lepresidentvip.blogspot.com/
200 OK 20 kB URL User Request GET HTTP/2 lepresidentvip.blogspot.com/
IP
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint1F:9F:66:61:40:8F:19:DE:30:44:23:EA:EB:6E:C0:FC:6D:58:69:25
ValidityMon, 16 Oct 2023 08:08:16 GMT - Mon, 08 Jan 2024 08:08:15 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (45791)
Hash cc1435b986808f1aab265d5aa49f64db
c6c97eb98e703ca890b2cd037ddb86cdd9333a75
8f77d971eacafe2005a9aeb264bdc8fa1a6415f7fb125f3b885795c6fb83ce61
GET / HTTP/1.1
Host: lepresidentvip.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Sun, 05 Nov 2023 08:58:38 GMT
date: Sun, 05 Nov 2023 08:58:38 GMT
cache-control: private, max-age=0
last-modified: Fri, 13 Oct 2023 06:06:12 GMT
etag: W/"5aa39b8d25e11a7b1867c27a71a12250f212873b2e429301c499080d58d78e4f"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 20190
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lepresidentvip.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL GET HTTP/2 lepresidentvip.blogspot.com/js/cookienotice.js
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint1F:9F:66:61:40:8F:19:DE:30:44:23:EA:EB:6E:C0:FC:6D:58:69:25
ValidityMon, 16 Oct 2023 08:08:16 GMT - Mon, 08 Jan 2024 08:08:15 GMT
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: lepresidentvip.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Sun, 05 Nov 2023 08:58:38 GMT
expires: Sun, 12 Nov 2023 08:58:38 GMT
cache-control: public, max-age=604800
last-modified: Sat, 04 Nov 2023 21:50:32 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-3346338582069794&host=ca-host-pub-1556223355139109
200 OK 52 kB URL GET HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-3346338582069794&host=ca-host-pub-1556223355139109
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint30:DF:10:0D:E2:AE:CA:7A:5E:20:03:00:80:D2:EB:DD:4D:3A:F3:10
ValidityMon, 16 Oct 2023 08:02:29 GMT - Mon, 08 Jan 2024 08:02:28 GMT
File type ASCII text, with very long lines (3968)
Hash 2a17da86b1845fb76d1cc1af52b89527
240bcde79ac0f63be1768c2ac66fb96b7d32a7d3
0885a18356385c086bcf9ef44ad2bd5f33e846907ff3fa97502e7c2f7a039c33
GET /pagead/js/adsbygoogle.js?client=ca-pub-3346338582069794&host=ca-host-pub-1556223355139109 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sun, 05 Nov 2023 08:58:38 GMT
expires: Sun, 05 Nov 2023 08:58:38 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 325109571669797858
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 51910
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/3737540651-widgets.js
200 OK 59 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/3737540651-widgets.js
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type ASCII text, with very long lines (2215)
Hash 4ea44bac705ed408efd4f1c5409f2c26
56d80408130a9d8e21d988323c92eaa58d7849f1
685ee7526028d355549d5bc576073aa927ea34d48a7512b12c077d88a8d24089
GET /static/v1/widgets/3737540651-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 58997
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Oct 2023 01:56:46 GMT
expires: Tue, 29 Oct 2024 01:56:46 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 30 Oct 2023 00:50:54 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 543712
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
200 OK 7.8 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type ASCII text, with very long lines (35959)
Hash 1e32420a7b6ddbdcb7def8b3141c4d1e
a1be54d42ff1f95244c9653539f90318f5bc0580
a9ca837900b6ae007386d400f659c233120b8af7d93407fd6475c9180d9e83d2
GET /static/v1/widgets/3566091532-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7756
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 05 Nov 2023 06:01:12 GMT
expires: Mon, 04 Nov 2024 06:01:12 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 04 Nov 2023 16:53:14 GMT
content-type: text/css
vary: Accept-Encoding
age: 10646
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
resources.blogblog.com/img/icon18_wrench_allbkg.png
200 OK 475 B URL GET HTTP/2 resources.blogblog.com/img/icon18_wrench_allbkg.png
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type PNG image data, 18 x 18, 8-bit colormap, non-interlaced\012- data
Hash f617effe6d96c15acfea8b2e8aae551f
6d676af11ad2e84b620cce4d5992b657cb2d8ab6
d172d750493be64a7ed84dec1dd2a0d787ba42f78bc694b0858f152c52b6620b
GET /img/icon18_wrench_allbkg.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 475
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Nov 2023 09:27:22 GMT
expires: Fri, 10 Nov 2023 09:27:22 GMT
cache-control: public, max-age=604800
last-modified: Fri, 03 Nov 2023 07:56:15 GMT
content-type: image/png
age: 171076
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.wixstatic.com/media/09fab1_d9a3a79ff40348749f25340378880a8a~mv2.png/v1/fill/w_33,h_22,al_c,q_85,usm_0.66_1.00_0.01/flag-waving-250%20(2).webp
200 OK 982 B URL GET HTTP/2 static.wixstatic.com/media/09fab1_d9a3a79ff40348749f25340378880a8a~mv2.png/v1/fill/w_33,h_22,al_c,q_85,usm_0.66_1.00_0.01/flag-waving-250%20(2).webp
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerSectigo Limited
Subject*.wixstatic.com
FingerprintBF:BB:12:AA:0C:12:8D:03:40:1C:FF:C9:65:B3:19:3E:FF:41:3D:78
ValidityThu, 03 Aug 2023 00:00:00 GMT - Tue, 30 Jan 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 784f8df3b2c9dc7d7469c8005999c2e4
78978f8af6d2972fb7d7ffdf9f1bb740ed969351
65478a65b4e17c02886c6d394f9561572afab9ba07c57cf4643b54c2f038e825
GET /media/09fab1_d9a3a79ff40348749f25340378880a8a~mv2.png/v1/fill/w_33,h_22,al_c,q_85,usm_0.66_1.00_0.01/flag-waving-250%20(2).webp HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
content-length: 982
server: openresty/1.21.4.1
date: Thu, 27 Jul 2023 07:10:25 GMT
access-control-allow-origin: *
cache-control: public, max-age=15552000, immutable
wix-tracer: 2T94BMxqJCAqqOuxrd0MN2IkuF9
x-seen-by: image-manipulator-6b469b496d-kml4w
timing-allow-origin: *
via: 1.1 google, 1.1 648da69bb4c2221c403be08a06311d98.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: e8G9P7bcQmiO5VGgzJXRSR9XAbGKwPQ6zQOcUNWlU5fDK5o3Uf0fUw==
age: 8732893
X-Firefox-Spdy: h2
lepresidentvip.blogspot.com/b/csi.js?h=zvtDWUGYKMqjl3EmEyJPT9PZ9nqaRLgbjIcpa6W6ga4
200 OK 27 kB URL GET HTTP/2 lepresidentvip.blogspot.com/b/csi.js?h=zvtDWUGYKMqjl3EmEyJPT9PZ9nqaRLgbjIcpa6W6ga4
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint1F:9F:66:61:40:8F:19:DE:30:44:23:EA:EB:6E:C0:FC:6D:58:69:25
ValidityMon, 16 Oct 2023 08:08:16 GMT - Mon, 08 Jan 2024 08:08:15 GMT
File type ASCII text, with very long lines (22096)
Hash c8b4f5ebe6d10df6aeb291fb8c6f4f1f
828b14c1293909c8f334d2bb6b775fdbe76f9b7d
f4af807361dd570b4ef7d26a1c2dbad453d3595d0480550b289509edb3a37e54
GET /b/csi.js?h=zvtDWUGYKMqjl3EmEyJPT9PZ9nqaRLgbjIcpa6W6ga4 HTTP/1.1
Host: lepresidentvip.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/javascript; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 05 Nov 2023 08:58:38 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 26771
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.wixstatic.com/media/09fab1_85ddd72899ef480f95df0d3bf2fd904f~mv2.png/v1/fill/w_23,h_22,al_c,q_85,usm_0.66_1.00_0.01/0bbccd0ebd9272b5764b7005258eb478.webp
200 OK 1.3 kB URL GET HTTP/2 static.wixstatic.com/media/09fab1_85ddd72899ef480f95df0d3bf2fd904f~mv2.png/v1/fill/w_23,h_22,al_c,q_85,usm_0.66_1.00_0.01/0bbccd0ebd9272b5764b7005258eb478.webp
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerSectigo Limited
Subject*.wixstatic.com
FingerprintBF:BB:12:AA:0C:12:8D:03:40:1C:FF:C9:65:B3:19:3E:FF:41:3D:78
ValidityThu, 03 Aug 2023 00:00:00 GMT - Tue, 30 Jan 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 57dd72d4aedec72349149432990f43fa
8d22065ba8b0972caae54a2b772ded5a986a2cfb
9a7fd6e3403652fc80e93c02493e7c09bad9a3b66b6832863d3a4799858ee74c
GET /media/09fab1_85ddd72899ef480f95df0d3bf2fd904f~mv2.png/v1/fill/w_23,h_22,al_c,q_85,usm_0.66_1.00_0.01/0bbccd0ebd9272b5764b7005258eb478.webp HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
content-length: 1326
server: openresty/1.21.4.1
date: Thu, 27 Jul 2023 07:10:25 GMT
access-control-allow-origin: *
cache-control: public, max-age=15552000, immutable
wix-tracer: 2T94BK1c4OjoA7CMJoqo82zBIub
x-seen-by: image-manipulator-6b469b496d-qvqbx
timing-allow-origin: *
via: 1.1 google, 1.1 648da69bb4c2221c403be08a06311d98.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Ky-O7JknVjjlz2M9Fw5BeTL8cclHi5hhM8-jvz1Dw22Ijvc_u205pw==
age: 8732893
X-Firefox-Spdy: h2
static.geny.com/web/images/pictos/paris/couple_02.gif
849 B URL GET static.geny.com/web/images/pictos/paris/couple_02.gif
IP
ASN #20940 Akamai International B.V.
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectmedia.geny.com
Fingerprint49:DD:C4:AB:BC:69:E1:76:F3:8B:46:7A:AD:6A:CA:01:B7:A1:52:3F
ValidityWed, 01 Nov 2023 15:15:45 GMT - Tue, 30 Jan 2024 15:15:44 GMT
File type GIF image data, version 89a, 80 x 31\012- data
Hash b497fc01f3bcfc10a09dd39cbef8addb
6668b2177a0a20016fe85dc202c0f69d0189ac21
f3a5c6e85737ca3e0e611ea4772881699b40057cacdcbe7bb5163520171bd9d2
GET /web/images/pictos/paris/couple_02.gif HTTP/1.1
Host: static.geny.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
X-GUploader-UploadID: ABPtcPodnxRIt2CxSwASiMgr5EUPU-CHBXdOkS3ZTbkkSk6aVA3MFJeepQdGQr_s5yMrptF2ZG1mMrHN2eeCwoYmyWYc5w
Last-Modified: Fri, 03 Nov 2023 08:10:56 GMT
ETag: "c9df0d6bd253da09450ffe72cb9d0956"
x-goog-generation: 1698999056359954
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 849
Content-Type: image/gif
Content-Encoding: gzip
x-goog-hash: crc32c=1OCYVQ==, md5=yd8Na9JT2glFD/5yy50JVg==
x-goog-storage-class: STANDARD
Accept-Ranges: bytes
Content-Length: 849
Server: UploadServer
Vary: Origin, Accept-Encoding
Cache-Control: public, no-transform, max-age=864000
Expires: Wed, 15 Nov 2023 08:58:38 GMT
Date: Sun, 05 Nov 2023 08:58:38 GMT
Connection: keep-alive
lh4.googleusercontent.com/proxy/RYgyVZAq9vDMkAP6wXHCi4ZaJfXZ-U0z8t7rcoEz-b8YZkrREuK9u48lUO_rDVjL1Yv5QTRqejxA3PhX97VSCdbQFRZ-sbZd5i3t_YEvE3j4X5fi3tfw42Nda8M=s0-d
200 OK 6.4 kB URL GET HTTP/2 lh4.googleusercontent.com/proxy/RYgyVZAq9vDMkAP6wXHCi4ZaJfXZ-U0z8t7rcoEz-b8YZkrREuK9u48lUO_rDVjL1Yv5QTRqejxA3PhX97VSCdbQFRZ-sbZd5i3t_YEvE3j4X5fi3tfw42Nda8M=s0-d
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintCB:BB:D8:FC:60:AA:94:8F:47:5C:88:BB:C3:30:22:92:26:D3:85:2F
ValidityMon, 16 Oct 2023 08:09:46 GMT - Mon, 08 Jan 2024 08:09:45 GMT
File type GIF image data, version 89a, 348 x 8\012- data
Hash 7137a74764e64f10a911442dba4e59d0
04c2242adeb4eb69eac3484adaccbde382d57d1d
3f8f03385e2738f22542e1725ad4554d5444ca3143f8af050e385d907bc3dcdf
GET /proxy/RYgyVZAq9vDMkAP6wXHCi4ZaJfXZ-U0z8t7rcoEz-b8YZkrREuK9u48lUO_rDVjL1Yv5QTRqejxA3PhX97VSCdbQFRZ-sbZd5i3t_YEvE3j4X5fi3tfw42Nda8M=s0-d HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Mon, 06 Nov 2023 08:58:38 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.gif"
x-content-type-options: nosniff
date: Sun, 05 Nov 2023 08:58:38 GMT
server: fife
content-length: 6423
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
200 OK 22 kB URL GET HTTP/2 apis.google.com/js/platform.js
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.apis.google.com
Fingerprint50:0B:42:CA:19:6A:6B:22:53:82:22:E8:21:A1:EB:17:BF:2E:CA:E3
ValidityMon, 16 Oct 2023 08:10:55 GMT - Mon, 08 Jan 2024 08:10:54 GMT
File type ASCII text, with very long lines (2664)
Hash 79db8fbe2575d94a3330c4709c10ec88
a848e973265a9ae528f6cd0a0cabdfcbda303f4c
579ab8a137d360b401c7ed2a005f0e77b1877a94d27d2239d21cfb33b7a6ae4e
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-length: 21931
date: Sun, 05 Nov 2023 08:58:39 GMT
expires: Sun, 05 Nov 2023 08:58:39 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "0f76a580c84e719a"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
set-cookie: NID=511=gDDVfePte9CCfIfTjvwN-sUlTKOp0QHBn64QBn_6KtFEFrwPPbzMSNFmDQZC011XDEHevacKvmgmq__WCw90wZV8da3HFFaTf9ReZi_YT-JJ-EzfJoKx6djv1v2zj5xKLZeFxSljirw6Z1oLXKWqCqoYpeCriuuhX114hp7lK4I; expires=Mon, 06-May-2024 08:58:39 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
etrevisible.com/88.png
3.5 kB IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectetrevisible.com
Fingerprint85:57:F5:AC:41:45:28:54:63:51:A6:66:65:08:A5:2C:C6:4D:9F:D0
ValiditySun, 15 Oct 2023 14:51:14 GMT - Sat, 13 Jan 2024 14:51:13 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 299fceb37cc714ed20ae154fe801cb7d
769b9a5387be2ba57cb22f0fbff1de1e686b7e55
c6a9ab0c601b3d5a5f685eda45dda7cbcddaf4741a88eb7668484d5000e0b8f7
GET /88.png HTTP/1.1
Host: etrevisible.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Nov 2023 08:58:39 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=glh48t3k7dapddtlthe3i6s5rs; path=/
httpref=https%3A%2F%2Flepresidentvip.blogspot.com%2F; expires=Wed, 20-Dec-2023 08:58:39 GMT; Max-Age=3888000; path=/
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Powered-By: PHP/7.4.33, PleskLin
Content-Length: 3510
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
www.pronosoft.com/fr/concours/img/avatars/avatar_4162_75x75.jpg?v=1
200 OK 4.0 kB URL GET HTTP/1.1 www.pronosoft.com/fr/concours/img/avatars/avatar_4162_75x75.jpg?v=1
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerDigiCert, Inc.
Subject*.pronosoft.com
FingerprintA0:CF:F9:F0:44:C8:99:3E:03:B9:2E:14:4B:6C:46:56:9F:B3:30:97
ValidityTue, 15 Nov 2022 00:00:00 GMT - Thu, 14 Dec 2023 23:59:59 GMT
File type PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash 9ca3b1a2a0e9da928fb6bf4d4569f259
d25a31d7a0ac2e0adb21866c02750db475e6af04
a1a73624adc61b706a860937f08f2801bccdd191a5a0f084f885a73f3e24026c
GET /fr/concours/img/avatars/avatar_4162_75x75.jpg?v=1 HTTP/1.1
Host: www.pronosoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 07 Aug 2023 17:25:37 GMT
Last-Modified: Sun, 20 Apr 2014 08:40:36 GMT
ETag: "fc8-4f775562f0900"
Content-Length: 4040
Content-Type: image/jpeg
Age: 7745581
Accept-Ranges: bytes
Set-Cookie: SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
Cache-Control: max-age=15552000, public, private
www.pronosoft.com/fr/concours/img/avatars/avatar_4163_75x75.jpg?v=1
200 OK 3.9 kB URL GET HTTP/1.1 www.pronosoft.com/fr/concours/img/avatars/avatar_4163_75x75.jpg?v=1
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerDigiCert, Inc.
Subject*.pronosoft.com
FingerprintA0:CF:F9:F0:44:C8:99:3E:03:B9:2E:14:4B:6C:46:56:9F:B3:30:97
ValidityTue, 15 Nov 2022 00:00:00 GMT - Thu, 14 Dec 2023 23:59:59 GMT
File type PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash 40b79948eb307b2b8139c1911719d296
574ea3088b9d2887658b49fd774a60a01da89b86
da4e50e81bda0ed4aa8e58235df95b1a269778c2419a8948d15baa42edf59bb1
GET /fr/concours/img/avatars/avatar_4163_75x75.jpg?v=1 HTTP/1.1
Host: www.pronosoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 07 Aug 2023 17:25:37 GMT
Last-Modified: Fri, 02 May 2014 13:40:08 GMT
ETag: "f5c-4f86aeb7e7e00"
Content-Length: 3932
Content-Type: image/jpeg
Age: 7745581
Accept-Ranges: bytes
Set-Cookie: SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
Cache-Control: max-age=15552000, public, private
static.geny.com/web/images/pictos/paris/quinte_02.gif
903 B URL GET static.geny.com/web/images/pictos/paris/quinte_02.gif
IP
ASN #20940 Akamai International B.V.
