r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 150792cfc458af013998f4ef6bdf5f74
d5179b2dcb11d06f82606bf6eb6648319998d63e
72937c756d3feeae6d04a6f445398b0436bdf559f8c7437e3a3233263943900e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4045
Expires: Mon, 28 Nov 2022 19:04:06 GMT
Date: Mon, 28 Nov 2022 17:56:41 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 9408cc0694fcbea57966c3a3ba906092
fddcee1fdcf3209298e41a4b1b5560357fa165f0
6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3361
Cache-Control: max-age=149441
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 17:56:41 GMT
Etag: "63848df9-1d7"
Expires: Wed, 30 Nov 2022 11:27:22 GMT
Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 17:17:48 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2333
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6245
Expires: Mon, 28 Nov 2022 19:40:46 GMT
Date: Mon, 28 Nov 2022 17:56:41 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 4mVS3SN/SpYV8yH2lSqsWoTLaE1PkTEsQ8B6rmsVD0bbwdcZWBZHQUyiIEXVe7Acpoy1C3t0oq8=
x-amz-request-id: Q2Y27GVVTWG28KFH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 17:45:07 GMT
age: 694
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 17:56:41 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
orthomedic.fr/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Date: Mon, 28 Nov 2022 17:56:41 GMT
Server: Apache
X-Redirect-By: WordPress
Location: https://orthomedic.fr/
orthomedic.fr/
200 OK 17 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2376)
Hash 78aef7931b9170c8959a351b820ae585
68e2ad566855c90c0b3d2a1c6d0d2d99caccf24e
e5311d953a9cebf1259983f2701f5f6550264bc5bf3ee02987421af8e1583d73
GET / HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-length: 16725
date: Mon, 28 Nov 2022 17:56:41 GMT
server: Apache
vary: User-Agent,Accept-Encoding
last-modified: Mon, 14 Nov 2022 10:05:25 GMT
accept-ranges: bytes
cache-control: private, must-revalidate
expires: Mon, 29 Oct 1923 20:30:00 GMT
content-encoding: gzip
pragma: no-cache
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 17:08:55 GMT
cache-control: public,max-age=3600
age: 2866
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/themes/orthomedic.fr/style.css?ver=2.3.0
200 OK 12 kB URL HTTP/2 orthomedic.fr/wp-content/themes/orthomedic.fr/style.css?ver=2.3.0
IP
File type Unicode text, UTF-8 text, with very long lines (2217)
Hash b24470ade20698006938389e6c1fa26c
292d4a4394b0046f98e03dc0988c712ffaf2adc6
6104986a26c89b720ecf2adea9538b4ce98104ead040bbed9630360088634133
GET /wp-content/themes/orthomedic.fr/style.css?ver=2.3.0 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 12038
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Fri, 11 Nov 2022 10:33:28 GMT
accept-ranges: bytes
cache-control: public
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/plugins/accordions/assets/global/css/themesTabs.style.css?ver=6.0.3
200 OK 354 B URL HTTP/2 orthomedic.fr/wp-content/plugins/accordions/assets/global/css/themesTabs.style.css?ver=6.0.3
IP
File type ASCII text, with CRLF line terminators
Hash 2ffa8818131272062781bfb32d41bc65
48a9a4554312455927d4e262933634b2c85bf988
a7ca22aa0a83daf1da103ea9a1ce173d5944de964b632af61d29d4b168069d93
GET /wp-content/plugins/accordions/assets/global/css/themesTabs.style.css?ver=6.0.3 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 354
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: public
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/plugins/accordions/assets/global/css/fontawesome.min.css?ver=6.0.3
200 OK 8.9 kB URL HTTP/2 orthomedic.fr/wp-content/plugins/accordions/assets/global/css/fontawesome.min.css?ver=6.0.3
IP
File type ASCII text, with very long lines (35179)
Hash 84c6ee087be4ea68c64944bb861d5fe0
6412c2c9a4aa29d97e371b9427547ffed14c15f5
4655f2ed41bf427d489590c03133680107b6dbdd46306896abd864c4812642f3
GET /wp-content/plugins/accordions/assets/global/css/fontawesome.min.css?ver=6.0.3 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 8859
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: public
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/plugins/jquery-smooth-scroll/css/style.css?ver=6.0.3
200 OK 381 B URL HTTP/2 orthomedic.fr/wp-content/plugins/jquery-smooth-scroll/css/style.css?ver=6.0.3
IP
File type ASCII text, with CRLF line terminators
Hash f5ff146632417761df7b7c8b3c04cef5
717d884467870ea397fe07dfb52c915a67f93159
4515653fbffb089402b5dd51a64c7db76b54d3bce47bffc534f2e66b8db98eb6
GET /wp-content/plugins/jquery-smooth-scroll/css/style.css?ver=6.0.3 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 381
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: public
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4
200 OK 1.0 kB URL HTTP/2 orthomedic.fr/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4
IP
Hash 71b280bd7e5fb3b9f802068cd2fed62c
e28340cdc4157de949703f6d8ac5ef30062d4b03
7fd1e96c6fb9768e9fe2efd586f8a02c3b58a503e2783dc9e5724e765b1d3219
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 1048
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Mon, 24 Oct 2022 12:11:24 GMT
accept-ranges: bytes
cache-control: public
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=6.3.5
200 OK 751 B URL HTTP/2 orthomedic.fr/wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=6.3.5
IP
File type ASCII text, with very long lines (2723), with no line terminators
Hash ca32f8eaccedb9d2a26b10812f7ba143
c9209ca4deee13ddfc7df16c0386cd7e69461fca
a0bd75ac1796cdd041182828afe4754619e77a2abade3d5d52a5e25329cb7cd3
GET /wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=6.3.5 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 751
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Mon, 07 Nov 2022 13:32:08 GMT
accept-ranges: bytes
cache-control: public
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.22
200 OK 15 kB URL HTTP/2 orthomedic.fr/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.22
IP
File type Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators
Hash 670062e22c0ca02c6a7f1680e14ddf92
824c8fc017241bbdc521452162fe4dbd5c482679
fd63addbf02a46a44b11bd3371f403aa39a1c4043e36023bf8e02f62e80079eb
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.22 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 15392
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: public
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c81653e99cfdfb43236c8d50248b2e51
a33bc0cb7d3bb714b7ef23b059bb304cf23d464f
e75fa0ce568755990d6949ef93e3e5c29213a5a11887f697af901f41b14e0274
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 17:56:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 17:56:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 17:56:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 17:56:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
orthomedic.fr/wp-content/plugins/siteorigin-panels/css/front-flex.min.css?ver=2.18.4
200 OK 510 B URL HTTP/2 orthomedic.fr/wp-content/plugins/siteorigin-panels/css/front-flex.min.css?ver=2.18.4
IP
File type ASCII text, with very long lines (1387), with no line terminators
Hash e04c6c1d8616e0a5af62a2c56279d27b
1c850f6a2435dbc1faa296c227f046e599f145a7
e8f450351a8f5ea0f9bca312b45c4a1fd7b1af86d1c841a803df663254dd3903
GET /wp-content/plugins/siteorigin-panels/css/front-flex.min.css?ver=2.18.4 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 510
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Mon, 28 Nov 2022 15:07:18 GMT
accept-ranges: bytes
cache-control: public
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 7ab2ef968cb6a3078f4b9cb2dda813d4
e669116047ca058a2c1b2999ff0ea8682719162c
6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4290
Cache-Control: max-age=145303
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 17:56:42 GMT
Etag: "63847a2f-1d7"
Expires: Wed, 30 Nov 2022 10:18:25 GMT
Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
orthomedic.fr/wp-content/themes/orthomedic.fr/animate.css?ver=6.0.3
200 OK 4.2 kB URL HTTP/2 orthomedic.fr/wp-content/themes/orthomedic.fr/animate.css?ver=6.0.3
IP
File type ASCII text, with CRLF line terminators
Hash 88bb6d0326bc26f94062a90cac9aa0e7
4f5cb1cdcbaf1f80a33d0a26706ba1d887b4aa76
f0501f52e73cdb49357f564e7bbafc2e5eb9e85ba46c212335a3de3360bcee49
GET /wp-content/themes/orthomedic.fr/animate.css?ver=6.0.3 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 4180
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: public
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-includes/css/dashicons.min.css?ver=6.0.3
200 OK 37 kB URL HTTP/2 orthomedic.fr/wp-includes/css/dashicons.min.css?ver=6.0.3
IP
File type ASCII text, with very long lines (58981)
Hash a43f072b1c6cc0bb10ff7aad98758539
659ae328009e78ece12e242b20bb7982411fd287
81d40a5ef2fc0b46563aed4ef564ac69a4ada802e618013eb8a937c04e6b3f66
GET /wp-includes/css/dashicons.min.css?ver=6.0.3 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 36769
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: public
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/plugins/sticky-menu-or-anything-on-scroll/assets/js/jq-sticky-anything.min.js?ver=2.1.1
200 OK 2.2 kB URL HTTP/2 orthomedic.fr/wp-content/plugins/sticky-menu-or-anything-on-scroll/assets/js/jq-sticky-anything.min.js?ver=2.1.1
IP
File type ASCII text, with very long lines (7353), with CRLF line terminators
Hash e13c50d0f4ad35489b1bfa6c19f75293
4b7c2b4b7121b6e206ade5730b538455cd4851c2
e44c5662447b114c09df540cf5ec54752483cb718d9f9c3debfca4763c54aa1f
GET /wp-content/plugins/sticky-menu-or-anything-on-scroll/assets/js/jq-sticky-anything.min.js?ver=2.1.1 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 2163
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Mon, 21 Nov 2022 14:33:20 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/themes/orthomedic.fr/js/reveal.js?ver=6.0.3
200 OK 487 B URL HTTP/2 orthomedic.fr/wp-content/themes/orthomedic.fr/js/reveal.js?ver=6.0.3
IP
File type ASCII text, with CRLF line terminators
Hash b0ab8a8f714c84090f47a672f7a2da5c
a31689d022daca24445964f278641d10bf4c35b3
dc1c309c5641a2d0d5ad4cce457c5bfd24640809dc49aaa5972e002c59796c35
GET /wp-content/themes/orthomedic.fr/js/reveal.js?ver=6.0.3 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 487
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 0f83cadc148d2ad7e53c91f6c4ee05bb
90035c5fffedf4b0f099465f6b929a030b46c92b
3f59aa77bbbed7760a9968af27d3c19ffddda021c948edf0bf0c0f828dd308ae
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 27 Nov 2022 09:42:00 GMT
expires: Mon, 27 Nov 2023 09:42:00 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 116082
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/themes/orthomedic.fr/js/scrollreveal.js?ver=6.0.3
200 OK 9.0 kB URL HTTP/2 orthomedic.fr/wp-content/themes/orthomedic.fr/js/scrollreveal.js?ver=6.0.3
IP
File type HTML document, Unicode text, UTF-8 text
Hash 9e0242933e6ddd0b9396c0d2c4547f6c
2f9802f38073126e749c1572be669c5892bfa0dd
4f37434118734e37a50ec23788cd54003f73614f743f69e0eddead442a550c5e
GET /wp-content/themes/orthomedic.fr/js/scrollreveal.js?ver=6.0.3 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 8956
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/plugins/accordions/assets/frontend/js/scripts.js?ver=6.0.3
200 OK 606 B URL HTTP/2 orthomedic.fr/wp-content/plugins/accordions/assets/frontend/js/scripts.js?ver=6.0.3
IP
File type ASCII text, with CRLF line terminators
Hash 353a4579351166899abed62c800e84cd
4fe147915ea9c837ce7686ee4910ea94cdc058d8
e3229aa4f56db7e6e8cc8e12b74fef3a2302af0dbff6479f109a0dc3d18e70ac
GET /wp-content/plugins/accordions/assets/frontend/js/scripts.js?ver=6.0.3 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 606
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 03ad9fc0b00b5df3165dc2fb1e3b0a3e
f8243335a8bc24d989bddd346048a055e1d0bdeb
366b28d491f7fd632e31c1ce97f939555f7dcee14bb6875737ed2d3e96fa32ec
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 17:56:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
orthomedic.fr/wp-content/plugins/revslider/public/assets/assets/dummy.png
200 OK 68 B URL HTTP/2 orthomedic.fr/wp-content/plugins/revslider/public/assets/assets/dummy.png
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 2a637d3d825673c0e3462fa4ed9a1c5c
81668d396da22832d75a986407ff10035e0d5899
69539b5b3777cffda28a66d7f2aa9b17c91ee1ec8fd50c00c442af91753a60f7
GET /wp-content/plugins/revslider/public/assets/assets/dummy.png HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 68
