POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1066498994:1747041294:sLj1iWfckhECqhNjsEnzWBXpeYxjX_AjzmHwwnKgaiI/93e8eb8e8efab518/DhEAB45Pc92x_ap8_VbeV4_95KWnHpNTuL9PIX7m_5E-1747042465-1.2.1.1-hXvko9osRIbFM.EpfuUnDhaPt5uhPY6VeFDHqeVSbzREasyE5rtymPFoMO5SHZqx
104.18.95.41200 OK 238 kB URL POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1066498994:1747041294:sLj1iWfckhECqhNjsEnzWBXpeYxjX_AjzmHwwnKgaiI/93e8eb8e8efab518/DhEAB45Pc92x_ap8_VbeV4_95KWnHpNTuL9PIX7m_5E-1747042465-1.2.1.1-hXvko9osRIbFM.EpfuUnDhaPt5uhPY6VeFDHqeVSbzREasyE5rtymPFoMO5SHZqx
IP 104.18.95.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/plmry/0x4AAAAAABaf0dyf94S8wbLM/auto/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 238 kB (237836 bytes)
Hash 41ac62a286e0ee114d0fc9e4ab6f04c9
ee0689b44385cfe7208c2da83e78d89cf4dd0087
025d8f55d312834a6de0a9b9544e3d57c00002ffc763cdd7c468031f1cb430a2
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1066498994:1747041294:sLj1iWfckhECqhNjsEnzWBXpeYxjX_AjzmHwwnKgaiI/93e8eb8e8efab518/DhEAB45Pc92x_ap8_VbeV4_95KWnHpNTuL9PIX7m_5E-1747042465-1.2.1.1-hXvko9osRIbFM.EpfuUnDhaPt5uhPY6VeFDHqeVSbzREasyE5rtymPFoMO5SHZqx HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/plmry/0x4AAAAAABaf0dyf94S8wbLM/auto/fbE/new/normal/auto/
cf-chl: DhEAB45Pc92x_ap8_VbeV4_95KWnHpNTuL9PIX7m_5E-1747042465-1.2.1.1-hXvko9osRIbFM.EpfuUnDhaPt5uhPY6VeFDHqeVSbzREasyE5rtymPFoMO5SHZqx
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 3507
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 12 May 2025 09:34:25 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: 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$3DtiafD94o4MksJFSTJIwA==
priority: u=3,i=?0
server: cloudflare
cf-ray: 93e8eb929d45b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1066498994:1747041294:sLj1iWfckhECqhNjsEnzWBXpeYxjX_AjzmHwwnKgaiI/93e8eb8e8efab518/DhEAB45Pc92x_ap8_VbeV4_95KWnHpNTuL9PIX7m_5E-1747042465-1.2.1.1-hXvko9osRIbFM.EpfuUnDhaPt5uhPY6VeFDHqeVSbzREasyE5rtymPFoMO5SHZqx
104.18.95.41200 OK 28 kB URL POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1066498994:1747041294:sLj1iWfckhECqhNjsEnzWBXpeYxjX_AjzmHwwnKgaiI/93e8eb8e8efab518/DhEAB45Pc92x_ap8_VbeV4_95KWnHpNTuL9PIX7m_5E-1747042465-1.2.1.1-hXvko9osRIbFM.EpfuUnDhaPt5uhPY6VeFDHqeVSbzREasyE5rtymPFoMO5SHZqx
IP 104.18.95.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/plmry/0x4AAAAAABaf0dyf94S8wbLM/auto/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type ASCII text, with very long lines (28188), with no line terminators
Hash ccda183706f770da1bdc5d7866d8c1b8
6fe5f295393923b4cb21996f833363ab2abcc43a
8490e5f521327e3494f423bdd351f66d71ba031b5a67c0984cbaaa6b77367c4f
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1066498994:1747041294:sLj1iWfckhECqhNjsEnzWBXpeYxjX_AjzmHwwnKgaiI/93e8eb8e8efab518/DhEAB45Pc92x_ap8_VbeV4_95KWnHpNTuL9PIX7m_5E-1747042465-1.2.1.1-hXvko9osRIbFM.EpfuUnDhaPt5uhPY6VeFDHqeVSbzREasyE5rtymPFoMO5SHZqx HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/plmry/0x4AAAAAABaf0dyf94S8wbLM/auto/fbE/new/normal/auto/
cf-chl: DhEAB45Pc92x_ap8_VbeV4_95KWnHpNTuL9PIX7m_5E-1747042465-1.2.1.1-hXvko9osRIbFM.EpfuUnDhaPt5uhPY6VeFDHqeVSbzREasyE5rtymPFoMO5SHZqx
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 34785
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 12 May 2025 09:34:32 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: R5bquYddmQKqDgm5jemHxJBw/+Aj4VMMPf8iRxx1z3GZtu94KSsinwFVH6N5sEpF$GQ3XrWQk5iE3PpZqH71f+w==