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectmedia.geny.com
Fingerprint49:DD:C4:AB:BC:69:E1:76:F3:8B:46:7A:AD:6A:CA:01:B7:A1:52:3F
ValidityWed, 01 Nov 2023 15:15:45 GMT - Tue, 30 Jan 2024 15:15:44 GMT
File type GIF image data, version 89a, 81 x 31\012- data
Hash 7fe20a5722bc94b489e6a6ccc181cbbd
f93887c42238d0439fb40fed5fa036092ba6d447
9034273ea18ed9b1198d9a67418db0c36127219e42d016f4ac7bb9022b9b6653
GET /web/images/pictos/paris/quinte_02.gif HTTP/1.1
Host: static.geny.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
X-GUploader-UploadID: ABPtcPp-0X3pNhmkDEq4roL5oosbd-wJPpHHJrI4zuLoSYMfcN8o1WMLXxI63SxgyLBmvc4GipHud_avM0_GlTP5fxF3_ZG-Nv1l
x-goog-generation: 1698999057864748
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 903
Content-Encoding: gzip
x-goog-hash: crc32c=qRPqXA==, md5=FeDOehtbn3frwXzw8Xo89Q==
x-goog-storage-class: STANDARD
Accept-Ranges: bytes
Content-Length: 903
Server: UploadServer
Last-Modified: Fri, 03 Nov 2023 08:10:57 GMT
ETag: "15e0ce7a1b5b9f77ebc17cf0f17a3cf5"
Content-Type: image/gif
Vary: Origin, Accept-Encoding
Cache-Control: public, no-transform, max-age=864000
Expires: Wed, 15 Nov 2023 08:58:39 GMT
Date: Sun, 05 Nov 2023 08:58:39 GMT
Connection: keep-alive
www.google.com/js/bg/zvtDWUGYKMqjl3EmEyJPT9PZ9nqaRLgbjIcpa6W6ga4.js
200 OK 15 kB URL GET HTTP/2 www.google.com/js/bg/zvtDWUGYKMqjl3EmEyJPT9PZ9nqaRLgbjIcpa6W6ga4.js
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintF5:CC:DA:B5:BA:1E:14:14:44:CC:27:90:92:CC:60:1F:5F:08:AF:77
ValidityMon, 16 Oct 2023 08:10:46 GMT - Mon, 08 Jan 2024 08:10:45 GMT
File type ASCII text, with very long lines (37530)
Hash 22f4b320fca704516ce0d6618a5b30ab
5d323e417218782a825babf322906f8df9e950fc
cefb4359419828caa397712613224f4fd3d9f67a9a44b81b8c87296ba5ba81ae
GET /js/bg/zvtDWUGYKMqjl3EmEyJPT9PZ9nqaRLgbjIcpa6W6ga4.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14821
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Nov 2023 12:00:55 GMT
expires: Sat, 02 Nov 2024 12:00:55 GMT
cache-control: public, max-age=31536000
age: 161864
last-modified: Tue, 10 Oct 2023 07:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1vSFwYjXL_2oU-FA6LHCallT1vrM31CPqh99I0xkWNzchMyr4PV65MYJ1ZZae1JrnGpNoS4l4rHYUXErpgd0DJjmHBeGte3YhCteu5FA3ML2E10fw=s0-d
200 OK 3.8 kB URL GET HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ALY8t1vSFwYjXL_2oU-FA6LHCallT1vrM31CPqh99I0xkWNzchMyr4PV65MYJ1ZZae1JrnGpNoS4l4rHYUXErpgd0DJjmHBeGte3YhCteu5FA3ML2E10fw=s0-d
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintCB:BB:D8:FC:60:AA:94:8F:47:5C:88:BB:C3:30:22:92:26:D3:85:2F
ValidityMon, 16 Oct 2023 08:09:46 GMT - Mon, 08 Jan 2024 08:09:45 GMT
File type GIF image data, version 89a, 88 x 31\012- data
Hash 01eb0ae7dc6b3c0c6cc514713230226b
ea0a31c3459202a429476ea39766b244cd7e4c77
15b6194fbabe4b75e4306d0575245fe26a71ed159267f04b2589fbe7e008fd2f
GET /blogger_img_proxy/ALY8t1vSFwYjXL_2oU-FA6LHCallT1vrM31CPqh99I0xkWNzchMyr4PV65MYJ1ZZae1JrnGpNoS4l4rHYUXErpgd0DJjmHBeGte3YhCteu5FA3ML2E10fw=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Mon, 06 Nov 2023 08:58:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.gif"
x-content-type-options: nosniff
date: Sun, 05 Nov 2023 08:58:39 GMT
server: fife
content-length: 3751
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-akfSWAW9oZc/YP7M95gni_I/AAAAAAAAACU/LamBBmw5NlYVk4a09weSpYJhiU_nqraYQCLcBGAsYHQ/Jose-Coves.jpg
200 OK 20 kB URL GET HTTP/2 1.bp.blogspot.com/-akfSWAW9oZc/YP7M95gni_I/AAAAAAAAACU/LamBBmw5NlYVk4a09weSpYJhiU_nqraYQCLcBGAsYHQ/Jose-Coves.jpg
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint1F:9F:66:61:40:8F:19:DE:30:44:23:EA:EB:6E:C0:FC:6D:58:69:25
ValidityMon, 16 Oct 2023 08:08:16 GMT - Mon, 08 Jan 2024 08:08:15 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 160x107, components 3\012- data
Hash cec19212510921ac92f7b35cec5039ee
02f8def7439df9235dd565cf72c45469ac72eda0
71094167be4e1505d8e2246d8aa54f2a0da7e88588eda10a87512022f10d98e2
GET /-akfSWAW9oZc/YP7M95gni_I/AAAAAAAAACU/LamBBmw5NlYVk4a09weSpYJhiU_nqraYQCLcBGAsYHQ/Jose-Coves.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v26"
expires: Mon, 06 Nov 2023 08:58:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Jose-Coves.jpg"
x-content-type-options: nosniff
date: Sun, 05 Nov 2023 08:58:39 GMT
server: fife
content-length: 20049
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh4.googleusercontent.com/proxy/ZoX4y2_FP7rZCSvWTVEy8vDdsCXFTW_5z5keX8LKf4-YwRLsp6eOgZ64AVUVItxobBuOZ4-O1uxdsO_YHbJIfnWnZkAd7ybj-wNJvdqbMtk5fHlp8w=s0-d
200 OK 351 B URL GET HTTP/2 lh4.googleusercontent.com/proxy/ZoX4y2_FP7rZCSvWTVEy8vDdsCXFTW_5z5keX8LKf4-YwRLsp6eOgZ64AVUVItxobBuOZ4-O1uxdsO_YHbJIfnWnZkAd7ybj-wNJvdqbMtk5fHlp8w=s0-d
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintCB:BB:D8:FC:60:AA:94:8F:47:5C:88:BB:C3:30:22:92:26:D3:85:2F
ValidityMon, 16 Oct 2023 08:09:46 GMT - Mon, 08 Jan 2024 08:09:45 GMT
File type GIF image data, version 89a, 63 x 16\012- data
Hash a1be0fb5442890877f58f7dd15c3d89c
65949ba8bd537ed6fc3cb1f8cc586951da0be441
ad5b70bd7caf1c615ebdaa2b75e4d8ec0d2e93eaa2295dfe14156817276668d6
GET /proxy/ZoX4y2_FP7rZCSvWTVEy8vDdsCXFTW_5z5keX8LKf4-YwRLsp6eOgZ64AVUVItxobBuOZ4-O1uxdsO_YHbJIfnWnZkAd7ybj-wNJvdqbMtk5fHlp8w=s0-d HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Mon, 06 Nov 2023 08:58:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.gif"
x-content-type-options: nosniff
date: Sun, 05 Nov 2023 08:58:39 GMT
server: fife
content-length: 351
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh4.googleusercontent.com/proxy/aWFS2XEyitkRnB-2kIFNT3EcUQVCmi44iqFrJmHdfcI5gBtX3pY1GoROuDry1zoWYriU5-3KfbHRHcThGMAuS9pg-W-iUcFDf2s-9X3f8joedAgifQ=s0-d
200 OK 347 B URL GET HTTP/2 lh4.googleusercontent.com/proxy/aWFS2XEyitkRnB-2kIFNT3EcUQVCmi44iqFrJmHdfcI5gBtX3pY1GoROuDry1zoWYriU5-3KfbHRHcThGMAuS9pg-W-iUcFDf2s-9X3f8joedAgifQ=s0-d
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintCB:BB:D8:FC:60:AA:94:8F:47:5C:88:BB:C3:30:22:92:26:D3:85:2F
ValidityMon, 16 Oct 2023 08:09:46 GMT - Mon, 08 Jan 2024 08:09:45 GMT
File type GIF image data, version 89a, 63 x 16\012- data
Hash b36f8c9c472b2fce5036cf82ce628483
297ed8bbbc4efab852a184a791ca61af7598f7c5
774b6f02b29c55d176be072331661a20595bb3b74ecd133dead2f966bbe0875d
GET /proxy/aWFS2XEyitkRnB-2kIFNT3EcUQVCmi44iqFrJmHdfcI5gBtX3pY1GoROuDry1zoWYriU5-3KfbHRHcThGMAuS9pg-W-iUcFDf2s-9X3f8joedAgifQ=s0-d HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Mon, 06 Nov 2023 08:58:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.gif"
x-content-type-options: nosniff
date: Sun, 05 Nov 2023 08:58:39 GMT
server: fife
content-length: 347
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-zggOXJRfCH0/YdRAVi7t-vI/AAAAAAAAAIA/pAFlz81yxgIgpzCs2SAnSP8NFbdbW727ACNcBGAsYHQ/s1200/pronoefficace.png
200 OK 468 kB URL GET HTTP/2 1.bp.blogspot.com/-zggOXJRfCH0/YdRAVi7t-vI/AAAAAAAAAIA/pAFlz81yxgIgpzCs2SAnSP8NFbdbW727ACNcBGAsYHQ/s1200/pronoefficace.png
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint1F:9F:66:61:40:8F:19:DE:30:44:23:EA:EB:6E:C0:FC:6D:58:69:25
ValidityMon, 16 Oct 2023 08:08:16 GMT - Mon, 08 Jan 2024 08:08:15 GMT
File type PNG image data, 1200 x 300, 8-bit/color RGB, non-interlaced\012- data
Size 468 kB (468123 bytes)
Hash 0e0734dee67db7a4ccb51ed9dfbe0358
79ea292b7cde7f89d935b8d465faf8bd91e4272e
b7c4ad4def811d60eceadd51bf10fb515513afdae8a28a8ff14fadc699e0e408
GET /-zggOXJRfCH0/YdRAVi7t-vI/AAAAAAAAAIA/pAFlz81yxgIgpzCs2SAnSP8NFbdbW727ACNcBGAsYHQ/s1200/pronoefficace.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v81"
expires: Mon, 06 Nov 2023 08:58:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="pronoefficace.png"
x-content-type-options: nosniff
date: Sun, 05 Nov 2023 08:58:39 GMT
server: fife
content-length: 468123
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
2.bp.blogspot.com/-SDrDmleN6t8/XJTv_LxfldI/AAAAAAAACQw/k1MIQ4Ww8uIbLL0cdQPn2Bt6nyo6bttqgCLcBGAs/w400-h36/PromotionsEncart.jpg
200 OK 10 kB URL GET HTTP/2 2.bp.blogspot.com/-SDrDmleN6t8/XJTv_LxfldI/AAAAAAAACQw/k1MIQ4Ww8uIbLL0cdQPn2Bt6nyo6bttqgCLcBGAs/w400-h36/PromotionsEncart.jpg
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint1F:9F:66:61:40:8F:19:DE:30:44:23:EA:EB:6E:C0:FC:6D:58:69:25
ValidityMon, 16 Oct 2023 08:08:16 GMT - Mon, 08 Jan 2024 08:08:15 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 392x36, components 3\012- data
Hash 981d11f1fdb482c4abe128c94e4f78c9
92ea653127b3719e914e6253e3d6153d2b250507
9823686e020cf13a8d7ff65982a0994655560136ca1d0d9e6bab204c9c24fe5f
GET /-SDrDmleN6t8/XJTv_LxfldI/AAAAAAAACQw/k1MIQ4Ww8uIbLL0cdQPn2Bt6nyo6bttqgCLcBGAs/w400-h36/PromotionsEncart.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v90d"
expires: Mon, 06 Nov 2023 08:58:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="PromotionsEncart.jpg"
x-content-type-options: nosniff
date: Sun, 05 Nov 2023 08:58:39 GMT
server: fife
content-length: 10190
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi7OCz_2JrS9IiEkv3_gnEY3wWHzH64JDDzpqwi1trO-wij5S1tUc2KEBbEV15MakMpTlcexhLv5k8DhOc7wk_Pon92-ECkSj3DMjio-iLzk0fcXQxajKImreMfGGoq5lxDQjqPkK6_1vS_B88Q9CfhyMu0KpcBeLf6lvoZ7iTMBAAvKj_jyuwzvFpH/w45-h45/mobie-telegram.gif
200 OK 2.7 kB URL GET HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi7OCz_2JrS9IiEkv3_gnEY3wWHzH64JDDzpqwi1trO-wij5S1tUc2KEBbEV15MakMpTlcexhLv5k8DhOc7wk_Pon92-ECkSj3DMjio-iLzk0fcXQxajKImreMfGGoq5lxDQjqPkK6_1vS_B88Q9CfhyMu0KpcBeLf6lvoZ7iTMBAAvKj_jyuwzvFpH/w45-h45/mobie-telegram.gif
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintCB:BB:D8:FC:60:AA:94:8F:47:5C:88:BB:C3:30:22:92:26:D3:85:2F
ValidityMon, 16 Oct 2023 08:09:46 GMT - Mon, 08 Jan 2024 08:09:45 GMT
File type GIF image data, version 89a, 45 x 45\012- data
Hash 03d882804106a838890c23fbebfc0da3
3ec0568110b004a955fe7b908cd29b6ec1f8833d
1e3a67654f25382beab2471e477d73435a272065ca611ae024140a4fae0393ba
GET /img/b/R29vZ2xl/AVvXsEi7OCz_2JrS9IiEkv3_gnEY3wWHzH64JDDzpqwi1trO-wij5S1tUc2KEBbEV15MakMpTlcexhLv5k8DhOc7wk_Pon92-ECkSj3DMjio-iLzk0fcXQxajKImreMfGGoq5lxDQjqPkK6_1vS_B88Q9CfhyMu0KpcBeLf6lvoZ7iTMBAAvKj_jyuwzvFpH/w45-h45/mobie-telegram.gif HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-expose-headers: Content-Length
etag: "v129"
expires: Mon, 06 Nov 2023 08:58:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="mobie-telegram.gif"
x-content-type-options: nosniff
date: Sun, 05 Nov 2023 08:58:39 GMT
server: fife
content-length: 2698
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEj31jb31oIN-ck1HHTPuasjDKhVHsroHJGU_PlCf5wY_2YkMNYSdP79umV3FoqoTCoBU7bPqgnVHDVLCKNyPJAzy8-B-BVqN9IgepXDv_YMI_-EXzcTZRSkrPeeznlJN0dIy2mzIFeIgQi0BKEgSGmnpWH574GaFomgKa7TxqL3pFE5aU6M4GT18yBcwXY=w31-h29
200 OK 1.5 kB URL GET HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEj31jb31oIN-ck1HHTPuasjDKhVHsroHJGU_PlCf5wY_2YkMNYSdP79umV3FoqoTCoBU7bPqgnVHDVLCKNyPJAzy8-B-BVqN9IgepXDv_YMI_-EXzcTZRSkrPeeznlJN0dIy2mzIFeIgQi0BKEgSGmnpWH574GaFomgKa7TxqL3pFE5aU6M4GT18yBcwXY=w31-h29
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintCB:BB:D8:FC:60:AA:94:8F:47:5C:88:BB:C3:30:22:92:26:D3:85:2F
ValidityMon, 16 Oct 2023 08:09:46 GMT - Mon, 08 Jan 2024 08:09:45 GMT
File type PNG image data, 23 x 22, 8-bit/color RGBA, non-interlaced\012- data
Hash f8c851fe7b52b6191779188cd8777368
1475186c6bf3d4100bb8637768e5b2ece40cfc96
bc23967edefdd9710c21ab3e13ffedc41e88f84fe5d75f28f34bc4e1e8b3fd5f
GET /img/a/AVvXsEj31jb31oIN-ck1HHTPuasjDKhVHsroHJGU_PlCf5wY_2YkMNYSdP79umV3FoqoTCoBU7bPqgnVHDVLCKNyPJAzy8-B-BVqN9IgepXDv_YMI_-EXzcTZRSkrPeeznlJN0dIy2mzIFeIgQi0BKEgSGmnpWH574GaFomgKa7TxqL3pFE5aU6M4GT18yBcwXY=w31-h29 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v172"
expires: Mon, 06 Nov 2023 08:58:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="image.png"
x-content-type-options: nosniff
date: Sun, 05 Nov 2023 08:58:39 GMT
server: fife
content-length: 1506
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgNjw_8qMwm-VhKwnOhmdx3-3e676kxCcPstnBjhx_J8tNqwbFnyQRx2e6039HIyy01ZKTHRSuBk0jJkPyt6sj0oxaP8MAiEULn8cvpfx08G0KZAfU4Ragda2ipnh2YRtb7lYCNtptxhQz3NbrOfzPoREbRpTUvk2rExp5f5B9bmDp-ObEx2-c7lXnWg/w304-h260/51ccnx6HD-L__SX260_.jpg
200 OK 29 kB URL GET HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgNjw_8qMwm-VhKwnOhmdx3-3e676kxCcPstnBjhx_J8tNqwbFnyQRx2e6039HIyy01ZKTHRSuBk0jJkPyt6sj0oxaP8MAiEULn8cvpfx08G0KZAfU4Ragda2ipnh2YRtb7lYCNtptxhQz3NbrOfzPoREbRpTUvk2rExp5f5B9bmDp-ObEx2-c7lXnWg/w304-h260/51ccnx6HD-L__SX260_.jpg
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintCB:BB:D8:FC:60:AA:94:8F:47:5C:88:BB:C3:30:22:92:26:D3:85:2F
ValidityMon, 16 Oct 2023 08:09:46 GMT - Mon, 08 Jan 2024 08:09:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 231x260, components 3\012- data
Hash 9ee83b17460988a1e8b44254f8cdda9c
80b8f285ff4d23d2702683986ce5a04800c388c8
84516f539a6a07dea771745202f14e63ae0c79de6794a1adff793e19c3ed16a8
GET /img/b/R29vZ2xl/AVvXsEjgNjw_8qMwm-VhKwnOhmdx3-3e676kxCcPstnBjhx_J8tNqwbFnyQRx2e6039HIyy01ZKTHRSuBk0jJkPyt6sj0oxaP8MAiEULn8cvpfx08G0KZAfU4Ragda2ipnh2YRtb7lYCNtptxhQz3NbrOfzPoREbRpTUvk2rExp5f5B9bmDp-ObEx2-c7lXnWg/w304-h260/51ccnx6HD-L__SX260_.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "va2"
expires: Mon, 06 Nov 2023 08:58:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="51ccnx6HD-L__SX260_.jpg"
x-content-type-options: nosniff
date: Sun, 05 Nov 2023 08:58:39 GMT
server: fife
content-length: 29424
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEiMJWill3FhnXwXkjXlsgd6XEr6QqkkYKUeTK6OyPY_rmkm9aO2dGNMV7bxb4HxtW8t3U9w5X7gUxsv-_FH7AQJWzlJbVYQBxp7dbMHPyJm0QrxU6y7bBe8fGdnhH3ySTzWPJGUgXT3NnZ92_FhD-rAWUCB3e201XwwlViI5as6Eyof4RIOaLpiDu08=w400-h88
200 OK 16 kB URL GET HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEiMJWill3FhnXwXkjXlsgd6XEr6QqkkYKUeTK6OyPY_rmkm9aO2dGNMV7bxb4HxtW8t3U9w5X7gUxsv-_FH7AQJWzlJbVYQBxp7dbMHPyJm0QrxU6y7bBe8fGdnhH3ySTzWPJGUgXT3NnZ92_FhD-rAWUCB3e201XwwlViI5as6Eyof4RIOaLpiDu08=w400-h88
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintCB:BB:D8:FC:60:AA:94:8F:47:5C:88:BB:C3:30:22:92:26:D3:85:2F
ValidityMon, 16 Oct 2023 08:09:46 GMT - Mon, 08 Jan 2024 08:09:45 GMT
File type GIF image data, version 89a, 400 x 87\012- data
Hash 9c143876d9f3a980a7bca84cf0cac252
cda8977242d1027a98a49be5354cd934d9936f73
a3c12ab186bc1e481b4a0079f9d5b7ccfa3a757da11e6dac8299af1901447e3f
GET /img/a/AVvXsEiMJWill3FhnXwXkjXlsgd6XEr6QqkkYKUeTK6OyPY_rmkm9aO2dGNMV7bxb4HxtW8t3U9w5X7gUxsv-_FH7AQJWzlJbVYQBxp7dbMHPyJm0QrxU6y7bBe8fGdnhH3ySTzWPJGUgXT3NnZ92_FhD-rAWUCB3e201XwwlViI5as6Eyof4RIOaLpiDu08=w400-h88 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-expose-headers: Content-Length
etag: "v8f"
expires: Mon, 06 Nov 2023 08:58:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="abonnement.gif"
x-content-type-options: nosniff
date: Sun, 05 Nov 2023 08:58:39 GMT
server: fife
content-length: 15847
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEj8lbNXEpg4FOaPSpN_y5nG9bSdgkv7T6_Di7JObPoO0aucaZJof4NH-WBYCGW4pXdz4Qccm2lLZDOrUOXCE9iU9B5SrIeFbFA-jwbBA4aG477naqiLSq3rHyQCOpoivc9AyPVSGD2MqkCCuxQP5FUmwjaCvduhabQhl8OPDfU0XiMu21S7UPkqgjpG
200 OK 70 kB URL GET HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEj8lbNXEpg4FOaPSpN_y5nG9bSdgkv7T6_Di7JObPoO0aucaZJof4NH-WBYCGW4pXdz4Qccm2lLZDOrUOXCE9iU9B5SrIeFbFA-jwbBA4aG477naqiLSq3rHyQCOpoivc9AyPVSGD2MqkCCuxQP5FUmwjaCvduhabQhl8OPDfU0XiMu21S7UPkqgjpG
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintCB:BB:D8:FC:60:AA:94:8F:47:5C:88:BB:C3:30:22:92:26:D3:85:2F
ValidityMon, 16 Oct 2023 08:09:46 GMT - Mon, 08 Jan 2024 08:09:45 GMT
File type GIF image data, version 89a, 309 x 31\012- data
Hash 2bdfb34f439f9fa0dd58a728ac6b3e78
0ec366ac502ab13641350f1926bc69de6d161228
2fe8daec3da80212195365f8ae3a0549da1518055f62b58e4efe893879749077
GET /img/a/AVvXsEj8lbNXEpg4FOaPSpN_y5nG9bSdgkv7T6_Di7JObPoO0aucaZJof4NH-WBYCGW4pXdz4Qccm2lLZDOrUOXCE9iU9B5SrIeFbFA-jwbBA4aG477naqiLSq3rHyQCOpoivc9AyPVSGD2MqkCCuxQP5FUmwjaCvduhabQhl8OPDfU0XiMu21S7UPkqgjpG HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-expose-headers: Content-Length
etag: "v87"
expires: Mon, 06 Nov 2023 08:58:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="anigifPRONO1.gif"
x-content-type-options: nosniff
date: Sun, 05 Nov 2023 08:58:39 GMT
server: fife
content-length: 70107
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1udmYZKlagV0f1KAIcbWYInNZ-Sz4VujhX8Sr33Nt1WRXtNeVp3iTFNE3GkMonOx4lFrrhwn9zFeXJjbHhovW5-pvkvez6YkS_H5cTK92ABTc06WSCH8FsvxWG3=s0-d
200 OK 16 kB URL GET HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ALY8t1udmYZKlagV0f1KAIcbWYInNZ-Sz4VujhX8Sr33Nt1WRXtNeVp3iTFNE3GkMonOx4lFrrhwn9zFeXJjbHhovW5-pvkvez6YkS_H5cTK92ABTc06WSCH8FsvxWG3=s0-d
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintCB:BB:D8:FC:60:AA:94:8F:47:5C:88:BB:C3:30:22:92:26:D3:85:2F
ValidityMon, 16 Oct 2023 08:09:46 GMT - Mon, 08 Jan 2024 08:09:45 GMT
File type PNG image data, 150 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 7a2d4c718e80b31faac1de76f6a282f1
8ec45336319a649034bbeb50bbf1e42598253920
c289f3e775da2db658326a094b4e7ae67f9ab5aefda8ffb25cc0b55e05bf58ae
GET /blogger_img_proxy/ALY8t1udmYZKlagV0f1KAIcbWYInNZ-Sz4VujhX8Sr33Nt1WRXtNeVp3iTFNE3GkMonOx4lFrrhwn9zFeXJjbHhovW5-pvkvez6YkS_H5cTK92ABTc06WSCH8FsvxWG3=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Mon, 06 Nov 2023 08:58:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.png"
x-content-type-options: nosniff
date: Sun, 05 Nov 2023 08:58:39 GMT
server: fife
content-length: 16410
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/managed/js/adsense/m202310310101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-3346338582069794&plah=lepresidentvip.blogspot.com
200 OK 138 kB URL GET HTTP/3 pagead2.googlesyndication.com/pagead/managed/js/adsense/m202310310101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-3346338582069794&plah=lepresidentvip.blogspot.com
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint30:DF:10:0D:E2:AE:CA:7A:5E:20:03:00:80:D2:EB:DD:4D:3A:F3:10
ValidityMon, 16 Oct 2023 08:02:29 GMT - Mon, 08 Jan 2024 08:02:28 GMT
File type ASCII text, with very long lines (2107)
Size 138 kB (138245 bytes)
Hash 597e7091fecc2661662a74f25ff9933a
c9120bbbdfc1fbc52ab87a3c269fe8e0e98c02a9
f4cc9ebecaf4f8932a782c932acf3225ab393dbd1ebedf5414835a70f7e22091
GET /pagead/managed/js/adsense/m202310310101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-3346338582069794&plah=lepresidentvip.blogspot.com HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sun, 05 Nov 2023 08:58:39 GMT
expires: Sun, 05 Nov 2023 08:58:39 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 10562804338064252353
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 138245