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: public
expires: max-age=A10368000, public
vary: User-Agent
X-Firefox-Spdy: h2
orthomedic.fr/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
200 OK 7.7 kB URL HTTP/2 orthomedic.fr/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
IP
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash 574e2a13bf88a24e529f67fcd28ce1fb
b88c21f74ba5d1ef31840cba68a12c844fb74c2e
878ca7126c5f0061ad49b7ec958457cc28b53a9bfbb48d67e30caa3e0fe64bb6
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 7744
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Mon, 30 May 2022 13:01:06 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-109216629-2
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-109216629-2
IP
File type ASCII text, with very long lines (1921)
Hash 1c0a5c40b8753b59967e6675a329c2bc
e86a4498e8e498934ac91bd5723eb59b5f0eddf5
a08baf0bc3a30b2f608bd97960d1dbd1e7405309be30a86ddfe08d00c29f2783
GET /gtag/js?id=UA-109216629-2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 28 Nov 2022 17:56:42 GMT
expires: Mon, 28 Nov 2022 17:56:42 GMT
cache-control: private, max-age=900
last-modified: Mon, 28 Nov 2022 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43681
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
orthomedic.fr/wp-includes/js/jquery/ui/accordion.min.js?ver=1.13.1
200 OK 3.2 kB URL HTTP/2 orthomedic.fr/wp-includes/js/jquery/ui/accordion.min.js?ver=1.13.1
IP
File type ASCII text, with very long lines (8632)
Hash 63896c6b8007fdd4ff677adffe484586
cb371de37afc575244b6823376b63fdaa461d1bf
faca79035f9ce4ecce02daf654c68e404b16d9f2a0407274db5c4f1ea5314136
GET /wp-includes/js/jquery/ui/accordion.min.js?ver=1.13.1 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 3158
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Mon, 30 May 2022 13:01:06 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-includes/js/jquery/ui/tabs.min.js?ver=1.13.1
200 OK 4.5 kB URL HTTP/2 orthomedic.fr/wp-includes/js/jquery/ui/tabs.min.js?ver=1.13.1
IP
File type ASCII text, with very long lines (11760)
Hash eb053cd4333747159a576dff65d7fd23
3b1376717051ae4d5749e9e5bf7af3f78b66e7f2
5cd79e164d91cc3858f099dc61de4a47f3acfda3744050dad609047f8431cfcf
GET /wp-includes/js/jquery/ui/tabs.min.js?ver=1.13.1 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 4455
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Mon, 30 May 2022 13:01:06 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/uploads/2-logo-orthomedic.jpg
200 OK 11 kB URL HTTP/1.1 orthomedic.fr/wp-content/uploads/2-logo-orthomedic.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 242x244, components 3\012- data
Hash 532fbe8adc5108e07f66a40f5938241d
e6e4e07e24bf1e5cda48e5c840bb5b3a664689c7
28ef4d3599ebed02080fc9b28a1382a162b84f4463340b03dc9c8b2aa0e3ffab
GET /wp-content/uploads/2-logo-orthomedic.jpg HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 11252
Connection: keep-alive
Keep-Alive: timeout=15
Date: Mon, 28 Nov 2022 17:56:42 GMT
Server: Apache
Last-Modified: Wed, 20 Oct 2021 07:59:06 GMT
Accept-Ranges: bytes
Cache-Control: public
Expires: max-age=A10368000, public
Vary: User-Agent
orthomedic.fr/wp-content/uploads/2017/07/marqueur1.png
200 OK 455 B URL HTTP/1.1 orthomedic.fr/wp-content/uploads/2017/07/marqueur1.png
IP
File type PNG image data, 27 x 45, 8-bit colormap, non-interlaced\012- data
Hash 9ca45ad9cee612460ae1b10bed4bf252
a5dce782de52374d1b44f0da91807e51db0447a9
f2c80299d22867c3a1e4b0799a4601ef57f5a448b9cbcb8a015e258045316371
GET /wp-content/uploads/2017/07/marqueur1.png HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 455
Connection: keep-alive
Keep-Alive: timeout=15
Date: Mon, 28 Nov 2022 17:56:42 GMT
Server: Apache
Last-Modified: Wed, 20 Oct 2021 07:59:06 GMT
Accept-Ranges: bytes
Cache-Control: public
Expires: max-age=A10368000, public
Vary: User-Agent
www.orthomedic.fr/wp-content/uploads/Carte.jpg
200 OK 4.7 kB URL HTTP/1.1 www.orthomedic.fr/wp-content/uploads/Carte.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 186x152, components 3\012- data
Hash fff4a7f3de6bba402deab4480da128bc
f2c7c366f9b4b9d75bd0c309c75f18a275566625
a56650b4984bc42cc3449e125340a30c2c4daf4fd94d2c8f7cffcffbc1700edf
GET /wp-content/uploads/Carte.jpg HTTP/1.1
Host: www.orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 4723
Connection: keep-alive
Keep-Alive: timeout=15
Date: Mon, 28 Nov 2022 17:56:42 GMT
Server: Apache
Last-Modified: Wed, 20 Oct 2021 07:59:06 GMT
Accept-Ranges: bytes
Cache-Control: public
Expires: max-age=A10368000, public
Vary: User-Agent
orthomedic.fr/wp-includes/js/jquery/ui/effect.min.js?ver=1.13.1
200 OK 7.2 kB URL HTTP/2 orthomedic.fr/wp-includes/js/jquery/ui/effect.min.js?ver=1.13.1
IP
File type ASCII text, with very long lines (15439)
Hash f9db5ac4eef28e71547d0ed1e890f5ae
943aa3e61c8e93d15d40ce18b0d4c300fd04700b
79f9a1b1d6e0a831cee1c8adb696792a90a4e74f0d4e7ac3bf63d42326927e9a
GET /wp-includes/js/jquery/ui/effect.min.js?ver=1.13.1 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 7163
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Mon, 30 May 2022 13:01:06 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4
200 OK 3.2 kB URL HTTP/2 orthomedic.fr/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4
IP
File type ASCII text, with very long lines (9937), with no line terminators
Hash 916d9875d3513738cf0628b63414c37a
f0f771fc8bee031a5f07e981100d899bd4e19b8a
5005bf5395df14a11ea73484dfc084395c4aac253b69ac043b46fc879b22c43f
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 3229
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Mon, 24 Oct 2022 12:11:24 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4
200 OK 4.4 kB URL HTTP/2 orthomedic.fr/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4
IP
File type HTML document, ASCII text, with very long lines (12310), with no line terminators
Hash fa14ffb163d9477d5f78606eab73b515
be14a005b63cf40489d19ab925a83ca1c8dc0f14
92580baa17fa9c9041b2b0d3f63c1791d923ef8f06800bdf25b628f151ab88b8
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 4409
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Mon, 24 Oct 2022 12:11:24 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
200 OK 5.8 kB URL HTTP/2 orthomedic.fr/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
IP
File type ASCII text, with very long lines (15660)
Hash 5dd90c13d1cb6624cba0f3bc7828c4bb
734a400e956fed5389a6e20fabf89327710cf6eb
e573bfe941e733fe9f4580cd6fd65468cf7398b6403488229dbbd7687c42f55c
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 5792
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Mon, 30 May 2022 13:01:06 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?render=6Legs6IfAAAAANyCOH_WkNKDme7yyJpKmyrbcg42&ver=3.0
200 OK 581 B URL HTTP/2 www.google.com/recaptcha/api.js?render=6Legs6IfAAAAANyCOH_WkNKDme7yyJpKmyrbcg42&ver=3.0
IP
File type ASCII text, with very long lines (884), with no line terminators
Hash 12910825b8b43ffe3ba47e3c059b0b70
e1c1e93a396b34d581f38b9306f941bdd54ac9e9
dd484a0c32fee6189887bc53508068e7478ecbd7b73952fa999ffcc941c6a027
GET /recaptcha/api.js?render=6Legs6IfAAAAANyCOH_WkNKDme7yyJpKmyrbcg42&ver=3.0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Mon, 28 Nov 2022 17:56:42 GMT
date: Mon, 28 Nov 2022 17:56:42 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 581
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/plugins/sticky-menu-or-anything-on-scroll/assets/js/stickThis.js?ver=2.1.1
200 OK 342 B URL HTTP/2 orthomedic.fr/wp-content/plugins/sticky-menu-or-anything-on-scroll/assets/js/stickThis.js?ver=2.1.1
IP
File type ASCII text, with CRLF line terminators
Hash b8305533f23ed560de023efd89c5d7c7
aa143fb9600e0bc8e168a037d79cccc704a0da2e
bdb83db4cbc66e175cbbbeec12b0e162b6d6a369d34007b7de30147eb42559f3
GET /wp-content/plugins/sticky-menu-or-anything-on-scroll/assets/js/stickThis.js?ver=2.1.1 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 342
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Mon, 21 Nov 2022 14:33:20 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 17:56:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
orthomedic.fr/wp-content/uploads/2017/07/facebook.gif
200 OK 1.2 kB URL HTTP/1.1 orthomedic.fr/wp-content/uploads/2017/07/facebook.gif
IP
File type GIF image data, version 89a, 28 x 28\012- data
Hash 3e02447d17a21b711fa963e69fdb9b03
a21d95e94093e294dd9a9ee13c0f95fe7385d3b5
6d51d4ec7147218c3ad8d275fc659c9e62b2a61c3c2ca7ac99dff094411fa476
GET /wp-content/uploads/2017/07/facebook.gif HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 1200
Connection: keep-alive
Keep-Alive: timeout=15
Date: Mon, 28 Nov 2022 17:56:42 GMT
Server: Apache
Last-Modified: Wed, 20 Oct 2021 07:59:06 GMT
Accept-Ranges: bytes
Cache-Control: public
Expires: max-age=A10368000, public
Vary: User-Agent
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 17:56:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
orthomedic.fr/wp-includes/js/hoverIntent.min.js?ver=1.10.2
200 OK 721 B URL HTTP/2 orthomedic.fr/wp-includes/js/hoverIntent.min.js?ver=1.10.2
IP
File type ASCII text, with very long lines (1464)
Hash 31d28cf829ef7282a64b74233df8d403
d266f07f76290ba8751be662b4a99fe6ab023bf9
bf3bba54e381f6209375f4e5b394e30765ebb82fd3fc004447507fe340e26a03
GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 721
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Mon, 30 May 2022 13:01:06 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c81653e99cfdfb43236c8d50248b2e51
a33bc0cb7d3bb714b7ef23b059bb304cf23d464f
e75fa0ce568755990d6949ef93e3e5c29213a5a11887f697af901f41b14e0274
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 17:56:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
orthomedic.fr/wp-content/themes/genesis/lib/js/skip-links.js?ver=2.5.3
200 OK 535 B URL HTTP/2 orthomedic.fr/wp-content/themes/genesis/lib/js/skip-links.js?ver=2.5.3
IP
Hash e7348673568e7b62a3522f5d1e6d3125
6a1b94f4a895dba21d475bfbe02e4f0575558bd4
3b9ac557a58952740faee4d0d9d48d76662bf9fe0dbd11a4d8839103625ad4e0
GET /wp-content/themes/genesis/lib/js/skip-links.js?ver=2.5.3 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 535
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/themes/genesis/lib/js/menu/superfish.args.js?ver=2.5.3
200 OK 310 B URL HTTP/2 orthomedic.fr/wp-content/themes/genesis/lib/js/menu/superfish.args.js?ver=2.5.3
IP
Hash baabad79933beac85500f1b0db1baf2a
43ed8628b088efe3357b2ffc5e934d01155f3421
ac712b31a5c4ffa7f7a88e619496ad6a9b4bbc5f4e9d562e380b3bdccd687eac
GET /wp-content/themes/genesis/lib/js/menu/superfish.args.js?ver=2.5.3 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 310
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/themes/orthomedic.fr/js/responsive-menus.min.js?ver=2.3.0
200 OK 1.7 kB URL HTTP/2 orthomedic.fr/wp-content/themes/orthomedic.fr/js/responsive-menus.min.js?ver=2.3.0
IP
File type ASCII text, with very long lines (527)
Hash 17b7fa5fb4d8173cc2d490966a679b7a
cd598780a32dd90d2d85e718020cb1ea5b3a9475
7c90fffe8d8a18b1bdc3e39999374aae5a32969ef9eeb540c7df1a4f2bb6ed2b
GET /wp-content/themes/orthomedic.fr/js/responsive-menus.min.js?ver=2.3.0 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 1729
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/themes/genesis/lib/js/menu/superfish.js?ver=1.7.5
200 OK 2.6 kB URL HTTP/2 orthomedic.fr/wp-content/themes/genesis/lib/js/menu/superfish.js?ver=1.7.5
IP
Hash fe78049e37b1ee3942ee15f4a1281632
83d3eb57e8bee155735aa195fe2591e6ec5a3c63
8c89615fe7c5f6a676fdd3934fd4cac23e3c0c447eef71ecbd26e1890dcbf231
GET /wp-content/themes/genesis/lib/js/menu/superfish.js?ver=1.7.5 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 2577
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 2.6 kB URL HTTP/2 orthomedic.fr/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
File type ASCII text, with very long lines (6475), with no line terminators
Hash d6d00b09c3b40edaf2e76222eae3545e
12ef01d387b922e551eabf52b7801cedf57dfe72
143a3d934ed5b7fe804a9b1fa1da7e3ee33a6a63f2ea37f3be84f54e148846e7
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 2641
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Mon, 30 May 2022 13:01:06 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 8.0 kB URL HTTP/2 orthomedic.fr/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
File type Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Hash b0be8d1de52d8ef653d1fb6f45ccc3ec
