etag: "63b6c797-9cd91"
expires: Sun, 08 Jan 2023 12:53:48 GMT
cache-control: max-age=10800
x-iplb-request-id: 894A780C:B1CC_91EFC0E2:01BB_63BA92AC_198A3E3:13EF4
x-iplb-instance: 37064
x-request-id: 861340419
content-type: application/javascript
content-encoding: br
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 169282
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.156200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.156:0
Hash 3da4962f7476da1e72e91f004beb4aad
68c0f068154dac5a57a4c3407123065bc24088fc
7c0de1b7b722f9c8ea19414cf7ef1dee17735a7d36552da003d3c438dfece5dd
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=92290
Date: Sun, 08 Jan 2023 12:41:47 GMT
Etag: "63b97841-1d7"
Expires: Mon, 09 Jan 2023 14:19:57 GMT
Last-Modified: Sat, 07 Jan 2023 13:48:49 GMT
Server: ECS (nyb/1D23)
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: MpQW25zM5jvDb9uNmiBF_2iFD-9C1IFZ-BAjw-I4rxCQfT4OcHFMAA==
Age: 1869
ocsp.sca1b.amazontrust.com/
143.204.42.156200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.156:0
Hash 3da4962f7476da1e72e91f004beb4aad
68c0f068154dac5a57a4c3407123065bc24088fc
7c0de1b7b722f9c8ea19414cf7ef1dee17735a7d36552da003d3c438dfece5dd
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=94979
Date: Sun, 08 Jan 2023 12:41:47 GMT
Etag: "63b97841-1d7"
Expires: Mon, 09 Jan 2023 15:04:46 GMT
Last-Modified: Sat, 07 Jan 2023 13:48:49 GMT
Server: ECS (bsa/EB1B)
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tT2HzM_Qi_qomnoQZIOGPv9nIwWG6lk59SP4VLpjlWVlJt3LH5A4hQ==
Age: 4557
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 54ac41a005cad66e958c904071ea1d4f
66932889be57eb15ab99237a69d292b12090c68d
52545e144a7ca5c37c5369d5f5b566b4e5e820b1920ab7fe8e413e7fe022e21b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 462
Cache-Control: max-age=160365
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:47 GMT
Etag: "63ba87aa-1d7"
Expires: Tue, 10 Jan 2023 09:14:32 GMT
Last-Modified: Sun, 08 Jan 2023 09:06:50 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
cdn.taboola.com/libtrc/forumotion-fr/loader.js
151.101.65.44200 OK 29 kB URL HTTP/1.1 cdn.taboola.com/libtrc/forumotion-fr/loader.js
IP 151.101.65.44:0
File type Unicode text, UTF-8 text, with very long lines (65503)
Hash 65ebf87a8120f8a624f7809cb6024ba8
1b3d57b5e7687bbaa5ea28aebd9172e8c8ec58e0
3f4ef3bd8957aaac82ef389865f79b861671372046765a366f9f7818d2ce7120
GET /libtrc/forumotion-fr/loader.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 29069
x-amz-id-2: UipSQ4qj2urRgnfqDdD8Syx1Vyh2wfndWjEvzYphih80g6T1Mh0kvKEMjY1p2YAwfgvZuTpZj3Y=
x-amz-request-id: WZ2VE4JMK6ZGSM7D
Last-Modified: Sun, 08 Jan 2023 11:59:16 GMT
ETag: "e7cdab9658489e1cc26b19d94569c632"
x-amz-version-id: GjBO6nDlEZ5J.3_q4O_Q0tqLS3V8ACOS
Content-Type: application/javascript; charset=utf-8
Server: AmazonS3
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Sun, 08 Jan 2023 12:41:47 GMT
Via: 1.1 varnish
Age: 2485
X-Served-By: cache-bma1620-BMA
X-Cache: HIT
X-Cache-Hits: 2
X-Timer: S1673181708.902175,VS0,VE0
Cache-Control: private,max-age=14401
Vary: Accept-Encoding
abp: 64
logsene-receiver.eu.sematext.com/30582345-6175-4f70-994c-3dbc4abd5011/forbidden-domains
52.16.65.219200 OK 73 B URL HTTP/2 logsene-receiver.eu.sematext.com/30582345-6175-4f70-994c-3dbc4abd5011/forbidden-domains
IP 52.16.65.219:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 6e20c9a0c181fa1912c6ea516bf28fda
3be632f511e1555ccd234174f3a98893b77ac5ef
526d11770c50c78ecf69dd9f201f97f93faa8902c40f19d1c35ee050e534131b
OPTIONS /30582345-6175-4f70-994c-3dbc4abd5011/forbidden-domains HTTP/1.1
Host: logsene-receiver.eu.sematext.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://lescrinsdeliberte.1fr1.net/
Origin: http://lescrinsdeliberte.1fr1.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-length: 73
server: nginx/1.19.1