priority: u=3,i=?0
server: cloudflare
cf-ray: 93e8ebbebe73b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
104.18.11.207200 OK 49 kB URL GET maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
IP 104.18.11.207:443
Requested by https://onedrive-files.petitsamusements.de/3iLNb/?e=guillaume.porcher@natixis.com
Certificate IssuerGoogle Trust Services
Subjectbootstrapcdn.com
Fingerprint90:B1:98:4A:7E:D6:37:CF:9B:DC:7D:67:82:58:17:6C:F7:F6:11:DE
ValiditySun, 16 Mar 2025 01:14:49 GMT - Sat, 14 Jun 2025 02:14:23 GMT
File type JavaScript source, ASCII text, with very long lines (48664)
Hash 14d449eb8876fa55e1ef3c2cc52b0c17
a9545831803b1359cfeed47e3b4d6bae68e40e99
e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b
GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive-files.petitsamusements.de
DNT: 1
Connection: keep-alive
Referer: https://onedrive-files.petitsamusements.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 12 May 2025 09:34:37 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "14d449eb8876fa55e1ef3c2cc52b0c17"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 03/22/2025 12:19:15
cdn-proxyver: 1.22
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1048
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 4de16c6a89aa2727a5615b618b92f67a
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 93e8ebdcece6b4f3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
142.250.74.42200 OK 86 kB URL GET ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP 142.250.74.42:443
Requested by https://onedrive-files.petitsamusements.de/3iLNb/?e=guillaume.porcher@natixis.com
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint7A:29:E6:A8:BE:59:2C:AE:82:2D:CA:8E:15:89:41:BE:EC:D2:0D:EA
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File type JavaScript source, ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onedrive-files.petitsamusements.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 May 2025 09:34:55 GMT
expires: Fri, 08 May 2026 09:34:55 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 345582
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET onedrive-files.petitsamusements.de/favicon.ico
104.21.48.1404 Not Found 196 B URL GET onedrive-files.petitsamusements.de/favicon.ico
IP 104.21.48.1:443
Requested by https://onedrive-files.petitsamusements.de/3iLNb/?e=guillaume.porcher@natixis.com
Certificate IssuerGoogle Trust Services
Subjectpetitsamusements.de
Fingerprint6D:6A:F9:6A:E6:C3:77:72:F1:53:65:D1:FC:CF:E4:7E:F8:0F:01:93
ValidityMon, 05 May 2025 14:40:08 GMT - Sun, 03 Aug 2025 15:36:33 GMT
File type HTML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /favicon.ico HTTP/1.1
Host: onedrive-files.petitsamusements.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onedrive-files.petitsamusements.de/3iLNb/?e=guillaume.porcher@natixis.com
Cookie: PHPSESSID=pjgvdt6ke1v6f76h04hgcf06kv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Mon, 12 May 2025 09:34:39 GMT
content-type: text/html; charset=iso-8859-1
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3fOG8D1Y%2B6kkdhMtDkpH%2BDbLLBMUcqwf3CCmT8S7v9EbianGdFpJ8Eo3QWn5OKHlymDYnvIrdRXsjuP%2BlY291UUwNAdBkJy%2Bz0vGTwKmNw%2B71YYZ1ID5DW%2BKizQRCjPmD0sUHCapAXZHvyTKQTQLnCJEAuOx"}],"group":"cf-nel","max_age":604800}
age: 13