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pagead2.googlesyndication.com/pagead/ping?e=1
204 No Content 0 B URL POST HTTP/3 pagead2.googlesyndication.com/pagead/ping?e=1
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint30:DF:10:0D:E2:AE:CA:7A:5E:20:03:00:80:D2:EB:DD:4D:3A:F3:10
ValidityMon, 16 Oct 2023 08:02:29 GMT - Mon, 08 Jan 2024 08:02:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pagead/ping?e=1 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lepresidentvip.blogspot.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 286
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 05 Nov 2023 08:58:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 42 B URL GET HTTP/3 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint30:DF:10:0D:E2:AE:CA:7A:5E:20:03:00:80:D2:EB:DD:4D:3A:F3:10
ValidityMon, 16 Oct 2023 08:02:29 GMT - Mon, 08 Jan 2024 08:02:28 GMT
Hash 7f5f2be159837d73b72a4b37616bce44
c93d7f25b530b05c26440d3352213b683d03dcc3
ccecd185ac16ba0a538840f37701053fbb861f7fbbdd86039c7415fcd924d1f2
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 42
x-xss-protection: 0
date: Sat, 04 Nov 2023 13:17:27 GMT
expires: Sat, 18 Nov 2023 13:17:27 GMT
cache-control: public, max-age=1209600
age: 70873
etag: 13036835877489095579
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.AOzoyjtjrhQ.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9-fA1P7IZFa1fdRj158NoDqrnbYA/cb=gapi.loaded_0?le=scs
200 OK 61 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.AOzoyjtjrhQ.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9-fA1P7IZFa1fdRj158NoDqrnbYA/cb=gapi.loaded_0?le=scs
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type ASCII text, with very long lines (1505)
Hash aabfaa5f68e2a4659085d2de4a2654fe
4c1ddfa756849b5b0bfd22b54732a8704f594a0d
521dfbc81b28e04e7f34c916122392ea7f3f6fe909d8103af14351a08af0742d
GET /_/scs/abc-static/_/js/k=gapi.lb.en.AOzoyjtjrhQ.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9-fA1P7IZFa1fdRj158NoDqrnbYA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Cookie: NID=511=gDDVfePte9CCfIfTjvwN-sUlTKOp0QHBn64QBn_6KtFEFrwPPbzMSNFmDQZC011XDEHevacKvmgmq__WCw90wZV8da3HFFaTf9ReZi_YT-JJ-EzfJoKx6djv1v2zj5xKLZeFxSljirw6Z1oLXKWqCqoYpeCriuuhX114hp7lK4I
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 60653
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Nov 2023 18:42:50 GMT
expires: Thu, 31 Oct 2024 18:42:50 GMT
cache-control: public, max-age=31536000
age: 310550
last-modified: Tue, 03 Oct 2023 15:22:58 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/img/share_buttons_20_3.png
200 OK 5.1 kB URL GET HTTP/3 www.blogger.com/img/share_buttons_20_3.png
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash ad9999106d5f550920b586e8e1704e5a
93fd02c51166402a41f96509cd0ca3fb917877dd
3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
GET /img/share_buttons_20_3.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 5080
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Nov 2023 05:07:25 GMT
expires: Fri, 10 Nov 2023 05:07:25 GMT
cache-control: public, max-age=604800
last-modified: Thu, 02 Nov 2023 17:01:37 GMT
content-type: image/png
age: 186675
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
resources.blogblog.com/blogblog/data/1kt/simple/paging_dot.png
200 OK 99 B URL GET HTTP/3 resources.blogblog.com/blogblog/data/1kt/simple/paging_dot.png
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type PNG image data, 20 x 18, 8-bit gray+alpha, non-interlaced\012- data
Hash fcb8627989fa00c5341d05abce52eea9
215f7e27bcb50152a6d87444d3038746c87f1d18
1e3869a752d8d7cfad487a6f4e2def12daa851373a9cce97dcc4a96523501dba
GET /blogblog/data/1kt/simple/paging_dot.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 99
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Nov 2023 18:54:41 GMT
expires: Fri, 10 Nov 2023 18:54:41 GMT
cache-control: public, max-age=604800
last-modified: Fri, 03 Nov 2023 00:55:55 GMT
content-type: image/png
age: 137039
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/dyn-css/authorization.css?targetBlogID=3338940816273817868&zx=5ddc2cf3-5600-4c05-8a83-a6bffdd6df75
200 OK 21 B URL GET HTTP/3 www.blogger.com/dyn-css/authorization.css?targetBlogID=3338940816273817868&zx=5ddc2cf3-5600-4c05-8a83-a6bffdd6df75
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=3338940816273817868&zx=5ddc2cf3-5600-4c05-8a83-a6bffdd6df75 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 05 Nov 2023 08:58:40 GMT
last-modified: Sun, 05 Nov 2023 08:58:40 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=CAM/d=0/rs=AN8SPfraOsu5efVNBOQ1KgAVxhCYpwxnBg/m=el_main_css
200 OK 4.0 kB URL GET HTTP/2 www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=CAM/d=0/rs=AN8SPfraOsu5efVNBOQ1KgAVxhCYpwxnBg/m=el_main_css
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type ASCII text, with very long lines (20367), with no line terminators
Hash 72d3a735ccca1027f6b3afba2c93e3a7
67f8eff8d17334c59c28fc1753bf451527c7490d
c8c845f55e2346b89894ce0df8185ee182359e096bf29987d5cf1f8a7391bef1
GET /_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=CAM/d=0/rs=AN8SPfraOsu5efVNBOQ1KgAVxhCYpwxnBg/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3960
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 Nov 2023 18:31:57 GMT
expires: Sun, 03 Nov 2024 18:31:57 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 15 Jul 2023 01:09:03 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
age: 52003
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.Yyq1JPzpKfs.O/d=1/exm=el_conf/ed=1/rs=AN8SPfrNQen7mf4Gy_bxWSwlHYGw0PQxaQ/m=el_main
200 OK 83 kB URL GET HTTP/2 translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.Yyq1JPzpKfs.O/d=1/exm=el_conf/ed=1/rs=AN8SPfrNQen7mf4Gy_bxWSwlHYGw0PQxaQ/m=el_main
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintFA:D7:68:E4:12:7D:FE:22:87:DE:95:F1:1E:49:5A:49:FA:12:1E:B9
ValidityMon, 16 Oct 2023 08:10:01 GMT - Mon, 08 Jan 2024 08:10:00 GMT
File type ASCII text, with very long lines (1671)
Hash 870f0d15d57c872a4848673ddbf98e92
f14d34db07129ed881669efd3dae8876fb61bbfa
9fe265b0ef6485211d9eb339dc0efc2b5c31bce4a169f791bd21ca793a576e11
GET /_/translate_http/_/js/k=translate_http.tr.no.Yyq1JPzpKfs.O/d=1/exm=el_conf/ed=1/rs=AN8SPfrNQen7mf4Gy_bxWSwlHYGw0PQxaQ/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 82574
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 Nov 2023 18:24:59 GMT
expires: Sun, 03 Nov 2024 18:24:59 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 Nov 2023 07:11:13 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 52421
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.zone-turf.fr/media/picture/casaque/sa-aga-khan-207396.gif
200 OK 2.2 kB URL GET HTTP/3 www.zone-turf.fr/media/picture/casaque/sa-aga-khan-207396.gif
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerAmazon
Subjectwww.zone-turf.fr
Fingerprint24:FA:41:E7:B6:A7:61:34:22:45:7A:B7:DB:B8:9F:35:16:00:45:AD
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type GIF image data, version 89a, 55 x 65\012- data
Hash b7a169129e3f690b26fc21fa04ab3eb5
01d547dcd333a0052e8135dcb9e2eb2dd988f7fa
2e570551085f8dc3693484dbe8e08352ab781d2dccc208673b94d0d8c51f8471
GET /media/picture/casaque/sa-aga-khan-207396.gif HTTP/1.1
Host: www.zone-turf.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
content-length: 2236
age: 77867
server: Apache
last-modified: Fri, 03 Nov 2023 23:01:09 GMT
accept-ranges: bytes
x-varnish: 2910107112 2908206054
via: 1.1 varnish, 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-cache-hist: 20
date: Sun, 05 Nov 2023 08:07:34 GMT
cache-control: max-age=259200
expires: Tue, 07 Nov 2023 11:20:53 GMT
etag: "9dbd22fe-8bc-609477ae6e013"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: StB0IaYtjNIJiKGJ0YcD5GCPKGdVy7QRyraHW_WEOzk2aoxqpny4Kw==
www.zone-turf.fr/media/picture/casaque/a-salikbayev-195244.gif
200 OK 2.3 kB URL GET HTTP/3 www.zone-turf.fr/media/picture/casaque/a-salikbayev-195244.gif
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerAmazon
Subjectwww.zone-turf.fr
Fingerprint24:FA:41:E7:B6:A7:61:34:22:45:7A:B7:DB:B8:9F:35:16:00:45:AD
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type GIF image data, version 89a, 55 x 65\012- data
Hash dbed5a63dc7fa5fdfac08d611e197d94
ef128afdd4207a4b4869cfd4731e5af11cc8a55d
93f2aa761efb7534ecee62e62d0492e8b604cbe5750f68cdb70844e3ea2dadd2
GET /media/picture/casaque/a-salikbayev-195244.gif HTTP/1.1
Host: www.zone-turf.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
content-length: 2345
age: 235479
server: Apache
last-modified: Wed, 18 Oct 2023 21:46:43 GMT
accept-ranges: bytes
x-varnish: 3686165278 3670874402
via: 1.1 varnish, 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-backend: default
date: Sun, 05 Nov 2023 08:07:34 GMT
cache-control: max-age=259200
expires: Sun, 05 Nov 2023 15:34:02 GMT
etag: "9d304550-929-608049337b293"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: b3hrUJb-YZ-6FEEfKH9SxX5EuO4szywJAzWOFwLnMMcZjoWZSvZeuQ==
www.zone-turf.fr/media/picture/casaque/sb-nanstein-87743.gif
200 OK 2.0 kB URL GET HTTP/3 www.zone-turf.fr/media/picture/casaque/sb-nanstein-87743.gif
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerAmazon
Subjectwww.zone-turf.fr
Fingerprint24:FA:41:E7:B6:A7:61:34:22:45:7A:B7:DB:B8:9F:35:16:00:45:AD
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type GIF image data, version 87a, 55 x 65\012- data
Hash a1127f1bec7f2edb52d62bd4296dea32
6805fcdfc7bc12fcbc39703ca82a52bf1221bf38
166cb9b7f4cd55637aa668a8222772c5d341600ef259f105e83ceb3cb59757ab
GET /media/picture/casaque/sb-nanstein-87743.gif HTTP/1.1
Host: www.zone-turf.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
content-length: 2028
age: 238332
server: Apache
last-modified: Wed, 25 Oct 2023 21:46:44 GMT
accept-ranges: bytes
x-varnish: 3685302307 3671217701
via: 1.1 varnish, 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-backend: default
date: Sun, 05 Nov 2023 08:26:23 GMT
cache-control: max-age=259200
expires: Sun, 05 Nov 2023 14:46:29 GMT
etag: "9d37e026-7ec-60891642ffa24"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: UumCHaYU49JgFavEGm5YmWemj2tRudL2k1ctQz-2_RsEdzKoY0lY7A==
www.pronostic-facile.fr/widget/magiturf/script/quinte_runners
2.7 kB URL GET www.pronostic-facile.fr/widget/magiturf/script/quinte_runners
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectpronostic-facile.fr
Fingerprint3F:E6:2A:87:D9:4B:22:63:3C:71:22:04:D9:0A:50:88:AD:78:6B:76
ValidityThu, 05 Oct 2023 14:08:58 GMT - Wed, 03 Jan 2024 14:08:57 GMT
File type ASCII text, with no line terminators
Hash b9a6389ebe9592c544b43c373006512f
1a08799ca83404bc0785f5549a7b992feb267751
bdcd8f42fee1b1fd376aa93489374eddf37561e4f950f1493d5090d825a4c913
GET /widget/magiturf/script/quinte_runners HTTP/1.1
Host: www.pronostic-facile.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:38 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-runtime: 3
cache-control: private, max-age=0, must-revalidate
set-cookie: _pronostic_facile_session=BAh7BzoPc2Vzc2lvbl9pZCIlNmE3NWVjZGY3MjI2YTU5MDg1MzkyMTcxNWRhZTBlNjc6DHJlZmVyZXIiKWh0dHBzOi8vbGVwcmVzaWRlbnR2aXAuYmxvZ3Nwb3QuY29tLw%3D%3D--b55f649fec3a07d7f4f10212cbbc99a03c44f6ef; path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=neY1IEC5z19O9L6Ped2OQ1wepj7sjSYWpfvAuJsS%2B2rOH6Aa%2BWOvst74RsTr6Wsm2vokYh%2FBhrhcf11MTC9FRIDZsGavhom5CZNdVHzRhY4j6AWcyPlHmykiOtysGCqxrkfXI8x%2BEoG0qQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8213e5687e49b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.pronostic-facile.fr/widget/magiturf/script/quinte_result
2.5 kB URL GET www.pronostic-facile.fr/widget/magiturf/script/quinte_result
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectpronostic-facile.fr
Fingerprint3F:E6:2A:87:D9:4B:22:63:3C:71:22:04:D9:0A:50:88:AD:78:6B:76
ValidityThu, 05 Oct 2023 14:08:58 GMT - Wed, 03 Jan 2024 14:08:57 GMT
File type ASCII text, with no line terminators
Hash bbb92afcc90b96b6cfd2989323586903
903c3bbec556bee95ee354a6339cc935436f045b
88d111dab6004d69b346b5cab3bf5bc91d8ac6f02e54dae1e564fa04cde93d23
GET /widget/magiturf/script/quinte_result HTTP/1.1
Host: www.pronostic-facile.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:38 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-runtime: 3
cache-control: private, max-age=0, must-revalidate
set-cookie: _pronostic_facile_session=BAh7BzoPc2Vzc2lvbl9pZCIlMzM2NTI2OTAzMTMxZGFhMDVhMjQzODFjYjQxNTUzODQ6DHJlZmVyZXIiKWh0dHBzOi8vbGVwcmVzaWRlbnR2aXAuYmxvZ3Nwb3QuY29tLw%3D%3D--5485a809a933a2db649072965668c562d67b85c7; path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pndjSP%2FRell5qUIxUpjmCYQQ9N1WkXyetiJh%2FgxX9HJmqXmDgfByMWzn3u%2B1bj9SChTwvHzK94wmmDFXj8baPbHZt%2FS94UK%2Bi84%2FADjS5AvENyDhzzsy11B6QJJHN3PGp1u6xMEzYogp8g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8213e5686e43b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
partner.googleadservices.com/gampad/cookie.js?domain=lepresidentvip.blogspot.com&callback=_gfp_s_&client=ca-pub-3346338582069794
200 OK 253 B URL GET HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=lepresidentvip.blogspot.com&callback=_gfp_s_&client=ca-pub-3346338582069794
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleadservices.com
Fingerprint0C:B4:36:FB:21:D8:B0:4A:B4:9C:34:0A:D5:1D:69:DD:8B:24:91:83
ValidityMon, 16 Oct 2023 08:08:36 GMT - Mon, 08 Jan 2024 08:08:35 GMT
File type ASCII text, with very long lines (391), with no line terminators
Hash 7dc5245dd3f5648d2b9288fd2da31390
f1e695b3f97549fb010b06fed69e508f4f20ef28
d9561e1a4ac1408fd0670dc52b312c4a68eb21e48e8bcc3bd926873c7b7cf081
GET /gampad/cookie.js?domain=lepresidentvip.blogspot.com&callback=_gfp_s_&client=ca-pub-3346338582069794 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sun, 05 Nov 2023 08:58:41 GMT
server: cafe
cache-control: private
content-length: 253
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.zone-turf.fr/media/images/blank.gif
200 OK 43 B URL GET HTTP/3 www.zone-turf.fr/media/images/blank.gif
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerAmazon
Subjectwww.zone-turf.fr
Fingerprint24:FA:41:E7:B6:A7:61:34:22:45:7A:B7:DB:B8:9F:35:16:00:45:AD
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 5a9c04efd04174184c31bac097208e71
6cb95b784646f685c8ce127b7d6423696c6516da
1e5e009aca181390b5471d0ea0fb43ef52ab2a5cddc1f5eca3b0539fbeea5a74
GET /media/images/blank.gif HTTP/1.1
Host: www.zone-turf.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
content-length: 43
age: 200627
server: Apache
last-modified: Tue, 24 Oct 2023 14:15:14 GMT
accept-ranges: bytes
x-varnish: 3686445770 3673296498
via: 1.1 varnish, 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-backend: default
date: Sun, 05 Nov 2023 08:25:17 GMT
cache-control: max-age=259200
expires: Mon, 06 Nov 2023 01:14:54 GMT
etag: "4fc84b-2b-60876f7a1c080"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 1D-28kNjfbBjsQ62eiA3M7c_xxjyGisa3xs5Xrj34l1eZy4u8Zi82w==
www.zone-turf.fr/media/picture/casaque/b-giraudon-1552.gif
200 OK 2.5 kB URL GET HTTP/3 www.zone-turf.fr/media/picture/casaque/b-giraudon-1552.gif
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerAmazon
Subjectwww.zone-turf.fr
Fingerprint24:FA:41:E7:B6:A7:61:34:22:45:7A:B7:DB:B8:9F:35:16:00:45:AD
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type GIF image data, version 89a, 55 x 65\012- data
Hash e9662baf14f6bae352ed0091229c955d
526839c9fc07336e0c700f02d50cc4b47bc256e8
1ed9c66d3b3538f8549c306d23caf9e861b4629f0f606d40604978b195fd8125
GET /media/picture/casaque/b-giraudon-1552.gif HTTP/1.1
Host: www.zone-turf.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
content-length: 2528
age: 63424
server: Apache
last-modified: Fri, 03 Nov 2023 23:01:13 GMT
accept-ranges: bytes
x-varnish: 2911464612 2908048684
via: 1.1 varnish, 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-cache-hist: 59
date: Sun, 05 Nov 2023 08:58:41 GMT
cache-control: max-age=259200
expires: Tue, 07 Nov 2023 15:21:36 GMT
etag: "9d256b40-9e0-609477b1c479b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: _5UqjjIG2QGjSM9e0HtvxG_Ft0IKrcz4a1fpF3338RJpiAIXnFuOWQ==
www.zone-turf.fr/media/picture/casaque/rr-ltd-190278.gif
200 OK 2.8 kB URL GET HTTP/3 www.zone-turf.fr/media/picture/casaque/rr-ltd-190278.gif
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerAmazon
Subjectwww.zone-turf.fr
Fingerprint24:FA:41:E7:B6:A7:61:34:22:45:7A:B7:DB:B8:9F:35:16:00:45:AD
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type GIF image data, version 89a, 55 x 65\012- data
Hash da0ba8d532fa1f3f6d93230c8606e29e
621a912777079edf5bcab80372e7932730f7f770
532da6a2c362a70e86c5ed7b855f0bcdd59ff3f99941005637f997fa835f8fb8
GET /media/picture/casaque/rr-ltd-190278.gif HTTP/1.1
Host: www.zone-turf.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
content-length: 2767
age: 62664
server: Apache
last-modified: Fri, 03 Nov 2023 23:01:09 GMT
accept-ranges: bytes
x-varnish: 3686638291 3683475131
via: 1.1 varnish, 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-backend: default
date: Sun, 05 Nov 2023 08:25:17 GMT
cache-control: max-age=259200
expires: Tue, 07 Nov 2023 15:34:16 GMT
etag: "9d362f1a-acf-609477aea184d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: pW44iu5NY2DamtUsBB5qj9cbdhxGEJPIKkPngPLQp_1owgr6mC7hLg==
www.zone-turf.fr/media/picture/casaque/hl-perelle-5103.gif
200 OK 2.5 kB URL GET HTTP/3 www.zone-turf.fr/media/picture/casaque/hl-perelle-5103.gif
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerAmazon
Subjectwww.zone-turf.fr
Fingerprint24:FA:41:E7:B6:A7:61:34:22:45:7A:B7:DB:B8:9F:35:16:00:45:AD
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type GIF image data, version 89a, 55 x 65\012- data
Hash 619c1ba39aa6147a519fd1bf86c4579a
c147ea3d825ced3ffb6523f8d514a80907d39e5b
bdfd6db5bb7d5a966e1957016bb76b803507d0d83c5d00b3f8aedee600d3bffc
GET /media/picture/casaque/hl-perelle-5103.gif HTTP/1.1
Host: www.zone-turf.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
content-length: 2450
age: 115038
server: Apache
last-modified: Fri, 03 Nov 2023 23:01:09 GMT
accept-ranges: bytes
x-varnish: 3686396389 3679858528
via: 1.1 varnish, 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-backend: default
date: Sun, 05 Nov 2023 08:03:29 GMT
cache-control: max-age=259200
expires: Tue, 07 Nov 2023 01:01:22 GMT
etag: "9d2fc6d0-992-609477aeabc59"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: CHVrPXQzq9lUKT2gBpKmAFCCl0NfXVD1BoqjxkfxHLN4rxZAWFbe_Q==
www.zone-turf.fr/media/picture/casaque/d-alexandre-du-sud-521070.gif
200 OK 2.7 kB URL GET HTTP/3 www.zone-turf.fr/media/picture/casaque/d-alexandre-du-sud-521070.gif