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type, Content-Length, Authorization, x-logsene-origin
access-control-allow-methods: OPTIONS, HEAD, GET, POST, PUT, DELETE
x-logsene-error: Application not authorized
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.14200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.14:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 08 Jan 2023 11:43:41 GMT
expires: Sun, 08 Jan 2023 13:43:41 GMT
cache-control: public, max-age=7200
age: 3486
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
imasdk.googleapis.com/js/sdkloader/ima3.js
216.58.207.234200 OK 127 kB URL HTTP/2 imasdk.googleapis.com/js/sdkloader/ima3.js
IP 216.58.207.234:0
File type ASCII text, with very long lines (2791)
Size 127 kB (127165 bytes)
Hash 43f9f7256078a6280391d8ddf65d34c6
7313fb4491f9b413dbbab03c75f42780c1a22baf
e95c555d5756aac136cc38e122f09f6d222c74e06928ce8d11af20de3f3f0556
GET /js/sdkloader/ima3.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 127165
date: Sun, 08 Jan 2023 12:41:47 GMT
expires: Sun, 08 Jan 2023 12:41:47 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
logsene-receiver.eu.sematext.com/30582345-6175-4f70-994c-3dbc4abd5011/forbidden-domains
52.16.65.219201 Created 107 B URL HTTP/2 logsene-receiver.eu.sematext.com/30582345-6175-4f70-994c-3dbc4abd5011/forbidden-domains
IP 52.16.65.219:0
File type JSON data\012- , ASCII text, with no line terminators
Hash c65049cc6320e9a529195243d4cacbb8
e8a1005ea776dec7e7bd232ad58d2b50ea5e1109
495554fa976c976e3f843f58b969ed14196e0634e0264faa23ab7690c4cb9bd5
POST /30582345-6175-4f70-994c-3dbc4abd5011/forbidden-domains HTTP/1.1
Host: logsene-receiver.eu.sematext.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=UTF-8
Content-Length: 39
Origin: http://lescrinsdeliberte.1fr1.net
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 201 Created
date: Sun, 08 Jan 2023 12:41:47 GMT
content-length: 107
server: nginx/1.19.1
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: OPTIONS, HEAD, GET, POST, PUT, DELETE
vary: Accept-Encoding, User-Agent
X-Firefox-Spdy: h2
lescrinsdeliberte.1fr1.net/images/icons-180.png
94.23.159.185200 OK 45 kB URL HTTP/1.1 lescrinsdeliberte.1fr1.net/images/icons-180.png
IP 94.23.159.185:0
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 0d1f81c2d7593666a3b25ad26fa90a4d
741c5c50e5c511bd3700a18de94fa29e94e042f0
bcfc1227d9f702bf4fc389323b2093eb403bf47a683e3b6eead8b5fd9dadfcf7
GET /images/icons-180.png HTTP/1.1
Host: lescrinsdeliberte.1fr1.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/t16710-dpt-59-gaia-chaussette-trait-2-an-et-demi-a-trouve-sa-famille
Cookie: _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D
HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 12:41:47 GMT
Content-Type: image/png
Content-Length: 45095
Cache-Control: max-age=315360000
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Last-Modified: Sun, 08 Jan 2023 00:00:00 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Access-Control-Allow-Origin: *
X-Cache-IC: HIT
choices.consentframework.com/api/v1/public/consent-string
51.158.28.83200 OK 0 B URL HTTP/1.1 choices.consentframework.com/api/v1/public/consent-string
IP 51.158.28.83:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v1/public/consent-string HTTP/1.1
Host: choices.consentframework.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://lescrinsdeliberte.1fr1.net/
Origin: http://lescrinsdeliberte.1fr1.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 08 Jan 2023 12:41:48 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
choices.consentframework.com/api/v1/public/user-action
51.158.28.83200 OK 0 B URL HTTP/1.1 choices.consentframework.com/api/v1/public/user-action
IP 51.158.28.83:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v1/public/user-action HTTP/1.1
