| asemailmgmteu.com/api/channels/email/unsubscribe?app_key=UQFtfjD1SJy3G7HKVytUwA&channel_id=hmAq7TweRB-4MzPTFpQTfA&push_id=d85eee10-522d-11ee-99e5-0242ab6c490e&message_type=commercial&campaigns=SME_First_Anniversary_Email_13092023&campaigns=MC&redirect=//curved.cfd///authi/IGWKI/Y2VjaWxlLmJlc3NvbkBjcmVkaXQtY29vcGVyYXRpZi5jb29w | 34.96.67.94 | | 11 B |
URL asemailmgmteu.com/api/channels/email/unsubscribe?app_key=UQFtfjD1SJy3G7HKVytUwA&channel_id=hmAq7TweRB-4MzPTFpQTfA&push_id=d85eee10-522d-11ee-99e5-0242ab6c490e&message_type=commercial&campaigns=SME_First_Anniversary_Email_13092023&campaigns=MC&redirect=//curved.cfd///authi/IGWKI/Y2VjaWxlLmJlc3NvbkBjcmVkaXQtY29vcGVyYXRpZi5jb29w IP 34.96.67.94:0
ASN#396982 GOOGLE-CLOUD-PLATFORM
Hash82380d1e263b6093f3c7535690fcdd75 022d91f218046ab2e61cac1eb13d6a718f75df2b 4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93
GET /api/channels/email/unsubscribe?app_key=UQFtfjD1SJy3G7HKVytUwA&channel_id=hmAq7TweRB-4MzPTFpQTfA&push_id=d85eee10-522d-11ee-99e5-0242ab6c490e&message_type=commercial&campaigns=SME_First_Anniversary_Email_13092023&campaigns=MC&redirect=//curved.cfd///authi/IGWKI/Y2VjaWxlLmJlc3NvbkBjcmVkaXQtY29vcGVyYXRpZi5jb29w HTTP/1.1
Host: asemailmgmteu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 04 Apr 2024 08:56:44 GMT
content-type: application/vnd.urbanairship+json;version=3
cache-control: max-age=0
expires: Thu, 4 Apr 2024 08:56:44 GMT
location: http://curved.cfd///authi/IGWKI/Y2VjaWxlLmJlc3NvbkBjcmVkaXQtY29vcGVyYXRpZi5jb29w
content-length: 11
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| curved.cfd///authi/IGWKI/Y2VjaWxlLmJlc3NvbkBjcmVkaXQtY29vcGVyYXRpZi5jb29w | 84.247.157.127 | | 0 B |
URL curved.cfd///authi/IGWKI/Y2VjaWxlLmJlc3NvbkBjcmVkaXQtY29vcGVyYXRpZi5jb29w IP 84.247.157.127:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET ///authi/IGWKI/Y2VjaWxlLmJlc3NvbkBjcmVkaXQtY29vcGVyYXRpZi5jb29w HTTP/1.1
Host: curved.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 04 Apr 2024 08:56:46 GMT
Server: Apache
refresh: 0;url=https://docxservice03409365.com/Mcecile.besson@credit-cooperatif.coop
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| docxservice03409365.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=86f0164e7ce3b515 | 172.67.135.223 | | 152 kB |
URL docxservice03409365.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=86f0164e7ce3b515 IP 172.67.135.223:0
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size152 kB (151551 bytes) Hashe7fcf61c218e72eefdd11fc9b0517f24 95516c0adad08ae9dbf5513192b1a091d597831b 93fd2412582c43cc70c96dc6326caf5ab6d490f0a01f316acadc52b1036f9d09
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=86f0164e7ce3b515 HTTP/1.1
Host: docxservice03409365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://docxservice03409365.com/Mcecile.besson@credit-cooperatif.coop?__cf_chl_rt_tk=pjUgvnAMZYWul60bKcOsIUykAcAZnfQI3Jha7oCHQKc-1712221007-0.0.1.1-1663
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 04 Apr 2024 08:56:48 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V9CtycwSZYnaTa1%2FPFgSw6eneyQg%2Bt7bVxPjjE%2B8Bc%2Fra4TQCjOZDe6EnciuYmfWJ453BB4Hapei9A6HW2TyEiuAQWP4sejNtAhoSr0%2Fv5EpJ41wVklVt5eri1DoMwZxZsVsndjHR4MlGg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86f0164f1c4156bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| docxservice03409365.com/Mcecile.besson@credit-cooperatif.coop | 172.67.135.223 | 403 Forbidden | 18 kB |
URL User Request GET HTTP/3docxservice03409365.com/Mcecile.besson@credit-cooperatif.coop IP 172.67.135.223:443
CertificateIssuerLet's Encrypt Subjectdocxservice03409365.com FingerprintE0:EB:F0:87:D5:F0:0C:0B:65:FE:5F:AB:ED:9B:C4:69:B8:2F:74:D3 ValidityThu, 04 Apr 2024 04:45:58 GMT - Wed, 03 Jul 2024 04:45:57 GMT
File typeHTML document, ASCII text, with very long lines (16285), with no line terminators Hash069454ea0d724503d8d54fa8a0dbba31 75fa5756e3311ea1f022c58770149691471d4ec6 a1efb55d7ce6ca64ca3e2e167537a6b039c6ee901a05cb973b9f1d1e72e7267b
