200 OK 6.6 kB URL User Request GET HTTP/2 IP
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4570)
Hash f9081da14ef08d0af0a7e0c1fad53759
31a1a2d9d1cc540565d5251b47ccf36b923b033f
40ca15678b2e1615ad3bfdeb5d0b0eae70d44b87745aa32440c84edc51f2cc7a
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%221c094c9d919998adb557d4992ea2a2a2%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1701429682%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7Ddcae5a5b001c9b4f44647886bd39c706
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:22 GMT
content-type: text/html; charset=UTF-8
content-length: 6647
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
notaire-gay-friendly.fr/newtheme/font-awesome-4.7.0/css/font-awesome.min.css
200 OK 6.7 kB URL GET HTTP/2 notaire-gay-friendly.fr/newtheme/font-awesome-4.7.0/css/font-awesome.min.css
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /newtheme/font-awesome-4.7.0/css/font-awesome.min.css HTTP/1.1
Host: notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%221c094c9d919998adb557d4992ea2a2a2%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1701429682%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7Ddcae5a5b001c9b4f44647886bd39c706
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: text/css
content-length: 6663
last-modified: Wed, 22 May 2019 10:34:31 GMT
etag: "7918-5897782c19327-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js
200 OK 33 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (32072)
Hash e0e0559014b222245deb26b6ae8bd940
e2f3603e23711f6446f278a411d905623d65201e
89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e
GET /ajax/libs/jquery/1.10.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 32954
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 16:24:11 GMT
expires: Thu, 28 Nov 2024 16:24:11 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 154632
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
notaire-gay-friendly.fr/newtheme/css/bootstrap.min.css
200 OK 18 kB URL GET HTTP/2 notaire-gay-friendly.fr/newtheme/css/bootstrap.min.css
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
File type ASCII text, with very long lines (24311)
Hash 502a81d36ddf4d15432a7a206a46cb20
067c1bd52c74a56e2e07e766863f455da2c7b678
9b94758240305658fab483c7007f14da44eb407fae8c0d564ba6f398377f1edd
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /newtheme/css/bootstrap.min.css HTTP/1.1
Host: notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%221c094c9d919998adb557d4992ea2a2a2%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1701429682%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7Ddcae5a5b001c9b4f44647886bd39c706
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: text/css
content-length: 17661
last-modified: Sun, 24 Oct 2021 13:01:36 GMT
etag: "1f024-5cf18d82789f1-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
notaire-gay-friendly.fr/newtheme/css/datepicker.css
200 OK 1.0 kB URL GET HTTP/2 notaire-gay-friendly.fr/newtheme/css/datepicker.css
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
Hash 8b8d3a71ddd354474fcbd1d4e62a6325
21f0f7248365307e8a9d8b5cc0fa027b52cf0565
9c6d66768aaef0665006e12ab553873ae28ace2064aac478741a18dbc72f9599
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /newtheme/css/datepicker.css HTTP/1.1
Host: notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%221c094c9d919998adb557d4992ea2a2a2%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1701429682%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7Ddcae5a5b001c9b4f44647886bd39c706
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: text/css
content-length: 1049
last-modified: Wed, 22 May 2019 10:34:19 GMT
etag: "11e7-58977820ba106-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
notaire-gay-friendly.fr/newtheme/slick/slick-theme.css
200 OK 767 B URL GET HTTP/2 notaire-gay-friendly.fr/newtheme/slick/slick-theme.css
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
Hash f9faba678c4d6dcfdde69e5b11b37a2e
81a434f94f2b1124f3232bb86f2944f82fb23ac0
7adaf08052c6a6a0f8a0d0055b4f191fd07389fe41c972b69573472b2ecb406a
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /newtheme/slick/slick-theme.css HTTP/1.1