Host: choices.consentframework.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://lescrinsdeliberte.1fr1.net/
Origin: http://lescrinsdeliberte.1fr1.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 08 Jan 2023 12:41:48 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 53aa651522024c67ec7b5f5911097050
a7d9c2032eee13ab86f18be61adf84046af4db87
869ee2df1a0714caf7d719c9d11ef9ff04b20f3e1a483ac91640fbc32d5a2d08
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2021
Cache-Control: max-age=120149
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:48 GMT
Etag: "63b9e47c-1d7"
Expires: Mon, 09 Jan 2023 22:04:17 GMT
Last-Modified: Sat, 07 Jan 2023 21:30:36 GMT
Server: ECS (amb/6B92)
X-Cache: HIT
Content-Length: 471
choices.consentframework.com/api/v1/public/consent-string
51.158.28.83200 OK 240 B URL HTTP/1.1 choices.consentframework.com/api/v1/public/consent-string
IP 51.158.28.83:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 96f9e2847c549a3cea04718d2a97d565
0d46b8b1f195a0fb38a47a8e449db2cafb2d752a
e3275def663a069347dc2171405ea3a5fd118fcaab270ed678696ade971a2172
POST /api/v1/public/consent-string HTTP/1.1
Host: choices.consentframework.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://lescrinsdeliberte.1fr1.net/
Content-Type: application/json
Origin: http://lescrinsdeliberte.1fr1.net
Content-Length: 376
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 08 Jan 2023 12:41:48 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 240
Connection: keep-alive
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20230108
151.101.65.229200 OK 764 B URL HTTP/2 cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20230108
IP 151.101.65.229:0
File type JSON data\012- , ASCII text, with very long lines (1594), with no line terminators
Hash 426898a9bcdadf95e9b23ef3c918fb45
fa2750383a941969df50812e70ac6f107dfa09df
c6253ad370d51a2387ea2a767d64ad2320e32051fc9cac967ab5794c07069f9b
GET /gh/prebid/currency-file@1/latest.json?date=20230108 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://lescrinsdeliberte.1fr1.net
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/json; charset=utf-8
x-jsd-version: 1.0.1580
x-jsd-version-type: version
etag: W/"63a-EVPVPHjSfYgWM95uX+3odxIiAy8"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 08 Jan 2023 12:41:48 GMT
age: 31259
x-served-by: cache-fra-eddf8230021-FRA, cache-bma1620-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 764
X-Firefox-Spdy: h2
choices.consentframework.com/api/v1/public/user-action
51.158.28.83200 OK 0 B URL HTTP/1.1 choices.consentframework.com/api/v1/public/user-action
IP 51.158.28.83:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v1/public/user-action HTTP/1.1
Host: choices.consentframework.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://lescrinsdeliberte.1fr1.net/
Content-Type: application/json
Origin: http://lescrinsdeliberte.1fr1.net
Content-Length: 159
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 08 Jan 2023 12:41:48 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
104.18.20.226200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP 104.18.20.226:0
Hash 6a2ad734e4af21c02b77da23300b613a
e6fd999dc2f5b1b2dd326a7daaefc74c00a5c25d
e0bab568945698247e5b99d9f2eff23cc2fcf9aa92aec8f286f8b1a1af7a99de
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 12:41:48 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "415C12F35A29AD037CFAE8A7D0DAEE9091A85871"
Expires: Mon, 09 Jan 2023 00:00:00 GMT
Last-Modified: Sun, 08 Jan 2023 12:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 526
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7865026c1ce0fac4-OSL
push.services.mozilla.com/
35.166.172.24101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.166.172.24:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Y5/4JFjpVZWQmVUrMwGp2w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: otH5UhzJEli6DXPetwfXD4k8B70=