48546cddd468d9ebefc799c96190e5788c7ac24b
68c81247c803c85ee832510261c026f76bce46e4f2d6fb524d5bc23de6f6babf
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 7968
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Mon, 30 May 2022 13:01:06 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/uploads/local.png
200 OK 58 kB URL HTTP/1.1 orthomedic.fr/wp-content/uploads/local.png
IP
File type PNG image data, 480 x 242, 8-bit colormap, non-interlaced\012- data
Hash b05a3df631b84771f1eaee783f7f4bf6
0b169140bc1739b5dc1df6d6fca6064f0df9a489
2ca7958ae9299b5eb43c6ff0e8ab8ac79967e14d1c6386e09ba56aea0ba86c6a
GET /wp-content/uploads/local.png HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 58088
Connection: keep-alive
Keep-Alive: timeout=15
Date: Mon, 28 Nov 2022 17:56:42 GMT
Server: Apache
Last-Modified: Wed, 20 Oct 2021 07:59:06 GMT
Accept-Ranges: bytes
Cache-Control: public
Expires: max-age=A10368000, public
Vary: User-Agent
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7207a5076b63fb5f39b9436ced9fb18f
cdd84ecfe85882601e81f11783d9f63b30084de3
6d4543402df8135d5860ecd47dd52d96d66d2e1ac6feec11accb5f43f2da7d0d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 17:56:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
orthomedic.fr/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.2.22
200 OK 51 kB URL HTTP/2 orthomedic.fr/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.2.22
IP
File type ASCII text, with very long lines (41022), with CRLF line terminators
Hash d845764850dabef25ad59fd2da07a52c
b06d9827ee0344fafe42505d8d1c61e501e6b74e
8c11a96c913dc27dd4aa90a56f468cb63bf6441bdb17d4279d353069172b4c28
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.2.22 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 51155
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/plugins/jquery-smooth-scroll/js/script.min.js?ver=6.0.3
200 OK 374 B URL HTTP/2 orthomedic.fr/wp-content/plugins/jquery-smooth-scroll/js/script.min.js?ver=6.0.3
IP
File type ASCII text, with very long lines (649), with no line terminators
Hash f6ab1ef50a76c78bd332f812d6458496
68094da5f09495da32022de95e81a3073084c999
416275e980178a39cd9c4d00355bb34b6c99404cfe51737c4db0e44f80f62c0d
GET /wp-content/plugins/jquery-smooth-scroll/js/script.min.js?ver=6.0.3 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 374
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/uploads/background-presentation2.jpg
200 OK 20 kB URL HTTP/1.1 orthomedic.fr/wp-content/uploads/background-presentation2.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 782x440, components 3\012- data
Hash 14842eb35c1bf1a55d9a0b11dcdd4685
0d29e00bbe991c5e0c0d2d01325c8c2310498279
f5ec0ed5077ffac0b6cc7704c3fb7a745a79c4c8e690e75b4480dc3d9f2bd5a8
GET /wp-content/uploads/background-presentation2.jpg HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 19988
Connection: keep-alive
Keep-Alive: timeout=15
Date: Mon, 28 Nov 2022 17:56:42 GMT
Server: Apache
Last-Modified: Wed, 20 Oct 2021 07:59:06 GMT
Accept-Ranges: bytes
Cache-Control: public
Expires: max-age=A10368000, public
Vary: User-Agent
orthomedic.fr/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.4
200 OK 519 B URL HTTP/2 orthomedic.fr/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.4
IP
File type ASCII text, with very long lines (999), with no line terminators
Hash a13289dec01475ccb56b394d89537f2f
1975b9014302b39ba69624627eaec6cf02d08ab3
947100fae11bf67167923373d477c51e96bee4d65c3e0a3043ac6c3ebe4b1708
GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.4 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 519
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Mon, 24 Oct 2022 12:11:24 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=6.3.5
200 OK 14 kB URL HTTP/2 orthomedic.fr/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=6.3.5
IP
File type C source textAlgol 68 source text\012- Pascal source, ASCII text, with very long lines (48616), with no line terminators
Hash 300322b60801069c1c8ee2c64523c4da
75d0131e2ec3fa89092bea77b9cccfe6e75f971b
cb2c8b335fa51939d84df0d1db6d7bd18efa2e178a82b3952a56a1f5ef63e35d
GET /wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=6.3.5 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 13786
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Mon, 07 Nov 2022 13:32:10 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/plugins/jquery-smooth-scroll/images/arrow.png
200 OK 208 B URL HTTP/2 orthomedic.fr/wp-content/plugins/jquery-smooth-scroll/images/arrow.png
IP
File type PNG image data, 35 x 35, 8-bit gray+alpha, non-interlaced\012- data
Hash 84e4082e3e71ad818aaee033037d0133
1c5cacb3cd7b67dfd1f9464696ad8a1aed963755
9c7ce49cf04b45ea240bdf4ba93feb6bdcd7c6809f0e97606e6dff75a7b0647f
GET /wp-content/plugins/jquery-smooth-scroll/images/arrow.png HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/wp-content/plugins/jquery-smooth-scroll/css/style.css?ver=6.0.3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 208
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: public
expires: max-age=A10368000, public
vary: User-Agent
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd0a5be4865b85e858cfcaafa90f8dca
122569d314b0900b1f5e5f58cdad0d9fc16b7e1b
624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 17:56:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd0a5be4865b85e858cfcaafa90f8dca
122569d314b0900b1f5e5f58cdad0d9fc16b7e1b
624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 17:56:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd0a5be4865b85e858cfcaafa90f8dca
122569d314b0900b1f5e5f58cdad0d9fc16b7e1b
624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 17:56:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/philosopher/v19/vEFI2_5QCwIS4_Dhez5jcWjValgb8tc.woff2
200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/philosopher/v19/vEFI2_5QCwIS4_Dhez5jcWjValgb8tc.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 19484, version 1.0\012- data
Hash b5e8c3bda79a41e2830016a55e74593b
1fb9d5c144e7d038cafee3b832e960c558bc7eca
33fd76af7762a3a075fe1ff9deede7663d8eeb7da6ad98bed2b8b47e5a0b4a17
GET /s/philosopher/v19/vEFI2_5QCwIS4_Dhez5jcWjValgb8tc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://orthomedic.fr
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19484
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 20:11:12 GMT
expires: Tue, 21 Nov 2023 20:11:12 GMT
cache-control: public, max-age=31536000
age: 596730
last-modified: Wed, 27 Apr 2022 16:02:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd0a5be4865b85e858cfcaafa90f8dca
122569d314b0900b1f5e5f58cdad0d9fc16b7e1b
624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 17:56:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
200 OK 9.8 kB URL HTTP/2 fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9840, version 1.0\012- data
Hash afda6e429fd299054de28e1f157c683d
c1847d6f3df5fe11d5e96fd5e6a59b73ff7ed96b
81cd29d1413ecf75834fb3ce1da572fe5c39e53b22c61f5dafec5b14ed4ee12e
GET /s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://orthomedic.fr
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 23:14:30 GMT
expires: Sat, 25 Nov 2023 23:14:30 GMT
cache-control: public, max-age=31536000
age: 240132
last-modified: Mon, 18 Jul 2022 19:24:04 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/dangrek/v26/LYjCdG30nEgoH8E2sCRgqA.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/dangrek/v26/LYjCdG30nEgoH8E2sCRgqA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13312, version 1.0\012- data
Hash cb39662e126f322bc3ad5c40867b95d0
81df460c34960df0cc8eb218420ef9aae73bf075
8d6f0cbe896312cb25265fb9e568c1aca5e7cb7d0eb799b8392c2a6a686adbf1
GET /s/dangrek/v26/LYjCdG30nEgoH8E2sCRgqA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://orthomedic.fr
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13312
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 14:22:37 GMT
expires: Sat, 25 Nov 2023 14:22:37 GMT
cache-control: public, max-age=31536000
age: 272045
last-modified: Thu, 21 Apr 2022 17:02:00 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://orthomedic.fr
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:34:08 GMT
expires: Thu, 23 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 426154
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/philosopher/v19/vEFV2_5QCwIS4_Dhez5jcWBuT00.woff2
200 OK 19 kB URL HTTP/2 fonts.gstatic.com/s/philosopher/v19/vEFV2_5QCwIS4_Dhez5jcWBuT00.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 19416, version 1.0\012- data
Hash 1dc0b12f391d61c5e8382c0d274c2374
eb682de4b8c97cbe8ea03a728b4e0638a23020a2
28f56aba8c13677b3be2478a6cb6e29a9a71ef8e98a0a4a18ec9d4491221f328
GET /s/philosopher/v19/vEFV2_5QCwIS4_Dhez5jcWBuT00.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://orthomedic.fr
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19416
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 08:05:19 GMT
expires: Thu, 23 Nov 2023 08:05:19 GMT
cache-control: public, max-age=31536000
age: 467483
last-modified: Wed, 27 Apr 2022 16:01:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: jnCRZrrPMq0d6FZmRTihDQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zHyEwHQchNP0JiLDU/dVTPsDkp0=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd0a5be4865b85e858cfcaafa90f8dca
122569d314b0900b1f5e5f58cdad0d9fc16b7e1b
624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 17:56:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
orthomedic.fr/wp-content/uploads/complianz/css/banner-1-optin.css?v=20
200 OK 3.4 kB URL HTTP/2 orthomedic.fr/wp-content/uploads/complianz/css/banner-1-optin.css?v=20
IP
File type ASCII text, with very long lines (15022), with no line terminators
Hash 7bb9ab6e9f2e1395f4e0df5cb76bfa2e
63bfa1d232e172308f4fd8d460169f7e41dcf20e
87fa669e798cfe268f2ce6139d5dbedf559e8eb78ab17dff91988222f9e58a37
GET /wp-content/uploads/complianz/css/banner-1-optin.css?v=20 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 3411
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Mon, 14 Nov 2022 10:04:55 GMT
accept-ranges: bytes
cache-control: public
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
ocsps.ssl.com/
200 OK 1.8 kB IP
Hash 6146d911415109d79e3fb57cd01ce016
9dd986d48275c538d66d2412e9cf49078cb45775
ea207b376b515c516e721d81cab1c84119b1f716e57720fd5f109dd955812753
POST / HTTP/1.1
Host: ocsps.ssl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Nov 2022 17:56:42 GMT
Content-Type: application/ocsp-response
Content-Length: 1810
Connection: keep-alive
Expires: Mon, 05 Dec 2022 07:49:16 GMT
Cache-Control: max-age=86400,public,no-transform,must-revalidate
ETag: "9dd986d48275c538d66d2412e9cf49078cb45775"
Last-Modified: Mon, 28 Nov 2022 07:49:17 GMT
X-Proxy-Cache: HIT
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Mon, 28 Nov 2022 16:41:08 GMT
expires: Mon, 28 Nov 2022 18:41:08 GMT
cache-control: public, max-age=7200
age: 4534
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/themes/orthomedic.fr/images/favicon.ico
200 OK 619 B URL HTTP/2 orthomedic.fr/wp-content/themes/orthomedic.fr/images/favicon.ico
IP
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash 644cce6217463bf3d7046e06d0d9e9f1
5a01ad2a9f7a6f6d7b7ad147ca9b45c7b7484a2c
97db2e933ea56b121970a9305f96b7b21f1865803ed9e63536ab4de48e101a8d
GET /wp-content/themes/orthomedic.fr/images/favicon.ico HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 619
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: public
expires: max-age=A10368000, public
vary: User-Agent
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/plugins/revslider/public/assets/assets/transparent.png
200 OK 122 B URL HTTP/2 orthomedic.fr/wp-content/plugins/revslider/public/assets/assets/transparent.png
IP
File type PNG image data, 300 x 200, 1-bit grayscale, non-interlaced\012- data
Hash 86c58b484b48eac285e131e8b55d2ce7
3d3ee4c137a6f36e5fbee31e21a4d08f2c38d20e
9603ffeb6772f1cf745e0097d5d6c046eaf16151e5bc521f20764bba5ddb7713
GET /wp-content/plugins/revslider/public/assets/assets/transparent.png HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 122
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: public
expires: max-age=A10368000, public
vary: User-Agent
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/uploads/slider-sportif.jpg
200 OK 22 kB URL HTTP/2 orthomedic.fr/wp-content/uploads/slider-sportif.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x380, components 3\012- data
Hash 44fd6842ffea1f5bc6eec491d287fe45