Host: notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%221c094c9d919998adb557d4992ea2a2a2%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1701429682%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7Ddcae5a5b001c9b4f44647886bd39c706
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: text/css
content-length: 767
last-modified: Wed, 22 May 2019 10:34:28 GMT
etag: "c49-589778293fb46-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
notaire-gay-friendly.fr/newtheme/slick/slick.css
200 OK 484 B URL GET HTTP/2 notaire-gay-friendly.fr/newtheme/slick/slick.css
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
Hash f38b2db10e01b1572732a3191d538707
a94a059b3178b4adec09e3281ace2819a30095a4
de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /newtheme/slick/slick.css HTTP/1.1
Host: notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%221c094c9d919998adb557d4992ea2a2a2%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1701429682%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7Ddcae5a5b001c9b4f44647886bd39c706
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: text/css
content-length: 484
last-modified: Wed, 22 May 2019 10:34:28 GMT
etag: "6f0-58977829af086-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
notaire-gay-friendly.fr/newtheme/css/tooplate-style.css
200 OK 4.3 kB URL GET HTTP/2 notaire-gay-friendly.fr/newtheme/css/tooplate-style.css
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
File type ASCII text, with very long lines (1338)
Hash 0d051c31311636379abcc2483b9b97cf
6d8a34d4910b08964529853725dfdac96111810e
b394e8b496cf75df21358139585828274126d085333810ad86e5882e175fe525
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /newtheme/css/tooplate-style.css HTTP/1.1
Host: notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%221c094c9d919998adb557d4992ea2a2a2%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1701429682%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7Ddcae5a5b001c9b4f44647886bd39c706
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: text/css
content-length: 4315
last-modified: Mon, 27 May 2019 10:38:17 GMT
etag: "3784-589dc256d3b91-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
notaire-gay-friendly.fr/newtheme/img/Avocat-Gay-friendly-LGBT.png
200 OK 207 kB URL GET HTTP/2 notaire-gay-friendly.fr/newtheme/img/Avocat-Gay-friendly-LGBT.png
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
File type PNG image data, 550 x 420, 8-bit/color RGB, non-interlaced\012- data
Size 207 kB (206631 bytes)
Hash de0c751ab1ef67e1169de390dc7ececb
7dfde1594e0e1a59c52b0e4ba4a361623591e2ba
834e336b18d8b3dd1cc121b6c65760086e45af34cdd9003c1efc8d9921ee2f26
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /newtheme/img/Avocat-Gay-friendly-LGBT.png HTTP/1.1
Host: notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%221c094c9d919998adb557d4992ea2a2a2%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1701429682%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7Ddcae5a5b001c9b4f44647886bd39c706
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: image/png
content-length: 206631
last-modified: Wed, 22 May 2019 10:34:21 GMT
etag: "32727-589778226aae6"
accept-ranges: bytes
X-Firefox-Spdy: h2
notaire-gay-friendly.fr/newtheme/js/jquery-1.11.3.min.js
200 OK 32 kB URL GET HTTP/2 notaire-gay-friendly.fr/newtheme/js/jquery-1.11.3.min.js
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
File type ASCII text, with very long lines (32038)
Hash f03e5a3bf534f4a738bc350631fd05bd
37b1db88b57438f1072a8ebc7559c909c9d3a682
aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /newtheme/js/jquery-1.11.3.min.js HTTP/1.1
Host: notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%221c094c9d919998adb557d4992ea2a2a2%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1701429682%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7Ddcae5a5b001c9b4f44647886bd39c706
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: application/javascript
content-length: 32426
last-modified: Wed, 22 May 2019 10:34:26 GMT
etag: "176f8-58977827c1de6-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
notaire-gay-friendly.fr/newtheme/js/datepicker.min.js
200 OK 3.1 kB URL GET HTTP/2 notaire-gay-friendly.fr/newtheme/js/datepicker.min.js
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
File type ASCII text, with very long lines (8468), with no line terminators