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerAmazon
Subjectwww.zone-turf.fr
Fingerprint24:FA:41:E7:B6:A7:61:34:22:45:7A:B7:DB:B8:9F:35:16:00:45:AD
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type GIF image data, version 89a, 55 x 65\012- data
Hash 77bfb75494bd298866079188744bca5b
5a8cc908189917c35328969bd5e23d806616015e
2a8e2335a4ffd30234c086ec777decf37fa004b9809a6ba50563c31accf7fd09
GET /media/picture/casaque/d-alexandre-du-sud-521070.gif HTTP/1.1
Host: www.zone-turf.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
content-length: 2708
age: 99214
date: Sun, 05 Nov 2023 08:26:00 GMT
server: Apache
last-modified: Fri, 03 Nov 2023 23:01:09 GMT
etag: "9d547e77-a94-609477aeb1e03"
cache-control: max-age=259200
expires: Tue, 07 Nov 2023 05:25:07 GMT
accept-ranges: bytes
x-varnish: 2911591649 2904796853
via: 1.1 varnish, 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-cache-hist: 122
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Et-BvI-36P4gMF-Wo2axVDtwTEP5zFLcUZ9OONpoDO8a9Wvm8jL_qw==
www.zone-turf.fr/media/picture/casaque/mme-s-aknin-34532.gif
200 OK 2.7 kB URL GET HTTP/3 www.zone-turf.fr/media/picture/casaque/mme-s-aknin-34532.gif
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerAmazon
Subjectwww.zone-turf.fr
Fingerprint24:FA:41:E7:B6:A7:61:34:22:45:7A:B7:DB:B8:9F:35:16:00:45:AD
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type GIF image data, version 89a, 55 x 65\012- data
Hash 324b851b8a3d32ac5721e40f3fa6706a
2b8cca69b175fd9df59f0c536e25eea2a232e3a4
a2c750743786847a62498406123944e51f30aaebe4b1efbdd669326f84cb33ee
GET /media/picture/casaque/mme-s-aknin-34532.gif HTTP/1.1
Host: www.zone-turf.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
content-length: 2674
age: 243779
server: Apache
last-modified: Wed, 18 Oct 2023 21:46:43 GMT
accept-ranges: bytes
x-varnish: 2898226342 2894080233
via: 1.1 varnish, 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-cache-hist: 6
date: Sun, 05 Nov 2023 08:25:17 GMT
cache-control: max-age=259200
expires: Sun, 05 Nov 2023 13:15:42 GMT
etag: "9d2bb624-a72-6080493384ae4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: JyYEV3QgptMwaQyMQ7N6AwpUSwDzNTOp4QutJnSgwnSOu57k9VbIwA==
www.zone-turf.fr/media/picture/casaque/l-bloodstock-154402.gif
200 OK 2.2 kB URL GET HTTP/3 www.zone-turf.fr/media/picture/casaque/l-bloodstock-154402.gif
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerAmazon
Subjectwww.zone-turf.fr
Fingerprint24:FA:41:E7:B6:A7:61:34:22:45:7A:B7:DB:B8:9F:35:16:00:45:AD
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type GIF image data, version 89a, 55 x 65\012- data
Hash b168b6bd7354a8425da9d968d71b7af4
edfd4c981fbf1c39063b76274b6b85290d656260
7e9976ec247feba7acea1ccadb1e30fde86d0632e266f0abb4bb3df6374e4ea2
GET /media/picture/casaque/l-bloodstock-154402.gif HTTP/1.1
Host: www.zone-turf.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
content-length: 2157
age: 139492
server: Apache
last-modified: Thu, 26 Oct 2023 21:46:38 GMT
accept-ranges: bytes
x-varnish: 3685815371 3671139780
via: 1.1 varnish, 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-backend: default
date: Sun, 05 Nov 2023 08:34:37 GMT
cache-control: max-age=259200
expires: Mon, 06 Nov 2023 18:13:49 GMT
etag: "9d31b4d2-86d-608a581af527b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: OfaFbp_BiM-XBVuJ5lmwKeA3DSHHZk9ce27k6QRVGXtyHJfDyKTiHQ==
www.zone-turf.fr/media/picture/casaque/sdoussot-gloggia-a-jacob-525794.gif
200 OK 2.4 kB URL GET HTTP/3 www.zone-turf.fr/media/picture/casaque/sdoussot-gloggia-a-jacob-525794.gif
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerAmazon
Subjectwww.zone-turf.fr
Fingerprint24:FA:41:E7:B6:A7:61:34:22:45:7A:B7:DB:B8:9F:35:16:00:45:AD
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type GIF image data, version 89a, 55 x 65\012- data
Hash be391fdbc4ed93f6e3ad94d00ba8db1d
6d73f54bd1502b6c1635de34562c559eb10d9078
1301d6c5ed9249de42d543443de18915fa25c83566110a6c286550f58767cc1f
GET /media/picture/casaque/sdoussot-gloggia-a-jacob-525794.gif HTTP/1.1
Host: www.zone-turf.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
content-length: 2438
age: 255850
server: Apache
last-modified: Sat, 30 Sep 2023 21:56:44 GMT
accept-ranges: bytes
x-varnish: 2911078242 2892651594
via: 1.1 varnish, 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-cache-hist: 147
date: Sun, 05 Nov 2023 08:58:41 GMT
cache-control: max-age=259200
expires: Sun, 05 Nov 2023 09:54:32 GMT
etag: "9d4e2a04-986-6069a9defb128"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 9Dewwlyth6nvrAQ3rCa_xZyxDao1wm0GpaApvq_9oerYdqBYrQAl5g==
www.zone-turf.fr/media/picture/casaque/g-augustin-normand-606.gif
200 OK 2.0 kB URL GET HTTP/3 www.zone-turf.fr/media/picture/casaque/g-augustin-normand-606.gif
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerAmazon
Subjectwww.zone-turf.fr
Fingerprint24:FA:41:E7:B6:A7:61:34:22:45:7A:B7:DB:B8:9F:35:16:00:45:AD
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type GIF image data, version 89a, 55 x 65\012- data
Hash e59181e7c6f61f96d73322fbf40e999c
af3d879a2a22b2acd80cbf6d39deb4caafb1d252
ad8062178eb1283d7f8a6ad528c7dca86a28162fe04b20475b0ea1c0fa46f895
GET /media/picture/casaque/g-augustin-normand-606.gif HTTP/1.1
Host: www.zone-turf.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
content-length: 2040
age: 145950
server: Apache
last-modified: Fri, 03 Nov 2023 15:47:23 GMT
accept-ranges: bytes
x-varnish: 3686694511 3677270793
via: 1.1 varnish, 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-backend: default
date: Sun, 05 Nov 2023 08:38:41 GMT
cache-control: max-age=259200
expires: Mon, 06 Nov 2023 16:26:11 GMT
etag: "9d239982-7f8-609416b99d19e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: oSxt0c_k7J87zgZh1QW-o7gO3Ey_TMVKAfCuy-MRLavH0BNOiddd4A==
www.zone-turf.fr/media/picture/casaque/g-doleuze-15185.gif
200 OK 2.5 kB URL GET HTTP/3 www.zone-turf.fr/media/picture/casaque/g-doleuze-15185.gif
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerAmazon
Subjectwww.zone-turf.fr
Fingerprint24:FA:41:E7:B6:A7:61:34:22:45:7A:B7:DB:B8:9F:35:16:00:45:AD
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type GIF image data, version 89a, 55 x 65\012- data
Hash 309dac007048a77e3ee5796990ce742d
35a863067fa9940a7da33ad7820af4dbab27cdd1
8444fd61ca23edf07e1b2d1949db3c0b1214cffb6ab0f314c9b3cced9b697c35
GET /media/picture/casaque/g-doleuze-15185.gif HTTP/1.1
Host: www.zone-turf.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
content-length: 2458
age: 122906
server: Apache
last-modified: Fri, 03 Nov 2023 22:48:00 GMT
accept-ranges: bytes
x-varnish: 3681510482 3679548703
via: 1.1 varnish, 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-backend: default
date: Sun, 05 Nov 2023 08:50:08 GMT
cache-control: max-age=259200
expires: Mon, 06 Nov 2023 22:50:15 GMT
etag: "9d2360f5-99a-609474be0078e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: AwLSAsgV9K83BbkJOEe8rjVCdSu-K1dtAT_-llSyuZIzHp3eM8g56Q==
www.zone-turf.fr/media/picture/casaque/s-mydlinghoven-6728.gif
200 OK 2.2 kB URL GET HTTP/3 www.zone-turf.fr/media/picture/casaque/s-mydlinghoven-6728.gif
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerAmazon
Subjectwww.zone-turf.fr
Fingerprint24:FA:41:E7:B6:A7:61:34:22:45:7A:B7:DB:B8:9F:35:16:00:45:AD
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type GIF image data, version 89a, 55 x 65\012- data
Hash ee128631a1bcbfaa2fde20dd38c17686
c4a2599bc12c784f3afe447e4cd96775cea463cc
f4c01999d37aea2bcace728a7c18a21dc6970769fb9e1e73c3c5d77e23729d36
GET /media/picture/casaque/s-mydlinghoven-6728.gif HTTP/1.1
Host: www.zone-turf.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
content-length: 2198
age: 245496
server: Apache
last-modified: Fri, 20 Oct 2023 21:46:41 GMT
accept-ranges: bytes
x-varnish: 3685510824 3669589447
via: 1.1 varnish, 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-backend: default
date: Sun, 05 Nov 2023 08:42:05 GMT
cache-control: max-age=259200
expires: Sun, 05 Nov 2023 12:47:05 GMT
etag: "9d3dcca2-896-6082cced32ee8"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 7NARj1ZLe47nbNh2S09TyQ8jJHmie2iuSsIFEOxV0CaFPCiV2JzR5g==
www.blogger.com/navbar.g?targetBlogID=3338940816273817868&blogName=LEPRESIDENTVIP&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://lepresidentvip.blogspot.com/search&blogLocale=fr&v=2&homepageUrl=https://lepresidentvip.blogspot.com/&vt=-7808041829531629692&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AOzoyjtjrhQ.O%2Fd%3D1%2Frs%3DAHpOoo9-fA1P7IZFa1fdRj158NoDqrnbYA%2Fm%3D__features__
2.6 kB URL www.blogger.com/navbar.g?targetBlogID=3338940816273817868&blogName=LEPRESIDENTVIP&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://lepresidentvip.blogspot.com/search&blogLocale=fr&v=2&homepageUrl=https://lepresidentvip.blogspot.com/&vt=-7808041829531629692&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AOzoyjtjrhQ.O%2Fd%3D1%2Frs%3DAHpOoo9-fA1P7IZFa1fdRj158NoDqrnbYA%2Fm%3D__features__
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3172)
Hash 8ea804d305edf7c83533f9ccb5a338c5
354ef6b56a07068044208e1d98ba7b673e477cb6
52bb7556e56f274fc1d904b53c35ed9d23a440c8fb50c23a36dd9ec20ecf0e4b
GET /navbar.g?targetBlogID=3338940816273817868&blogName=LEPRESIDENTVIP&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://lepresidentvip.blogspot.com/search&blogLocale=fr&v=2&homepageUrl=https://lepresidentvip.blogspot.com/&vt=-7808041829531629692&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AOzoyjtjrhQ.O%2Fd%3D1%2Frs%3DAHpOoo9-fA1P7IZFa1fdRj158NoDqrnbYA%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 05 Nov 2023 08:58:41 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2596
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lepresidentvip.blogspot.com/ar1.png
404 Not Found 11 kB URL GET HTTP/3 lepresidentvip.blogspot.com/ar1.png
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint1F:9F:66:61:40:8F:19:DE:30:44:23:EA:EB:6E:C0:FC:6D:58:69:25
ValidityMon, 16 Oct 2023 08:08:16 GMT - Mon, 08 Jan 2024 08:08:15 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4599)
Hash a319f54f5f6b685748485a9ec836effd
62f728b3fb4e5f09ff57e0baad2b13882a236ec9
93b7ea2587f036fa2704d7a22cb04aaf407150052c3cf43796da10f7cb6f23e3
GET /ar1.png HTTP/1.1
Host: lepresidentvip.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 05 Nov 2023 08:58:41 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 11152
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
resources.blogblog.com/img/navbar/arrows-blue.png
200 OK 104 B URL GET HTTP/3 resources.blogblog.com/img/navbar/arrows-blue.png
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=3338940816273817868&blogName=LEPRESIDENTVIP&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://lepresidentvip.blogspot.com/search&blogLocale=fr&v=2&homepageUrl=https://lepresidentvip.blogspot.com/&vt=-7808041829531629692&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AOzoyjtjrhQ.O%2Fd%3D1%2Frs%3DAHpOoo9-fA1P7IZFa1fdRj158NoDqrnbYA%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Flepresidentvip.blogspot.com&pfname=&rpctoken=32988360
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type PNG image data, 19 x 4, 8-bit/color RGBA, non-interlaced\012- data
Hash 38c95719e05f4184a301768d8de91e09
d0ed1147d46f2cf592584239a5a101d6f2abb588
259ece79a45ad7ecbcf6fb0669de61aa6a01ebedaba47a7e88283435e0e6b1be
GET /img/navbar/arrows-blue.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 104
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Nov 2023 09:10:32 GMT
expires: Fri, 10 Nov 2023 09:10:32 GMT
cache-control: public, max-age=604800
last-modified: Thu, 02 Nov 2023 08:55:39 GMT
content-type: image/png
age: 172089
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
resources.blogblog.com/img/navbar/icons_orange.png
200 OK 915 B URL GET HTTP/3 resources.blogblog.com/img/navbar/icons_orange.png
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=3338940816273817868&blogName=LEPRESIDENTVIP&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://lepresidentvip.blogspot.com/search&blogLocale=fr&v=2&homepageUrl=https://lepresidentvip.blogspot.com/&vt=-7808041829531629692&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AOzoyjtjrhQ.O%2Fd%3D1%2Frs%3DAHpOoo9-fA1P7IZFa1fdRj158NoDqrnbYA%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Flepresidentvip.blogspot.com&pfname=&rpctoken=32988360
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type PNG image data, 46 x 20, 8-bit colormap, non-interlaced\012- data
Hash 87f25844d23ac1ee03604e668f5c1797
85d440947d70a78672740ff7e8062f68ce9d99a3
d70c36f2f61b735573caa3dd5a1602e19916701bb88d99ff4527cd2c89fa8b72
GET /img/navbar/icons_orange.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 915
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Nov 2023 21:23:05 GMT
expires: Thu, 09 Nov 2023 21:23:05 GMT
cache-control: public, max-age=604800
last-modified: Thu, 02 Nov 2023 00:54:48 GMT
content-type: image/png
age: 214536
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/js/platform:gapi.iframes.style.common.js
200 OK 22 kB URL GET HTTP/3 apis.google.com/js/platform:gapi.iframes.style.common.js
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=3338940816273817868&blogName=LEPRESIDENTVIP&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://lepresidentvip.blogspot.com/search&blogLocale=fr&v=2&homepageUrl=https://lepresidentvip.blogspot.com/&vt=-7808041829531629692&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AOzoyjtjrhQ.O%2Fd%3D1%2Frs%3DAHpOoo9-fA1P7IZFa1fdRj158NoDqrnbYA%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Flepresidentvip.blogspot.com&pfname=&rpctoken=32988360
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type ASCII text, with very long lines (2664)
Hash 2fd411fb603022a9c79b198c8fa9bd1a
5ee1138e5555fe64c6505eae1c1d8f9f678a9ca0
e57e5722b5748404d7a26d8026dc13874514d918569b197a03dd3277b23f2cd2
GET /js/platform:gapi.iframes.style.common.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Cookie: NID=511=gDDVfePte9CCfIfTjvwN-sUlTKOp0QHBn64QBn_6KtFEFrwPPbzMSNFmDQZC011XDEHevacKvmgmq__WCw90wZV8da3HFFaTf9ReZi_YT-JJ-EzfJoKx6djv1v2zj5xKLZeFxSljirw6Z1oLXKWqCqoYpeCriuuhX114hp7lK4I
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21941
date: Sun, 05 Nov 2023 08:58:41 GMT
expires: Sun, 05 Nov 2023 08:58:41 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "d7dc6ef172f2114d"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=UA-630351-12
200 OK 69 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-630351-12
IP
Requested by https://www.pronostic-facile.fr/widget/magiturf/quinte_runners/all
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint3B:1D:9C:59:AC:F8:2F:47:8A:C6:AE:4F:88:F0:8D:84:C7:6A:47:DA
ValidityMon, 16 Oct 2023 08:02:30 GMT - Mon, 08 Jan 2024 08:02:29 GMT
File type ASCII text, with very long lines (4179)
Hash e9a3ca22bc4c8292792aaa20c298e452
57729826b10bd47a29b2d1db8311b728c1806c70
209e475b46bd336e37224495a514df0c407a4b474a1dfb02e347d921c2bcca65
GET /gtag/js?id=UA-630351-12 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pronostic-facile.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 Nov 2023 08:58:41 GMT
expires: Sun, 05 Nov 2023 08:58:41 GMT
cache-control: private, max-age=900
last-modified: Sun, 05 Nov 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 68834
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-630351-12
200 OK 69 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-630351-12
IP
Requested by https://www.pronostic-facile.fr/widget/magiturf/quinte_runners/all
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint3B:1D:9C:59:AC:F8:2F:47:8A:C6:AE:4F:88:F0:8D:84:C7:6A:47:DA
ValidityMon, 16 Oct 2023 08:02:30 GMT - Mon, 08 Jan 2024 08:02:29 GMT
File type ASCII text, with very long lines (4179)
Hash 6cb1e97b4246c8b3032ed9bd7b8a8488
6e18e4d86b2c370df97049f0ea80dd255d997e55
510e1fc12e948bdabbdf76aa5a66d09275a18744d34b69712e06a7a4cf6ed010
GET /gtag/js?id=UA-630351-12 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pronostic-facile.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 Nov 2023 08:58:41 GMT
expires: Sun, 05 Nov 2023 08:58:41 GMT
cache-control: private, max-age=900
last-modified: Sun, 05 Nov 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 68833
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
200 OK 910 B URL GET HTTP/3 www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash efa6bb2bfe459bc6f4bdafa3db0383f6
52d15ce52fe50643e542c17812de43f4ed1b6ee0
6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2
GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 910
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Nov 2023 20:16:00 GMT
expires: Fri, 01 Nov 2024 20:16:00 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: image/png
vary: Origin
age: 218561
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.pronostic-facile.fr/cdn-cgi/rum?
204 No Content 0 B URL POST HTTP/3 www.pronostic-facile.fr/cdn-cgi/rum?
IP
Requested by https://www.pronostic-facile.fr/widget/magiturf/quinte_result/all
Certificate IssuerGoogle Trust Services LLC
Subjectpronostic-facile.fr
Fingerprint3F:E6:2A:87:D9:4B:22:63:3C:71:22:04:D9:0A:50:88:AD:78:6B:76
ValidityThu, 05 Oct 2023 14:08:58 GMT - Wed, 03 Jan 2024 14:08:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: www.pronostic-facile.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1106
Origin: https://www.pronostic-facile.fr
DNT: 1
Connection: keep-alive
Referer: https://www.pronostic-facile.fr/widget/magiturf/quinte_result/all
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Sun, 05 Nov 2023 08:58:41 GMT
access-control-allow-origin: https://www.pronostic-facile.fr
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 8213e57c6eefb511-OSL
x-frame-options: DENY
x-content-type-options: nosniff
fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
200 OK 3.3 kB URL GET HTTP/2 fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6225), with no line terminators
Hash 2bd5c073a88b83ed74db88282a56ddfb
d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650
ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09
GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 3340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Oct 2023 04:23:55 GMT
expires: Tue, 29 Oct 2024 04:23:55 GMT
cache-control: public, max-age=31536000
age: 534886
last-modified: Wed, 20 Apr 2022 14:24:23 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pronostic-facile.fr/cdn-cgi/rum?