7a8d99923e6b0a3bb60437555d28943d6ff75110
157e4f55cbb16b1f3f64b8c5aa7933a3bd67818724a803c317fc8d2eb076742c
GET /wp-content/uploads/slider-sportif.jpg HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 22349
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: public
expires: max-age=A10368000, public
vary: User-Agent
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://orthomedic.fr
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 21:26:04 GMT
expires: Sun, 26 Nov 2023 21:26:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 160238
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d603d02260a5ad2d13db21d55c354540
334cc03036b9940c4693bcb80036dccea8b27d57
f328a1e23b71d7e0c30dae3796d8025d0a266265db28f2558c1ceb507549c75d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F328A1E23B71D7E0C30DAE3796D8025D0A266265DB28F2558C1CEB507549C75D"
Last-Modified: Sun, 27 Nov 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4904
Expires: Mon, 28 Nov 2022 19:18:27 GMT
Date: Mon, 28 Nov 2022 17:56:43 GMT
Connection: keep-alive
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 12:31:58 GMT
expires: Sun, 26 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 192285
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 21:46:16 GMT
expires: Fri, 24 Nov 2023 21:46:16 GMT
cache-control: public, max-age=31536000
age: 331827
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2ff6ae8af7bbae616f97fcbd042132a7
eeab6db445d4a6ccbfb8f0209843cd11d0f8b582
a5a56638f91d9149919a5e49ba8a7e93f81f05d93ed690a5d455b2da661b537a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A5A56638F91D9149919A5E49BA8A7E93F81F05D93ED690A5D455B2DA661B537A"
Last-Modified: Sat, 26 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13671
Expires: Mon, 28 Nov 2022 21:44:34 GMT
Date: Mon, 28 Nov 2022 17:56:43 GMT
Connection: keep-alive
js.wpadmngr.com/npc/sdk/wp-banners.js
200 OK 0 B URL HTTP/2 js.wpadmngr.com/npc/sdk/wp-banners.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npc/sdk/wp-banners.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 17:56:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 20 Aug 2021 15:14:31 GMT
etag: "611fc6d7-0"
expires: Mon, 28 Nov 2022 18:01:43 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2199
Expires: Mon, 28 Nov 2022 18:33:22 GMT
Date: Mon, 28 Nov 2022 17:56:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2199
Expires: Mon, 28 Nov 2022 18:33:22 GMT
Date: Mon, 28 Nov 2022 17:56:43 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1f434933b5bd6377d299ada22d1ae7ef
075531f525e625b117b2497f31139c9824d0e9c5
b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:16 GMT
age: 71727
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2199
Expires: Mon, 28 Nov 2022 18:33:22 GMT
Date: Mon, 28 Nov 2022 17:56:43 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 78b1389f425425d0450c94d900404dc4
53b12a8702f7c5b7cc697e2a24da824d9434be65
0c1659ab3afc6e45f9e3acb12f8865bb99e4668f7df4501b1cc740e53f5b62ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6376
x-amzn-requestid: 25b82353-9c15-44c0-ada5-55f4697de935
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KGeaoAMFb_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-71711cca7c063030292c5e47;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: odmAWkNyUMevvXStu7zRJyckokhyBjUwu7-JSvj8by-JWJ9eAm9P5Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:26 GMT
age: 71717
etag: "53b12a8702f7c5b7cc697e2a24da824d9434be65"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb4908162-9f1d-4654-8d78-fe85386ce233.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb4908162-9f1d-4654-8d78-fe85386ce233.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7e5051d8c06f69e1842a9295ce256a36
1a542a53ba0b1cd0fb23257ebed8166555f16dfb
a7c0dbbb4d0d9138f5ca318cc2aa44e12dadf7ed6263ec204ba756da64b29c41
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb4908162-9f1d-4654-8d78-fe85386ce233.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7556
x-amzn-requestid: 1cda5313-2256-4830-bf84-2e6e15949d3e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR78KFTmoAMF4yg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d9e7-452e36d718a298d12a2374a9;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OWVkuAw6-nRNU_CVOgvsSSenSXnfSYSmJiKa60JvSaiJgPuXjJByZw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:46:41 GMT
age: 72602
etag: "1a542a53ba0b1cd0fb23257ebed8166555f16dfb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa57bc6cf-beaa-443b-9756-cf26e4fe3767.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa57bc6cf-beaa-443b-9756-cf26e4fe3767.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2212cf75f99dc67fd45db47f7101d754
4b4a8c8e8aeccfff25d2748720dcef8fed287126
7b2d2e302faba8f273b51031fa48b444cb7839733b90e8c9d077ca63637320d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa57bc6cf-beaa-443b-9756-cf26e4fe3767.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6954
x-amzn-requestid: 94a02687-72f2-4796-a7ea-d3f28b412566
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1jHpGBVIAMFsSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63787efd-22666b18283ae59b1348bf47;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 07:00:13 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: feZayJeKq9jWHQ-rjutNr6buIjLVeIdY0A_ZeGo6NKgoQ6BBT3XQaw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 0906d4887f6625f4a4467d8d4fd268d2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 08:55:37 GMT
age: 32466
etag: "4b4a8c8e8aeccfff25d2748720dcef8fed287126"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cd887044e91d7ed0f1a8d7119ff7dd0
ae8aa4ce6ddaccba771fe65446926b60fc5628da
bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10199
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iF1VIAMF09g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CXOqm7bjsSV0aJBTkTI7LsMovjgPeISPt3sZotEc7CjZnUL_y4_OoQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:43 GMT
age: 72300
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3a1a4e00f1f15827cf651f373863c379
70c2a238f06ca7e56ef80c83738e081bf0de3330
3d936e1f0c96297f121faece12d6f8173e12eed5087165cd4eefc0fab368419f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8885
x-amzn-requestid: 71b8367f-f79f-42a7-bcb8-c441a154babf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cGDTEFSeIAMF3rg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637f18e0-631b775d3430a8c30c3b4420;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 07:10:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jsmd6yxjJxLMEgv1jDa87iEoZXL2OuALsmUZ9Nxx1rUN-xOTdtN1-A==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 08:11:39 GMT
age: 35104
etag: "70c2a238f06ca7e56ef80c83738e081bf0de3330"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 997ba07ef19623f3c4a0fb3e2fdc2dc0
03c68a854750bb3e4aa4317d552e312651423ad5
c820d3ba25923c8fb7c54a2021ac4bbab2b0bfb40b243e60fddbae035afa4340
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C820D3BA25923C8FB7C54A2021AC4BBAB2B0BFB40B243E60FDDBAE035AFA4340"
Last-Modified: Sun, 27 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12880
Expires: Mon, 28 Nov 2022 21:31:24 GMT
Date: Mon, 28 Nov 2022 17:56:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a63eea2194b998c280165d9f54050d12
be32faa940ea5c06c6ddb11357fec851a130c8a1
94c82fd66180b4a42fa815415473a72ee22446877616e332f59a5767033b4008
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94C82FD66180B4A42FA815415473A72EE22446877616E332F59A5767033B4008"
Last-Modified: Sun, 27 Nov 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18850
Expires: Mon, 28 Nov 2022 23:10:54 GMT
Date: Mon, 28 Nov 2022 17:56:44 GMT
Connection: keep-alive
c5400bbaf2.04cbf4193b.com/in/track?data=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
200 OK 0 B URL HTTP/2 c5400bbaf2.04cbf4193b.com/in/track?data=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
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /in/track?data=eyJ3bCI6MCwic3ViaWQiOjAsInVzZXJfaWQiOiIxNzg3NzkyNTQ4MTQ5Mzk3MDAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIzLjE3LjIiLCJ0YWdfaWQiOjMxODgzLCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuODcsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MCwidXNlcl9rZXl3b3JkcyI6Ik9ydGhvbWVkaWMlMkNOaW9ydCUyQzc5MDAwJTJDU2l0ZSUyQ09mZmljaWVsJTJDc2l0ZSUyQ2ludGVybmV0JTJDJTJDcHJlbWl1bSUyQ3NwJUMzJUE5Y2lhbCUyQ29ydGhvcCVDMyVBOWRpZSUyQyUyQyVDMyVBMCUyQ3VuJTJDcHJpeCUyQ2phbWFpcyUyQ3Z1JTJDT3J0aG9tZWRpYyUyQ0NhYmluZXQlMkNvcnRob3AlQzMlQTlkaXF1ZSUyQ0phcmRldCUyQ0xhdXJlbnQlMkMwOSUyQzYyJTJDNTYlMkMyMCUyQzY4JTJDU3AlQzMlQTljaWFsaXQlQzMlQTlzJTJDYXBwYXJlaWxsYWdlJTJDc3BvcnRpZiUyQ2NvcnNldHMlMkNhcHBhcmVpbGxhZ2UlMkNtYWluJTJDc2VtZWxsZXMlMkNvcnRob3AlQzMlQTlkaXF1ZXMuJTIwIn0= HTTP/1.1
Host: c5400bbaf2.04cbf4193b.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://orthomedic.fr
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 17:56:44 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 395243684abd27be13a0cc63d68009bf
f395aaad9269a58a0749b921864a5a53ef877046
737e7d3abe1c6fa2604727d3d25079cf419f72f91457c1ec31aa841e6958de88
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "737E7D3ABE1C6FA2604727D3D25079CF419F72F91457C1EC31AA841E6958DE88"
Last-Modified: Sun, 27 Nov 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10357
Expires: Mon, 28 Nov 2022 20:49:21 GMT
Date: Mon, 28 Nov 2022 17:56:44 GMT
Connection: keep-alive
js.wpshsdk.com/npc/sdk/push.m.js?v=1
200 OK 26 kB URL HTTP/2 js.wpshsdk.com/npc/sdk/push.m.js?v=1
IP
ASN #39572 DataWeb Global Group B.V.
File type Unicode text, UTF-8 text, with very long lines (62084), with no line terminators
Hash 0bb27bc309245422603c0afec767116f
8815faa1c549811198a7af65d45efbdc1d0dbced
6e44005bb36287bf187c16922d721f0545de55208b0f4b233e4c673e399bf29c
GET /npc/sdk/push.m.js?v=1 HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 17:56:44 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Fri, 25 Nov 2022 14:22:37 GMT
etag: W/"6380cfad-f33b"
content-encoding: gzip
expires: Mon, 28 Nov 2022 18:01:44 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=31883
204 No Content 0 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=31883
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=31883 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://orthomedic.fr/
Origin: https://orthomedic.fr
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Mon, 28 Nov 2022 17:56:44 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://orthomedic.fr
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 65cb14cd62d2d1d9c537aa31bd98aa59
d473f8ea83c2a152b155d9818e0ad306a51065cf
0da7b33424e90c1e3e3133c4038376d4c389f4c6ecad0440c11c3c1d62a8fde4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0DA7B33424E90C1E3E3133C4038376D4C389F4C6ECAD0440C11C3C1D62A8FDE4"
Last-Modified: Sun, 27 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3033
Expires: Mon, 28 Nov 2022 18:47:17 GMT
Date: Mon, 28 Nov 2022 17:56:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 65cb14cd62d2d1d9c537aa31bd98aa59
d473f8ea83c2a152b155d9818e0ad306a51065cf
0da7b33424e90c1e3e3133c4038376d4c389f4c6ecad0440c11c3c1d62a8fde4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0DA7B33424E90C1E3E3133C4038376D4C389F4C6ECAD0440C11C3C1D62A8FDE4"
Last-Modified: Sun, 27 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3033
Expires: Mon, 28 Nov 2022 18:47:17 GMT
Date: Mon, 28 Nov 2022 17:56:44 GMT
Connection: keep-alive
4e699dd731.b509ab5b0d.com/d025a52ef006cf2ebb8ceb0b2aeacbc0.js
200 OK 73 kB URL HTTP/2 4e699dd731.b509ab5b0d.com/d025a52ef006cf2ebb8ceb0b2aeacbc0.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash c2b300e5f3345aa192e663c4f7265de1
c7c64fb0817e9cbf7f151094687b2fde7a548dc5
619fc2b4d96c1da2b3c04d5ebe03cfd7da53b264f5bf2d76298cc5cd872ff7dd
Analyzer Verdict Alert quad9 Sinkholed
GET /d025a52ef006cf2ebb8ceb0b2aeacbc0.js HTTP/1.1
Host: 4e699dd731.b509ab5b0d.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 28 Nov 2022 17:56:44 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 22 Nov 2022 16:27:58 GMT
etag: W/"637cf88e-48777"
content-encoding: gzip
expires: Mon, 28 Nov 2022 18:01:44 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
4e699dd731.b509ab5b0d.com/3494370e94d2a05fa21c7d4028ca31cb.js
200 OK 15 kB URL HTTP/2 4e699dd731.b509ab5b0d.com/3494370e94d2a05fa21c7d4028ca31cb.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (45813), with no line terminators