js.cookieless-data.com/GS.d?pa=24697&uf_bday=&uf_gender=&cmp=0&u=http%3A%2F%2Flescrinsdeliberte.1fr1.net%2Ft16710-dpt-59-gaia-chaussette-trait-2-an-et-demi-a-trouve-sa-famille&r=&rand=1673181695705&gdpr=1&gdpr_consent=CPlREsAPlREsABcAIBFRCyCgAAAAAH_AABpwIyQAARkgZAALAAeABUAC4AGQAOQAfACAAEkAMQAygBoAGoAPAAfQBEAEUAJgATwAxABmADmAH4AQgAjgBSgC3gGUAZYA7gB-gEDAIQARaAjgCOgFLAKuAXUAwIBogDXgG0AOqAf8BHoCYgFNALUAXmAwQBhoDJAHFgOUAdgAAA&globalscope=false&cookieless_optout=0&tbp=true
212.83.160.162200 OK 0 B URL HTTP/1.1 js.cookieless-data.com/GS.d?pa=24697&uf_bday=&uf_gender=&cmp=0&u=http%3A%2F%2Flescrinsdeliberte.1fr1.net%2Ft16710-dpt-59-gaia-chaussette-trait-2-an-et-demi-a-trouve-sa-famille&r=&rand=1673181695705&gdpr=1&gdpr_consent=CPlREsAPlREsABcAIBFRCyCgAAAAAH_AABpwIyQAARkgZAALAAeABUAC4AGQAOQAfACAAEkAMQAygBoAGoAPAAfQBEAEUAJgATwAxABmADmAH4AQgAjgBSgC3gGUAZYA7gB-gEDAIQARaAjgCOgFLAKuAXUAwIBogDXgG0AOqAf8BHoCYgFNALUAXmAwQBhoDJAHFgOUAdgAAA&globalscope=false&cookieless_optout=0&tbp=true
IP 212.83.160.162:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /GS.d?pa=24697&uf_bday=&uf_gender=&cmp=0&u=http%3A%2F%2Flescrinsdeliberte.1fr1.net%2Ft16710-dpt-59-gaia-chaussette-trait-2-an-et-demi-a-trouve-sa-famille&r=&rand=1673181695705&gdpr=1&gdpr_consent=CPlREsAPlREsABcAIBFRCyCgAAAAAH_AABpwIyQAARkgZAALAAeABUAC4AGQAOQAfACAAEkAMQAygBoAGoAPAAfQBEAEUAJgATwAxABmADmAH4AQgAjgBSgC3gGUAZYA7gB-gEDAIQARaAjgCOgFLAKuAXUAwIBogDXgG0AOqAf8BHoCYgFNALUAXmAwQBhoDJAHFgOUAdgAAA&globalscope=false&cookieless_optout=0&tbp=true HTTP/1.1
Host: js.cookieless-data.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 08 Jan 2023 12:41:48 GMT
Content-Length: 0
Connection: keep-alive
Expires: Tue, 01 Jan 2000 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
X-Xss-Protection: 0
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
P3p: CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash bca7f62d320a595159ceae1b30ef4c65
0e0c7a42f0d017f617b40aea757cf0a0a4d71d9a
e30f2266b5b10dd868954bba127f6a8e85ba6f8422b565ca17aee0e9074b9d99
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.taboola.com/libtrc/impl.20230108-3-RELEASE.js
151.101.65.44200 OK 152 kB URL HTTP/2 cdn.taboola.com/libtrc/impl.20230108-3-RELEASE.js
IP 151.101.65.44:0
File type ASCII text, with very long lines (65509)
Size 152 kB (152302 bytes)
Hash 2e7e65ffa27fd21c07cd193e369e5c66
3451c48f8131f3be0d0af5eb3a2d671e93d0e710
b96ac40527ea138c073e4ee27f817ab545ceb5048c613b6e3796c1c8399b7da0
GET /libtrc/impl.20230108-3-RELEASE.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 9Xtuw47Dr1legt1UEtsOa8/tTkylPRFATV9kaUy0oEtdEGtzOzCELJxqnTs7FyXY5e0RxS2I3Pk=
x-amz-request-id: 7ZJDY1FD06V0X8QP
last-modified: Sun, 08 Jan 2023 09:45:44 GMT
etag: "2e7e65ffa27fd21c07cd193e369e5c66"
content-encoding: br
x-amz-version-id: SdOCNdaC5vO20A8Yt9T53.x6kDz3vL0a
content-type: application/javascript
accept-ranges: bytes
date: Sun, 08 Jan 2023 12:41:48 GMT
via: 1.1 varnish
age: 10558
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 2800
x-timer: S1673181708.307682,VS0,VE0
cache-control: private,max-age=31536000
vary: Accept-Encoding
abp: 2
server: AmazonS3-br
content-length: 152302
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash bca7f62d320a595159ceae1b30ef4c65
0e0c7a42f0d017f617b40aea757cf0a0a4d71d9a
e30f2266b5b10dd868954bba127f6a8e85ba6f8422b565ca17aee0e9074b9d99
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 12:41:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
trc-events.taboola.com/forumotion-fr/log/2/debug?tim=12%3A41%3A36.232&type=usage&msg=rtus&llvl=2&id=9760&cv=20230108-3-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=gdprV2notTriggerRtus&extraData=%7B%7D
141.226.228.48204 No Content 0 B URL HTTP/2 trc-events.taboola.com/forumotion-fr/log/2/debug?tim=12%3A41%3A36.232&type=usage&msg=rtus&llvl=2&id=9760&cv=20230108-3-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=gdprV2notTriggerRtus&extraData=%7B%7D