204 No Content 0 B URL POST HTTP/3 www.pronostic-facile.fr/cdn-cgi/rum?
IP
Requested by https://www.pronostic-facile.fr/widget/magiturf/quinte_result/all
Certificate IssuerGoogle Trust Services LLC
Subjectpronostic-facile.fr
Fingerprint3F:E6:2A:87:D9:4B:22:63:3C:71:22:04:D9:0A:50:88:AD:78:6B:76
ValidityThu, 05 Oct 2023 14:08:58 GMT - Wed, 03 Jan 2024 14:08:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: www.pronostic-facile.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1111
Origin: https://www.pronostic-facile.fr
DNT: 1
Connection: keep-alive
Referer: https://www.pronostic-facile.fr/widget/magiturf/quinte_runners/all
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Sun, 05 Nov 2023 08:58:42 GMT
access-control-allow-origin: https://www.pronostic-facile.fr
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 8213e57cff87b511-OSL
x-frame-options: DENY
x-content-type-options: nosniff
www.gstatic.com/images/branding/product/2x/translate_24dp.png
200 OK 1.8 kB URL GET HTTP/3 www.gstatic.com/images/branding/product/2x/translate_24dp.png
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash c69c796362406f9e11c7f4bf5bb628da
e489ce95ab56208090868882113d7416abf46775
4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=CAM/d=0/rs=AN8SPfraOsu5efVNBOQ1KgAVxhCYpwxnBg/m=el_main_css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Oct 2023 05:14:09 GMT
expires: Wed, 30 Oct 2024 05:14:09 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
vary: Origin
age: 445473
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.AOzoyjtjrhQ.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9-fA1P7IZFa1fdRj158NoDqrnbYA/cb=gapi.loaded_0?le=scs
200 OK 45 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.AOzoyjtjrhQ.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9-fA1P7IZFa1fdRj158NoDqrnbYA/cb=gapi.loaded_0?le=scs
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=3338940816273817868&blogName=LEPRESIDENTVIP&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://lepresidentvip.blogspot.com/search&blogLocale=fr&v=2&homepageUrl=https://lepresidentvip.blogspot.com/&vt=-7808041829531629692&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AOzoyjtjrhQ.O%2Fd%3D1%2Frs%3DAHpOoo9-fA1P7IZFa1fdRj158NoDqrnbYA%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Flepresidentvip.blogspot.com&pfname=&rpctoken=32988360
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type ASCII text, with very long lines (1505)
Hash b67820bdc8d56067a21ffa025db0841d
9c17552e79778dba91cbf0730e957755ae63332f
a68da42e49c42c920fb444ae7eac6e58164e13858f543fff577a2d74987e971a
GET /_/scs/abc-static/_/js/k=gapi.lb.en.AOzoyjtjrhQ.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9-fA1P7IZFa1fdRj158NoDqrnbYA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Cookie: NID=511=gDDVfePte9CCfIfTjvwN-sUlTKOp0QHBn64QBn_6KtFEFrwPPbzMSNFmDQZC011XDEHevacKvmgmq__WCw90wZV8da3HFFaTf9ReZi_YT-JJ-EzfJoKx6djv1v2zj5xKLZeFxSljirw6Z1oLXKWqCqoYpeCriuuhX114hp7lK4I
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 45247
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Nov 2023 18:42:53 GMT
expires: Thu, 31 Oct 2024 18:42:53 GMT
cache-control: public, max-age=31536000
age: 310549
last-modified: Tue, 03 Oct 2023 15:22:58 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback
1.4 kB URL translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback
IP
Hash a3eefe14b1b4698460d992bd1673a26b
a2fca6ebb00b8bdcca3eda88654d02d2c165b9c4
87514750a90cd70dd22c8673cfa80d804ef55840bd0755950af2118d8d218067
GET /v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback HTTP/1.1
Host: translate-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sun, 05 Nov 2023 08:58:42 GMT
server: ESF
cache-control: private
content-length: 1392
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=511=ogYx3m1ean-SgsA7JISe67sdhNHhkjJRxz4CkLNZnd4aQLzDuxoTg1YtQPMTJnURFYNjMENnl4gazFEJb-qqSA92aTOvaD8FSver29aTHjbfAllMElbvHCxv99eIen_DPqzvHm83fY7i9wcpVY27NPDDWk1LTQZJP86qdWbIlyY; expires=Mon, 06-May-2024 08:58:42 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly
CONSENT=PENDING+854; expires=Tue, 04-Nov-2025 08:58:42 GMT; path=/; domain=.googleapis.com; Secure
expires: Sun, 05 Nov 2023 08:58:42 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
w.24timezones.com/c.js?l=cc12423&t=a&lang=fr
200 OK 82 kB URL GET HTTP/3 w.24timezones.com/c.js?l=cc12423&t=a&lang=fr
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject24timezones.com
Fingerprint63:8E:2A:37:EB:1E:9E:3F:7E:D4:3A:4F:F4:C9:71:12:F8:53:9E:04
ValidityMon, 30 Oct 2023 09:29:30 GMT - Sun, 28 Jan 2024 09:29:29 GMT
File type ASCII text, with very long lines (3271)
Hash dc7036ca129fc244d25b3b21e120bc94
aa0798903bf691be83743e8777563ad573b3f69e
ef589cd27801c087d59892283bfd55322f85f0ce3afe1aa4af368edd5fe722b8
GET /c.js?l=cc12423&t=a&lang=fr HTTP/1.1
Host: w.24timezones.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 Nov 2023 08:58:42 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sun, 05 Nov 2023 08:57:48 GMT
cache-control: max-age=2678400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gUvJ9B37bNvux%2FedgwotEuawmpBFrubYv6Kt7sE58hPi2UrrAt0rLiFvqdV%2Fv9x6peTs%2BrCeiHkG42Rd72IzyOnkrkJt6kHn%2Br7zHQTc8NApNOkORNh7KyirgGvJFs%2Fhgu5t"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8213e57c493c56c9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.googletagmanager.com/gtag/js?id=G-PEY0K16Y5K&l=dataLayer&cx=c
200 OK 81 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-PEY0K16Y5K&l=dataLayer&cx=c
IP
Requested by https://www.pronostic-facile.fr/widget/magiturf/quinte_result/all
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint3B:1D:9C:59:AC:F8:2F:47:8A:C6:AE:4F:88:F0:8D:84:C7:6A:47:DA
ValidityMon, 16 Oct 2023 08:02:30 GMT - Mon, 08 Jan 2024 08:02:29 GMT
File type ASCII text, with very long lines (5955)
Hash d9a594beccb9ee290108a38feec2bc7f
d15d29a22224871724d8970403d7ae345db219fc
91463111a458adf9349204357735bc7345b5ed7a76ff94cfad25b0ad6e62f48e
GET /gtag/js?id=G-PEY0K16Y5K&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pronostic-facile.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 Nov 2023 08:58:42 GMT
expires: Sun, 05 Nov 2023 08:58:42 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81130
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
translate.google.com/gen204?sl=fr&nca=te_ap&client=te&logld=vTE_20231101
204 No Content 0 B URL GET HTTP/3 translate.google.com/gen204?sl=fr&nca=te_ap&client=te&logld=vTE_20231101
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gen204?sl=fr&nca=te_ap&client=te&logld=vTE_20231101 HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Cookie: NID=511=gDDVfePte9CCfIfTjvwN-sUlTKOp0QHBn64QBn_6KtFEFrwPPbzMSNFmDQZC011XDEHevacKvmgmq__WCw90wZV8da3HFFaTf9ReZi_YT-JJ-EzfJoKx6djv1v2zj5xKLZeFxSljirw6Z1oLXKWqCqoYpeCriuuhX114hp7lK4I
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: image/gif; charset=us-ascii
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 05 Nov 2023 08:58:42 GMT
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport, script-src 'nonce-1LxgqoClMLfRU_2YvHJvNw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self'
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: same-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: __Secure-ENID=15.SE=KDNCqokkbbFkEAva-t6rL-i-l3tDzaZorXrtkAmlz96IXryyjvZl-mUC5wiflVZCZW1qBVi-M8s5thOHXtFgeZ3at6prtwuPCF0DoLsL5V6D7aPPMWgWAgev6sfNR7gBlzOCdKpSHPLf6J6KYZACYYn6D6aHgugnHjrqtBj8jXg; expires=Thu, 05-Dec-2024 01:17:00 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
200 OK 7.3 kB URL GET HTTP/2 static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
IP
Requested by https://www.pronostic-facile.fr/widget/magiturf/quinte_result/all
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:79:35:ED:04:A2:CA:50:F7:9A:B8:FE:DF:A5:0C:B1:F2:E6:DD:E8
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
Hash fd19cbbc217e60cfa8bb234d5c33bf3c
697b954b86240f038ccea676959c975cb9a96e67
e1250cba5d660a6642e8a234a7ef9943a39eacb44cfa334fc1c2d7f7e556f092
GET /beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pronostic-facile.fr
DNT: 1
Connection: keep-alive
Referer: https://www.pronostic-facile.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:41 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2023.10.0"
last-modified: Tue, 10 Oct 2023 21:38:13 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 8213e579ccb0569b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.blogger.com/static/v1/v-css/3268905543-lightbox_bundle.css
200 OK 6.5 kB URL GET HTTP/3 www.blogger.com/static/v1/v-css/3268905543-lightbox_bundle.css
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type ASCII text, with very long lines (35889), with no line terminators
Hash e287450e0a5c5a5625f7ba3716c1b0cf
3287eee808b2a77f7e4ea16b148f4cd173cddb66
5ee6fb081a76cfc34678b67e894a1fa91ed96857c4d94710cb1a8cea5ea1d76b
GET /static/v1/v-css/3268905543-lightbox_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6501
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Nov 2023 13:11:53 GMT
expires: Fri, 01 Nov 2024 13:11:53 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 Nov 2023 16:58:16 GMT
content-type: text/css
vary: Accept-Encoding
age: 244009
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20231101&st=env
200 OK 12 kB URL GET HTTP/3 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20231101&st=env
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint30:DF:10:0D:E2:AE:CA:7A:5E:20:03:00:80:D2:EB:DD:4D:3A:F3:10
ValidityMon, 16 Oct 2023 08:02:29 GMT - Mon, 08 Jan 2024 08:02:28 GMT
File type JSON data\012- , ASCII text, with very long lines (15827), with no line terminators
Hash 6f2c523c084569999307025f43bd1e50
7e630bf9a7d40ce77a3373bdb5c3d070afcc3b7e
8792471aa5f3a35090d873205e2f2ec50848431e40c1b14d3d4f22e09285790d
GET /getconfig/sodar?sv=200&tid=gda&tv=r20231101&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
date: Sun, 05 Nov 2023 08:58:42 GMT
server: cafe
content-length: 11936
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/static/v1/jsbin/1633058044-lbx__fr.js
200 OK 124 kB URL GET HTTP/3 www.blogger.com/static/v1/jsbin/1633058044-lbx__fr.js
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type HTML document, ASCII text, with very long lines (1373)
Size 124 kB (124296 bytes)
Hash 9911b8948cfcb924d8b7cd103b4b9f25
a0ad58a98c0c340c5aaeb9b1f74bb63fac95f61b
cbc008cb1bd458e10a6ea0fee386c1a7b055728a37dffd5f31451cfe7db4d5a3
GET /static/v1/jsbin/1633058044-lbx__fr.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 124296
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Nov 2023 10:34:33 GMT
expires: Sat, 02 Nov 2024 10:34:33 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 31 Oct 2023 15:58:20 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 167049
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL GET HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttpc.googlesyndication.com
FingerprintB5:FE:85:38:7B:87:81:A3:BC:C0:81:1B:57:17:C4:8D:FC:4B:61:2E
ValidityMon, 16 Oct 2023 08:09:55 GMT - Mon, 08 Jan 2024 08:09:54 GMT
File type ASCII text, with very long lines (1321)
Hash 2cc87e9764aebcbbf36ff2061e6a2793
b4f2ffdf4c695aa79f0e63651c18a88729c2407b
61c32059a5e94075a7ecff678b33907966fc9cfa384daa01aa057f872da14dbb
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Sun, 05 Nov 2023 08:58:42 GMT
expires: Sun, 05 Nov 2023 08:58:42 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2/225/runner.html
200 OK 5.0 kB URL GET HTTP/3 tpc.googlesyndication.com/sodar/sodar2/225/runner.html
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint30:DF:10:0D:E2:AE:CA:7A:5E:20:03:00:80:D2:EB:DD:4D:3A:F3:10
ValidityMon, 16 Oct 2023 08:02:29 GMT - Mon, 08 Jan 2024 08:02:28 GMT
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2020)
Hash 1d3d22df067f5219073f9c0fabb74fdd
d5c226022639323d93946df3571404116041e588
55a119c0394f901a8a297e109c17b5e5402689708b999ab10691c16179f32a4a
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Nov 2023 22:40:10 GMT
expires: Sat, 02 Nov 2024 22:40:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
vary: Accept-Encoding
age: 123512
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/api2/aframe
200 OK 16 kB URL GET HTTP/3 www.google.com/recaptcha/api2/aframe
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type gzip compressed data\012- data
Hash 8a4dfb0e148ee2460baf15cdeef12475
e0ea6be3f0c4a74cddf7f651f8a099e06cb158f6
6174d7d2fcedb91fde2dc177c03366907e0e8251e9186f97b669d27b63eaf9dd
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Cookie: NID=511=gDDVfePte9CCfIfTjvwN-sUlTKOp0QHBn64QBn_6KtFEFrwPPbzMSNFmDQZC011XDEHevacKvmgmq__WCw90wZV8da3HFFaTf9ReZi_YT-JJ-EzfJoKx6djv1v2zj5xKLZeFxSljirw6Z1oLXKWqCqoYpeCriuuhX114hp7lK4I
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Sun, 05 Nov 2023 08:58:42 GMT
date: Sun, 05 Nov 2023 08:58:42 GMT
cache-control: private, max-age=300
content-security-policy: script-src 'nonce-IC3WWLfcMykIUczIIUb8TA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&li=gda_r20231101&jk=234281526827166&rc=
204 No Content 0 B URL GET HTTP/3 pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&li=gda_r20231101&jk=234281526827166&rc=
IP
Requested by https://www.google.com/recaptcha/api2/aframe
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint30:DF:10:0D:E2:AE:CA:7A:5E:20:03:00:80:D2:EB:DD:4D:3A:F3:10
ValidityMon, 16 Oct 2023 08:02:29 GMT - Mon, 08 Jan 2024 08:02:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/sodar?id=sodar2&v=225&li=gda_r20231101&jk=234281526827166&rc= HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sun, 05 Nov 2023 08:58:42 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
tpc.googlesyndication.com/generate_204?_vkXow
0 B URL tpc.googlesyndication.com/generate_204?_vkXow
IP
Certificate IssuerGoogle Trust Services LLC
Subjecttpc.googlesyndication.com
FingerprintB5:FE:85:38:7B:87:81:A3:BC:C0:81:1B:57:17:C4:8D:FC:4B:61:2E
ValidityMon, 16 Oct 2023 08:09:55 GMT - Mon, 08 Jan 2024 08:09:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?_vkXow HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Sun, 05 Nov 2023 08:58:43 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20231101&jk=234281526827166&bg=!zM-lz4DNAAb4oU7C2KE7ADQBe5WfOL-5tlaYfp13iNty_0Gp_VLpc-H8osIekanuz1ftO4_HFNQWKOMehLu-C5Eq_E9SAgAAAXVSAAAAEGgBB5kCkXkGs_Utq-6CCTsJfMoapMNMosjo_J6dHC7tQh_jIqqLwZGEZp-pgRTfK8SwNckjV_zzAI4CCrMZdw8L1yA99JT0ncbv7WqgAKi2Iv8B2QNZYYkNITsE9lDeMCrAiRQ5kMT78OMixl72ZaClnY7V7Iu5EJzRgrLkcXe8cMtw5_6dq1DpQqXkGoDe-JmqMv2esF-oiJ7ia_98z0KSLVRCTnDnuA_a-YnSAwgz4E7IMZ7P3PbE1u6OWKVQ_mGqHmHjkGQySG-JbOVqOfgOWlz_ceFcv5AR8NGxk1xZHgj8041Ntl1hqHmw1nkPdNRAkWLiaN6V9XD6FD9YwQRkisQXHE5JJXl1SfQ4TlLdMt3A94ieq2dBbEUIyTuFp7LI8n6ZvUXopz2LDleIoYVZrc6bwVlRGy23w9dtMoiiqDHZ9smaqitY-I4pIwkkrikxMdSvfIHwI_6rjFLhrNu71M4IEkxY6JNmsmf3vlme0YpvWMVuPCZXfnV26YNVgQl0U6QZ8wlBfimVGpSYzlULfafrEnFfP9zMx49KzaijHPwMfrHfOsOtutOgAyQzMOsnS4yBzF216vvy7MqX-d1MZJ-6tzQzxDPkVmWna64eZyGkK2_oziM88ntb09Ij1p_Wo5R5NGYBoGhmW2fwRLZCWB4Wmvkpsvb-lsm4YR8BzmAjSO1ITje2bblpk8KvOuZ2abjt6bZXGL1DLWzNQ5rJSIWgG1-Y37LQGNoSVp1ByYveYBL5bABBh0Sxc3_s36x5rcMCw4N2n-ZkQLpn2vDN46a_llajoN-yGDOU46D0N5aDfxsXQMFEbeH-bIi4agK_m6rLUxabxAp3kUzM31iHRhpcsX7UyvdlDD_Ebm_zncsenv92jw
204 No Content 0 B URL GET HTTP/3 pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20231101&jk=234281526827166&bg=!zM-lz4DNAAb4oU7C2KE7ADQBe5WfOL-5tlaYfp13iNty_0Gp_VLpc-H8osIekanuz1ftO4_HFNQWKOMehLu-C5Eq_E9SAgAAAXVSAAAAEGgBB5kCkXkGs_Utq-6CCTsJfMoapMNMosjo_J6dHC7tQh_jIqqLwZGEZp-pgRTfK8SwNckjV_zzAI4CCrMZdw8L1yA99JT0ncbv7WqgAKi2Iv8B2QNZYYkNITsE9lDeMCrAiRQ5kMT78OMixl72ZaClnY7V7Iu5EJzRgrLkcXe8cMtw5_6dq1DpQqXkGoDe-JmqMv2esF-oiJ7ia_98z0KSLVRCTnDnuA_a-YnSAwgz4E7IMZ7P3PbE1u6OWKVQ_mGqHmHjkGQySG-JbOVqOfgOWlz_ceFcv5AR8NGxk1xZHgj8041Ntl1hqHmw1nkPdNRAkWLiaN6V9XD6FD9YwQRkisQXHE5JJXl1SfQ4TlLdMt3A94ieq2dBbEUIyTuFp7LI8n6ZvUXopz2LDleIoYVZrc6bwVlRGy23w9dtMoiiqDHZ9smaqitY-I4pIwkkrikxMdSvfIHwI_6rjFLhrNu71M4IEkxY6JNmsmf3vlme0YpvWMVuPCZXfnV26YNVgQl0U6QZ8wlBfimVGpSYzlULfafrEnFfP9zMx49KzaijHPwMfrHfOsOtutOgAyQzMOsnS4yBzF216vvy7MqX-d1MZJ-6tzQzxDPkVmWna64eZyGkK2_oziM88ntb09Ij1p_Wo5R5NGYBoGhmW2fwRLZCWB4Wmvkpsvb-lsm4YR8BzmAjSO1ITje2bblpk8KvOuZ2abjt6bZXGL1DLWzNQ5rJSIWgG1-Y37LQGNoSVp1ByYveYBL5bABBh0Sxc3_s36x5rcMCw4N2n-ZkQLpn2vDN46a_llajoN-yGDOU46D0N5aDfxsXQMFEbeH-bIi4agK_m6rLUxabxAp3kUzM31iHRhpcsX7UyvdlDD_Ebm_zncsenv92jw
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint30:DF:10:0D:E2:AE:CA:7A:5E:20:03:00:80:D2:EB:DD:4D:3A:F3:10
ValidityMon, 16 Oct 2023 08:02:29 GMT - Mon, 08 Jan 2024 08:02:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20231101&jk=234281526827166&bg=!zM-lz4DNAAb4oU7C2KE7ADQBe5WfOL-5tlaYfp13iNty_0Gp_VLpc-H8osIekanuz1ftO4_HFNQWKOMehLu-C5Eq_E9SAgAAAXVSAAAAEGgBB5kCkXkGs_Utq-6CCTsJfMoapMNMosjo_J6dHC7tQh_jIqqLwZGEZp-pgRTfK8SwNckjV_zzAI4CCrMZdw8L1yA99JT0ncbv7WqgAKi2Iv8B2QNZYYkNITsE9lDeMCrAiRQ5kMT78OMixl72ZaClnY7V7Iu5EJzRgrLkcXe8cMtw5_6dq1DpQqXkGoDe-JmqMv2esF-oiJ7ia_98z0KSLVRCTnDnuA_a-YnSAwgz4E7IMZ7P3PbE1u6OWKVQ_mGqHmHjkGQySG-JbOVqOfgOWlz_ceFcv5AR8NGxk1xZHgj8041Ntl1hqHmw1nkPdNRAkWLiaN6V9XD6FD9YwQRkisQXHE5JJXl1SfQ4TlLdMt3A94ieq2dBbEUIyTuFp7LI8n6ZvUXopz2LDleIoYVZrc6bwVlRGy23w9dtMoiiqDHZ9smaqitY-I4pIwkkrikxMdSvfIHwI_6rjFLhrNu71M4IEkxY6JNmsmf3vlme0YpvWMVuPCZXfnV26YNVgQl0U6QZ8wlBfimVGpSYzlULfafrEnFfP9zMx49KzaijHPwMfrHfOsOtutOgAyQzMOsnS4yBzF216vvy7MqX-d1MZJ-6tzQzxDPkVmWna64eZyGkK2_oziM88ntb09Ij1p_Wo5R5NGYBoGhmW2fwRLZCWB4Wmvkpsvb-lsm4YR8BzmAjSO1ITje2bblpk8KvOuZ2abjt6bZXGL1DLWzNQ5rJSIWgG1-Y37LQGNoSVp1ByYveYBL5bABBh0Sxc3_s36x5rcMCw4N2n-ZkQLpn2vDN46a_llajoN-yGDOU46D0N5aDfxsXQMFEbeH-bIi4agK_m6rLUxabxAp3kUzM31iHRhpcsX7UyvdlDD_Ebm_zncsenv92jw HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sun, 05 Nov 2023 08:58:43 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
dn942u3h8eexff2g.test.resolver.perfops.net/
200 OK 17 B URL GET HTTP/1.1 dn942u3h8eexff2g.test.resolver.perfops.net/
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerDigiCert Inc
Subjectresolver.perfops.net
Fingerprint2C:1E:B7:21:D6:7A:7A:DD:DE:1B:61:CF:31:BC:78:0F:01:D8:0F:CF
ValidityMon, 17 Jul 2023 00:00:00 GMT - Fri, 16 Aug 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash e7dd83033f3d1209743943a892bce790
613bcabae81bc5c28cf457ffc0af8e9f3bc4707c
d9e18d7ebab47455212152413bb617058c000c9a9e586e09d65f4dc293a2e348
GET / HTTP/1.1