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 93e8ebe61bb9712a-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5723&min_rtt=1764&rtt_var=4405&sent=109&recv=125&lost=0&retrans=0&sent_bytes=26407&recv_bytes=9038&delivery_rate=2666337&cwnd=12000&unsent_bytes=0&cid=bdd4b69a1f7a51d8&ts=14479&x=16"
GET 3f3a1e8d705821c09921c8e58dcf88834af4fc7f-epos.topstructuress.icu/tqQpbd3BEKrH4d5C2f7xBJ3w6T57xH7PsSJwVKlAQwcg1LD8iygXP7VliahLt4qf/guillaume.porcher@natixis.com
192.185.13.17200 OK 1.9 kB URL User Request GET 3f3a1e8d705821c09921c8e58dcf88834af4fc7f-epos.topstructuress.icu/tqQpbd3BEKrH4d5C2f7xBJ3w6T57xH7PsSJwVKlAQwcg1LD8iygXP7VliahLt4qf/guillaume.porcher@natixis.com
IP 192.185.13.17:443
ASN #19871 NETWORK-SOLUTIONS-HOSTING
Certificate IssuerLet's Encrypt
Subjecttopstructuress.icu
FingerprintA0:06:87:A8:C2:33:60:C6:F0:55:4B:A0:72:E1:F6:BC:9B:1B:88:82
ValiditySun, 16 Mar 2025 17:05:08 GMT - Sat, 14 Jun 2025 17:05:07 GMT
File type HTML document, ASCII text, with very long lines (1753), with CRLF line terminators
Hash 82149bd090f4e82786f443d08e666365
d12cbe45ea7cc5a390093c9a98ed2477174e18f9
c69be539a77f6c546086a1465fc34264c3cb47de7f3a5dc858d6dc9e87ccdbbe
GET /tqQpbd3BEKrH4d5C2f7xBJ3w6T57xH7PsSJwVKlAQwcg1LD8iygXP7VliahLt4qf/guillaume.porcher@natixis.com HTTP/1.1
Host: 3f3a1e8d705821c09921c8e58dcf88834af4fc7f-epos.topstructuress.icu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-length: 1209
content-type: text/html; charset=UTF-8
date: Mon, 12 May 2025 09:34:22 GMT
server: Apache
X-Firefox-Spdy: h2
GET onedrive-files.petitsamusements.de/3iLNb/?e=guillaume.porcher@natixis.com
104.21.48.1200 OK 2.6 kB URL User Request GET onedrive-files.petitsamusements.de/3iLNb/?e=guillaume.porcher@natixis.com
IP 104.21.48.1:443
Certificate IssuerGoogle Trust Services
Subjectpetitsamusements.de
Fingerprint6D:6A:F9:6A:E6:C3:77:72:F1:53:65:D1:FC:CF:E4:7E:F8:0F:01:93
ValidityMon, 05 May 2025 14:40:08 GMT - Sun, 03 Aug 2025 15:36:33 GMT
File type HTML document, Unicode text, UTF-8 text
Hash 4627a4cb076bc3cda44f43fab8b959e7
3318b95041dd4ea22b25b8a5c3df1657b2c5dc3e
0060f4eb3cbb9da80fe816b48356211878ccca59d1bb3aada15593c8929def09
GET /3iLNb/?e=guillaume.porcher@natixis.com HTTP/1.1
Host: onedrive-files.petitsamusements.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3f3a1e8d705821c09921c8e58dcf88834af4fc7f-epos.topstructuress.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 12 May 2025 09:34:24 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
x-powered-by: PHP/8.0.30
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=8eN%2Fa0RQkihzZFD60OLMb%2Fry1%2FoaoSc298sPbuNG3EiwOXwCoKLrCtF16LaiwEHJwHrcE5kxnldRQodPhtK%2FmVnZH3FWqmWFNTOC%2BctG%2BSlIuDN58%2FDW5JlFTVp%2F5zNh6lsXkP%2FfU9dw6PEmdbWx4vnYKyH8"}]}
content-encoding: br
set-cookie: PHPSESSID=pjgvdt6ke1v6f76h04hgcf06kv; Path=/
cf-ray: 93e8eb89e933b521-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/plmry/0x4AAAAAABaf0dyf94S8wbLM/auto/fbE/new/normal/auto/
104.18.95.41200 OK 28 kB URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/plmry/0x4AAAAAABaf0dyf94S8wbLM/auto/fbE/new/normal/auto/
IP 104.18.95.41:443
Requested by https://onedrive-files.petitsamusements.de/3iLNb/?e=guillaume.porcher@natixis.com
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type HTML document, ASCII text, with very long lines (22244)
Hash e0307b6a04abf4a32da76eb3ab513f65