IP 141.226.228.48:0
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-fr/log/2/debug?tim=12%3A41%3A36.232&type=usage&msg=rtus&llvl=2&id=9760&cv=20230108-3-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=gdprV2notTriggerRtus&extraData=%7B%7D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sun, 08 Jan 2023 12:41:48 GMT
x-fastly-to-nlb-rtt: 22113
access-control-allow-credentials: true
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 457ca75ed75785c514fb36a16792410f
fcc640c00713c93633d0b2887104c8fbc6c754f9
ff6a40bdaa6bc25eefb2d7ed130ea34460494d92c19c07dff4cc371c45d1ac44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF6A40BDAA6BC25EEFB2D7ED130EA34460494D92C19C07DFF4CC371C45D1AC44"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10818
Expires: Sun, 08 Jan 2023 15:42:07 GMT
Date: Sun, 08 Jan 2023 12:41:49 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 457ca75ed75785c514fb36a16792410f
fcc640c00713c93633d0b2887104c8fbc6c754f9
ff6a40bdaa6bc25eefb2d7ed130ea34460494d92c19c07dff4cc371c45d1ac44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF6A40BDAA6BC25EEFB2D7ED130EA34460494D92C19C07DFF4CC371C45D1AC44"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10818
Expires: Sun, 08 Jan 2023 15:42:07 GMT
Date: Sun, 08 Jan 2023 12:41:49 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 457ca75ed75785c514fb36a16792410f
fcc640c00713c93633d0b2887104c8fbc6c754f9
ff6a40bdaa6bc25eefb2d7ed130ea34460494d92c19c07dff4cc371c45d1ac44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF6A40BDAA6BC25EEFB2D7ED130EA34460494D92C19C07DFF4CC371C45D1AC44"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10818
Expires: Sun, 08 Jan 2023 15:42:07 GMT
Date: Sun, 08 Jan 2023 12:41:49 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 457ca75ed75785c514fb36a16792410f
fcc640c00713c93633d0b2887104c8fbc6c754f9
ff6a40bdaa6bc25eefb2d7ed130ea34460494d92c19c07dff4cc371c45d1ac44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF6A40BDAA6BC25EEFB2D7ED130EA34460494D92C19C07DFF4CC371C45D1AC44"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10818
Expires: Sun, 08 Jan 2023 15:42:07 GMT
Date: Sun, 08 Jan 2023 12:41:49 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3750e6a-c5c3-4c07-8912-be2b2eaf7e4f.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3750e6a-c5c3-4c07-8912-be2b2eaf7e4f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 073554b46cc8ac731a6ae967ff367f70
d1a8816ad1296220be03d2191f6505f4b9fe6837
918e2a1addecb099a2b00ac33288ec1b7cd8d2a1ea9a9f90c5f1d2c54367cef1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3750e6a-c5c3-4c07-8912-be2b2eaf7e4f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11629
x-amzn-requestid: d7d6047b-9b34-4c5b-a44b-d810f5e29dd1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eTNhgHxRIAMFfsg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b78fa3-55f45ccb715a49cc0ed25de2;Sampled=0
x-amzn-remapped-date: Fri, 06 Jan 2023 03:04:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MVeEwkEI6rBPAdB9vnHOZCFZvy_ScsvrQcY6BxFa-4Ot7JTzDNNDEg==
via: 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 08 Jan 2023 04:22:14 GMT
age: 29975
etag: "d1a8816ad1296220be03d2191f6505f4b9fe6837"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F753d022b-5cb9-4f9b-b520-756c952710b3.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F753d022b-5cb9-4f9b-b520-756c952710b3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f2abe0388f11bae93f827a971bd29802
a57915c3b8388bc23c3a677ba12cc0525d949c2c
d23c15ca723fe73f6893703c7d1830034182fb1c9c620837313774c62368fa06
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F753d022b-5cb9-4f9b-b520-756c952710b3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10544