Host: dn942u3h8eexff2g.test.resolver.perfops.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET,OPTIONS
Timing-Allow-Origin: *
Content-Type: application/json; charset=utf-8
Content-Length: 17
ETag: W/"11-YTvKuugbxcKM9Ff/wK+OnzvEcHw"
Date: Sun, 05 Nov 2023 08:58:45 GMT
Connection: keep-alive
Keep-Alive: timeout=5
33fjrjgtp9eww3he.test.resolver.perfops.net/
200 OK 17 B URL GET HTTP/1.1 33fjrjgtp9eww3he.test.resolver.perfops.net/
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerDigiCert Inc
Subjectresolver.perfops.net
Fingerprint2C:1E:B7:21:D6:7A:7A:DD:DE:1B:61:CF:31:BC:78:0F:01:D8:0F:CF
ValidityMon, 17 Jul 2023 00:00:00 GMT - Fri, 16 Aug 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash e7dd83033f3d1209743943a892bce790
613bcabae81bc5c28cf457ffc0af8e9f3bc4707c
d9e18d7ebab47455212152413bb617058c000c9a9e586e09d65f4dc293a2e348
GET / HTTP/1.1
Host: 33fjrjgtp9eww3he.test.resolver.perfops.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET,OPTIONS
Timing-Allow-Origin: *
Content-Type: application/json; charset=utf-8
Content-Length: 17
ETag: W/"11-YTvKuugbxcKM9Ff/wK+OnzvEcHw"
Date: Sun, 05 Nov 2023 08:58:45 GMT
Connection: keep-alive
Keep-Alive: timeout=5
1molt7d9wrpsq5ym.test.resolver.perfops.net/
200 OK 17 B URL GET HTTP/1.1 1molt7d9wrpsq5ym.test.resolver.perfops.net/
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerDigiCert Inc
Subjectresolver.perfops.net
Fingerprint2C:1E:B7:21:D6:7A:7A:DD:DE:1B:61:CF:31:BC:78:0F:01:D8:0F:CF
ValidityMon, 17 Jul 2023 00:00:00 GMT - Fri, 16 Aug 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash e7dd83033f3d1209743943a892bce790
613bcabae81bc5c28cf457ffc0af8e9f3bc4707c
d9e18d7ebab47455212152413bb617058c000c9a9e586e09d65f4dc293a2e348
GET / HTTP/1.1
Host: 1molt7d9wrpsq5ym.test.resolver.perfops.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET,OPTIONS
Timing-Allow-Origin: *
Content-Type: application/json; charset=utf-8
Content-Length: 17
ETag: W/"11-YTvKuugbxcKM9Ff/wK+OnzvEcHw"
Date: Sun, 05 Nov 2023 08:58:45 GMT
Connection: keep-alive
Keep-Alive: timeout=5
rum-cdn.perfops.net/providers
200 OK 931 B URL GET HTTP/2 rum-cdn.perfops.net/providers
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectperfops.net
FingerprintFD:F3:2A:AB:59:10:EC:F4:82:5D:5F:C7:83:FA:9B:60:E3:27:E9:27
ValidityThu, 26 Oct 2023 11:45:20 GMT - Wed, 24 Jan 2024 11:45:19 GMT
File type gzip compressed data, from Unix\012- data
Hash 729d9c178f9971032f68e844bcdc92b7
2a8d67f2839f801b41b3182b1d2711efab446d8b
9950165594812df0b0ed2974d296d780ee632e09c6ff9be850d20596953c1986
GET /providers HTTP/1.1
Host: rum-cdn.perfops.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:45 GMT
content-type: application/json; charset=utf-8
cache-control: public, max-age=30, must-revalidate
access-control-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8213e5938fb356cc-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
lepresidentvip.blogspot.com/b/csi.do
200 OK 37 B URL POST HTTP/3 lepresidentvip.blogspot.com/b/csi.do
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint1F:9F:66:61:40:8F:19:DE:30:44:23:EA:EB:6E:C0:FC:6D:58:69:25
ValidityMon, 16 Oct 2023 08:08:16 GMT - Mon, 08 Jan 2024 08:08:15 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 926f479d9d65dad243502a3fb0dfbb42
67125051b30e1960df777e00ebe2f6962ac53dda
449dd2e75970ceed30c36fa0d2b54da5ba263fe8f388130f7b6f0cd2fc4cd7d7
POST /b/csi.do HTTP/1.1
Host: lepresidentvip.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 1205
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 05 Nov 2023 08:58:46 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 37
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ffffdloc1p9poy.sboxcdn.com/500b-bench.jpg?t=1699174726126
200 OK 499 B URL GET HTTP/1.1 ffffdloc1p9poy.sboxcdn.com/500b-bench.jpg?t=1699174726126
IP
ASN #17665 ONEOTT INTERTAINMENT LIMITED
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerLet's Encrypt
Subject*.sboxcdn.com
Fingerprint6C:E5:E7:82:D7:EF:A7:5E:70:94:0C:39:09:DF:69:06:29:EE:24:DF
ValidityMon, 16 Oct 2023 12:38:32 GMT - Sun, 14 Jan 2024 12:38:31 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /500b-bench.jpg?t=1699174726126 HTTP/1.1
Host: ffffdloc1p9poy.sboxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET,OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: *
Cache-Control: max-age=31536000
Content-Length: 499
Content-Type: image/jpeg
Date: Fri, 03 Nov 2023 12:46:39 GMT
Last-Modified: Fri, 20 Aug 2021 20:21:34 GMT
Server: nginx
Timing-Allow-Origin: *
X-SB-PoP: bom93-0106
X-SB-Cache: TCP_HIT
Etag: "61200ece-1f3"
Age: 159128
Connection: keep-alive
X-MoneyTrace: trace-id=329142bf-420b-8885-f7c0-a68d6c381079;parent-id=387537485189407744;span-id=496401494855560281, trace-id=d34f9c96-19e7-5b10-19ab-a18a6cbaa2fd;parent-id=78862052701549920;span-id=78862052701549920
d3888oxgux3fey.cloudfront.net/500b-bench.jpg?t=1699174727362
200 OK 499 B URL GET HTTP/2 d3888oxgux3fey.cloudfront.net/500b-bench.jpg?t=1699174727362
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /500b-bench.jpg?t=1699174727362 HTTP/1.1
Host: d3888oxgux3fey.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 499
access-control-allow-origin: *
access-control-allow-methods: GET
last-modified: Mon, 19 Apr 2021 16:03:56 GMT
accept-ranges: bytes
server: AmazonS3
timing-allow-origin: *
access-control-expose-headers: *
date: Sun, 05 Nov 2023 05:18:06 GMT
etag: "947db36d5825904cc98e46042d5fd76a"
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zCg7JfuqUsSmH64uLlxOV4KMskN9iuQA5jVYWd597snRpQfA9GzXAg==
age: 13258
X-Firefox-Spdy: h2
live.video.globo.com/500b-bench.jpg?t=1699174727444
200 OK 499 B URL GET HTTP/1.1 live.video.globo.com/500b-bench.jpg?t=1699174727444
IP
ASN #28604 Globo Comunicacao e Participacoes SA
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerDigiCert Inc
Subject*.video.globo.com
Fingerprint18:0D:F7:2A:B9:DD:2C:04:7E:26:90:2E:05:AF:F3:7F:02:4A:5B:53
ValidityMon, 18 Sep 2023 00:00:00 GMT - Tue, 17 Sep 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /500b-bench.jpg?t=1699174727444 HTTP/1.1
Host: live.video.globo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sun, 05 Nov 2023 08:58:48 GMT
Content-Type: image/jpeg
Content-Length: 499
Last-Modified: Thu, 03 Aug 2023 18:57:17 GMT
Connection: keep-alive
ETag: "64cbf88d-1f3"
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
Accept-Ranges: bytes
vodstreaming01.video.globo.com/500b-bench.jpg?t=1699174728698
200 OK 499 B URL GET HTTP/1.1 vodstreaming01.video.globo.com/500b-bench.jpg?t=1699174728698
IP
ASN #28604 Globo Comunicacao e Participacoes SA
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerDigiCert Inc
Subject*.video.globo.com
Fingerprint18:0D:F7:2A:B9:DD:2C:04:7E:26:90:2E:05:AF:F3:7F:02:4A:5B:53
ValidityMon, 18 Sep 2023 00:00:00 GMT - Tue, 17 Sep 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /500b-bench.jpg?t=1699174728698 HTTP/1.1
Host: vodstreaming01.video.globo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sun, 05 Nov 2023 08:58:49 GMT
Content-Type: image/jpeg
Content-Length: 499
Last-Modified: Mon, 07 Aug 2023 14:19:13 GMT
Connection: keep-alive
ETag: "64d0fd61-1f3"
Expires: Sun, 05 Nov 2023 08:58:48 GMT
Cache-Control: no-cache
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
Accept-Ranges: bytes
devnull.perfops.net/rum/v1
200 OK 87 B URL POST HTTP/2 devnull.perfops.net/rum/v1
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectperfops.net
FingerprintFD:F3:2A:AB:59:10:EC:F4:82:5D:5F:C7:83:FA:9B:60:E3:27:E9:27
ValidityThu, 26 Oct 2023 11:45:20 GMT - Wed, 24 Jan 2024 11:45:19 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash b94991ed9b09b815a773ee8787ec00ad
233b805d30604c1e64e734d314065e87958c076f
2c3fb51dbf5339e802f0a1d3103ee9e615990e415d786b628d9dcfc64fe204c0
POST /rum/v1 HTTP/1.1
Host: devnull.perfops.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1473
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:50 GMT
content-type: application/json; charset=utf-8
access-control-allow-headers: *
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8213e5af1e1556cc-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
perfops-ic-5b5a2a00-0a73f3-a4x2.s.loris.llnwd.net/500b-bench.jpg?t=1699174730154
200 OK 499 B URL GET HTTP/2 perfops-ic-5b5a2a00-0a73f3-a4x2.s.loris.llnwd.net/500b-bench.jpg?t=1699174730154
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerSectigo Limited
Subject*.hs.llnwd.net
Fingerprint63:D3:89:40:69:80:20:2E:DC:DB:FF:D2:29:5F:87:E5:EC:AC:11:49
ValiditySun, 27 Nov 2022 00:00:00 GMT - Mon, 27 Nov 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /500b-bench.jpg?t=1699174730154 HTTP/1.1
Host: perfops-ic-5b5a2a00-0a73f3-a4x2.s.loris.llnwd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: https://lepresidentvip.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.14.2
content-type: image/jpeg
cache-control: public, s-maxage=86400, max-age=31536000
surrogate-control: max-age=86400
cachefly-control: max-age=86400
tiggee-control: max-age=86400
x-tiggee: usqas
accept-ranges: bytes
x-cdn-cache: HIT
x-llid: c0f890a9af93d313b6f5d947827229c3
age: 69831
date: Sun, 05 Nov 2023 08:58:50 GMT
last-modified: Fri, 20 Aug 2021 20:21:34 GMT
expires: Sun, 05 Nov 2023 13:34:59 GMT
content-length: 499
x-cache: HIT from c2.cds234.arn.llnw.net s:0, HIT from c2.cds244.arn.llnw.net s:0
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
x-cds: 178.79.213.69
x-llnw-dscp: 26
X-Firefox-Spdy: h2
perfops.s.llnwi.net/500b-bench.jpg?t=1699174730442
200 OK 499 B URL GET HTTP/2 perfops.s.llnwi.net/500b-bench.jpg?t=1699174730442
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerSectigo Limited
Subject*.hs.llnwd.net
Fingerprint63:D3:89:40:69:80:20:2E:DC:DB:FF:D2:29:5F:87:E5:EC:AC:11:49
ValiditySun, 27 Nov 2022 00:00:00 GMT - Mon, 27 Nov 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /500b-bench.jpg?t=1699174730442 HTTP/1.1
Host: perfops.s.llnwi.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: EdgePrism/5.1.4.0
mime-version: 1.0
content-type: image/jpeg
x-llid: 38d809d2ba61f03d9ce004ddb6308a41
x-cdn-cache: HIT
date: Sun, 05 Nov 2023 08:58:50 GMT
content-length: 499
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
x-llnw-dscp: 26
x-debug: ASN=50304;Country=no
x-cdspop: arn
X-Firefox-Spdy: h2
devnull.perfops.net/rum/v1
200 OK 586 B URL POST HTTP/2 devnull.perfops.net/rum/v1
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectperfops.net
FingerprintFD:F3:2A:AB:59:10:EC:F4:82:5D:5F:C7:83:FA:9B:60:E3:27:E9:27
ValidityThu, 26 Oct 2023 11:45:20 GMT - Wed, 24 Jan 2024 11:45:19 GMT
File type gzip compressed data, from Unix\012- data
Hash d749a0445a4cea6fea024bf75a7024ac
182a0ad4aeb8c6c19f66b5ee45edb864a29ac54f
d06e58b6adab435c3d20bdc75fdf98dff69a6918e5a6162bca3c659fe17cbc62
POST /rum/v1 HTTP/1.1
Host: devnull.perfops.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1849
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:50 GMT
content-type: application/json; charset=utf-8
access-control-allow-headers: *
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8213e5b1c81056cc-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
25748s.ha.azioncdn.net/500b-az-bench.jpg?t=1699174730709
200 OK 499 B URL GET HTTP/2 25748s.ha.azioncdn.net/500b-az-bench.jpg?t=1699174730709
IP
ASN #52580 Azion Technologies Ltda.
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGlobalSign nv-sa
Subjectazion.com
Fingerprint5F:45:C5:94:4B:3B:AE:61:3F:DD:86:A3:95:92:17:13:49:05:33:7C
ValidityFri, 26 May 2023 12:12:03 GMT - Sun, 10 Dec 2023 00:11:01 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /500b-az-bench.jpg?t=1699174730709 HTTP/1.1
Host: 25748s.ha.azioncdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:50 GMT
content-type: image/jpeg
content-length: 499
server: nginx/1.14.2
last-modified: Fri, 20 Aug 2021 20:21:34 GMT
etag: "61200ece-1f3"
cache-control: max-age=300
surrogate-control: max-age=86400
cachefly-control: max-age=86400
tiggee-control: max-age=86400
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: *
timing-allow-origin: *
access-control-expose-headers: *
x-tiggee: usqas
expires: Sun, 05 Nov 2023 09:03:50 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
perfops-static.freetls.fastly.net/500b-bench.jpg?t=1699174730979
200 OK 499 B URL GET HTTP/2 perfops-static.freetls.fastly.net/500b-bench.jpg?t=1699174730979
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGlobalSign nv-sa
Subject*.freetls.fastly.net
Fingerprint3C:AD:06:63:8B:25:38:CD:2C:0E:E1:49:70:60:2F:05:72:BA:55:42
ValiditySun, 05 Feb 2023 22:59:56 GMT - Fri, 08 Mar 2024 22:59:55 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /500b-bench.jpg?t=1699174730979 HTTP/1.1
Host: perfops-static.freetls.fastly.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.2
content-type: image/jpeg
last-modified: Fri, 20 Aug 2021 20:21:34 GMT
etag: "61200ece-1f3"
cache-control: public, s-maxage=86400, max-age=31536000
tiggee-control: max-age=86400
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: *
timing-allow-origin: *
access-control-expose-headers: *
x-tiggee: usqas
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 05 Nov 2023 08:58:51 GMT
age: 12514425
x-served-by: cache-iad-kcgs7200151-IAD, cache-bma1665-BMA
x-cache: HIT, HIT
x-cache-hits: 34871, 3632
x-timer: S1699174731.037286,VS0,VE0
content-length: 499
X-Firefox-Spdy: h2
perfops.gcorelabs.com/500b-bench.jpg?t=1699174731059
200 OK 499 B URL GET HTTP/2 perfops.gcorelabs.com/500b-bench.jpg?t=1699174731059
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerDigiCert Inc
Subject*.gcorelabs.com
FingerprintB8:99:45:1D:A9:01:0E:25:C5:C0:82:6A:EB:41:FF:F8:04:5D:84:B1
ValidityTue, 14 Mar 2023 00:00:00 GMT - Mon, 18 Dec 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /500b-bench.jpg?t=1699174731059 HTTP/1.1
Host: perfops.gcorelabs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 Nov 2023 08:58:51 GMT
content-type: image/jpeg
content-length: 499
last-modified: Tue, 27 Feb 2018 09:59:45 GMT
etag: "5a952c11-1f3"
access-control-allow-origin: *
cache-control: max-age=315360000, public
timing-allow-origin: *
access-control-expose-headers: *
x-date: Tuesday, 18-Jul-2023 06:42:17 GMT
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2023-07-18T06:42:17+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
devnull.perfops.net/rum/v1
200 OK 586 B URL POST HTTP/2 devnull.perfops.net/rum/v1
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectperfops.net
FingerprintFD:F3:2A:AB:59:10:EC:F4:82:5D:5F:C7:83:FA:9B:60:E3:27:E9:27
ValidityThu, 26 Oct 2023 11:45:20 GMT - Wed, 24 Jan 2024 11:45:19 GMT
File type gzip compressed data, from Unix\012- data
Hash d749a0445a4cea6fea024bf75a7024ac
182a0ad4aeb8c6c19f66b5ee45edb864a29ac54f
d06e58b6adab435c3d20bdc75fdf98dff69a6918e5a6162bca3c659fe17cbc62
POST /rum/v1 HTTP/1.1
Host: devnull.perfops.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1786
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:51 GMT
content-type: application/json; charset=utf-8
access-control-allow-headers: *
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8213e5b5eb6456cc-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
edgecast-perfops.azureedge.net/500b-bench.jpg?t=1699174731377
200 OK 499 B URL GET HTTP/2 edgecast-perfops.azureedge.net/500b-bench.jpg?t=1699174731377
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerDigiCert Inc
Subject*.vo.msecnd.net
Fingerprint05:B5:17:B1:7B:67:1E:E3:79:EE:86:4A:4A:CD:32:5C:8A:8E:26:E3
ValiditySun, 16 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /500b-bench.jpg?t=1699174731377 HTTP/1.1
Host: edgecast-perfops.azureedge.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: *
age: 73632707
cache-control: max-age=315360000, public
content-type: image/jpeg
date: Sun, 05 Nov 2023 08:58:51 GMT
etag: "5a952c11-1f3"
expires: Tue, 05 Dec 2023 08:58:51 GMT
last-modified: Tue, 27 Feb 2018 09:59:45 GMT
server: ECAcc (ska/F6A3)
timing-allow-origin: *
x-cache: HIT
x-date: Tuesday, 06-Jul-2021 03:27:04 GMT
content-length: 499
X-Firefox-Spdy: h2
cpt96125.shopvoxpopulus.com/pics/500b-bench.jpg?t=1699174731626
200 OK 499 B URL GET HTTP/2 cpt96125.shopvoxpopulus.com/pics/500b-bench.jpg?t=1699174731626
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectcpt96125.shopvoxpopulus.com
Fingerprint88:D1:18:94:23:0D:50:14:3C:4A:0D:CD:53:F1:82:0A:2E:A9:41:32
ValidityThu, 28 Sep 2023 21:29:58 GMT - Wed, 27 Dec 2023 22:23:11 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /pics/500b-bench.jpg?t=1699174731626 HTTP/1.1
Host: cpt96125.shopvoxpopulus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 499
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
access-control-expose-headers: *
accept-ranges: bytes
date: Wed, 11 Oct 2023 07:30:12 GMT
cache-control: public,max-age=31622400
age: 2165319
last-modified: Tue, 21 Dec 2021 03:50:51 GMT
etag: "61c14f1b-1f3"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL OPTIONS HTTP/3 translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintFA:D7:68:E4:12:7D:FE:22:87:DE:95:F1:1E:49:5A:49:FA:12:1E:B9
ValidityMon, 16 Oct 2023 08:10:01 GMT - Mon, 08 Jan 2024 08:10:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-encoding,content-type,x-goog-authuser
Referer: https://lepresidentvip.blogspot.com/
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://lepresidentvip.blogspot.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin
content-type: text/plain; charset=UTF-8
date: Sun, 05 Nov 2023 08:58:51 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+706; expires=Tue, 04-Nov-2025 08:58:51 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sun, 05 Nov 2023 08:58:51 GMT
cache-control: private
translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL OPTIONS HTTP/3 translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintFA:D7:68:E4:12:7D:FE:22:87:DE:95:F1:1E:49:5A:49:FA:12:1E:B9
ValidityMon, 16 Oct 2023 08:10:01 GMT - Mon, 08 Jan 2024 08:10:00 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Encoding: gzip
Content-Type: application/binary
Content-Length: 327
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://lepresidentvip.blogspot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Sun, 05 Nov 2023 08:58:51 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+329; expires=Tue, 04-Nov-2025 08:58:51 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sun, 05 Nov 2023 08:58:51 GMT