Hash 533b7fc52dd6d927e021abc79b48bf01
b20498e2b0e51b709b9fec913b585e20a8d73408
55e8d0bc0bc2aff40e36cf3ef22b8a00f8ef221668f91d82bc68c63deaf1a414
Analyzer Verdict Alert quad9 Sinkholed
GET /3494370e94d2a05fa21c7d4028ca31cb.js HTTP/1.1
Host: 4e699dd731.b509ab5b0d.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 28 Nov 2022 17:56:44 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Mon, 17 Oct 2022 14:33:56 GMT
etag: W/"634d67d4-b2f5"
content-encoding: gzip
expires: Mon, 28 Nov 2022 18:01:44 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=31883
200 OK 28 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=31883
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text
Hash e3af49472d683a217237a6ebaf79bcb7
378db4d7e6171a2676ee15c80b4475d7f5ec9742
7714898d715fb8b1ce7a1de73e0e7c9f6394acc8a08cf1a3b342a7829d4de84a
POST /fp?tag_id=31883 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 22287
Origin: https://orthomedic.fr
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 28 Nov 2022 17:56:44 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 28
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://orthomedic.fr
Set-Cookie: id=4186065479222918034; Expires=Tue, 28 Nov 2023 17:56:44 GMT; Secure; SameSite=None
Vary: Origin
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 834e4f0d96178fb84c32bba2003971a6
b578b09b76216e1d90de9bc5e602f9cbd962320f
bb5cc49590c4eb40b81bee855e8582d268f6a8c04c1d694e02c4d89d7d699ebb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BB5CC49590C4EB40B81BEE855E8582D268F6A8C04C1D694E02C4D89D7D699EBB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9408
Expires: Mon, 28 Nov 2022 20:33:32 GMT
Date: Mon, 28 Nov 2022 17:56:44 GMT
Connection: keep-alive
mcpuwpsh.com/get/?go=1&data=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
302 Found 0 B URL HTTP/2 mcpuwpsh.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImMiLCJpZCI6MjQ0Mywic3BhY2VpZCI6MjQ0MywidHlwZSI6ImludGVyc3RpdGlhbCIsInN1YmlkIjoiMzMxNTY0MDc0IiwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6NTI1OTMsImxhYmVscyI6IjQsNSw2LDcsOCw5LDQ2LDQ3LDU0LDU1LDYxLDEwOSIsImFsbG93ZWRfbGFiZWxzIjoiIiwiaW50ZXJzdGl0aWFsIjp0cnVlLCJhZF90YWdzIjoiIiwicmVmZG9tYWluIjoiIiwiaXNfaWZyYW1lIjpmYWxzZSwiZ3lyIjowLCJhY2NlbCI6MH0sInBleHQiOnsiYWIiOjB9fV0sInNpdGUiOnsiaWQiOiI1MjU5MyIsImNhdCI6WyJJQUIyNCJdLCJwYWdlIjoiaHR0cHMlM0EvL29ydGhvbWVkaWMuZnIvIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjllNDk0N2YzNTc1MTQ2NTQxMWZkMWE0ZjVjMzU4Yzc4In0sImV4dCI6eyJkdCI6MTY2OTY1ODIwMzU5OX19 HTTP/1.1
Host: mcpuwpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.16.0
date: Mon, 28 Nov 2022 17:56:44 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://mcpuwpsh.com/popunder/in/click/?mid=8296532286059371931&pid=0&site=52593&sc=NO&usage_type=DCH&subid=331564074&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=orthomedic.fr&hostname=auc-popunder-hz-1&site_id=0&spot_id=52593&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&burl=&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=&iabcat=IAB24&min_cpm=0.003373&placement_type_id=&skin_test=&verify_hash=&score=1&durl=&ml=&tag_ab=c&original_bid=0&user_fp=0&pop_type=0&space_id=2443&verify_hash=&real_bid=&skin_id=&vertical_id=&stratagem=&accel=0&gyr=0&iabcat=IAB24&ip_mismatch=false&ssp=3758&rc=0&url=https%3A%2F%2Fts.cvastico.com%2Fin%2F2459%2F%3Fsource%3D331564074%26site_id%3D52593%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26idzone%3D0%26spot_id%3D52593%26mo%3D%26ve%3D%26ad_tags%3D%26p%3Dhttps%253A%252F%252Forthomedic.fr%252F%26sid%3D2443%26katds_labels%3D4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%26is_iframe%3D1%26btype%3D0%26score%3D1%26bf%3D0.003373&pr=&bid_crid=&bid_cid=&ad_tags=&is_interstitial=1
X-Firefox-Spdy: h2
mcpuwpsh.com/popunder/in/click/?mid=8296532286059371931&pid=0&site=52593&sc=NO&usage_type=DCH&subid=331564074&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=orthomedic.fr&hostname=auc-popunder-hz-1&site_id=0&spot_id=52593&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&burl=&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=&iabcat=IAB24&min_cpm=0.003373&placement_type_id=&skin_test=&verify_hash=&score=1&durl=&ml=&tag_ab=c&original_bid=0&user_fp=0&pop_type=0&space_id=2443&verify_hash=&real_bid=&skin_id=&vertical_id=&stratagem=&accel=0&gyr=0&iabcat=IAB24&ip_mismatch=false&ssp=3758&rc=0&url=https%3A%2F%2Fts.cvastico.com%2Fin%2F2459%2F%3Fsource%3D331564074%26site_id%3D52593%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26idzone%3D0%26spot_id%3D52593%26mo%3D%26ve%3D%26ad_tags%3D%26p%3Dhttps%253A%252F%252Forthomedic.fr%252F%26sid%3D2443%26katds_labels%3D4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%26is_iframe%3D1%26btype%3D0%26score%3D1%26bf%3D0.003373&pr=&bid_crid=&bid_cid=&ad_tags=&is_interstitial=1
302 Found 0 B URL HTTP/2 mcpuwpsh.com/popunder/in/click/?mid=8296532286059371931&pid=0&site=52593&sc=NO&usage_type=DCH&subid=331564074&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=orthomedic.fr&hostname=auc-popunder-hz-1&site_id=0&spot_id=52593&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&burl=&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=&iabcat=IAB24&min_cpm=0.003373&placement_type_id=&skin_test=&verify_hash=&score=1&durl=&ml=&tag_ab=c&original_bid=0&user_fp=0&pop_type=0&space_id=2443&verify_hash=&real_bid=&skin_id=&vertical_id=&stratagem=&accel=0&gyr=0&iabcat=IAB24&ip_mismatch=false&ssp=3758&rc=0&url=https%3A%2F%2Fts.cvastico.com%2Fin%2F2459%2F%3Fsource%3D331564074%26site_id%3D52593%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26idzone%3D0%26spot_id%3D52593%26mo%3D%26ve%3D%26ad_tags%3D%26p%3Dhttps%253A%252F%252Forthomedic.fr%252F%26sid%3D2443%26katds_labels%3D4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%26is_iframe%3D1%26btype%3D0%26score%3D1%26bf%3D0.003373&pr=&bid_crid=&bid_cid=&ad_tags=&is_interstitial=1
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /popunder/in/click/?mid=8296532286059371931&pid=0&site=52593&sc=NO&usage_type=DCH&subid=331564074&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=orthomedic.fr&hostname=auc-popunder-hz-1&site_id=0&spot_id=52593&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&burl=&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=&iabcat=IAB24&min_cpm=0.003373&placement_type_id=&skin_test=&verify_hash=&score=1&durl=&ml=&tag_ab=c&original_bid=0&user_fp=0&pop_type=0&space_id=2443&verify_hash=&real_bid=&skin_id=&vertical_id=&stratagem=&accel=0&gyr=0&iabcat=IAB24&ip_mismatch=false&ssp=3758&rc=0&url=https%3A%2F%2Fts.cvastico.com%2Fin%2F2459%2F%3Fsource%3D331564074%26site_id%3D52593%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26idzone%3D0%26spot_id%3D52593%26mo%3D%26ve%3D%26ad_tags%3D%26p%3Dhttps%253A%252F%252Forthomedic.fr%252F%26sid%3D2443%26katds_labels%3D4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%26is_iframe%3D1%26btype%3D0%26score%3D1%26bf%3D0.003373&pr=&bid_crid=&bid_cid=&ad_tags=&is_interstitial=1 HTTP/1.1
Host: mcpuwpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://orthomedic.fr/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.16.0
date: Mon, 28 Nov 2022 17:56:44 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://ts.cvastico.com/in/2459/?source=331564074&site_id=52593&utm1=&utm2=&utm3=&utm4=&idzone=0&spot_id=52593&mo=&ve=&ad_tags=&p=https%3A%2F%2Forthomedic.fr%2F&sid=2443&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109&is_iframe=1&btype=0&score=1&bf=0.003373
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b2eb78cf054f28dce7231615e04bc692
0134403c7cdd170fcfd18f106725d650355e8824
c2a0bd0f56f39bddd3d44e45099d44464df2cca8df547c63fadda223347f316a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2A0BD0F56F39BDDD3D44E45099D44464DF2CCA8DF547C63FADDA223347F316A"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16308
Expires: Mon, 28 Nov 2022 22:28:32 GMT
Date: Mon, 28 Nov 2022 17:56:44 GMT
Connection: keep-alive
ts.cvastico.com/in/2459/?source=331564074&site_id=52593&utm1=&utm2=&utm3=&utm4=&idzone=0&spot_id=52593&mo=&ve=&ad_tags=&p=https%3A%2F%2Forthomedic.fr%2F&sid=2443&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109&is_iframe=1&btype=0&score=1&bf=0.003373
302 Found 0 B URL HTTP/2 ts.cvastico.com/in/2459/?source=331564074&site_id=52593&utm1=&utm2=&utm3=&utm4=&idzone=0&spot_id=52593&mo=&ve=&ad_tags=&p=https%3A%2F%2Forthomedic.fr%2F&sid=2443&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109&is_iframe=1&btype=0&score=1&bf=0.003373
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/2459/?source=331564074&site_id=52593&utm1=&utm2=&utm3=&utm4=&idzone=0&spot_id=52593&mo=&ve=&ad_tags=&p=https%3A%2F%2Forthomedic.fr%2F&sid=2443&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109&is_iframe=1&btype=0&score=1&bf=0.003373 HTTP/1.1
Host: ts.cvastico.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://orthomedic.fr/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.20.1
date: Mon, 28 Nov 2022 17:56:43 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://www.hmovs.com/?source={{mc}}
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 2459.0=1; expires=Tue, 29 Nov 2022 17:56:43 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 0ff468ef7c7aee75c342f7ed8d5b0cde
b7eda650ff0386aa5b7d34901451d8c650a3756a
63e24a7487e80a04b9a17b347af3ffde781809fd3fbb2e857e802713b5ce0d42
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=148949
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 17:56:44 GMT
Etag: "63849931-118"
Expires: Wed, 30 Nov 2022 11:19:13 GMT
Last-Modified: Mon, 28 Nov 2022 11:19:13 GMT
Server: nginx
Content-Length: 280
www.hmovs.com/images/load-foto.png
200 OK 3.3 kB URL HTTP/2 www.hmovs.com/images/load-foto.png
IP
File type PNG image data, 240 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 6e1c3590f687d47307a8b501b069f639
43ec6b6914692a4df4747113ecd46b48051e51c5
eaa667b2fe8b60095686cb03820975773c9ff28c88aa61454c0dad8bc4760971
GET /images/load-foto.png HTTP/1.1
Host: www.hmovs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hmovs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 28 Nov 2022 17:56:45 GMT
content-type: image/png
content-length: 3307
last-modified: Mon, 20 Jun 2016 08:32:20 GMT
etag: "ceb-535b18aefad00"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6410
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=abRoWEwt%2Fh%2Bw9eH3CAdQEJWWq1r8E8NNrXTAB%2FHyAwZMyUhfekHJhTyJqsjHZRO4tXoaWZmhatyBpIcu8sgvhsoJFyx1x89RsjNnixOXglA3C1iUt4br%2Bk%2BJkrh0Lo%2Bb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7714fb663dbb0af6-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.hmovs.com/poppy/teo7.8.8.93192967322f259845ce32161d61c494.js
200 OK 106 kB URL HTTP/2 www.hmovs.com/poppy/teo7.8.8.93192967322f259845ce32161d61c494.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Size 106 kB (105470 bytes)
Hash 735bf6c44e894901152fb5b0b12b511b
8e362d60167e1eb4eb6c42d6251a2e7fb8257c07
c6d76477e4817146f061f28c8b19d89c982509324fd72c9198c1f9f3cfd7f959
GET /poppy/teo7.8.8.93192967322f259845ce32161d61c494.js HTTP/1.1
Host: www.hmovs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hmovs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 28 Nov 2022 17:56:45 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 28 Nov 2022 12:00:47 GMT
etag: W/"32313-5ee869f32318e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6411
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s0jzE2j83ewItXOHC7bZP3V2Oh5FFstt1FUt7QZo75VW95OLTQSAsk%2BJnl2urxhoWwsqOFTANMSraWT620e4zVxAzjFtQzrxdT6vYCRj4HljLbv00ZT629fpn8A%2BkiVn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7714fb663db90af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.hmovs.com/?source={{mc}}
200 OK 77 kB URL HTTP/2 www.hmovs.com/?source={{mc}}
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5446)
Hash ad70a1171b59503f87c1050f194344d2
3a6ee9ed5fcb4c478e26fbb012a28557501f3752
9938565ff75a40f79f079d7044c6377347559044e9a5757bb7743a817eb1177c
GET /?source={{mc}} HTTP/1.1
Host: www.hmovs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://orthomedic.fr/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 17:56:45 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/5.6.40
set-cookie: PHPSESSID=vf563elqgciehoklm2qfimr6o6; path=/; domain=.hmovs.com
kt_referer=https%3A%2F%2Forthomedic.fr%2F; expires=Tue, 29-Nov-2022 17:56:46 GMT; Max-Age=86400; path=/; domain=.hmovs.com
kt_qparams=source%3D%7B%7Bmc%7D%7D; expires=Tue, 29-Nov-2022 17:56:46 GMT; Max-Age=86400; path=/; domain=.hmovs.com