Hash 21aff2b9010b7b359dbf92654c33d052
ff4bff61c3a82a6e8a07d1325687cedb4d841cf5
1e84a9c72f005ba2321dbff2925146ff2d29acf854bc56975df8a3c231d0fe9f
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /newtheme/js/datepicker.min.js HTTP/1.1
Host: notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%221c094c9d919998adb557d4992ea2a2a2%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1701429682%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7Ddcae5a5b001c9b4f44647886bd39c706
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: application/javascript
content-length: 3130
last-modified: Wed, 22 May 2019 10:34:26 GMT
etag: "2114-58977827353e6-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
notaire-gay-friendly.fr/newtheme/js/jquery.singlePageNav.min.js
200 OK 1.0 kB URL GET HTTP/2 notaire-gay-friendly.fr/newtheme/js/jquery.singlePageNav.min.js
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
File type ASCII text, with very long lines (2444)
Hash 136efaf3f861e19d4b76848e33d1827d
fa74b2ad1714a56b9db920f0552e6d8e70f5e69e
a52a28e52628e812dec406f6f5f197bfeb8b7746711a3b944d26280c1066a3fa
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /newtheme/js/jquery.singlePageNav.min.js HTTP/1.1
Host: notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%221c094c9d919998adb557d4992ea2a2a2%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1701429682%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7Ddcae5a5b001c9b4f44647886bd39c706
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: application/javascript
content-length: 1019
last-modified: Wed, 22 May 2019 10:34:26 GMT
etag: "a33-58977827b6266-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
notaire-gay-friendly.fr/newtheme/slick/slick.min.js
200 OK 10 kB URL GET HTTP/2 notaire-gay-friendly.fr/newtheme/slick/slick.min.js
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
File type ASCII text, with very long lines (42862)
Hash d5a61c749e44e47159af8a6579dda121
3b41b3bc956685015a347a2238e71db29dfa0dbb
0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /newtheme/slick/slick.min.js HTTP/1.1
Host: notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%221c094c9d919998adb557d4992ea2a2a2%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1701429682%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7Ddcae5a5b001c9b4f44647886bd39c706
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: application/javascript
content-length: 10108
last-modified: Wed, 22 May 2019 10:34:29 GMT
etag: "a76f-5897782a9c566-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
notaire-gay-friendly.fr/newtheme/js/bootstrap.min.js
200 OK 13 kB URL GET HTTP/2 notaire-gay-friendly.fr/newtheme/js/bootstrap.min.js
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
File type ASCII text, with very long lines (50277)
Hash 46b549bdc90920f18a911f186b9dd75c
3c639c4af5c036a6ee364215bd12c0b12937827d
1886bc561dec7c44a7541d82377ad81a40ff32496f32ad259884f0790c44d6a5
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /newtheme/js/bootstrap.min.js HTTP/1.1
Host: notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%221c094c9d919998adb557d4992ea2a2a2%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1701429682%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7Ddcae5a5b001c9b4f44647886bd39c706
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: application/javascript
content-length: 12578
last-modified: Wed, 22 May 2019 10:34:26 GMT
etag: "c584-589778274ea26-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
notaire-gay-friendly.fr/newtheme/js/popper.min.js
200 OK 6.6 kB URL GET HTTP/2 notaire-gay-friendly.fr/newtheme/js/popper.min.js
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
File type ASCII text, with very long lines (18860)
Hash 068d64fd1715635226e7a4b91017c6cf
ca344d4feda098dc568fea9591be7beefcc6b2aa
072214cac2642148ff8266b18c82fdc64428932369da84dec0562cf01ca58d32
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /newtheme/js/popper.min.js HTTP/1.1
Host: notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%221c094c9d919998adb557d4992ea2a2a2%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1701429682%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7Ddcae5a5b001c9b4f44647886bd39c706