medianova-cdnvperf.mncdn.com/500b-bench.jpg?t=1699174731695
200 OK 499 B URL GET HTTP/2 medianova-cdnvperf.mncdn.com/500b-bench.jpg?t=1699174731695
IP
ASN #21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerDigiCert Inc
Subject*.mncdn.com
Fingerprint79:D9:76:9D:5B:43:51:93:C7:4E:72:1E:42:56:01:92:33:12:23:DA
ValidityThu, 20 Jul 2023 00:00:00 GMT - Mon, 19 Aug 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /500b-bench.jpg?t=1699174731695 HTTP/1.1
Host: medianova-cdnvperf.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:51 GMT
content-type: image/jpeg
content-length: 499
last-modified: Fri, 20 Aug 2021 20:21:34 GMT
cache-control: max-age=0
surrogate-control: max-age=86400
cachefly-control: max-age=86400
tiggee-control: max-age=86400
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: *
timing-allow-origin: *
access-control-expose-headers: *
x-tiggee: usqas
expires: Sun, 05 Nov 2023 08:58:51 GMT
server: MNCDN-163154
x-edge-location: RO-687
x-mnrequest-id: e232ffca73b3d0743fe1d3b7e2553836
x-cache-status: Edge : HIT,
accept-ranges: bytes
X-Firefox-Spdy: h2
devnull.perfops.net/rum/v1
200 OK 586 B URL POST HTTP/2 devnull.perfops.net/rum/v1
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectperfops.net
FingerprintFD:F3:2A:AB:59:10:EC:F4:82:5D:5F:C7:83:FA:9B:60:E3:27:E9:27
ValidityThu, 26 Oct 2023 11:45:20 GMT - Wed, 24 Jan 2024 11:45:19 GMT
File type gzip compressed data, from Unix\012- data
Hash d749a0445a4cea6fea024bf75a7024ac
182a0ad4aeb8c6c19f66b5ee45edb864a29ac54f
d06e58b6adab435c3d20bdc75fdf98dff69a6918e5a6162bca3c659fe17cbc62
POST /rum/v1 HTTP/1.1
Host: devnull.perfops.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1683
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:51 GMT
content-type: application/json; charset=utf-8
access-control-allow-headers: *
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8213e5ba9fa956cc-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdnperf.cachefly.net/500b-bench.jpg?t=1699174732280
499 B URL GET cdnperf.cachefly.net/500b-bench.jpg?t=1699174732280
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGlobalSign nv-sa
Subject*.cachefly.net
Fingerprint87:60:CE:BC:51:1E:A4:F3:66:03:F9:E1:93:68:42:A1:DC:A7:13:96
ValidityTue, 01 Nov 2022 20:26:02 GMT - Sun, 03 Dec 2023 20:26:01 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /500b-bench.jpg?t=1699174732280 HTTP/1.1
Host: cdnperf.cachefly.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:52 GMT
content-type: image/jpeg
content-length: 499
last-modified: Fri, 20 Aug 2021 20:21:34 GMT
etag: "61200ece-1f3"
cache-control: public, s-maxage=86400, max-age=31536000
surrogate-control: max-age=86400
cachefly-control: max-age=86400
tiggee-control: max-age=86400
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: *
timing-allow-origin: *
access-control-expose-headers: *
x-tiggee: usqas
x-cf3: H
cf4age: 2526165
cf4ttll: -2439765
x-cf-tsc: 1699037446
cf4ttl: 86400.000
x-cf2: H
server: CFS 0215
x-cf1: 28637:fA.arn1:co:1610982815:cacheN.arn1-01:H
x-cf-reqid: 000c1b4ab6cd8eb062bd2809f2ffd947
accept-ranges: bytes
X-Firefox-Spdy: h2
akamai-cdn.perfops.io/500b-bench.jpg?t=1699174732454
499 B URL akamai-cdn.perfops.io/500b-bench.jpg?t=1699174732454
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /500b-bench.jpg?t=1699174732454 HTTP/1.1
Host: akamai-cdn.perfops.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.14.2
content-type: image/jpeg
content-length: 499
last-modified: Fri, 20 Aug 2021 20:21:34 GMT
etag: "61200ece-1f3"
surrogate-control: max-age=86400
cachefly-control: max-age=86400
tiggee-control: max-age=86400
x-tiggee: usqas
accept-ranges: bytes
cache-control: public, max-age=31536000, s-maxage=86400
date: Sun, 05 Nov 2023 08:58:52 GMT
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
access-control-expose-headers: *
access-control-allow-headers: *
access-control-allow-methods: GET, OPTIONS
access-control-allow-credentials: true
access-control-allow-origin: *
x-cache-status: Hit from child
X-Firefox-Spdy: h2
perfops.r.worldssl.net/500b-bench.jpg?t=1699174732607
499 B URL GET perfops.r.worldssl.net/500b-bench.jpg?t=1699174732607
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerLet's Encrypt
Subject*.r.worldssl.net
FingerprintE3:45:04:C1:41:6F:C6:3A:C9:04:4C:31:58:31:AA:41:DE:84:84:7D
ValidityFri, 22 Sep 2023 01:41:17 GMT - Thu, 21 Dec 2023 01:41:16 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /500b-bench.jpg?t=1699174732607 HTTP/1.1
Host: perfops.r.worldssl.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 Nov 2023 08:58:52 GMT
content-type: image/jpeg
content-length: 499
last-modified: Tue, 27 Feb 2018 09:59:45 GMT
etag: "5a952c11-1f3"
access-control-allow-origin: *
cache-control: max-age=315360000, public
timing-allow-origin: *
access-control-expose-headers: *
x-date: Monday, 22-Feb-2021 08:17:44 GMT
x-age: 85192867
x-cache: HIT
x-storage: 77991782:8001
accept-ranges: bytes
x-edge-ip: 94.254.0.211
x-edge-location: Stockholm, SE
X-Firefox-Spdy: h2
perfops.cloudflareperf.com/500b-cf-bench.jpg?t=1699174732855
499 B URL GET perfops.cloudflareperf.com/500b-cf-bench.jpg?t=1699174732855
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerLet's Encrypt
Subject*.cloudflareperf.com
Fingerprint1C:C0:F4:B5:BC:10:AA:F9:95:4F:3A:B2:89:7D:D7:F7:8E:3A:9D:99
ValiditySat, 16 Sep 2023 09:03:02 GMT - Fri, 15 Dec 2023 09:03:01 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /500b-cf-bench.jpg?t=1699174732855 HTTP/1.1
Host: perfops.cloudflareperf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:52 GMT
content-type: image/jpeg
content-length: 499
cf-cache-status: HIT
timing-allow-origin: *
etag: "5a952c11-1f3"
access-control-expose-headers: *
cache-control: public, max-age=315360000
access-control-allow-origin: *
vary: Accept-Encoding
server: cloudflare
cf-ray: 8213e5c0ae92b51b-OSL
X-Firefox-Spdy: h2
devnull.perfops.net/rum/v1
200 OK 460 B URL POST HTTP/2 devnull.perfops.net/rum/v1
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectperfops.net
FingerprintFD:F3:2A:AB:59:10:EC:F4:82:5D:5F:C7:83:FA:9B:60:E3:27:E9:27
ValidityThu, 26 Oct 2023 11:45:20 GMT - Wed, 24 Jan 2024 11:45:19 GMT
File type gzip compressed data, from Unix\012- data
Hash de6a97ec2200467b2a98ffc2ad7ef977
5895d13bfe97061276034f5a0f94dc111a0a0e2c
f08036e015388ffe2b13853f6b6d1f5bf2d86692bcfd7f2c7c16e6ecfa2e4f48
POST /rum/v1 HTTP/1.1
Host: devnull.perfops.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1401
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:52 GMT
content-type: application/json; charset=utf-8
access-control-allow-headers: *
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8213e5c0dc7956cc-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.jsdelivr.net/gh/jimaek/js-test@1.1/500b-bench.jpg?t=1699174733235
499 B URL GET cdn.jsdelivr.net/gh/jimaek/js-test@1.1/500b-bench.jpg?t=1699174733235
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /gh/jimaek/js-test@1.1/500b-bench.jpg?t=1699174733235 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: image/jpeg
x-jsd-version: 1.1
x-jsd-version-type: version
etag: W/"1f3-/tIf/fPnLNLVqGzoCg5bXeAb6AM"
accept-ranges: bytes
date: Sun, 05 Nov 2023 08:58:53 GMT
age: 7518386
x-served-by: cache-fra-eddf8230137-FRA, cache-bma1657-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 499
X-Firefox-Spdy: h2
devnull.perfops.net/rum/v1
200 OK 586 B URL POST HTTP/2 devnull.perfops.net/rum/v1
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectperfops.net
FingerprintFD:F3:2A:AB:59:10:EC:F4:82:5D:5F:C7:83:FA:9B:60:E3:27:E9:27
ValidityThu, 26 Oct 2023 11:45:20 GMT - Wed, 24 Jan 2024 11:45:19 GMT
File type gzip compressed data, from Unix\012- exported SGML document text\012- data
Hash d749a0445a4cea6fea024bf75a7024ac
182a0ad4aeb8c6c19f66b5ee45edb864a29ac54f
d06e58b6adab435c3d20bdc75fdf98dff69a6918e5a6162bca3c659fe17cbc62
POST /rum/v1 HTTP/1.1
Host: devnull.perfops.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1707
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:53 GMT
content-type: application/json; charset=utf-8
access-control-allow-headers: *
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8213e5c33ea956cc-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ultrawaf.canary.scrubbingcenter.com/test_image.png?t=1699174733554
373 B URL ultrawaf.canary.scrubbingcenter.com/test_image.png?t=1699174733554
IP
File type PNG image data, 150 x 100, 4-bit colormap, non-interlaced\012- data
Hash 5c9dd9b6ec56655bbf0a238425b737ee
bee9dc5d0e34224d949f1dd661df3237d78da532
aa32e6cf97bcd905d1a06df2990ce5b2f2337e940f639f058891d8daba6a2fb1
GET /test_image.png?t=1699174733554 HTTP/1.1
Host: ultrawaf.canary.scrubbingcenter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Sun, 05 Nov 2023 08:58:53 GMT
Content-Type: image/png
Content-Length: 373
Last-Modified: Wed, 15 Feb 2023 13:24:49 GMT
Connection: keep-alive
ETag: "63ecdd21-175"
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
Accept-Ranges: bytes
devnull.perfops.net/rum/v1
200 OK 586 B URL POST HTTP/2 devnull.perfops.net/rum/v1
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectperfops.net
FingerprintFD:F3:2A:AB:59:10:EC:F4:82:5D:5F:C7:83:FA:9B:60:E3:27:E9:27
ValidityThu, 26 Oct 2023 11:45:20 GMT - Wed, 24 Jan 2024 11:45:19 GMT
File type gzip compressed data, from Unix\012- data
Hash d749a0445a4cea6fea024bf75a7024ac
182a0ad4aeb8c6c19f66b5ee45edb864a29ac54f
d06e58b6adab435c3d20bdc75fdf98dff69a6918e5a6162bca3c659fe17cbc62
POST /rum/v1 HTTP/1.1
Host: devnull.perfops.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1778
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:53 GMT
content-type: application/json; charset=utf-8
access-control-allow-headers: *
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8213e5c6590156cc-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
1596384882.rsc.cdn77.org/500b-bench.jpg?t=1699174733888
499 B URL 1596384882.rsc.cdn77.org/500b-bench.jpg?t=1699174733888
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /500b-bench.jpg?t=1699174733888 HTTP/1.1
Host: 1596384882.rsc.cdn77.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:53 GMT
content-type: image/jpeg
content-length: 499
last-modified: Fri, 20 Aug 2021 20:21:34 GMT
etag: "61200ece-1f3"
cache-control: public, s-maxage=86400, max-age=31536000
surrogate-control: max-age=86400
cachefly-control: max-age=86400
tiggee-control: max-age=86400
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: *
timing-allow-origin: *
access-control-expose-headers: *
x-tiggee: usqas
server: CDN77-Turbo
x-77-nzt: AXl/LVA3Nzf/mwABAA
x-77-nzt-ray: c1fb9819c302b6374d5947653556ad39
x-accel-expires: @1699195417
x-accel-date: 1699109042
x-cache-lb: HIT
x-age-lb: 65691
x-77-pop: copenhagenDK
x-77-cache: HIT
x-77-age: 65691
accept-ranges: bytes
X-Firefox-Spdy: h2
cdnperf.qwilt.com/500b-bench.jpg?t=1699174734009
499 B URL cdnperf.qwilt.com/500b-bench.jpg?t=1699174734009
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /500b-bench.jpg?t=1699174734009 HTTP/1.1
Host: cdnperf.qwilt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.14.2
content-type: image/jpeg
last-modified: Fri, 20 Aug 2021 20:21:34 GMT
etag: "61200ece-1f3"
cachefly-control: max-age=86400
tiggee-control: max-age=86400
timing-allow-origin: *
x-tiggee: usqas
accept-ranges: bytes
date: Sun, 05 Nov 2023 08:58:54 GMT
via: 1.1 varnish
age: 49212
x-served-by: cache-bma1639-BMA
x-cache: HIT
x-cache-hits: 967
x-timer: S1699174734.201064,VS0,VE0
cache-control: no-cache
access-control-expose-headers: *
access-control-allow-credentials: true
access-control-allow-headers: access-control-allow-credentials, access-control-allow-headers, access-control-allow-methods, access-control-allow-origin, timing-allow-origin
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
ocn-cache-status: HIT
ocn-served-by: BMA
ocn-requestid: 2747978353
content-length: 499
X-Firefox-Spdy: h2
devnull.perfops.net/rum/v1
200 OK 586 B URL POST HTTP/2 devnull.perfops.net/rum/v1
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectperfops.net
FingerprintFD:F3:2A:AB:59:10:EC:F4:82:5D:5F:C7:83:FA:9B:60:E3:27:E9:27
ValidityThu, 26 Oct 2023 11:45:20 GMT - Wed, 24 Jan 2024 11:45:19 GMT
File type gzip compressed data, from Unix\012- data
Hash d749a0445a4cea6fea024bf75a7024ac
182a0ad4aeb8c6c19f66b5ee45edb864a29ac54f
d06e58b6adab435c3d20bdc75fdf98dff69a6918e5a6162bca3c659fe17cbc62
POST /rum/v1 HTTP/1.1
Host: devnull.perfops.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2284
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:54 GMT
content-type: application/json; charset=utf-8
access-control-allow-headers: *
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8213e5c90bfd56cc-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
media-edge.1e100cdn.net/pics/500b-bench.jpg?t=1699174735006
499 B URL media-edge.1e100cdn.net/pics/500b-bench.jpg?t=1699174735006
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /pics/500b-bench.jpg?t=1699174735006 HTTP/1.1
Host: media-edge.1e100cdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 21 Dec 2021 03:50:51 GMT
server: Google-Edge-Cache
date: Sat, 04 Nov 2023 19:21:21 GMT
content-type: image/jpeg
cache-control: public, s-maxage=86400, max-age=31536000
surrogate-control: max-age=86400
cachefly-control: max-age=86400
tiggee-control: max-age=86400
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: *
timing-allow-origin: *
access-control-expose-headers: *
x-tiggee: usqas
accept-ranges: bytes
x-request-id: 0237498c-1990-44a6-9221-8277822b3096
x-xss-protection: 0
x-frame-options: SAMEORIGIN
age: 49054
x-content-type-options: nosniff
content-length: 499
etag: "61c14f1b-1f3"
cache-id: b3NsLXh0LWJsaXgtb3NsMQ
cache-status: osl-f7f894eb; hit, osl;miss
alt-svc: clear
X-Firefox-Spdy: h2
devnull.perfops.net/rum/v1
200 OK 586 B URL POST HTTP/2 devnull.perfops.net/rum/v1
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectperfops.net
FingerprintFD:F3:2A:AB:59:10:EC:F4:82:5D:5F:C7:83:FA:9B:60:E3:27:E9:27
ValidityThu, 26 Oct 2023 11:45:20 GMT - Wed, 24 Jan 2024 11:45:19 GMT
File type gzip compressed data, from Unix\012- data
Hash d749a0445a4cea6fea024bf75a7024ac
182a0ad4aeb8c6c19f66b5ee45edb864a29ac54f
d06e58b6adab435c3d20bdc75fdf98dff69a6918e5a6162bca3c659fe17cbc62
POST /rum/v1 HTTP/1.1
Host: devnull.perfops.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2119
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:55 GMT
content-type: application/json; charset=utf-8
access-control-allow-headers: *
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8213e5cec93356cc-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn81795137.blazingcdn.net/500b-blz-bench.jpg?t=1699174735456
499 B URL cdn81795137.blazingcdn.net/500b-blz-bench.jpg?t=1699174735456
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /500b-blz-bench.jpg?t=1699174735456 HTTP/1.1
Host: cdn81795137.blazingcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:55 GMT
content-type: image/jpeg
content-length: 499
server: nginx/1.14.2
last-modified: Fri, 20 Aug 2021 20:21:34 GMT
etag: "61200ece-1f3"
cache-control: max-age=172800
surrogate-control: max-age=86400
cachefly-control: max-age=86400
access-control-allow-credentials: true
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: *
timing-allow-origin: *
access-control-expose-headers: *
x-tiggee: usqas
expires: Tue, 07 Nov 2023 08:58:55 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
access-control-allow-origin: *
strict-transport-security: max-age=0
accept-ranges: bytes
X-Firefox-Spdy: h2
devnull.perfops.net/rum/v1
200 OK 586 B URL POST HTTP/2 devnull.perfops.net/rum/v1
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectperfops.net
FingerprintFD:F3:2A:AB:59:10:EC:F4:82:5D:5F:C7:83:FA:9B:60:E3:27:E9:27
ValidityThu, 26 Oct 2023 11:45:20 GMT - Wed, 24 Jan 2024 11:45:19 GMT
File type gzip compressed data, from Unix\012- data
Hash d749a0445a4cea6fea024bf75a7024ac
182a0ad4aeb8c6c19f66b5ee45edb864a29ac54f
d06e58b6adab435c3d20bdc75fdf98dff69a6918e5a6162bca3c659fe17cbc62
POST /rum/v1 HTTP/1.1
Host: devnull.perfops.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1959
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:55 GMT
content-type: application/json; charset=utf-8
access-control-allow-headers: *
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8213e5d1ab7e56cc-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
rum.perfops.mdb.cdn.orange.com/500b-bench.jpg?t=1699174735944
499 B URL rum.perfops.mdb.cdn.orange.com/500b-bench.jpg?t=1699174735944
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /500b-bench.jpg?t=1699174735944 HTTP/1.1
Host: rum.perfops.mdb.cdn.orange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 Nov 2023 08:58:56 GMT
content-type: image/jpeg
content-length: 499
last-modified: Fri, 20 Aug 2021 20:21:34 GMT
etag: "61200ece-1f3"
cache-control: public, s-maxage=86400, max-age=31536000
surrogate-control: max-age=86400
cachefly-control: max-age=86400
tiggee-control: max-age=86400
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: *
timing-allow-origin: *
access-control-expose-headers: *
x-tiggee: usqas
x-id: parf11-hw-edge-or0001
cache: HIT
x-cached-since: 2023-11-01T10:07:14+00:00
accept-ranges: bytes
x-id-fe: parf11-hw-edge-or0001
X-Firefox-Spdy: h2
www.pronostic-facile.fr/cdn-cgi/rum?
204 No Content 0 B URL POST HTTP/3 www.pronostic-facile.fr/cdn-cgi/rum?
IP
Requested by https://www.pronostic-facile.fr/widget/magiturf/quinte_result/all
Certificate IssuerGoogle Trust Services LLC
Subjectpronostic-facile.fr
Fingerprint3F:E6:2A:87:D9:4B:22:63:3C:71:22:04:D9:0A:50:88:AD:78:6B:76
ValidityThu, 05 Oct 2023 14:08:58 GMT - Wed, 03 Jan 2024 14:08:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: www.pronostic-facile.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 552
Origin: https://www.pronostic-facile.fr
DNT: 1
Connection: keep-alive
Referer: https://www.pronostic-facile.fr/widget/magiturf/quinte_runners/all
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/3 204 No Content
date: Sun, 05 Nov 2023 08:58:58 GMT
access-control-allow-origin: https://www.pronostic-facile.fr
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 8213e5e29832b511-OSL
x-frame-options: DENY
x-content-type-options: nosniff
www.pronostic-facile.fr/cdn-cgi/rum?