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s0wjZS6Vf6NxbspVeCw24COsKiAwlYC%2BK9NaSqW9uduf0LSqxqM5LzflUkFEYt7P4hvtsp4F1Sd9gU1W19jXW3qjARNcL40Pr4FIGPdGwu0H%2Bz0%2Bxjse98WMkSMqj18w"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7714fb650be00af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
4e699dd731.b509ab5b0d.com/22eb00ba0187b9ce8be616b23e830d23/31883?version_name=c
200 OK 32 kB URL HTTP/2 4e699dd731.b509ab5b0d.com/22eb00ba0187b9ce8be616b23e830d23/31883?version_name=c
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41063f6549e9eace08dfbb5cf73d8b2
c2813e1c49224ea7cf135efcdd8418b47e7e576f
cf368913b2b472e9fa88498a805b54f7d5bc877310c1d3db4995aa3d4b1d4ed9
Analyzer Verdict Alert quad9 Sinkholed
GET /22eb00ba0187b9ce8be616b23e830d23/31883?version_name=c HTTP/1.1
Host: 4e699dd731.b509ab5b0d.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://orthomedic.fr
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 28 Nov 2022 17:56:43 GMT
content-type: application/json
server: nginx/1.18.0
cache-control: max-age=300
expires: Mon, 28 Nov 2022 18:01:43 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fb9963af5b3c525d68d5c87f0da8025b
c8d1f50313dddb0cea04745d762dac01718a026f
231ef2bc126d4f0cf0910147608f65ec32ee15f3cfdb6981f5fae66f33cfc519
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 17:56:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
0df76f9508.04cbf4193b.com/in/multy
200 OK 19 kB URL HTTP/2 0df76f9508.04cbf4193b.com/in/multy
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (18731), with no line terminators
Hash 4f9ec4e7ec4c96d0424ba1dfdbb640ba
7e4cbe6f26435b2a740e14f79ef2e2d2fb6f30d1
c5aef52189f3a87334f7a13d69fa1633593a3256c5bb5f7ed155eaf6cc1f746e
Analyzer Verdict Alert quad9 Sinkholed
POST /in/multy HTTP/1.1
Host: 0df76f9508.04cbf4193b.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1034
Origin: https://orthomedic.fr
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 28 Nov 2022 17:56:45 GMT
content-type: application/json
content-length: 18734
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
www.googletagservices.com/tag/js/gpt.js
200 OK 27 kB URL HTTP/2 www.googletagservices.com/tag/js/gpt.js
IP
File type ASCII text, with very long lines (40310)
Hash 3097863d148e6cdfee35da37197a4199
af9c3a80ff613a6a0410ab252f5e2cb06343c85d
59466fd91db19a9c60aa70b5a2b48e21638d0dc554bff4d96a34bf678e174692
GET /tag/js/gpt.js HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hmovs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27210
date: Mon, 28 Nov 2022 17:56:45 GMT
expires: Mon, 28 Nov 2022 17:56:45 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1405 / 501 of 1000 / last-modified: 1669637149"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 49 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
File type ASCII text, with very long lines (4885)
Hash e2721589713ad057efbd6d8c5d78ec08
59072801bfe5ccdd4609b1144d930372b6ed973c
52913b32680caf592c18b7aea8bd7eae5fb5d10ec9aa6bec15231749b1a1a2ad
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hmovs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Mon, 28 Nov 2022 17:56:45 GMT
expires: Mon, 28 Nov 2022 17:56:45 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 5560273942448674393
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 49133
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
0df76f9508.04cbf4193b.com/in/show/?mid=3531747182496321978&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=70006084&sid=1572073900&cid=13625&price=0.001178&is_cpm=0&cpm=0&ecpm=0.039469289758474885&crid=&crtid=41e2b054b7d7fdd561f6651d06d511e5&tcid=0&out_id=1&ver=8.5.1&ver_c=&refdom=orthomedic.fr&hostname=auc-inpage-hz-5-a&site_id=3120811&spot_id=20811&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1669744604&created_at=2022-11-28&is_native=2&auction_queue=0&burl=toXp0DC_jA8sbTobW1ZeBCrdoA-4PGzNJQ1j-WCp0Dxy4tRpZEHL2w&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5320811&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB17&min_cpm=0.002400682693685946&placement_type_id=&skin_test=0&verify_hash=07a9402ba8be4a3445a9f050440fcc7d&score=88.89837754094813&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D70006084%26spot_id%3D20811%26is_adult%3D0%26p%3Dhttps%253A%252F%252Forthomedic.fr%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=c&original_bid=0.001178&user_fp=0&v2_track=0&url=QUD-cHK-eHvUsaUjHeFXdfCDAI9oA_gqo263lZeMq7jXt_c_H0bUOrKmiabPOH080IVBgU77EjasE0hdIQW5HnhfY7JuEe6WIeou-2MerpIwnbez7HXz8upp0oyKKM61ZENHqAkiwS0dj6OUOk5oPRUVjlC9R8zj4YIWn5XqdT3bjs7gSg&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FIN%2FIN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp&skin_id=2&vertical_id=0&real_bid=0.001178&pr=&user_keywords=&auc_type=1&aid=200&ext_cid=0&device_theme=light&keywords=&mlc=1&format=default-slide-b_r-body&mlf=1&cpa=19d9abec-cbf5-49aa-9509-abf4862c9995
302 Found 0 B URL HTTP/2 0df76f9508.04cbf4193b.com/in/show/?mid=3531747182496321978&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=70006084&sid=1572073900&cid=13625&price=0.001178&is_cpm=0&cpm=0&ecpm=0.039469289758474885&crid=&crtid=41e2b054b7d7fdd561f6651d06d511e5&tcid=0&out_id=1&ver=8.5.1&ver_c=&refdom=orthomedic.fr&hostname=auc-inpage-hz-5-a&site_id=3120811&spot_id=20811&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1669744604&created_at=2022-11-28&is_native=2&auction_queue=0&burl=toXp0DC_jA8sbTobW1ZeBCrdoA-4PGzNJQ1j-WCp0Dxy4tRpZEHL2w&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5320811&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB17&min_cpm=0.002400682693685946&placement_type_id=&skin_test=0&verify_hash=07a9402ba8be4a3445a9f050440fcc7d&score=88.89837754094813&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D70006084%26spot_id%3D20811%26is_adult%3D0%26p%3Dhttps%253A%252F%252Forthomedic.fr%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=c&original_bid=0.001178&user_fp=0&v2_track=0&url=QUD-cHK-eHvUsaUjHeFXdfCDAI9oA_gqo263lZeMq7jXt_c_H0bUOrKmiabPOH080IVBgU77EjasE0hdIQW5HnhfY7JuEe6WIeou-2MerpIwnbez7HXz8upp0oyKKM61ZENHqAkiwS0dj6OUOk5oPRUVjlC9R8zj4YIWn5XqdT3bjs7gSg&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FIN%2FIN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp&skin_id=2&vertical_id=0&real_bid=0.001178&pr=&user_keywords=&auc_type=1&aid=200&ext_cid=0&device_theme=light&keywords=&mlc=1&format=default-slide-b_r-body&mlf=1&cpa=19d9abec-cbf5-49aa-9509-abf4862c9995
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /in/show/?mid=3531747182496321978&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=70006084&sid=1572073900&cid=13625&price=0.001178&is_cpm=0&cpm=0&ecpm=0.039469289758474885&crid=&crtid=41e2b054b7d7fdd561f6651d06d511e5&tcid=0&out_id=1&ver=8.5.1&ver_c=&refdom=orthomedic.fr&hostname=auc-inpage-hz-5-a&site_id=3120811&spot_id=20811&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1669744604&created_at=2022-11-28&is_native=2&auction_queue=0&burl=toXp0DC_jA8sbTobW1ZeBCrdoA-4PGzNJQ1j-WCp0Dxy4tRpZEHL2w&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5320811&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB17&min_cpm=0.002400682693685946&placement_type_id=&skin_test=0&verify_hash=07a9402ba8be4a3445a9f050440fcc7d&score=88.89837754094813&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D70006084%26spot_id%3D20811%26is_adult%3D0%26p%3Dhttps%253A%252F%252Forthomedic.fr%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=c&original_bid=0.001178&user_fp=0&v2_track=0&url=QUD-cHK-eHvUsaUjHeFXdfCDAI9oA_gqo263lZeMq7jXt_c_H0bUOrKmiabPOH080IVBgU77EjasE0hdIQW5HnhfY7JuEe6WIeou-2MerpIwnbez7HXz8upp0oyKKM61ZENHqAkiwS0dj6OUOk5oPRUVjlC9R8zj4YIWn5XqdT3bjs7gSg&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FIN%2FIN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp&skin_id=2&vertical_id=0&real_bid=0.001178&pr=&user_keywords=&auc_type=1&aid=200&ext_cid=0&device_theme=light&keywords=&mlc=1&format=default-slide-b_r-body&mlf=1&cpa=19d9abec-cbf5-49aa-9509-abf4862c9995 HTTP/1.1
Host: 0df76f9508.04cbf4193b.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Mon, 28 Nov 2022 17:56:45 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://static.bookmsg.com/creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fb9963af5b3c525d68d5c87f0da8025b
c8d1f50313dddb0cea04745d762dac01718a026f
231ef2bc126d4f0cf0910147608f65ec32ee15f3cfdb6981f5fae66f33cfc519
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 17:56:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fb9963af5b3c525d68d5c87f0da8025b
c8d1f50313dddb0cea04745d762dac01718a026f
231ef2bc126d4f0cf0910147608f65ec32ee15f3cfdb6981f5fae66f33cfc519
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 17:56:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash fe5b6492d83c3c1cf68784b732c3cba8
f77c250a748315804b03362baf037ffd52b57572
7d750d6e5e168410fb27fabec28a2b2adfb78405f043e732caf0b7f23e9f961a
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 17:56:45 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Fri, 02 Dec 2022 14:10:33 GMT
ETag: "f77c250a748315804b03362baf037ffd52b57572"
Last-Modified: Mon, 28 Nov 2022 14:10:34 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3138
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7714fb690b98b523-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash fe5b6492d83c3c1cf68784b732c3cba8
f77c250a748315804b03362baf037ffd52b57572
7d750d6e5e168410fb27fabec28a2b2adfb78405f043e732caf0b7f23e9f961a
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 17:56:45 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Fri, 02 Dec 2022 14:10:33 GMT
ETag: "f77c250a748315804b03362baf037ffd52b57572"
Last-Modified: Mon, 28 Nov 2022 14:10:34 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3138
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7714fb6909240b49-OSL
0df76f9508.04cbf4193b.com/in/show/?mid=3531747182496321978&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=70006084&sid=1572073900&cid=13061&price=0.01675000024959445&is_cpm=0&cpm=0&ecpm=0.12549812317057388&crid=5713643&crtid=1c81c2cc33a9d6c8cd6172aeefa0077e&tcid=0&out_id=0&ver=8.5.1&ver_c=&refdom=orthomedic.fr&hostname=auc-inpage-hz-5-a&site_id=3120811&spot_id=20811&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1669744604&created_at=2022-11-28&is_native=1&auction_queue=0&burl=dKXZpgZ43Sptip8cXUkw1KRvzGtn3zM5whyH3QiDokzKoeKuALvt7g&pop_winurl=&ip=91.90.42.154&testab=0&px_id=3120811&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=mq&uniq=&exp=&resp_type=&iabcat=IAB17&min_cpm=0.0006791977245431929&placement_type_id=&skin_test=0&verify_hash=d87b8ebd341db3fb9af288f2d444084f&score=88.89837754094813&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D70006084%26spot_id%3D20811%26is_adult%3D0%26p%3Dhttps%253A%252F%252Forthomedic.fr%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=c&original_bid=0.01675000024959445&user_fp=0&v2_track=0&url=vSyBQuxgBBhRiO-dRPzMTYZ8Kw8342joORZL4hGkr-J44RMucdv_YXTLmg9pgitAbpPkVAQ0OerUsTIR0uLjyUklYQYD3HRzt9c1nK6G-I3RvizwhB0m92pcxERkdgoAJ34tdv5opMuGw3UhbfkVaawkCLhtLPEJR-kZuyAxTyU-iCsubwmGhsEKXL4q-C5KqrNsJFeZQjJyh0VMZQeAKeG4ueCzyBA3RToSPhY5Ln5GE6zu7PMefJI2cqIJEFdMMLjhZhyJhDsWJTgFCj34xy6uJFvAVXARu5ptIkZk47ltCkCvxdnH9hxYS4ecj4jTsd4wizv_IIPD9B-piJXhN_Ml0ThGWlCg3svN4TZ9HXYHJ0MgeAkd9IsENwwwbcpEBIVCJtb4KuC59SJN7lyOyppzE7Le3Q3FB7BzBMLvQFib7_9ItjtZryipCXDRJ7hbVFFc-8QJRdP-2i432ianEuOdvlMS6qhrFkayZ5AX1W6KXjfDpR-sdvzT7eJUG7Xi-JXM9pDTyuLdNy8U07UIrnm6eqQr9Hhgn_sCvkYemJGqmVaBhGLJxJ72J7A-8rrhNls8k5eTDeXa5YgigvpeeN26U9bu_3J5Req1sSJJrdC6q0zMsTBYP5vMy2jiLeJllE8xAbzB660WDtoYXc_leB2QtzGcw8NddcgbIdvqFlZicVwP_civpqsWfghoRV1vfFX2G-2etFqmqC2VUatn9WUuO2OKQv9ZLMd0M3JikNLEO1fbpIQS35W9JWaDlp-lnuwMiDDjsvG8ab1YhgWrv3VqoBhIpNLQ8VJgrJZgN_6kHlegU45Gz01g2Ph2zGXJPui1aYB9AhaKnlIrU39FOYuxh2PIK8KtVqQECRrmZBQ1Z7QbD4wLch70E2kg6h7syZJt9dHecw53Da81I3efT7oK1VuFzsA-Md-zWlN_p5ojbQBKpOmkNv0rzMTUyAhpO1-myQTuUZBjaE2ImjRhnS8SMAPsEqgpKsNsT5WNi1ZPZb3Iin72KttB-PczTCSC-B8TwpjTQoXFi5ZWEi4XLTd_EdcNIbECZoS3wfb5tvlXEBOH3Dsb7oo0pKw5QvR62NjDMdvB8dYzwasXw7aR6nrS8x5oqpUWpqOnXCMe4Vs8zwrQG6xPlAC4mN5HiD-4eMIRe5ixV1P20Ec9klJ4O4PSuAZAEOrPa7kzEzdHULogDp5uJ-ZXjhLGiejII2Le6pkn5qgzIjqNdQOd3rvjrQg7utv-61lG3JkInYn38p9VrcO2oH0Y-WluCXXvPFxQtGcFCbkVmINFVc1L7bW4tCO708EBS9a5q00VfTiUEOqT1tqT6TkqoF0ZDVabs6ey6pwGELZsZBcfxxAIgMQT0tZqE48arxHJvuBDd1XW_OrOmFO0OH-aqgrhx6yT6e4QOFNNLCRQ8vo42CDnZqX1uumJvpjmE_ub1psmP9kCqrVec78EOJ0FqY_QHK2it8grl3pkzYh-JElvt3SGuWhVUpEkUHbj7xQHlhcZnOO2rmDUtzNhM2KwuuZFk6G-bJZTZW2Joi5brqq2Swes-966rGmR2IbIpqm0znn5NxkA9VYhu50EeEAE3KXvBk6eC9WCDHMi7Rdp316MRahcuZcNLq08DpvqECMaaSw9xSKmac4wlRD8z0E-K5S1Ksz0mHhOpQ0q8HgEWW4R0EI3quYVsJUhh1HKZT7XzF7aHj2lcRo&image_url=https%3A%2F%2Fi.cdnkimg.com%2Fauto%2F492x328%2Fq85%2Fimage%2Fvk%2F3643%2F643%2Frect_626aadf074621t1651158512r522.png.webp&skin_id=2&vertical_id=0&real_bid=0.013239200197279453&pr=&user_keywords=&auc_type=1&aid=412&ext_cid=0&device_theme=light&keywords=&format=default-slide-b_r-body&cpa=0df408d0-c7dd-4e9f-99c8-eb1fda0fe623