f7030bb1376d3c3c72cbe49fecb1a9a44d23f6d2
439a64f36c206b2ae38fc29b39ec784bca988629cc5eaadda42aae1faae85530
GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/plmry/0x4AAAAAABaf0dyf94S8wbLM/auto/fbE/new/normal/auto/ HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onedrive-files.petitsamusements.de/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 12 May 2025 09:34:25 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
content-security-policy: default-src 'none'; script-src 'nonce-3kfAC8DHWLTGDqoh' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
referrer-policy: same-origin
document-policy: js-profiling
priority: u=4,i=?0
server: cloudflare
cf-ray: 93e8eb8e8efab518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/93e8eb8e8efab518/1747042465718/218b0e096ff645e5bd1ecc915337f0e5aae78cc714f721ebff1e6e954f911394/9NFAhMqM8AwJhaw
104.18.95.41401 Unauthorized 1 B URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/93e8eb8e8efab518/1747042465718/218b0e096ff645e5bd1ecc915337f0e5aae78cc714f721ebff1e6e954f911394/9NFAhMqM8AwJhaw
IP 104.18.95.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/plmry/0x4AAAAAABaf0dyf94S8wbLM/auto/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type very short file (no magic)
Hash ff44570aca8241914870afbc310cdb85
58668e7669fd564d99db5d581fcdb6a5618440b5
6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/b/pat/93e8eb8e8efab518/1747042465718/218b0e096ff645e5bd1ecc915337f0e5aae78cc714f721ebff1e6e954f911394/9NFAhMqM8AwJhaw HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/plmry/0x4AAAAAABaf0dyf94S8wbLM/auto/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 401 Unauthorized
date: Mon, 12 May 2025 09:34:30 GMT
content-type: text/plain; charset=utf-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gIYsOCW_2ReW9HsyRUzfw5arnjMcU9yHr_x5ulU-RE5QAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAscjm_UO_k901rNdCKgLw5bvI4i6M_jDNCIXpfs2LRbtxwLOrUyplqVvML_hVlB5tIDMuj0ihhaOFHose-Y0_UjQnNUGE_vol46VvGgscTMtTjU4xINriap8AMTIygvljEBt6my-nBwkUGhY3U9v5iKC-eWR5bTfvrqFsuIVxafkSfhHqDXB4KLGNjvOOV71GGJ9x4yxA-C2OcULZ1uDDKuvAaMhuiWdF6OzSTXruP9yPg1vmuteavOW1re0YDbCbtK16PhHdSzWym7v_FrvId-2zf26j50FlTd_vl_DcKNDVCgWDoU0uX3cU6V3rSQoVXREEqPr-2ywSGru8ZuXRoQIDAQAB", max-age=20, PrivateToken challenge="AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tICGLDglv9kXlvR7MkVM38OWq54zHFPch6_8ebpVPkROUABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsLS4HBnLGydwK-bLQGRCaoyMsrXBRrDgQVmxS06j3UF0nYSd6GdTGCKIu1WV60eg-tJtTttfEVq7wHVQf4vzjYBidmCh88ebzxKv2GB6PESSodf5MsEup9xd5dxpkYScgL1CCJq89kRrOQ_CS61bvkL_oGyZf4ffqG5THgaOsopqj8dFLH6_SMy9yf8EgMYqpyjxfKsD-1_qb1m1DRjJEKPWKIGwmHXIKQJUqsxZFm4_Inwkxx7QMpVP4GyqlTxFVz7stWwJRSkMLHjEM_IWLUYfPhuwIUVqmRjGsY1n8flA1bRfxaWHNDxoi25-M2BKTP9NkNNJBbTKErhrZ9LGywIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tICGLDglv9kXlvR7MkVM38OWq54zHFPch6_8ebpVPkROUABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA1r6z50Qwapjvi7gKQBPiehOkJb40cvj8RgN_zo7Ag1Zt0ItIZ08z6yBoyxcQd_a3O1eJagQvs0q2WZqQcXhBy3zBsvQBUQF8QxmVXDj3rgtzSqQSahQmiLHDl8Bcv0QZEdy4zOIIyDuI5UyRXhX7XZGrCVD8CZ90xBA5BKM69472-2BHpBla9Lbeh9YUrkZ5O98MUI_u6VEapusnXAf_lwrQA8tyF-9S11SxHG6uu9ywb9GCpVeaxdoonr9TgwPU5JgXSFuW_Ow1I_O2alIJcGt4Lb8SBKG-hKMrnxnwzFPje27Rczkpqu7PtgYXJvH_uDRKG-nqq_rghxAOH_kchwIDAQAB", max-age=20
priority: u=4,i=?0
server: cloudflare