204 No Content 0 B URL POST HTTP/3 www.pronostic-facile.fr/cdn-cgi/rum?
IP
Requested by https://www.pronostic-facile.fr/widget/magiturf/quinte_result/all
Certificate IssuerGoogle Trust Services LLC
Subjectpronostic-facile.fr
Fingerprint3F:E6:2A:87:D9:4B:22:63:3C:71:22:04:D9:0A:50:88:AD:78:6B:76
ValidityThu, 05 Oct 2023 14:08:58 GMT - Wed, 03 Jan 2024 14:08:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: www.pronostic-facile.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 549
Origin: https://www.pronostic-facile.fr
DNT: 1
Connection: keep-alive
Referer: https://www.pronostic-facile.fr/widget/magiturf/quinte_result/all
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/3 204 No Content
date: Sun, 05 Nov 2023 08:58:58 GMT
access-control-allow-origin: https://www.pronostic-facile.fr
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 8213e5e29833b511-OSL
x-frame-options: DENY
x-content-type-options: nosniff
www.zone-turf.fr/module/module_webmaster.php?e=partants&f=small
200 OK 12 kB URL GET HTTP/2 www.zone-turf.fr/module/module_webmaster.php?e=partants&f=small
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerAmazon
Subjectwww.zone-turf.fr
Fingerprint24:FA:41:E7:B6:A7:61:34:22:45:7A:B7:DB:B8:9F:35:16:00:45:AD
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /module/module_webmaster.php?e=partants&f=small HTTP/1.1
Host: www.zone-turf.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/x-javascript
date: Sun, 05 Nov 2023 08:58:38 GMT
server: Apache
expires: Sun, 05 Nov 2023 08:59:38 GMT
cache-control: max-age=60
pragma: cache
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-varnish: 2911756965
via: 1.1 varnish, 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: sbJuXoLwu8r08ak5-NqD4GEtuzZhiSrA4QjVm-GX44wml412vY5Zqw==
X-Firefox-Spdy: h2
www.pronostic-facile.fr/widget/magiturf/quinte_result/all
200 OK 9.1 kB URL GET HTTP/3 www.pronostic-facile.fr/widget/magiturf/quinte_result/all
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectpronostic-facile.fr
Fingerprint3F:E6:2A:87:D9:4B:22:63:3C:71:22:04:D9:0A:50:88:AD:78:6B:76
ValidityThu, 05 Oct 2023 14:08:58 GMT - Wed, 03 Jan 2024 14:08:57 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9767), with no line terminators
Hash 2da7dd762287faf745071b0820a984f1
b3a3ea9a509e8d58994b38a5a3d4fab9ccf273a7
1d2187a73a5796d3223da879db1ff472b2e121fe4da0786190891e0120ebe241
GET /widget/magiturf/quinte_result/all HTTP/1.1
Host: www.pronostic-facile.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 08:58:41 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-runtime: 1
cache-control: private, max-age=0, must-revalidate
set-cookie: _pronostic_facile_session=BAh7BzoPc2Vzc2lvbl9pZCIlZWQ2NWUxMzg1OWRjZjRkYjljN2ViODJlNzU2M2UzOWU6DHJlZmVyZXIiKWh0dHBzOi8vbGVwcmVzaWRlbnR2aXAuYmxvZ3Nwb3QuY29tLw%3D%3D--62f491d112fbca5a34f195c4b8381bca27ef3995; path=/; HttpOnly
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EHE23zEptGOYxz5j%2FjlCHZWNEgWwsBtc%2F%2FWyUFn%2BnZPy5XQHS0tRWXjV34y24CZRlb8m4YDB9Re0tFdz%2BPLkE2qpizdN6SouLNvk8GqiXEEI0y0g3YQhP5vfEKxK3ddqIKvQxJwYSRPv8g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8213e5767950b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdnperf-rum.quantil.com/500b-bench.jpg?t=1699174731994
499 B URL GET cdnperf-rum.quantil.com/500b-bench.jpg?t=1699174731994
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGlobalSign nv-sa
Subject*.quantil.com
FingerprintE0:34:F7:9C:2A:66:0F:67:CE:D1:B9:B4:34:7A:C2:4B:8E:89:F3:2A
ValidityFri, 01 Sep 2023 05:36:41 GMT - Wed, 02 Oct 2024 05:36:40 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /500b-bench.jpg?t=1699174731994 HTTP/1.1
Host: cdnperf-rum.quantil.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 499
date: Mon, 21 Aug 2023 02:59:27 GMT
last-modified: Fri, 20 Aug 2021 20:21:34 GMT
etag: "61200ece-1f3"
cache-control: public, s-maxage=86400, max-age=31536000
surrogate-control: max-age=86400
cachefly-control: max-age=86400
tiggee-control: max-age=86400
x-tiggee: usqas
x-cache-status: HIT
x-qtl-request-id: 88ecc0ee6fff591e6ac685cdc9039e3c
x-via: 2.0 eu-se-arn1-cache-0001 [HIT]
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
age: 6587965
server: QTL_Cache/1.2.15
accept-ranges: bytes
X-Firefox-Spdy: h2
perfops-cds.s.llnwi.net/500b-bench.jpg?t=1699174730154
302 Found 499 B URL GET HTTP/2 perfops-cds.s.llnwi.net/500b-bench.jpg?t=1699174730154
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerSectigo Limited
Subject*.hs.llnwd.net
Fingerprint63:D3:89:40:69:80:20:2E:DC:DB:FF:D2:29:5F:87:E5:EC:AC:11:49
ValiditySun, 27 Nov 2022 00:00:00 GMT - Mon, 27 Nov 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /500b-bench.jpg?t=1699174730154 HTTP/1.1
Host: perfops-cds.s.llnwi.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: EdgePrism/5.1.4.0
date: Sun, 05 Nov 2023 08:58:50 GMT
location: https://perfops-ic-5b5a2a00-0a73f3-a4x2.s.loris.llnwd.net/500b-bench.jpg?t=1699174730154
x-llid: ce015f81aa2b90db7ad9341528134a66
x-cdn-cache: MISS
content-length: 0
x-cache: MISS from c1.cds231.arn.llnw.net s:0
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
x-cds: 178.79.213.56
x-llnw-dscp: 26
X-Firefox-Spdy: h2
www.zone-turf.fr/media/picture/casaque/k-allofs-gestut-fahrhof-55147.gif
200 OK 2.5 kB URL GET HTTP/3 www.zone-turf.fr/media/picture/casaque/k-allofs-gestut-fahrhof-55147.gif
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerAmazon
Subjectwww.zone-turf.fr
Fingerprint24:FA:41:E7:B6:A7:61:34:22:45:7A:B7:DB:B8:9F:35:16:00:45:AD
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type GIF image data, version 89a, 55 x 65\012- data
Hash e9db2930e047509dc45c42cc61cc7750
f02b3ea6818866082e9cb857d171f7cdf5c5b997
188b2902c74855a8312a03e65a894f48c95d39c3444587fa88d7064599bd8dce
GET /media/picture/casaque/k-allofs-gestut-fahrhof-55147.gif HTTP/1.1
Host: www.zone-turf.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: image/gif
content-length: 2541
age: 132607
server: Apache
last-modified: Mon, 16 Oct 2023 21:46:35 GMT
accept-ranges: bytes
x-varnish: 2910848560 2903408378
via: 1.1 varnish, 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-cache-hist: 104
date: Sun, 05 Nov 2023 08:50:07 GMT
cache-control: max-age=259200
expires: Mon, 06 Nov 2023 20:08:34 GMT
etag: "9d2f144f-9ed-607dc57159425"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Vm1dgfUejHqVctoaD7wW0AgPgCY1xAbAWMv-4g2K29fSvAHYl4owrg==
cdnperf-test.innertest.top/500b-bench.jpg?t=1699174725984
0 B URL GET cdnperf-test.innertest.top/500b-bench.jpg?t=1699174725984
IP
Requested by https://lepresidentvip.blogspot.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /500b-bench.jpg?t=1699174725984 HTTP/1.1
Host: cdnperf-test.innertest.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
ovh-cdn.perfops.io/500b-bench.jpg?t=1699174730553
200 OK 499 B URL GET HTTP/2 ovh-cdn.perfops.io/500b-bench.jpg?t=1699174730553
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectovh-cdn.perfops.io
Fingerprint86:4A:BE:C7:FF:6D:DB:AC:08:54:B5:0C:1F:51:46:FE:51:67:02:04
ValidityFri, 29 Sep 2023 20:00:23 GMT - Thu, 28 Dec 2023 20:00:22 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /500b-bench.jpg?t=1699174730553 HTTP/1.1
Host: ovh-cdn.perfops.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 Nov 2023 14:04:59 GMT
last-modified: Fri, 20 Aug 2021 20:21:34 GMT
etag: "61200ece-1f3"
cache-control: public, s-maxage=86400, max-age=31536000
surrogate-control: max-age=86400
cachefly-control: max-age=86400
tiggee-control: max-age=86400
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: *
timing-allow-origin: *
access-control-expose-headers: *
x-tiggee: usqas
x-request-id: 527270212
content-type: image/jpeg
content-length: 499
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
X-Firefox-Spdy: h2
lepresidentvip.blogspot.com/favicon.ico
200 OK 3.6 kB URL GET HTTP/3 lepresidentvip.blogspot.com/favicon.ico
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint1F:9F:66:61:40:8F:19:DE:30:44:23:EA:EB:6E:C0:FC:6D:58:69:25
ValidityMon, 16 Oct 2023 08:08:16 GMT - Mon, 08 Jan 2024 08:08:15 GMT
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 59a0c7b6e4848ccdabcea0636efda02b
30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340
a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f
GET /favicon.ico HTTP/1.1
Host: lepresidentvip.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Sun, 05 Nov 2023 08:58:42 GMT
date: Sun, 05 Nov 2023 08:58:42 GMT
cache-control: private, max-age=86400
last-modified: Fri, 13 Oct 2023 06:06:12 GMT
etag: W/"5aa39b8d25e11a7b1867c27a71a12250f212873b2e429301c499080d58d78e4f"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
445991340.r.cdnsun.net/500b-bench.jpg?t=1699174727168
0 B URL GET 445991340.r.cdnsun.net/500b-bench.jpg?t=1699174727168
IP
Requested by https://lepresidentvip.blogspot.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /500b-bench.jpg?t=1699174727168 HTTP/1.1
Host: 445991340.r.cdnsun.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
medianova-cdnperf.mncdn.com/500b-bench.jpg?t=1699174731216
200 OK 499 B URL GET HTTP/2 medianova-cdnperf.mncdn.com/500b-bench.jpg?t=1699174731216
IP
ASN #21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerDigiCert Inc
Subject*.mncdn.com
Fingerprint79:D9:76:9D:5B:43:51:93:C7:4E:72:1E:42:56:01:92:33:12:23:DA
ValidityThu, 20 Jul 2023 00:00:00 GMT - Mon, 19 Aug 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 60x60, segment length 16, baseline, precision 8, 45x33, components 1\012- data
Hash 947db36d5825904cc98e46042d5fd76a
fed21ffdf3e72cd2d5a86ce80a0e5b5de01be803
d50e125f67e5e2ce4ce8a758e45e14f95ab72769869f6e947fc21a83a605fe6d
GET /500b-bench.jpg?t=1699174731216 HTTP/1.1
Host: medianova-cdnperf.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:51 GMT
content-type: image/jpeg
content-length: 499
last-modified: Fri, 20 Aug 2021 20:21:34 GMT
cache-control: max-age=0
surrogate-control: max-age=86400
cachefly-control: max-age=86400
tiggee-control: max-age=86400
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: *
timing-allow-origin: *
access-control-expose-headers: *
x-tiggee: usqas
x-mserver: 2137
expires: Sun, 05 Nov 2023 08:58:51 GMT
server: MNCDN-235
x-edge-location: DE-372
x-mnrequest-id: 4e63400833e90bcb5813068930bf30c1
x-cache-status: Edge : HIT,
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.perfops.net/rom3/rom3.min.js
200 OK 7.5 kB URL GET HTTP/2 cdn.perfops.net/rom3/rom3.min.js
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectperfops.net
FingerprintFD:F3:2A:AB:59:10:EC:F4:82:5D:5F:C7:83:FA:9B:60:E3:27:E9:27
ValidityThu, 26 Oct 2023 11:45:20 GMT - Wed, 24 Jan 2024 11:45:19 GMT
File type troff or preprocessor input, ASCII text, with very long lines (7641), with no line terminators
Hash cf876b234f69b5c399d0288bad069c58
93cc44c6a403476f1552761c5b6119ce0926ca6d
013815cf3e0c2d17c8fdb729a0a8ef7468f4174614ac5634edd2eacbec98ef3e
GET /rom3/rom3.min.js HTTP/1.1
Host: cdn.perfops.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:40 GMT
content-type: application/javascript
last-modified: Tue, 31 Oct 2023 09:41:00 GMT
etag: W/"500cd90f5a9f70e6f6efb2d8ad0a0dc5"
x-amz-server-side-encryption: AES256
x-amz-version-id: fv4nY3jhVfisFkFs2A9reS9C2Mp5lFAU
x-cache: Miss from cloudfront
via: 1.1 f9d8d85c1cdd8d752a5fcdb241623dfa.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL50-C2
x-amz-cf-id: 3ZeOSEEOzIiFZ5hDbfC_oK3SNuJwwMTN1GjNNgGZ9sjTxmNvzJ9oVg==
cache-control: max-age=14400
cf-cache-status: HIT
age: 3635
vary: Accept-Encoding
server: cloudflare
cf-ray: 8213e575393056cb-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.pronostic-facile.fr/widget/magiturf/quinte_runners/all
200 OK 9.6 kB URL GET HTTP/3 www.pronostic-facile.fr/widget/magiturf/quinte_runners/all
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectpronostic-facile.fr
Fingerprint3F:E6:2A:87:D9:4B:22:63:3C:71:22:04:D9:0A:50:88:AD:78:6B:76
ValidityThu, 05 Oct 2023 14:08:58 GMT - Wed, 03 Jan 2024 14:08:57 GMT
File type gzip compressed data, from Unix\012- exported SGML document text\012- data, Unicode text, UTF-8 text, with very long lines (10373), with no line terminators
Hash 427a393fe8c1359e75b71f209a885e60
1bc67e400fac36369b185046e38631a09e57b45c
9c4d0541210445d9e0deeba3ed766b2248c1a0834dd1666d1d9d2b61c145eb95
GET /widget/magiturf/quinte_runners/all HTTP/1.1
Host: www.pronostic-facile.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 08:58:41 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-runtime: 1
cache-control: private, max-age=0, must-revalidate
set-cookie: _pronostic_facile_session=BAh7BzoPc2Vzc2lvbl9pZCIlMTQ3YWFhMmIwZGJiYWU4ZjMyNzFmMWIwMWQ2ODEzY2M6DHJlZmVyZXIiKWh0dHBzOi8vbGVwcmVzaWRlbnR2aXAuYmxvZ3Nwb3QuY29tLw%3D%3D--83a7a92778d0f89126188489af613c00c7e4a5e3; path=/; HttpOnly
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ovWYuNhZbkVs9hMshtFXNczIZcyPXSHdv3QZL47Fi%2BTWF47py8%2FhNSVcZZBaxGtNDjFhMPKY99YZo7xeGzn522QyuA6wLkPA1XpxmryraEVldN61kbMzsfm7QNwE1LeFzStUAoVQsTYOiA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8213e576492fb511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.zone-turf.fr/media/picture/casaque/f-wertheimer-121866.gif
200 OK 2.4 kB URL GET HTTP/3 www.zone-turf.fr/media/picture/casaque/f-wertheimer-121866.gif
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerAmazon
Subjectwww.zone-turf.fr
Fingerprint24:FA:41:E7:B6:A7:61:34:22:45:7A:B7:DB:B8:9F:35:16:00:45:AD
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type GIF image data, version 89a, 55 x 65\012- data
Hash 5b60e2937dd17486b2011b795cc0585c
1d8f22734fc77a7f45070edb8208982c8ff06700
21b03bc7d33b9e26dbb992ae1f95cf6cb0f0e20230818fb1ca80151f9c48f7d2
GET /media/picture/casaque/f-wertheimer-121866.gif HTTP/1.1
Host: www.zone-turf.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: image/gif
content-length: 2398
age: 68249
server: Apache
last-modified: Fri, 03 Nov 2023 23:01:09 GMT
accept-ranges: bytes
x-varnish: 2911426811 2907899857
via: 1.1 varnish, 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-cache-hist: 89
date: Sun, 05 Nov 2023 08:50:07 GMT
cache-control: max-age=259200
expires: Tue, 07 Nov 2023 14:01:11 GMT
etag: "9d3d5c96-95e-609477ae91685"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: c9I6QBDqqSLjlVLPcLuwfFDklGktTik2nhIR-QQ1mafcIy48a69NIQ==
test-perfops.haproxy.com/500b-bench.jpg?t=1699174725741
404 Not Found 213 B URL GET HTTP/2 test-perfops.haproxy.com/500b-bench.jpg?t=1699174725741
IP
ASN #11019 HAPROXY-TECHNOLOGIES
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerSectigo Limited
Subject*.haproxy.com
Fingerprint24:61:9D:29:42:6C:B7:BE:65:B4:35:B5:E4:56:99:EC:CA:F8:9D:23
ValidityTue, 04 Apr 2023 00:00:00 GMT - Tue, 16 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 9f050314bdc22e48bc8df7a0a6e40995
75bff4ece38a8eb0dd9a543698b22cb5c9e92a68
013be6d41855bc9782d3d23c555405ad68ec6b641f4b7839afe4106790c1febc
GET /500b-bench.jpg?t=1699174725741 HTTP/1.1
Host: test-perfops.haproxy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lepresidentvip.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sun, 05 Nov 2023 08:58:45 GMT
content-type: text/html
content-length: 213
x-cdn-diag: ams5-6139-0-15767-h-0-0---;6141-24-36574----0-0-0
access-control-expose-headers: x-cdn-diag
X-Firefox-Spdy: h2
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
200 OK 90 kB URL GET HTTP/2 translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type ASCII text, with very long lines (2456)
Hash 74b42e1ec942afe6b7492594f1fa3e28
d14bd9e8b532cd600a393f048d1bae069c19fc46
5eaeefa91d76ddea71319c3f2aeb03707341955c2bc385abef7ebd3d3ab62422
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 05 Nov 2023 08:58:38 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+220; expires=Tue, 04-Nov-2025 08:58:38 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
w.24timezones.com/l.js
200 OK 18 kB IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject24timezones.com
Fingerprint63:8E:2A:37:EB:1E:9E:3F:7E:D4:3A:4F:F4:C9:71:12:F8:53:9E:04
ValidityMon, 30 Oct 2023 09:29:30 GMT - Sun, 28 Jan 2024 09:29:29 GMT
File type ASCII text, with very long lines (17835), with no line terminators
Hash bd6d717fb532e94c54895509204467e7
976d33d70db0500d2ccb7083d644c80ca24a6cd7
b641a0472d797a1484ea6db4f9347acbf93ac2c039c7eb8b702639677c15ce9c
GET /l.js HTTP/1.1
Host: w.24timezones.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 08:58:39 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Mon, 30 Jun 1997 08:58:39 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QsxXWkV6MaQzRQ8WEwxvb2h3U3agz9ZGjFenADYoPgvTX4V44WbPX6T4ZZunG1kyBssXCJAe8zCuez7CJZeNzYG5giFI4%2BMQdajzncN%2F45e8etz%2Fo8sI0DuMvuN60lLCv%2BO3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8213e567edcfb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.blogger.com/navbar.g?targetBlogID=3338940816273817868&blogName=LEPRESIDENTVIP&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://lepresidentvip.blogspot.com/search&blogLocale=fr&v=2&homepageUrl=https://lepresidentvip.blogspot.com/&vt=-7808041829531629692&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AOzoyjtjrhQ.O%2Fd%3D1%2Frs%3DAHpOoo9-fA1P7IZFa1fdRj158NoDqrnbYA%2Fm%3D__features__
200 OK 6.7 kB URL GET HTTP/3 www.blogger.com/navbar.g?targetBlogID=3338940816273817868&blogName=LEPRESIDENTVIP&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://lepresidentvip.blogspot.com/search&blogLocale=fr&v=2&homepageUrl=https://lepresidentvip.blogspot.com/&vt=-7808041829531629692&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AOzoyjtjrhQ.O%2Fd%3D1%2Frs%3DAHpOoo9-fA1P7IZFa1fdRj158NoDqrnbYA%2Fm%3D__features__
IP
Requested by https://lepresidentvip.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint75:53:9F:32:2C:07:BD:E7:26:FE:91:BD:A8:0F:85:6C:DE:21:40:BB
ValidityMon, 16 Oct 2023 08:02:00 GMT - Mon, 08 Jan 2024 08:01:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6893), with no line terminators
Hash 297f98a59367f9fe029cb31fd1fa1798
44b5955054a6775aa2f8e5bb8c54a29f43886257
e250967a8124841b578d6be492b3699bc6dcc72d001cb6cf70fbc53475a32b8b
GET /navbar.g?targetBlogID=3338940816273817868&blogName=LEPRESIDENTVIP&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://lepresidentvip.blogspot.com/search&blogLocale=fr&v=2&homepageUrl=https://lepresidentvip.blogspot.com/&vt=-7808041829531629692&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AOzoyjtjrhQ.O%2Fd%3D1%2Frs%3DAHpOoo9-fA1P7IZFa1fdRj158NoDqrnbYA%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lepresidentvip.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 05 Nov 2023 08:58:41 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2596
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.pronostic-facile.fr/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 12 kB URL GET HTTP/3 www.pronostic-facile.fr/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
Requested by https://www.pronostic-facile.fr/widget/magiturf/quinte_result/all
Certificate IssuerGoogle Trust Services LLC
Subjectpronostic-facile.fr
Fingerprint3F:E6:2A:87:D9:4B:22:63:3C:71:22:04:D9:0A:50:88:AD:78:6B:76
ValidityThu, 05 Oct 2023 14:08:58 GMT - Wed, 03 Jan 2024 14:08:57 GMT
File type ASCII text, with very long lines (12331)
Hash 88a769d2fe35899fd45a332a0a032cc0
514c6c1d8475d17e412849a4c90159517d0fa10a
ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.pronostic-facile.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pronostic-facile.fr/widget/magiturf/quinte_result/all
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 08:58:41 GMT
content-type: application/javascript
last-modified: Fri, 27 Oct 2023 14:30:26 GMT
etag: W/"653bc982-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O7fDyyG9A%2FTnMfnQmW%2FVQmebQWxgPqTT9YrALD5nT4VbG0%2BG%2ByNcbbR%2FLPraOCRMiopjDtNXddMVTid7yIjfEL%2BCatqUhjU9H53Vf6%2Fl6ex7%2FYefcSexedVBV7bpDACKHlEKG4J8rxEMiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8213e5797bf6b511-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Tue, 07 Nov 2023 08:58:41 GMT
cache-control: max-age=172800, public
content-encoding: gzip
www.pronostic-facile.fr/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 12 kB URL GET HTTP/3 www.pronostic-facile.fr/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
Requested by https://www.pronostic-facile.fr/widget/magiturf/quinte_runners/all
Certificate IssuerGoogle Trust Services LLC
Subjectpronostic-facile.fr
Fingerprint3F:E6:2A:87:D9:4B:22:63:3C:71:22:04:D9:0A:50:88:AD:78:6B:76
ValidityThu, 05 Oct 2023 14:08:58 GMT - Wed, 03 Jan 2024 14:08:57 GMT
File type ASCII text, with very long lines (12331)
Hash 88a769d2fe35899fd45a332a0a032cc0
514c6c1d8475d17e412849a4c90159517d0fa10a
ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.pronostic-facile.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pronostic-facile.fr/widget/magiturf/quinte_runners/all
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 08:58:41 GMT
content-type: application/javascript
last-modified: Fri, 27 Oct 2023 14:30:26 GMT
etag: W/"653bc982-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=umYH%2FeBuQAolEaShHrbsUwLVTVf%2FfyAY4%2BSzGqEfLAvAi6YYvZYz6Z0cDLuPDf3oSRfRoO06Q7wbCASxxJzFSDS5j9vLbdB7kFIzMQ9%2BULeVswCmr58cZq8aHdphwbzVPcYn6yRoaBhJUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8213e5797bfdb511-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Tue, 07 Nov 2023 08:58:41 GMT
cache-control: max-age=172800, public
content-encoding: gzip
216.58.207.193
80.15.255.0
52.59.104.159
121.127.45.82
203.192.198.202
0.0.0.0
186.192.80.2
23.36.79.34
185.244.209.62
185.22.163.103
94.254.0.211
188.240.13.1
0.0.0.0