302 Found 0 B URL HTTP/2 0df76f9508.04cbf4193b.com/in/show/?mid=3531747182496321978&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=70006084&sid=1572073900&cid=13061&price=0.01675000024959445&is_cpm=0&cpm=0&ecpm=0.12549812317057388&crid=5713643&crtid=1c81c2cc33a9d6c8cd6172aeefa0077e&tcid=0&out_id=0&ver=8.5.1&ver_c=&refdom=orthomedic.fr&hostname=auc-inpage-hz-5-a&site_id=3120811&spot_id=20811&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1669744604&created_at=2022-11-28&is_native=1&auction_queue=0&burl=dKXZpgZ43Sptip8cXUkw1KRvzGtn3zM5whyH3QiDokzKoeKuALvt7g&pop_winurl=&ip=91.90.42.154&testab=0&px_id=3120811&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=mq&uniq=&exp=&resp_type=&iabcat=IAB17&min_cpm=0.0006791977245431929&placement_type_id=&skin_test=0&verify_hash=d87b8ebd341db3fb9af288f2d444084f&score=88.89837754094813&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D70006084%26spot_id%3D20811%26is_adult%3D0%26p%3Dhttps%253A%252F%252Forthomedic.fr%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=c&original_bid=0.01675000024959445&user_fp=0&v2_track=0&url=vSyBQuxgBBhRiO-dRPzMTYZ8Kw8342joORZL4hGkr-J44RMucdv_YXTLmg9pgitAbpPkVAQ0OerUsTIR0uLjyUklYQYD3HRzt9c1nK6G-I3RvizwhB0m92pcxERkdgoAJ34tdv5opMuGw3UhbfkVaawkCLhtLPEJR-kZuyAxTyU-iCsubwmGhsEKXL4q-C5KqrNsJFeZQjJyh0VMZQeAKeG4ueCzyBA3RToSPhY5Ln5GE6zu7PMefJI2cqIJEFdMMLjhZhyJhDsWJTgFCj34xy6uJFvAVXARu5ptIkZk47ltCkCvxdnH9hxYS4ecj4jTsd4wizv_IIPD9B-piJXhN_Ml0ThGWlCg3svN4TZ9HXYHJ0MgeAkd9IsENwwwbcpEBIVCJtb4KuC59SJN7lyOyppzE7Le3Q3FB7BzBMLvQFib7_9ItjtZryipCXDRJ7hbVFFc-8QJRdP-2i432ianEuOdvlMS6qhrFkayZ5AX1W6KXjfDpR-sdvzT7eJUG7Xi-JXM9pDTyuLdNy8U07UIrnm6eqQr9Hhgn_sCvkYemJGqmVaBhGLJxJ72J7A-8rrhNls8k5eTDeXa5YgigvpeeN26U9bu_3J5Req1sSJJrdC6q0zMsTBYP5vMy2jiLeJllE8xAbzB660WDtoYXc_leB2QtzGcw8NddcgbIdvqFlZicVwP_civpqsWfghoRV1vfFX2G-2etFqmqC2VUatn9WUuO2OKQv9ZLMd0M3JikNLEO1fbpIQS35W9JWaDlp-lnuwMiDDjsvG8ab1YhgWrv3VqoBhIpNLQ8VJgrJZgN_6kHlegU45Gz01g2Ph2zGXJPui1aYB9AhaKnlIrU39FOYuxh2PIK8KtVqQECRrmZBQ1Z7QbD4wLch70E2kg6h7syZJt9dHecw53Da81I3efT7oK1VuFzsA-Md-zWlN_p5ojbQBKpOmkNv0rzMTUyAhpO1-myQTuUZBjaE2ImjRhnS8SMAPsEqgpKsNsT5WNi1ZPZb3Iin72KttB-PczTCSC-B8TwpjTQoXFi5ZWEi4XLTd_EdcNIbECZoS3wfb5tvlXEBOH3Dsb7oo0pKw5QvR62NjDMdvB8dYzwasXw7aR6nrS8x5oqpUWpqOnXCMe4Vs8zwrQG6xPlAC4mN5HiD-4eMIRe5ixV1P20Ec9klJ4O4PSuAZAEOrPa7kzEzdHULogDp5uJ-ZXjhLGiejII2Le6pkn5qgzIjqNdQOd3rvjrQg7utv-61lG3JkInYn38p9VrcO2oH0Y-WluCXXvPFxQtGcFCbkVmINFVc1L7bW4tCO708EBS9a5q00VfTiUEOqT1tqT6TkqoF0ZDVabs6ey6pwGELZsZBcfxxAIgMQT0tZqE48arxHJvuBDd1XW_OrOmFO0OH-aqgrhx6yT6e4QOFNNLCRQ8vo42CDnZqX1uumJvpjmE_ub1psmP9kCqrVec78EOJ0FqY_QHK2it8grl3pkzYh-JElvt3SGuWhVUpEkUHbj7xQHlhcZnOO2rmDUtzNhM2KwuuZFk6G-bJZTZW2Joi5brqq2Swes-966rGmR2IbIpqm0znn5NxkA9VYhu50EeEAE3KXvBk6eC9WCDHMi7Rdp316MRahcuZcNLq08DpvqECMaaSw9xSKmac4wlRD8z0E-K5S1Ksz0mHhOpQ0q8HgEWW4R0EI3quYVsJUhh1HKZT7XzF7aHj2lcRo&image_url=https%3A%2F%2Fi.cdnkimg.com%2Fauto%2F492x328%2Fq85%2Fimage%2Fvk%2F3643%2F643%2Frect_626aadf074621t1651158512r522.png.webp&skin_id=2&vertical_id=0&real_bid=0.013239200197279453&pr=&user_keywords=&auc_type=1&aid=412&ext_cid=0&device_theme=light&keywords=&format=default-slide-b_r-body&cpa=0df408d0-c7dd-4e9f-99c8-eb1fda0fe623
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /in/show/?mid=3531747182496321978&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=70006084&sid=1572073900&cid=13061&price=0.01675000024959445&is_cpm=0&cpm=0&ecpm=0.12549812317057388&crid=5713643&crtid=1c81c2cc33a9d6c8cd6172aeefa0077e&tcid=0&out_id=0&ver=8.5.1&ver_c=&refdom=orthomedic.fr&hostname=auc-inpage-hz-5-a&site_id=3120811&spot_id=20811&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1669744604&created_at=2022-11-28&is_native=1&auction_queue=0&burl=dKXZpgZ43Sptip8cXUkw1KRvzGtn3zM5whyH3QiDokzKoeKuALvt7g&pop_winurl=&ip=91.90.42.154&testab=0&px_id=3120811&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=mq&uniq=&exp=&resp_type=&iabcat=IAB17&min_cpm=0.0006791977245431929&placement_type_id=&skin_test=0&verify_hash=d87b8ebd341db3fb9af288f2d444084f&score=88.89837754094813&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D70006084%26spot_id%3D20811%26is_adult%3D0%26p%3Dhttps%253A%252F%252Forthomedic.fr%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=c&original_bid=0.01675000024959445&user_fp=0&v2_track=0&url=vSyBQuxgBBhRiO-dRPzMTYZ8Kw8342joORZL4hGkr-J44RMucdv_YXTLmg9pgitAbpPkVAQ0OerUsTIR0uLjyUklYQYD3HRzt9c1nK6G-I3RvizwhB0m92pcxERkdgoAJ34tdv5opMuGw3UhbfkVaawkCLhtLPEJR-kZuyAxTyU-iCsubwmGhsEKXL4q-C5KqrNsJFeZQjJyh0VMZQeAKeG4ueCzyBA3RToSPhY5Ln5GE6zu7PMefJI2cqIJEFdMMLjhZhyJhDsWJTgFCj34xy6uJFvAVXARu5ptIkZk47ltCkCvxdnH9hxYS4ecj4jTsd4wizv_IIPD9B-piJXhN_Ml0ThGWlCg3svN4TZ9HXYHJ0MgeAkd9IsENwwwbcpEBIVCJtb4KuC59SJN7lyOyppzE7Le3Q3FB7BzBMLvQFib7_9ItjtZryipCXDRJ7hbVFFc-8QJRdP-2i432ianEuOdvlMS6qhrFkayZ5AX1W6KXjfDpR-sdvzT7eJUG7Xi-JXM9pDTyuLdNy8U07UIrnm6eqQr9Hhgn_sCvkYemJGqmVaBhGLJxJ72J7A-8rrhNls8k5eTDeXa5YgigvpeeN26U9bu_3J5Req1sSJJrdC6q0zMsTBYP5vMy2jiLeJllE8xAbzB660WDtoYXc_leB2QtzGcw8NddcgbIdvqFlZicVwP_civpqsWfghoRV1vfFX2G-2etFqmqC2VUatn9WUuO2OKQv9ZLMd0M3JikNLEO1fbpIQS35W9JWaDlp-lnuwMiDDjsvG8ab1YhgWrv3VqoBhIpNLQ8VJgrJZgN_6kHlegU45Gz01g2Ph2zGXJPui1aYB9AhaKnlIrU39FOYuxh2PIK8KtVqQECRrmZBQ1Z7QbD4wLch70E2kg6h7syZJt9dHecw53Da81I3efT7oK1VuFzsA-Md-zWlN_p5ojbQBKpOmkNv0rzMTUyAhpO1-myQTuUZBjaE2ImjRhnS8SMAPsEqgpKsNsT5WNi1ZPZb3Iin72KttB-PczTCSC-B8TwpjTQoXFi5ZWEi4XLTd_EdcNIbECZoS3wfb5tvlXEBOH3Dsb7oo0pKw5QvR62NjDMdvB8dYzwasXw7aR6nrS8x5oqpUWpqOnXCMe4Vs8zwrQG6xPlAC4mN5HiD-4eMIRe5ixV1P20Ec9klJ4O4PSuAZAEOrPa7kzEzdHULogDp5uJ-ZXjhLGiejII2Le6pkn5qgzIjqNdQOd3rvjrQg7utv-61lG3JkInYn38p9VrcO2oH0Y-WluCXXvPFxQtGcFCbkVmINFVc1L7bW4tCO708EBS9a5q00VfTiUEOqT1tqT6TkqoF0ZDVabs6ey6pwGELZsZBcfxxAIgMQT0tZqE48arxHJvuBDd1XW_OrOmFO0OH-aqgrhx6yT6e4QOFNNLCRQ8vo42CDnZqX1uumJvpjmE_ub1psmP9kCqrVec78EOJ0FqY_QHK2it8grl3pkzYh-JElvt3SGuWhVUpEkUHbj7xQHlhcZnOO2rmDUtzNhM2KwuuZFk6G-bJZTZW2Joi5brqq2Swes-966rGmR2IbIpqm0znn5NxkA9VYhu50EeEAE3KXvBk6eC9WCDHMi7Rdp316MRahcuZcNLq08DpvqECMaaSw9xSKmac4wlRD8z0E-K5S1Ksz0mHhOpQ0q8HgEWW4R0EI3quYVsJUhh1HKZT7XzF7aHj2lcRo&image_url=https%3A%2F%2Fi.cdnkimg.com%2Fauto%2F492x328%2Fq85%2Fimage%2Fvk%2F3643%2F643%2Frect_626aadf074621t1651158512r522.png.webp&skin_id=2&vertical_id=0&real_bid=0.013239200197279453&pr=&user_keywords=&auc_type=1&aid=412&ext_cid=0&device_theme=light&keywords=&format=default-slide-b_r-body&cpa=0df408d0-c7dd-4e9f-99c8-eb1fda0fe623 HTTP/1.1
Host: 0df76f9508.04cbf4193b.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Mon, 28 Nov 2022 17:56:45 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://s.viichxt.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?f=https%3A%2F%2Fi.cdnkimg.com%2Fauto%2F192%2Fq85%2Fimage%2Fvk%2F3643%2F643%2F626aadf074621t1651158512r522.png.webp
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83ec05b6a354a306a29da4b61af6c1cd
0bd4a59f7cb76301b9ed9ff2b27b9c680cbdb999
a469b3a9e64fa3b7665d9a27bbd602df488e0245ffc7efa82a13c4923c7d804e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A469B3A9E64FA3B7665D9A27BBD602DF488E0245FFC7EFA82A13C4923C7D804E"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6305
Expires: Mon, 28 Nov 2022 19:41:50 GMT
Date: Mon, 28 Nov 2022 17:56:45 GMT
Connection: keep-alive
i.cdnkimg.com/auto/492x328/q85/image/vk/3643/643/rect_626aadf074621t1651158512r522.png.webp
200 OK 10 kB URL HTTP/2 i.cdnkimg.com/auto/492x328/q85/image/vk/3643/643/rect_626aadf074621t1651158512r522.png.webp
IP
ASN #39572 DataWeb Global Group B.V.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 360x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 68329d624a42af6145117bed5c9a2f03
4439b8d8b7e2dc706b5e9a417852bf16e6eb17dd
ede7a9f931abc7e53d07dbf4a82e992cfc38ebb280158f7fa4d12d00cab03bc6
GET /auto/492x328/q85/image/vk/3643/643/rect_626aadf074621t1651158512r522.png.webp HTTP/1.1
Host: i.cdnkimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 17:56:45 GMT
content-type: image/webp
content-length: 10348
server: nginx/1.19.0
cache-control: max-age=1209600
x-cache-status: MISS
expires: Mon, 12 Dec 2022 17:56:45 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9e9ddeff31e7481a44f98f4d07779781
8de80b1f945ecaa9278a2d2f05e4ed0315a6d30a
a0a82621073d9ff399efaaea1e0831a9282a1a0f6457e389383e120a8573f6c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A0A82621073D9FF399EFAAEA1E0831A9282A1A0F6457E389383E120A8573F6C6"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7729
Expires: Mon, 28 Nov 2022 20:05:34 GMT
Date: Mon, 28 Nov 2022 17:56:45 GMT
Connection: keep-alive
securepubads.g.doubleclick.net/gpt/pubads_impl_2022111501.js
200 OK 132 kB URL HTTP/2 securepubads.g.doubleclick.net/gpt/pubads_impl_2022111501.js
IP
File type ASCII text, with very long lines (65395)
Size 132 kB (132177 bytes)
Hash 3308ca8addf332f89a8f9ae5fada3b60
69a0af021add1aa44292528532ef632aff2ab1d0
7c1c9e093bf8e56cf2ba9af1d8cfc092f7a98c4b9472abc3257147aa97ec0ee3
GET /gpt/pubads_impl_2022111501.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hmovs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 132177
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 05:13:59 GMT
expires: Tue, 28 Nov 2023 05:13:59 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Tue, 15 Nov 2022 09:35:23 GMT
content-type: text/javascript
age: 45766
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s.viichxt.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?f=https%3A%2F%2Fi.cdnkimg.com%2Fauto%2F192%2Fq85%2Fimage%2Fvk%2F3643%2F643%2F626aadf074621t1651158512r522.png.webp
302 Found 0 B URL HTTP/2 s.viichxt.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?f=https%3A%2F%2Fi.cdnkimg.com%2Fauto%2F192%2Fq85%2Fimage%2Fvk%2F3643%2F643%2F626aadf074621t1651158512r522.png.webp
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET 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?f=https%3A%2F%2Fi.cdnkimg.com%2Fauto%2F192%2Fq85%2Fimage%2Fvk%2F3643%2F643%2F626aadf074621t1651158512r522.png.webp HTTP/1.1
Host: s.viichxt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.19.0
date: Mon, 28 Nov 2022 17:56:45 GMT
content-length: 0
location: https://i.cdnkimg.com/auto/192/q85/image/vk/3643/643/626aadf074621t1651158512r522.png.webp
X-Firefox-Spdy: h2
www.hmovs.com/js/vendor.js
200 OK 117 kB URL HTTP/2 www.hmovs.com/js/vendor.js
IP
File type Unicode text, UTF-8 text, with very long lines (32030)
Size 117 kB (117106 bytes)
Hash 09dd15bad24689ad16b199c5710a477b
988d81154cff4d1c32aa4553fb4176065a5e69ba
52b35a9625c6aa48b8ee07e698438f8e779a010ad0ae79024dcff0185b3c091d
GET /js/vendor.js HTTP/1.1
Host: www.hmovs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hmovs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 28 Nov 2022 17:56:45 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 11 Jul 2018 14:16:44 GMT
etag: W/"29d51-570b9e56deb00"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2L9wJxq2fEt6z5jcoLfykgNYgT0jqE9g2gzJGNVLT0UqMBigXzuILkbH0JKJ8OkHJs7IBC5u2mw4KWVqXVwQxG%2F1Jn19bZAee4k8n04opGbWrvh%2BSwI0gruR6QRbtW0D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7714fb663dbe0af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.bookmsg.com/creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp
200 OK 790 B URL HTTP/2 static.bookmsg.com/creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp
IP
ASN #24940 Hetzner Online GmbH
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 65156a660e465299370ebd90d84aa461
12ff60b17f579a77e42a8be7b6b1892fc71be33d
e3b2784385cd128d5a6dfdec7f4be2147d6b57fa66c1a36c61c085aaf27f9e18
GET /creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 28 Nov 2022 17:56:45 GMT
content-type: image/webp
content-length: 790
last-modified: Tue, 24 Nov 2020 14:20:43 GMT
etag: "5fbd16bb-316"
cache-control: public, max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
i.cdnkimg.com/auto/192/q85/image/vk/3643/643/626aadf074621t1651158512r522.png.webp
200 OK 7.7 kB URL HTTP/2 i.cdnkimg.com/auto/192/q85/image/vk/3643/643/626aadf074621t1651158512r522.png.webp
IP
ASN #39572 DataWeb Global Group B.V.