x-amzn-requestid: 04bdd2a7-b3dd-434b-833c-7101a1da9da7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZDy1E_goAMFmgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b9e678-3468e4a9174280c146f28962;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 21:39:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: eRS6IJNRzjavNsFqQVAtknTprnuBQwa6NyW5hXr8gFQvqiI9h8VGRw==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 21:58:04 GMT
age: 53025
etag: "a57915c3b8388bc23c3a677ba12cc0525d949c2c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fea675957-36a1-4a10-8735-4cba73296e89.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fea675957-36a1-4a10-8735-4cba73296e89.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5dc193698e3154c6727f0f8a468f4896
ac3e055c64cc024e55bbdc2bdfdb07799f06f83b
4e7fa4cc65a3514cd05a6582a7bcafa3b898cf9cf5fcc5f580c4b05c2b09e5e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fea675957-36a1-4a10-8735-4cba73296e89.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14548
x-amzn-requestid: 5b7bca56-608c-43a4-b082-2c44534377c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZmqdEPHoAMFd9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ba1e42-1555e2f52c04321c48a72a62;Sampled=0
x-amzn-remapped-date: Sun, 08 Jan 2023 01:37:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: zVGn_81T5E6rBNgnwEZRb0r9ePl0UkoqyLZJd481FElYin_LIEcZ-w==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sun, 08 Jan 2023 07:48:19 GMT
age: 17610
etag: "ac3e055c64cc024e55bbdc2bdfdb07799f06f83b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc647e729-b53f-49f8-a6ab-2ce5f8545fb6.jpeg
34.120.237.76200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc647e729-b53f-49f8-a6ab-2ce5f8545fb6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 72302799dca34901be4db1c732277abb
34c149aa1986ba9bbefeddae4f19ff58f4b5093b
f017823817627b30cc424f10babc7cea1470158788026a06ef537435bf7d495c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc647e729-b53f-49f8-a6ab-2ce5f8545fb6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6536
x-amzn-requestid: 231fb617-4d68-4069-9627-135017be4a93
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZDufFHeIAMFiYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b9e65c-53903c7d05368c07629f4156;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 21:38:36 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CgCLMZPEe18AbIV0uxNOAC2kvwDiy-myo9Q103jA2IS-l0ANK0_EhQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 21:42:39 GMT
age: 53950
etag: "34c149aa1986ba9bbefeddae4f19ff58f4b5093b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4c877ef-76ec-4130-a623-3cfe6579a770.png
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4c877ef-76ec-4130-a623-3cfe6579a770.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 30c53ae078b112f7186e910c38898233
d3c58c28f0734f98bed64a26ede077464c3ad3f2
8f7dd1cf9f1472468a7caaf67a8f9c15bfe8836badcfb3249a9a8a7a6c3c0533
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4c877ef-76ec-4130-a623-3cfe6579a770.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13787
x-amzn-requestid: 2598b4fe-a032-47d7-8e6c-cfdcfbe9d64a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZDvYE35IAMF1Vw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b9e662-574eb7370aac63dd531d6b75;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 21:38:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hoqjdZug31XPMxkMVZ0LWQsA62rGeP8GYXr-pe9rmkmzlGKeGSkNFQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 21:51:20 GMT
age: 53429
etag: "d3c58c28f0734f98bed64a26ede077464c3ad3f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash afcc8f4875f4b74ca0640829b689731e
584d0e11665ae89f9a294baf1e9bb4f0e4e9a4df
3e487396389c4330abc99bc99053eecc6aaf56f7afa398d70c30e1f4709577a0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13626