GET /Mcecile.besson@credit-cooperatif.coop HTTP/1.1
Host: docxservice03409365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Thu, 04 Apr 2024 08:56:47 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: u3fDomM3zyosewyjHwb8y5D8Ciy489sLtl2ylssaKeSQ8atHuNwtNLfKtAf6bvuchM+3B8E+6lTXPkFs3tXgxfIWAItGe+SDqLEO4jQN9yLs47ilgrT7h6+4OhPj2qHK7eHQtnH0/EN2jhqGZOcxbA==$DERtd1zbX7S5YXmC1NjwfA==
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RSev52pxFzyewPVQEZjKGe7Bk4jZW9HZPdDyKSRn%2BeXiVH2Q4Ji7f3z7AYrEXXCbDZI3tq0xoCgP83Yt%2Bo1omSRrGNsTERTEnoYa3zJYbLmPnS%2FeZ4WCCCWM%2FYGbhxuhgXQVqVtR57KDQg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86f0164e7ce3b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| docxservice03409365.com/favicon.ico | 172.67.135.223 | 403 Forbidden | 16 kB |
URL GET HTTP/3docxservice03409365.com/favicon.ico IP 172.67.135.223:443
Requested byhttps://docxservice03409365.com/Mcecile.besson@credit-cooperatif.coop CertificateIssuerLet's Encrypt Subjectdocxservice03409365.com FingerprintE0:EB:F0:87:D5:F0:0C:0B:65:FE:5F:AB:ED:9B:C4:69:B8:2F:74:D3 ValidityThu, 04 Apr 2024 04:45:58 GMT - Wed, 03 Jul 2024 04:45:57 GMT
File typeHTML document, ASCII text, with very long lines (15684), with no line terminators Hash3d56e6ed617905fc16d64567ee407a1e f3c5f0e68d06800643e07a0b18795c9ba1b5853f 38d77eb45cd80118d293feda148203ff364bbb0d3f76dfd00d164864e21ac662
GET /favicon.ico HTTP/1.1
Host: docxservice03409365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://docxservice03409365.com/Mcecile.besson@credit-cooperatif.coop?__cf_chl_rt_tk=saxAcaZuwl83nJhuXQHDB3MiEmbbLew8FLRpZ.keElc-1712221025-0.0.1.1-1663
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_m=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Thu, 04 Apr 2024 08:57:06 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: iFxYayXuATO8buLsGbsKiPnjjk1kQo03iqu3gmoQwDa56BWnVc3Oe63+JqsA8/OENLQVmnuncpyNnezPsaA0s68jCfxp+4r6z0k1ew+/tXFxS0SQRKuPY5rAcBS3QhSQZlun0aGSZ+WAZ2p3+b1IjA==$bcscw0LYvIUpvyTse8g5Eg==
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mMALOGHa5%2BK6TeeNRg2stmp2Vaouqc1Opc5AB9B6N%2F%2Fa0S1zAyk5EpXiqSQxKPafOma84IwCAM48zQNB6xPYuftbgAAqqlo9iU0JoNL2M37s1Y3uptgjhpq1sWium%2F4%2Fjf5O1bFlPizpvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86f016c49eb756bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/tolry/0x4AAAAAAADnPIDROrmt1Wwj/light/normal | 104.17.3.184 | 200 OK | 78 kB |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/tolry/0x4AAAAAAADnPIDROrmt1Wwj/light/normal IP 104.17.3.184:443
Requested byhttps://docxservice03409365.com/Mcecile.besson@credit-cooperatif.coop CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (41919) Hash25cda81d7b19702687d7bef7a011e03c bb09e23bea41713ab42ce7a7fa9b457d1a2943ac b434e5519e23003b236f9c2fead524481d65ad695943ea2b2574c302b8867a8d
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/tolry/0x4AAAAAAADnPIDROrmt1Wwj/light/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 04 Apr 2024 08:57:06 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
document-policy: js-profiling
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
server: cloudflare
cf-ray: 86f016c6ef2bb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| docxservice03409365.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=86f016c41e4456bf | 172.67.135.223 | 200 OK | 522 kB |
URL GET HTTP/3docxservice03409365.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=86f016c41e4456bf IP 172.67.135.223:443
Requested byhttps://docxservice03409365.com/Mcecile.besson@credit-cooperatif.coop CertificateIssuerLet's Encrypt Subjectdocxservice03409365.com FingerprintE0:EB:F0:87:D5:F0:0C:0B:65:FE:5F:AB:ED:9B:C4:69:B8:2F:74:D3 ValidityThu, 04 Apr 2024 04:45:58 GMT - Wed, 03 Jul 2024 04:45:57 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size522 kB (521818 bytes) Hash7bff361794917642069fb17f8f078e14 2d79cd079124ac97948834bc4f3afd7acd76ede8 0cda1541b18ee28cf8f9272583e056cac601c1386ad982f4b907955f1307c1a6