cf-ray: 93e8ebaee8c3b518-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/93e8eb8e8efab518/1747042465718/thL3cNrE8L4Jpn9
104.18.95.41200 OK 61 B URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/93e8eb8e8efab518/1747042465718/thL3cNrE8L4Jpn9
IP 104.18.95.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/plmry/0x4AAAAAABaf0dyf94S8wbLM/auto/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type PNG image data, 89 x 68, 8-bit/color RGB, non-interlaced
Hash 516f10a4e6b1428b368911011b9828d3
0ad988a6892e2f54568e33cf07982ff2e338fcde
271c0b6b8f04ec34524bf617fee43ba1437e0baa9355f689bf5b11b0d13e4272
GET /cdn-cgi/challenge-platform/h/b/d/93e8eb8e8efab518/1747042465718/thL3cNrE8L4Jpn9 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/plmry/0x4AAAAAABaf0dyf94S8wbLM/auto/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 12 May 2025 09:34:31 GMT
content-type: image/png
content-length: 61
priority: u=4,i=?0
server: cloudflare
cf-ray: 93e8ebb5aea9b518-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST onedrive-files.petitsamusements.de/3iLNb/?e=guillaume.porcher@natixis.com
104.21.48.1200 OK 41 kB URL User Request POST onedrive-files.petitsamusements.de/3iLNb/?e=guillaume.porcher@natixis.com
IP 104.21.48.1:443
Certificate IssuerGoogle Trust Services
Subjectpetitsamusements.de
Fingerprint6D:6A:F9:6A:E6:C3:77:72:F1:53:65:D1:FC:CF:E4:7E:F8:0F:01:93
ValidityMon, 05 May 2025 14:40:08 GMT - Sun, 03 Aug 2025 15:36:33 GMT
File type HTML document, ASCII text, with very long lines (40182)
Hash cc40ad4bf575cdd19f9ca5f1fe8ca7c1
94aba7f957d5365b85c27eb0c3a4cc3c8e9dc4b8
d1f75bba651846770b727659dd5f40879f6df784ff5dbfea5f7bf1f9fd622664
POST /3iLNb/?e=guillaume.porcher@natixis.com HTTP/1.1
Host: onedrive-files.petitsamusements.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 944
Origin: https://onedrive-files.petitsamusements.de
DNT: 1
Connection: keep-alive
Referer: https://onedrive-files.petitsamusements.de/3iLNb/?e=guillaume.porcher@natixis.com
Cookie: PHPSESSID=pjgvdt6ke1v6f76h04hgcf06kv
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 12 May 2025 09:34:37 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k76m7Adg6ecrPFcB1IHzMy48cV%2BVrfYEOMsygZEGqwaIOmNikvNaiYPZBt9vqsGU1pAcasQgGpmfq6X59ebNGZiTCupRXwri4dcr6zlei%2BJIlCUKMzigX%2FwCMP1XMkpgSHXG51Be%2BE4wnd7KRRBIUaVzOqTE"}],"group":"cf-nel","max_age":604800}
x-powered-by: PHP/8.0.30
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 93e8ebd85b04712a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6760&min_rtt=1764&rtt_var=4666&sent=91&recv=122&lost=0&retrans=0&sent_bytes=8776&recv_bytes=8584&delivery_rate=3188&cwnd=12000&unsent_bytes=0&cid=bdd4b69a1f7a51d8&ts=12691&x=16"
GET stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
104.18.11.207200 OK 51 kB URL GET stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
IP 104.18.11.207:443
Requested by https://onedrive-files.petitsamusements.de/3iLNb/?e=guillaume.porcher@natixis.com
Certificate IssuerGoogle Trust Services
Subjectbootstrapcdn.com
Fingerprint90:B1:98:4A:7E:D6:37:CF:9B:DC:7D:67:82:58:17:6C:F7:F6:11:DE
ValiditySun, 16 Mar 2025 01:14:49 GMT - Sat, 14 Jun 2025 02:14:23 GMT
File type JavaScript source, ASCII text, with very long lines (50758)
Hash 67176c242e1bdc20603c878dee836df3
27a71b00383d61ef3c489326b3564d698fc1227c