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: application/javascript
content-length: 6588
last-modified: Wed, 22 May 2019 10:34:27 GMT
etag: "4a58-5897782815da6-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
notaire-gay-friendly.fr/newtheme/img/Notaires-Gay-friendly-LBTG.png
200 OK 232 kB URL GET HTTP/2 notaire-gay-friendly.fr/newtheme/img/Notaires-Gay-friendly-LBTG.png
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
File type PNG image data, 550 x 420, 8-bit/color RGB, non-interlaced\012- data
Size 232 kB (232072 bytes)
Hash 2b968a1d26ab5b46949d835e43768cd1
31d2adbdc1023a92e27ff599f355471610df848b
df3045e18777db2b853ee2c2d9f7d0341ce1442ce139fedc88d59eedd279da68
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /newtheme/img/Notaires-Gay-friendly-LBTG.png HTTP/1.1
Host: notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%221c094c9d919998adb557d4992ea2a2a2%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1701429682%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7Ddcae5a5b001c9b4f44647886bd39c706
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: image/png
content-length: 232072
last-modified: Wed, 22 May 2019 10:34:24 GMT
etag: "38a88-58977825607e6"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.notaire-gay-friendly.fr/assets/css/custom.css
200 OK 212 B URL GET HTTP/2 www.notaire-gay-friendly.fr/assets/css/custom.css
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
File type assembler source, ASCII text
Hash 953dd0506678e16a6d746d273ace394c
c5986f6159230209677d953bc60b4734dbb7b96c
a19add01e60b6ec2e39ec0892bb7fd433780be9981fd83dfe24f277a78b0f979
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /assets/css/custom.css HTTP/1.1
Host: www.notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: text/css
content-length: 212
last-modified: Tue, 11 Feb 2014 16:43:20 GMT
etag: "169-4f224275d1a00-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
www.notaire-gay-friendly.fr/assets/css/bootstrap-theme.css
200 OK 1.6 kB URL GET HTTP/2 www.notaire-gay-friendly.fr/assets/css/bootstrap-theme.css
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
Hash f117c407bf70bbd2f4809a8735aadfe0
84ec090aa39ef48043e004d5c85e49bae427a3d9
4d4896d17e4eb70223eff1354e4237a26e8941a14a567d28d6d748b285ca1973
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /assets/css/bootstrap-theme.css HTTP/1.1
Host: www.notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: text/css
content-length: 1571
last-modified: Wed, 22 May 2019 11:04:47 GMT
etag: "382c-58977ef00a2a7-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
www.notaire-gay-friendly.fr/assets/js/custom.js
200 OK 759 B URL GET HTTP/2 www.notaire-gay-friendly.fr/assets/js/custom.js
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
Hash ed0dda14796582c49f76eccf5ae206b9
a371231f433797d4bc95c5fe25b221e5be29973d
5e361ac949c2eb1cedee95730c8dd0d18ba6d3caf3e3eef0dbd8d0a4dfe4444e
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /assets/js/custom.js HTTP/1.1
Host: www.notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: application/javascript
content-length: 759
last-modified: Tue, 11 Feb 2014 16:43:30 GMT
etag: "725-4f22427f5b080-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
www.notaire-gay-friendly.fr/assets/js/bootstrap.js
200 OK 10 kB URL GET HTTP/2 www.notaire-gay-friendly.fr/assets/js/bootstrap.js
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
Hash cf1cf2fce27179c0de8a71c73b378f07
44a69a91c82f22941f0fd8c9f1c459eca33d8dbe
d88949ad637b040b893c651e938b80f8a1aabc350c94c01c28e8a38fadab2df3
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /assets/js/bootstrap.js HTTP/1.1
Host: www.notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: application/javascript
content-length: 10387
last-modified: Tue, 11 Feb 2014 16:43:29 GMT
etag: "e4a5-4f22427e66e40-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
notaire-gay-friendly.fr/newtheme/img/Medecin-Sante-gay-friendly-LGBT.png
200 OK 205 kB URL GET HTTP/2 notaire-gay-friendly.fr/newtheme/img/Medecin-Sante-gay-friendly-LGBT.png
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
File type PNG image data, 550 x 420, 8-bit/color RGB, non-interlaced\012- data
Size 205 kB (204949 bytes)
Hash 10f713730539d27de360ff3da568ea8c
08aeac4ff9acb53e55e8e86170d4c72c395eec5a