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=86f016c41e4456bf HTTP/1.1
Host: docxservice03409365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://docxservice03409365.com/Mcecile.besson@credit-cooperatif.coop?__cf_chl_rt_tk=saxAcaZuwl83nJhuXQHDB3MiEmbbLew8FLRpZ.keElc-1712221025-0.0.1.1-1663
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_m=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 04 Apr 2024 08:57:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Eub3cSQikZpIXtzT54HdSuuMfvTVJ0GTOZMkWg6FdOrdtKQ6H7Fc0fLhiMpNcQsFoZf3gN37nJOkCOyXQxJl4QWEsLYwyI4PPE79MbjzCTDlWFkqZQpVFD47OiM%2Fa3nna3Ueb%2FMI6qhc0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86f016c46e9856bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/936652056:1712219653:X5oqf0XC4RMS7mYDxNdRyQyI2V0v3bDlBTh_MQs0TPo/86f016c6ef2bb524/7e57dc60019e890 | 104.17.3.184 | 200 OK | 141 kB |
URL POST HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/936652056:1712219653:X5oqf0XC4RMS7mYDxNdRyQyI2V0v3bDlBTh_MQs0TPo/86f016c6ef2bb524/7e57dc60019e890 IP 104.17.3.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/tolry/0x4AAAAAAADnPIDROrmt1Wwj/light/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size141 kB (140944 bytes) Hash38d1dc0cd481e55ed18d10aa5edb663d e6917bec795e9cb29fa865ee95ba661335295d68 81f5c5ec8df78d7ccb6672f919975170d7ef815016a94b52ec443b709eeb23bf
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/936652056:1712219653:X5oqf0XC4RMS7mYDxNdRyQyI2V0v3bDlBTh_MQs0TPo/86f016c6ef2bb524/7e57dc60019e890 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/tolry/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 7e57dc60019e890
Content-Length: 3427
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 04 Apr 2024 08:57:06 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: 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$EmyQLpUAILRwEnx8/mJlZg==
server: cloudflare
cf-ray: 86f016c939c7b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| docxservice03409365.com/favicon.ico | 172.67.135.223 | 403 Forbidden | 16 kB |
URL GET HTTP/3docxservice03409365.com/favicon.ico IP 172.67.135.223:443
Requested byhttps://docxservice03409365.com/Mcecile.besson@credit-cooperatif.coop CertificateIssuerLet's Encrypt Subjectdocxservice03409365.com FingerprintE0:EB:F0:87:D5:F0:0C:0B:65:FE:5F:AB:ED:9B:C4:69:B8:2F:74:D3 ValidityThu, 04 Apr 2024 04:45:58 GMT - Wed, 03 Jul 2024 04:45:57 GMT
File typeHTML document, ASCII text, with very long lines (15620), with no line terminators Hash82eb24bb3133760bf18555360a8835e8 a24e2df2eea2ce115220b5922768062228ce80fc 3b3785e60306513cf7faa928bfc86c5df90a7c9c9ebc48ca0180677d9b41bf02
GET /favicon.ico HTTP/1.1
Host: docxservice03409365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://docxservice03409365.com/Mcecile.besson@credit-cooperatif.coop
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_m=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Thu, 04 Apr 2024 08:57:06 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: BO/mMbjMlWNd4PwnYwpEZwJXzEtRk2DWReP7qF74984YXSmFqKivsCj0JAoQsZ9rgI1IEtuGN2290yFZZFL6KwZSebCgZrruWq1BIP8iWzvktMNljeHBvLS6tXxUMFNXEvfBRZGLfAHmQKNskMfgxQ==$fPD+y+GAUecYsqehAJK7Hw==
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s5YIoK2SwArzaCWs5rX8JgqZuiKj0e%2BGNr0xFtIBRNsea4JbCaXcXjTcbYltBGDUaI%2FhICnXPn5Bh5%2FC0y8BZpUL6Hq0JSUDHorUJXM%2F9qp60LhJtac89Meytrpg2PxAtbKXXlzPNxzltQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86f016c52f3756bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/turnstile/v0/g/dc6b543c1346/api.js?onload=QkWxI7&render=explicit | 104.17.3.184 | 200 OK | 40 kB |
URL GET HTTP/3challenges.cloudflare.com/turnstile/v0/g/dc6b543c1346/api.js?onload=QkWxI7&render=explicit IP 104.17.3.184:443