x-amzn-requestid: 4769eaeb-0c78-4054-ad47-eefdd6ab2d03
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eWHMZErbIAMF6sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b8b8b5-4c7bacfe060899044e361f70;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 00:11:33 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: H3uGFYbyPSwFZQCvn99EtVQw1Xz9DBbTgrK2FmfoKYBcZXkj60CbuQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 abbf2df97f9d83839470842dc2e68cb6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 13:36:28 GMT
age: 83121
etag: "584d0e11665ae89f9a294baf1e9bb4f0e4e9a4df"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
illiweb.com/rs3/67/frm/jquery/cookie/jquery.cookie.js
172.67.150.97200 OK 0 B URL HTTP/2 illiweb.com/rs3/67/frm/jquery/cookie/jquery.cookie.js
IP 172.67.150.97:0
GET /rs3/67/frm/jquery/cookie/jquery.cookie.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:46 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
access-control-allow-origin: *
expires: Thu, 14 Dec 2023 08:22:48 GMT
last-modified: Wed, 09 Sep 2020 09:40:28 GMT
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 2175538
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0hHk8FO%2B6QAkx9AqeEOotIa4O4KImJbiX01mYg3TK%2FH7A0lVeqHZ58meKzjkL0sTyFojTEHbHp9cF71tDhETdgCncdjOxH7P6FhKFP7DknSMqNVts1kA5sMQ2XTEDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 786502646dfeb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
illiweb.com/rs3/67/frm/embed/FA_Embed.js
172.67.150.97200 OK 0 B URL HTTP/2 illiweb.com/rs3/67/frm/embed/FA_Embed.js
IP 172.67.150.97:0
GET /rs3/67/frm/embed/FA_Embed.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:46 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
access-control-allow-origin: *
expires: Thu, 14 Dec 2023 08:22:49 GMT
last-modified: Tue, 20 Apr 2021 14:17:00 GMT
x-cache-ne: EXPIRED
x-cache-pr: EXPIRED
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 2175537
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6kZG0FlGf5NLkQtzDt6uAIMLzDHvXcsY1lngr2yBYNww%2FR3y%2BB11%2BQRcvu0BEph9uRwW8xkqnfkFlK9DdMBwBIo0oGTY9w3TgYLw9OmzBmdgjlJKjeacrHX4ZxYG6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 786502649e38b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
illiweb.com/rs3/67/frm/lang/fr.js
172.67.150.97200 OK 0 B URL HTTP/2 illiweb.com/rs3/67/frm/lang/fr.js
IP 172.67.150.97:0
GET /rs3/67/frm/lang/fr.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:46 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=73869
access-control-allow-origin: *
expires: Thu, 14 Dec 2023 08:31:51 GMT
last-modified: Thu, 08 Sep 2022 07:38:48 GMT
x-cache-ne: EXPIRED
x-cache-pr: EXPIRED
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 2174995
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vCHK0e93ipYyjLwQIpMQVatwShYIVgQAZzPQwyg%2F4SIp%2BLxxcnZF7Lafsum96ac9FUj4ni3wAxGfyebWu8vVi%2FXu2Yt50j6vq85wShSd1%2BycLUNR8BBS%2B1paQE1lhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 786502646df4b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
twemoji.maxcdn.com/twemoji.min.js
151.139.237.124200 OK 0 B URL HTTP/2 twemoji.maxcdn.com/twemoji.min.js
IP 151.139.237.124:0
GET /twemoji.min.js HTTP/1.1
Host: twemoji.maxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lescrinsdeliberte.1fr1.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 08 Jan 2023 12:41:47 GMT
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 31 Mar 2022 03:24:15 GMT
access-control-allow-origin: *
etag: W/"62451edf-3bc8"
expires: Tue, 07 Feb 2023 12:41:47 GMT
cache-control: max-age=2592000
x-proxy-cache: MISS
x-github-request-id: 46CE:40F8:DDB9F2:137B77C:63B8AABA
vary: Accept-Encoding
x-fastly-request-id: e625062aa93d4ad63109c85fc94ea7a99460b594
server: NetDNA-cache/2.2
powered-by: MaxCDN
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2