c2231b16188d1f95b00ff5750a6b805cd0e8604262a5945b2f003e200fc1eaa0
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /newtheme/img/Medecin-Sante-gay-friendly-LGBT.png HTTP/1.1
Host: notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%221c094c9d919998adb557d4992ea2a2a2%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1701429682%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7Ddcae5a5b001c9b4f44647886bd39c706
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: image/png
content-length: 204949
last-modified: Wed, 22 May 2019 10:34:23 GMT
etag: "32095-58977824c6326"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.notaire-gay-friendly.fr/assets/images/Notaires-Gay-friendly-LGBT-logo.svg
200 OK 6.1 kB URL GET HTTP/2 www.notaire-gay-friendly.fr/assets/images/Notaires-Gay-friendly-LGBT-logo.svg
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (6058), with no line terminators
Hash cbedd94a1aad51f8f91d060eeed2fda0
300df7b9dde86ce8e2518f1ae4d7928e9c5baaaa
3b702050b12f3114a932f69bc0edc8a43f5bd4f76e6a58af4f83c12457df0b58
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /assets/images/Notaires-Gay-friendly-LGBT-logo.svg HTTP/1.1
Host: www.notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: image/svg+xml
content-length: 6058
last-modified: Wed, 22 May 2019 11:27:15 GMT
etag: "17aa-589783f5fa5f6"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.notaire-gay-friendly.fr/assets/css/font-awesome.css
200 OK 4.0 kB URL GET HTTP/2 www.notaire-gay-friendly.fr/assets/css/font-awesome.css
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
File type troff or preprocessor input, ASCII text, with very long lines (301)
Hash 91539a25935ed0246e12b1d070842e1a
cebad4f790f3ba169a0e71b859834beb636f0e99
6b673349ae8ba6eea8339e700c5878762d0f9652311edfad7ee5ce10686361cb
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /assets/css/font-awesome.css HTTP/1.1
Host: www.notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: text/css
content-length: 4011
last-modified: Tue, 11 Feb 2014 16:43:20 GMT
etag: "5495-4f224275d1a00-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
www.notaire-gay-friendly.fr/assets/css/bootstrap.css
200 OK 17 kB URL GET HTTP/2 www.notaire-gay-friendly.fr/assets/css/bootstrap.css
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
File type assembler source, ASCII text, with very long lines (318)
Hash dfc308aa0d9bceafb90298929a3a4d1a
def55001c78e317e81ccdd2975e660c5b19f767e
8d71ea84cfb913fff4838f4a1f72e0b12989dd40fa9db2ced19abdfef5d969ae
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /assets/css/bootstrap.css HTTP/1.1
Host: www.notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: text/css
content-length: 16819
last-modified: Tue, 11 Feb 2014 16:43:20 GMT
etag: "1e276-4f224275d1a00-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
www.avocat-gay-friendly.fr/wp-content/uploads/scroll.png
200 OK 1.3 kB URL GET HTTP/2 www.avocat-gay-friendly.fr/wp-content/uploads/scroll.png
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectavocat-gay-friendly.fr
FingerprintF9:35:3F:82:89:2D:C9:28:04:80:E5:99:1F:93:89:51:34:73:97:61
ValidityTue, 07 Nov 2023 04:24:41 GMT - Mon, 05 Feb 2024 04:24:40 GMT
File type PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced\012- data
Hash d9367e36bfaf7cc77e8f98225dfeed5d
72c0c92b96d26f56852fa94a85a112a819871531
97655a8426d9803f7c5915adc26571d562bd4acc1ed8bc752341915830633d36
GET /wp-content/uploads/scroll.png HTTP/1.1
Host: www.avocat-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: image/png
content-length: 1331
last-modified: Fri, 21 Jun 2019 15:25:22 GMT
etag: "533-58bd712247686"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.avocat-gay-friendly.fr/wp-content/uploads/CONSEILLER-EN-GESTION-DE-PATRIMOINE.jpg
200 OK 30 kB URL GET HTTP/2 www.avocat-gay-friendly.fr/wp-content/uploads/CONSEILLER-EN-GESTION-DE-PATRIMOINE.jpg
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectavocat-gay-friendly.fr
FingerprintF9:35:3F:82:89:2D:C9:28:04:80:E5:99:1F:93:89:51:34:73:97:61
ValidityTue, 07 Nov 2023 04:24:41 GMT - Mon, 05 Feb 2024 04:24:40 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=15, height=300, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=276], progressive, precision 8, 276x238, components 3\012- data