File type RIFF (little-endian) data, Web/P image\012- data
Hash 311dea4d14f115d233335c6e836384b4
8b92a31d5f07440ea67469f1b2827fe1bde271e4
8136f9d883af8abb2895a1c5946063fc41ed4b3a7f7226ffe2f49e49a3d0c961
GET /auto/192/q85/image/vk/3643/643/626aadf074621t1651158512r522.png.webp HTTP/1.1
Host: i.cdnkimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 28 Nov 2022 17:56:45 GMT
content-type: image/webp
content-length: 7712
server: nginx/1.19.0
cache-control: max-age=1209600
x-cache-status: MISS
expires: Mon, 12 Dec 2022 17:56:45 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.hmovs.com/zetvuofjrll/jmwmresiua.js
200 OK 128 kB URL HTTP/2 www.hmovs.com/zetvuofjrll/jmwmresiua.js
IP
File type Unicode text, UTF-8 text, with very long lines (37321), with NEL line terminators
Size 128 kB (128406 bytes)
Hash 79c65a1ea5dc194a834a8ba45bfe0cf6
ff25fbe55ff080b97f1e10278056f3e8cae820d9
8c45c32a33237974c2ee0de3e89795dfa1798a254120e02501b86519ab1c2f6b
GET /zetvuofjrll/jmwmresiua.js HTTP/1.1
Host: www.hmovs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hmovs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 28 Nov 2022 17:56:45 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 04 May 2022 09:21:31 GMT
etag: W/"25e05-5de2c269cb378"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6411
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BfyElvay5ctbkVS6waI%2BJli2L1idCpYajHLwP6SVsPYyq3mh4%2F5GtVle4yh397Rs4WbMreXJI5qr2WR8djISHJfPJ9Sbsxl2DHRur9sUbooWon4T90MZ%2BfI6WODEJbqv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7714fb663dac0af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hmovs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 28 Nov 2022 17:56:45 GMT
access-control-allow-origin: *
etag: "6384bf9e-2b"
expires: Mon, 28 Nov 2022 18:56:45 GMT
accept-ranges: bytes
last-modified: Mon, 28 Nov 2022 17:03:10 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/39368365/1?wmode=7&page-url=https%3A%2F%2Fwww.hmovs.com%2F%3Fsource%3D%7B%7Bmc%7D%7D&page-ref=https%3A%2F%2Forthomedic.fr%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1091757527511%3Ahid%3A168700936%3Az%3A0%3Ai%3A20221128175648%3Aet%3A1669658208%3Arn%3A723164533%3Au%3A1669658208153000066%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C0%2C%2C477%2C0%2C%2C328%2C4%2C1779%2C1779%2C1%2C1218%3Ans%3A1669658203600%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1669658208%3At%3AHMovs.com%20-%20Funny%20movies%20tube%20%7C%20HMovs.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rqnl%281%29ti%282%29
200 OK 419 B URL HTTP/2 mc.yandex.ru/watch/39368365/1?wmode=7&page-url=https%3A%2F%2Fwww.hmovs.com%2F%3Fsource%3D%7B%7Bmc%7D%7D&page-ref=https%3A%2F%2Forthomedic.fr%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1091757527511%3Ahid%3A168700936%3Az%3A0%3Ai%3A20221128175648%3Aet%3A1669658208%3Arn%3A723164533%3Au%3A1669658208153000066%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C0%2C%2C477%2C0%2C%2C328%2C4%2C1779%2C1779%2C1%2C1218%3Ans%3A1669658203600%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1669658208%3At%3AHMovs.com%20-%20Funny%20movies%20tube%20%7C%20HMovs.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash b76b29a2ace80988e7669e4d5fbd996c
f3b803c03749040ffbdb1dd4cca5096294e41f11
99ed64bb7863a42ec62317e9f640190b415af1de98a6a9c427b9cb76c7757b7f
GET /watch/39368365/1?wmode=7&page-url=https%3A%2F%2Fwww.hmovs.com%2F%3Fsource%3D%7B%7Bmc%7D%7D&page-ref=https%3A%2F%2Forthomedic.fr%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1091757527511%3Ahid%3A168700936%3Az%3A0%3Ai%3A20221128175648%3Aet%3A1669658208%3Arn%3A723164533%3Au%3A1669658208153000066%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C0%2C%2C477%2C0%2C%2C328%2C4%2C1779%2C1779%2C1%2C1218%3Ans%3A1669658203600%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1669658208%3At%3AHMovs.com%20-%20Funny%20movies%20tube%20%7C%20HMovs.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 419
date: Mon, 28 Nov 2022 17:56:49 GMT
x-content-type-options: nosniff
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 28-Nov-2022 17:56:49 GMT
last-modified: Mon, 28-Nov-2022 17:56:49 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/39368365?wmode=7&page-url=https%3A%2F%2Fwww.hmovs.com%2F%3Fsource%3D%7B%7Bmc%7D%7D&page-ref=https%3A%2F%2Forthomedic.fr%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1091757527511%3Ahid%3A168700936%3Az%3A0%3Ai%3A20221128175648%3Aet%3A1669658208%3Arn%3A723164533%3Au%3A1669658208153000066%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C0%2C%2C477%2C0%2C%2C328%2C4%2C1779%2C1779%2C1%2C1218%3Ans%3A1669658203600%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1669658208%3At%3AHMovs.com%20-%20Funny%20movies%20tube%20%7C%20HMovs.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rqnl(1)ti(2)
302 Found 419 B URL HTTP/2 mc.yandex.ru/watch/39368365?wmode=7&page-url=https%3A%2F%2Fwww.hmovs.com%2F%3Fsource%3D%7B%7Bmc%7D%7D&page-ref=https%3A%2F%2Forthomedic.fr%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1091757527511%3Ahid%3A168700936%3Az%3A0%3Ai%3A20221128175648%3Aet%3A1669658208%3Arn%3A723164533%3Au%3A1669658208153000066%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C0%2C%2C477%2C0%2C%2C328%2C4%2C1779%2C1779%2C1%2C1218%3Ans%3A1669658203600%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1669658208%3At%3AHMovs.com%20-%20Funny%20movies%20tube%20%7C%20HMovs.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rqnl(1)ti(2)
IP
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash c33b9c44a54020f88c2db29fa454a8e8
a9567701f80202532539f01b12bb55dc97dc1433
23c1d0c6795ab0da32b7ea6aecea25ca08a689246796bc6e37e8f5586338f707
GET /watch/39368365?wmode=7&page-url=https%3A%2F%2Fwww.hmovs.com%2F%3Fsource%3D%7B%7Bmc%7D%7D&page-ref=https%3A%2F%2Forthomedic.fr%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1091757527511%3Ahid%3A168700936%3Az%3A0%3Ai%3A20221128175648%3Aet%3A1669658208%3Arn%3A723164533%3Au%3A1669658208153000066%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C0%2C%2C477%2C0%2C%2C328%2C4%2C1779%2C1779%2C1%2C1218%3Ans%3A1669658203600%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1669658208%3At%3AHMovs.com%20-%20Funny%20movies%20tube%20%7C%20HMovs.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/39368365/1?wmode=7&page-url=https%3A%2F%2Fwww.hmovs.com%2F%3Fsource%3D%7B%7Bmc%7D%7D&page-ref=https%3A%2F%2Forthomedic.fr%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1091757527511%3Ahid%3A168700936%3Az%3A0%3Ai%3A20221128175648%3Aet%3A1669658208%3Arn%3A723164533%3Au%3A1669658208153000066%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C0%2C%2C477%2C0%2C%2C328%2C4%2C1779%2C1779%2C1%2C1218%3Ans%3A1669658203600%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1669658208%3At%3AHMovs.com%20-%20Funny%20movies%20tube%20%7C%20HMovs.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rqnl%281%29ti%282%29
date: Mon, 28 Nov 2022 17:56:48 GMT
access-control-allow-origin: null
set-cookie: yandexuid=2158566031669658208; Expires=Tue, 28-Nov-2023 17:56:48 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=2158566031669658208; Expires=Tue, 28-Nov-2023 17:56:48 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2610292541669658208; Path=/; SameSite=None; Secure
i=xcQX3bNLbG5+7MApz14EqWFHdBtaEX7YXRfqgKHt2HhAp+e9MezN8VplO0QyQBnvr+7TRpyxJMopH51qzdDQ1p0W4Hs=; Expires=Thu, 25-Nov-2032 17:56:48 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1701194208.yc.1669658208#1701194208.yrts.1669658208#1701194208.yrtsi.1669658208; Expires=Tue, 28-Nov-2023 17:56:48 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 28-Nov-2022 17:56:48 GMT
last-modified: Mon, 28-Nov-2022 17:56:48 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/uploads/cor3.jpg
200 OK 9.9 kB URL HTTP/2 orthomedic.fr/wp-content/uploads/cor3.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 374x380, components 3\012- data
Hash 8bdb4345a945a0058a3dbef9238c2fe9
e3dea96e4e1ddf90c16d8b9c14c80c54d334547b
7f1804fe1936d3df201f36fb043026320053b63259b270d4732e532c3062bdaf
GET /wp-content/uploads/cor3.jpg HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Cookie: _ga=GA1.2.2130326686.1669658202; _gid=GA1.2.349775077.1669658202; _gat_gtag_UA_109216629_2=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 9884
date: Mon, 28 Nov 2022 17:56:49 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: public
expires: max-age=A10368000, public
vary: User-Agent
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/uploads/cor1.jpg
200 OK 9.5 kB URL HTTP/2 orthomedic.fr/wp-content/uploads/cor1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 267x380, components 3\012- data
Hash 2b80a3846d04292dcce84c658c0be703
4fe64493062edb2c124900ca0c36b15942e696c8
85099f4c19d224659afb472fcc8d815c109fe61c4e336ac489e7a232fa8667fa
GET /wp-content/uploads/cor1.jpg HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Cookie: _ga=GA1.2.2130326686.1669658202; _gid=GA1.2.349775077.1669658202; _gat_gtag_UA_109216629_2=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 9507
date: Mon, 28 Nov 2022 17:56:49 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: public
expires: max-age=A10368000, public
vary: User-Agent
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/uploads/cor2.jpg
200 OK 11 kB URL HTTP/2 orthomedic.fr/wp-content/uploads/cor2.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 380x380, components 3\012- data
Hash 5699c64767f7b4c530d5ad8f4b18d689
74306235d43c09a49a4b6b2a49f740cbe5c5a4ce
47d4019e0f027ad6caa67cfca864c81e8a667cc538ee5e29c66e9d422f39e426
GET /wp-content/uploads/cor2.jpg HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Cookie: _ga=GA1.2.2130326686.1669658202; _gid=GA1.2.349775077.1669658202; _gat_gtag_UA_109216629_2=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 10696
date: Mon, 28 Nov 2022 17:56:49 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: public
expires: max-age=A10368000, public
vary: User-Agent
X-Firefox-Spdy: h2
orthomedic.fr/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.22
200 OK 0 B URL HTTP/2 orthomedic.fr/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.22
IP
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.22 HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
last-modified: Wed, 20 Oct 2021 07:59:06 GMT
accept-ranges: bytes
cache-control: private
expires: max-age=A10368000, public
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
orthomedic.fr/wp-json/contact-form-7/v1/contact-forms/1716/feedback/schema
200 OK 0 B URL HTTP/2 orthomedic.fr/wp-json/contact-form-7/v1/contact-forms/1716/feedback/schema
IP
GET /wp-json/contact-form-7/v1/contact-forms/1716/feedback/schema HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, */*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://orthomedic.fr/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
date: Mon, 28 Nov 2022 17:56:42 GMT
server: Apache
x-robots-tag: noindex
link: <https://orthomedic.fr/wp-json/>; rel="https://api.w.org/"
x-content-type-options: nosniff
access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link
access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
allow: GET
vary: Origin
X-Firefox-Spdy: h2
4e699dd731.b509ab5b0d.com/f210f7ba21a960e73ad5cec27304caa6.js
200 OK 0 B URL HTTP/2 4e699dd731.b509ab5b0d.com/f210f7ba21a960e73ad5cec27304caa6.js
IP
ASN #39572 DataWeb Global Group B.V.
Analyzer Verdict Alert quad9 Sinkholed
GET /f210f7ba21a960e73ad5cec27304caa6.js HTTP/1.1
Host: 4e699dd731.b509ab5b0d.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://orthomedic.fr
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 17:56:43 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 15 Nov 2022 13:38:16 GMT
etag: W/"63739648-17810"
content-encoding: gzip
expires: Mon, 28 Nov 2022 18:01:43 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
4e699dd731.b509ab5b0d.com/870b6d4ccef3dd797ab678beeff4f842.js
200 OK 0 B URL HTTP/2 4e699dd731.b509ab5b0d.com/870b6d4ccef3dd797ab678beeff4f842.js
IP
ASN #39572 DataWeb Global Group B.V.
Analyzer Verdict Alert quad9 Sinkholed
GET /870b6d4ccef3dd797ab678beeff4f842.js HTTP/1.1
Host: 4e699dd731.b509ab5b0d.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 28 Nov 2022 17:56:44 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 13 Oct 2022 09:19:10 GMT
etag: W/"6347d80e-16007"
content-encoding: gzip
expires: Mon, 28 Nov 2022 18:01:44 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
orthomedic.fr/ps/5lK9NI.js
404 Not Found 0 B URL HTTP/2 orthomedic.fr/ps/5lK9NI.js
IP
GET /ps/5lK9NI.js HTTP/1.1
Host: orthomedic.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: _ga=GA1.2.2130326686.1669658202; _gid=GA1.2.349775077.1669658202; _gat_gtag_UA_109216629_2=1
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 28 Nov 2022 17:56:44 GMT
server: Apache
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://orthomedic.fr/wp-json/>; rel="https://api.w.org/"
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Source+Sans+Pro%3A400%2C600%2C700%7CPhilosopher%3A400%2C700%7COswald&ver=2.3.0
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Source+Sans+Pro%3A400%2C600%2C700%7CPhilosopher%3A400%2C700%7COswald&ver=2.3.0
IP
GET /css?family=Source+Sans+Pro%3A400%2C600%2C700%7CPhilosopher%3A400%2C700%7COswald&ver=2.3.0 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 28 Nov 2022 17:56:42 GMT
date: Mon, 28 Nov 2022 17:56:42 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Dangrek:400%7CPhilosopher:400%7CRoboto:400
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Dangrek:400%7CPhilosopher:400%7CRoboto:400
IP
GET /css?family=Dangrek:400%7CPhilosopher:400%7CRoboto:400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 28 Nov 2022 17:56:42 GMT
date: Mon, 28 Nov 2022 17:56:42 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
js.capndr.com/interstitial-admanager/build.m.js
200 OK 0 B URL HTTP/2 js.capndr.com/interstitial-admanager/build.m.js
IP
ASN #39572 DataWeb Global Group B.V.
GET /interstitial-admanager/build.m.js HTTP/1.1
Host: js.capndr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://orthomedic.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 17:56:44 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 08 Sep 2022 13:27:10 GMT
etag: W/"6319edae-5174"
content-encoding: gzip
expires: Mon, 28 Nov 2022 18:01:44 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
217.160.0.35
216.58.207.194
104.21.40.63
23.36.77.32
93.184.220.29
31.220.27.155
87.250.250.119