Requested byhttps://docxservice03409365.com/Mcecile.besson@credit-cooperatif.coop CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (39928) Hash7f3fe50b0f2ad92528ff217c1b608b27 54fc4814c739c7142ef4a5b562140ee764bcbdfc d2e584d67a5b1a868363ed5e83a72ea6bc2cad8a052f64583d0fe95e7fa36e97
GET /turnstile/v0/g/dc6b543c1346/api.js?onload=QkWxI7&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://docxservice03409365.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 04 Apr 2024 08:57:06 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 86f016c52d4fb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| docxservice03409365.com/cdn-cgi/challenge-platform/h/g/flow/ov1/59265592:1712219361:i_wSULesEK40vm27kqbrfeO_pvXDA5tf77o_h_rAc3o/86f016c41e4456bf/821a5d15789510e | 172.67.135.223 | 200 OK | 16 kB |
URL POST HTTP/3docxservice03409365.com/cdn-cgi/challenge-platform/h/g/flow/ov1/59265592:1712219361:i_wSULesEK40vm27kqbrfeO_pvXDA5tf77o_h_rAc3o/86f016c41e4456bf/821a5d15789510e IP 172.67.135.223:443
Requested byhttps://docxservice03409365.com/Mcecile.besson@credit-cooperatif.coop CertificateIssuerLet's Encrypt Subjectdocxservice03409365.com FingerprintE0:EB:F0:87:D5:F0:0C:0B:65:FE:5F:AB:ED:9B:C4:69:B8:2F:74:D3 ValidityThu, 04 Apr 2024 04:45:58 GMT - Wed, 03 Jul 2024 04:45:57 GMT
File typeASCII text, with very long lines (16008), with no line terminators Hash264aedec0c9f02fbd62a7a2e01d02068 0249d8bea6f70d9bbb4022aac5602281fe6c6ad3 3104900fdce3a2584afba1672c01759d80061acd17cdc7da08db7833febb0279
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/59265592:1712219361:i_wSULesEK40vm27kqbrfeO_pvXDA5tf77o_h_rAc3o/86f016c41e4456bf/821a5d15789510e HTTP/1.1
Host: docxservice03409365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://docxservice03409365.com/Mcecile.besson@credit-cooperatif.coop
Content-type: application/x-www-form-urlencoded
CF-Challenge: 821a5d15789510e
Content-Length: 1939
Origin: https://docxservice03409365.com
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_m=2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 04 Apr 2024 08:57:06 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: Umk02r1X/SJrAHKeirKEyIzvzbbL0le8fAMnPBE3yvVihT88wmc9m8akOnoF/BZd$V5dt90TZ5wqU9aJrvuDw2w==
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yGPXg7hYvpSGcdk4ZWV2q8U5TIDDkDnNBIGJLpzONvMUSydpMV5OqQfa7vjJBLL1LhKFEXEr%2F0UIrkoCOtQxX%2BuaC8%2Fh%2BXAMe3Fr5cLoKQdw3R4hOBVT7Br7vCbhKYMAFkO9DemOx%2FMhSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86f016c5f82356bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D | 104.17.3.184 | 200 OK | 61 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D IP 104.17.3.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/tolry/0x4AAAAAAADnPIDROrmt1Wwj/light/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typePNG image data, 2 x 2, 8-bit/color RGB, non-interlaced Hash9246cca8fc3c00f50035f28e9f6b7f7d 3aa538440f70873b574f40cd793060f53ec17a5d c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/tolry/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 04 Apr 2024 08:57:06 GMT
content-type: image/png
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 86f016c77fd5b524-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=86f016c6ef2bb524 | 104.17.3.184 | 200 OK | 526 kB |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=86f016c6ef2bb524 IP 104.17.3.184:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/tolry/0x4AAAAAAADnPIDROrmt1Wwj/light/normal CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size526 kB (526133 bytes) Hash7c5554ba843bc275e692738dfc80041e b3d79835ed291ba215a44e633e9d2bebf1790561 a6e734f9077a3264aaf5a9904462fddab714e3f7c2ecb9f827d4733e0bdd284a
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=86f016c6ef2bb524 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/tolry/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 04 Apr 2024 08:57:06 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
server: cloudflare
cf-ray: 86f016c77fd8b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|