Hash d05076005eb75fd3cf9d2f27cf30671c
cc77bfcd0595c7b25b1164da023acbfc3bddc2d7
a9acf1bc5c9e0a31c53cb4501e7e0f61fedd14f497ec3607759a4d9491182425
GET /wp-content/uploads/CONSEILLER-EN-GESTION-DE-PATRIMOINE.jpg HTTP/1.1
Host: www.avocat-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: image/jpeg
content-length: 30436
last-modified: Thu, 30 May 2019 13:27:12 GMT
etag: "76e4-58a1adb0c438d"
accept-ranges: bytes
X-Firefox-Spdy: h2
notaire-gay-friendly.fr/newtheme/img/Notaire-gay-friendly-LGBT.jpg
200 OK 240 kB URL GET HTTP/2 notaire-gay-friendly.fr/newtheme/img/Notaire-gay-friendly-LGBT.jpg
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1920x787, components 3\012- data
Size 240 kB (240204 bytes)
Hash c69ee1fb7137989116fcfcb747827628
df10a8483036a49ca0f591860fe151346317a917
fc7f3d8330764660b40b62939dc8fdbf3448e8b60dda823ef302c379d03955d8
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /newtheme/img/Notaire-gay-friendly-LGBT.jpg HTTP/1.1
Host: notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/newtheme/css/tooplate-style.css
Cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%221c094c9d919998adb557d4992ea2a2a2%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1701429682%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7Ddcae5a5b001c9b4f44647886bd39c706
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: image/jpeg
content-length: 240204
last-modified: Wed, 22 May 2019 10:52:21 GMT
etag: "3aa4c-58977c28c438c"
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 14940, version 1.0\012- data
Hash a46fb7aae99225fdfd9d64b2b8b1063f
1ee50bf5985c1956dde1c06d9b1cec4645ddb92b
4b5816bbfc52587979139951355fe4048da02ce60e40cef8e4a1efb6cd396281
GET /s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://notaire-gay-friendly.fr
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14940
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:58:28 GMT
expires: Fri, 29 Nov 2024 04:58:28 GMT
cache-control: public, max-age=31536000
age: 109375
last-modified: Wed, 13 Sep 2023 22:46:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.notaire-gay-friendly.fr/assets/img/favicon.png
200 OK 2.7 kB URL GET HTTP/2 www.notaire-gay-friendly.fr/assets/img/favicon.png
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
File type PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced\012- data
Hash ac8ecda82f19bd439ec77ed0a86faa45
89f0121d02daab97dfcc8f6c4be2dafe01e0237a
b65dfafb8651ce6a6f3c3b2aeb2e74a65b24cfa13f8fa2286f06d57ee462b581
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /assets/img/favicon.png HTTP/1.1
Host: www.notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 11:21:23 GMT
content-type: image/png
content-length: 2746
last-modified: Tue, 11 Feb 2014 16:43:28 GMT
etag: "aba-4f22427d72c00"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
200 OK 191 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&k=6LeT1s0UAAAAAMSSD5WhpvWZDHKlVDnrnWV6VL7a
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (563)
Size 191 kB (190682 bytes)
Hash 23b9dd721490a4062ba8d01454ef6ba9
efdbb7331585411f7d397dacbf51fd3e95f3031d
4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://notaire-gay-friendly.fr
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190682
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 01:52:16 GMT
expires: Fri, 29 Nov 2024 01:52:16 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 120547
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css
200 OK 25 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeT1s0UAAAAAMSSD5WhpvWZDHKlVDnrnWV6VL7a&co=aHR0cHM6Ly9ub3RhaXJlLWdheS1mcmllbmRseS5mcjo0NDM.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=caivkjnvf612
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (56398), with no line terminators
Hash eb4bc511f79f7a1573b45f5775b3a99b
d910fb51ad7316aa54f055079374574698e74b35
7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 01 Dec 2023 07:57:18 GMT
expires: Sat, 30 Nov 2024 07:57:18 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/css
vary: Accept-Encoding
age: 12246
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
200 OK 191 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&k=6LeT1s0UAAAAAMSSD5WhpvWZDHKlVDnrnWV6VL7a
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (563)
Size 191 kB (190682 bytes)
Hash 23b9dd721490a4062ba8d01454ef6ba9
efdbb7331585411f7d397dacbf51fd3e95f3031d
4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190682
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 01:52:16 GMT
expires: Fri, 29 Nov 2024 01:52:16 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 120548
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeT1s0UAAAAAMSSD5WhpvWZDHKlVDnrnWV6VL7a&co=aHR0cHM6Ly9ub3RhaXJlLWdheS1mcmllbmRseS5mcjo0NDM.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=caivkjnvf612
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 10:04:07 GMT
expires: Fri, 29 Nov 2024 10:04:07 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 91037
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/api2/logo_48.png
200 OK 2.2 kB URL GET HTTP/3 www.gstatic.com/recaptcha/api2/logo_48.png
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeT1s0UAAAAAMSSD5WhpvWZDHKlVDnrnWV6VL7a&co=aHR0cHM6Ly9ub3RhaXJlLWdheS1mcmllbmRseS5mcjo0NDM.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=caivkjnvf612
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 27 Nov 2023 23:42:11 GMT
expires: Mon, 04 Dec 2023 23:42:11 GMT
cache-control: public, max-age=604800
age: 301153
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
200 OK 191 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&k=6LeT1s0UAAAAAMSSD5WhpvWZDHKlVDnrnWV6VL7a
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (563)
Size 191 kB (190682 bytes)
Hash 23b9dd721490a4062ba8d01454ef6ba9
efdbb7331585411f7d397dacbf51fd3e95f3031d
4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190682
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 01:52:16 GMT
expires: Fri, 29 Nov 2024 01:52:16 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 120548
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css
200 OK 25 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeT1s0UAAAAAMSSD5WhpvWZDHKlVDnrnWV6VL7a&co=aHR0cHM6Ly9ub3RhaXJlLWdheS1mcmllbmRseS5mcjo0NDM.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=caivkjnvf612
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (56398), with no line terminators
Hash eb4bc511f79f7a1573b45f5775b3a99b
d910fb51ad7316aa54f055079374574698e74b35
7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 01 Dec 2023 07:57:18 GMT
expires: Sat, 30 Nov 2024 07:57:18 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/css
vary: Accept-Encoding
age: 12246
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
200 OK 191 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&k=6LeT1s0UAAAAAMSSD5WhpvWZDHKlVDnrnWV6VL7a
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (563)
Size 191 kB (190682 bytes)
Hash 23b9dd721490a4062ba8d01454ef6ba9
efdbb7331585411f7d397dacbf51fd3e95f3031d
4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190682
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 01:52:16 GMT
expires: Fri, 29 Nov 2024 01:52:16 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 120548
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/api2/webworker.js?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed
200 OK 102 B URL GET HTTP/3 www.google.com/recaptcha/api2/webworker.js?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeT1s0UAAAAAMSSD5WhpvWZDHKlVDnrnWV6VL7a&co=aHR0cHM6Ly9ub3RhaXJlLWdheS1mcmllbmRseS5mcjo0NDM.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=caivkjnvf612
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with no line terminators
Hash b581f6e6ac7eb4d572233bdd384918f8
12a90cd14cfea2286982801538560f638670eaff
b62f36160407c81030404ab242125afd42fa0da6626ef11e5f406dda12acf144
GET /recaptcha/api2/webworker.js?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeT1s0UAAAAAMSSD5WhpvWZDHKlVDnrnWV6VL7a&co=aHR0cHM6Ly9ub3RhaXJlLWdheS1mcmllbmRseS5mcjo0NDM.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=caivkjnvf612
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Fri, 01 Dec 2023 11:21:24 GMT
date: Fri, 01 Dec 2023 11:21:24 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.googleapis.com/css?family=Open+Sans:300,400,600,700
200 OK 11 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300,400,600,700
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash 913a405cc0fe7aff9fdf74a52e76d9b5
15e43177f3e5d516836ff707568651bc09b6319d
575bbbf8b2076fd27f1020084ed48b141c1045ad0165c4154643bc1ae0476a65
GET /css?family=Open+Sans:300,400,600,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 01 Dec 2023 11:21:23 GMT
date: Fri, 01 Dec 2023 11:21:23 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/anchor?ar=1&k=6LeT1s0UAAAAAMSSD5WhpvWZDHKlVDnrnWV6VL7a&co=aHR0cHM6Ly9ub3RhaXJlLWdheS1mcmllbmRseS5mcjo0NDM.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=caivkjnvf612
200 OK 62 kB URL GET HTTP/3 www.google.com/recaptcha/api2/anchor?ar=1&k=6LeT1s0UAAAAAMSSD5WhpvWZDHKlVDnrnWV6VL7a&co=aHR0cHM6Ly9ub3RhaXJlLWdheS1mcmllbmRseS5mcjo0NDM.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=caivkjnvf612
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (53742)
Hash f200ce50f97deac8cc92628f6d78d693
52e1e0a816ddf61781a47fdb90cb8d4d5363a7e9
b94d891e1d9f7c4a62f44c87d7158a79be305ae1000734c6e3dcccc16f430b98
GET /recaptcha/api2/anchor?ar=1&k=6LeT1s0UAAAAAMSSD5WhpvWZDHKlVDnrnWV6VL7a&co=aHR0cHM6Ly9ub3RhaXJlLWdheS1mcmllbmRseS5mcjo0NDM.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=normal&cb=caivkjnvf612 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 01 Dec 2023 11:21:23 GMT
content-security-policy: script-src 'nonce-omnXDK1fuxCh6-wuv62xwQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.googleapis.com/css?family=Montserrat
200 OK 1.8 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Montserrat
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (1849), with no line terminators
Hash 471367a5d894df4be300326e8e1f53cd
ff889bd9695cf2f739f69001519ea374580c9561
97be6bb8e1c1e6809b029ddef8cc7f031b137f53a2b8c516e5669b981fd5432e
GET /css?family=Montserrat HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 01 Dec 2023 11:21:23 GMT
date: Fri, 01 Dec 2023 11:21:23 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
notaire-gay-friendly.fr/scarica/
302 Found 28 kB URL User Request GET HTTP/2 notaire-gay-friendly.fr/scarica/
IP
Certificate IssuerLet's Encrypt
Subjectnotaire-gay-friendly.fr
Fingerprint20:0C:A2:3A:A4:D2:50:0E:6B:70:87:7C:10:AC:4D:CA:A7:A7:FD:6F
ValidityThu, 02 Nov 2023 03:05:08 GMT - Wed, 31 Jan 2024 03:05:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /scarica/ HTTP/1.1
Host: notaire-gay-friendly.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 01 Dec 2023 11:21:22 GMT
content-type: text/html; charset=UTF-8
set-cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%221c094c9d919998adb557d4992ea2a2a2%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1701429682%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7Ddcae5a5b001c9b4f44647886bd39c706; expires=Fri, 01-Dec-2023 13:21:22 GMT; Max-Age=7200; path=/
location: /
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js
200 OK 850 B URL GET HTTP/2 www.google.com/recaptcha/api.js
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintB0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1
ValidityMon, 23 Oct 2023 11:24:57 GMT - Mon, 15 Jan 2024 11:24:56 GMT
File type ASCII text, with very long lines (850), with no line terminators
Hash 57e10dcd72dd2953878092014eae522b
95ba7e48825c26c5d9395ef2edb73e790bce6fa7
c7b54326365940d062bce26ed41579eebcb4946a86ba280790b603926692bd59
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Fri, 01 Dec 2023 11:21:23 GMT
date: Fri, 01 Dec 2023 11:21:23 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/bframe?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&k=6LeT1s0UAAAAAMSSD5WhpvWZDHKlVDnrnWV6VL7a
200 OK 7.3 kB URL GET HTTP/3 www.google.com/recaptcha/api2/bframe?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&k=6LeT1s0UAAAAAMSSD5WhpvWZDHKlVDnrnWV6VL7a
IP
Requested by https://notaire-gay-friendly.fr/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (7483), with no line terminators
Hash e26e1accf492f6a28f1e5d2d4d8ce4de
9c1a595b75b13247d5c6d28e28a76f54d8b05631
42538c1db6467d4ad0cb869162c52453ee58e9cccee3c04c62ee4b9b57c8bf5e
GET /recaptcha/api2/bframe?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&k=6LeT1s0UAAAAAMSSD5WhpvWZDHKlVDnrnWV6VL7a HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notaire-gay-friendly.fr/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 01 Dec 2023 11:21:24 GMT
content-security-policy: script-src 'nonce-5hHrZhmnwwqXMl2Bjdf8QQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
185.98.131.142
142.250.74.131