56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onedrive-files.petitsamusements.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 12 May 2025 09:34:37 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "67176c242e1bdc20603c878dee836df3"
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 10/04/2024 02:53:43
cdn-edgestorageid: 1029
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 1
cdn-requestid: c6c8a086d090f1d2baac8a7b0c894894
cdn-cache: HIT
cf-cache-status: HIT
age: 192483
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 93e8ebdd0ecd712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
POST 6416617147.sbs/next.php
162.241.121.156200 OK 16 B IP 162.241.121.156:443
ASN #19871 NETWORK-SOLUTIONS-HOSTING
Requested by https://onedrive-files.petitsamusements.de/3iLNb/?e=guillaume.porcher@natixis.com
Certificate IssuerLet's Encrypt
Subject6416617147.sbs
FingerprintFB:61:6E:07:A1:AF:87:F6:35:7D:E9:EA:2E:8B:A7:80:E4:C0:39:4E
ValidityThu, 03 Apr 2025 01:43:46 GMT - Wed, 02 Jul 2025 01:43:45 GMT
Hash 1f57cbd1f1a1ced8f62d34242408414c
52279c54b16f0a88d43d57b4cbb9813ea3cc39ab
c462d460eab61de19f36cc384c99666e5bf65eaeba0c12b8f594c5410c01f220
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
Quad9 DNS malicious Sinkholed
POST /next.php HTTP/1.1
Host: 6416617147.sbs
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive-files.petitsamusements.de/
Content-Type: application/x-www-form-urlencoded
Content-Length: 13
Origin: https://onedrive-files.petitsamusements.de
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 12 May 2025 09:34:40 GMT
Server: Apache
Access-Control-Allow-Origin: https://onedrive-files.petitsamusements.de
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 86400
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
GET challenges.cloudflare.com/turnstile/v0/api.js
104.18.95.41302 Found 48 kB URL GET challenges.cloudflare.com/turnstile/v0/api.js
IP 104.18.95.41:443
Requested by https://onedrive-files.petitsamusements.de/3iLNb/?e=guillaume.porcher@natixis.com
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onedrive-files.petitsamusements.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 12 May 2025 09:34:24 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public
cross-origin-resource-policy: cross-origin
location: /turnstile/v0/b/701fd2559006/api.js
vary: Accept-Encoding
server: cloudflare
cf-ray: 93e8eb8d4aed5685-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
104.18.95.41200 OK 61 B URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
IP 104.18.95.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/plmry/0x4AAAAAABaf0dyf94S8wbLM/auto/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Hash 9246cca8fc3c00f50035f28e9f6b7f7d
3aa538440f70873b574f40cd793060f53ec17a5d
c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/plmry/0x4AAAAAABaf0dyf94S8wbLM/auto/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 12 May 2025 09:34:25 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
priority: u=4,i=?0
server: cloudflare
cf-ray: 93e8eb8ff93cb518-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET onedrive-files.petitsamusements.de/favicon.ico
104.21.48.1404 Not Found 196 B URL GET onedrive-files.petitsamusements.de/favicon.ico
IP 104.21.48.1:443
Requested by https://onedrive-files.petitsamusements.de/3iLNb/?e=guillaume.porcher@natixis.com
Certificate IssuerGoogle Trust Services
Subjectpetitsamusements.de
Fingerprint6D:6A:F9:6A:E6:C3:77:72:F1:53:65:D1:FC:CF:E4:7E:F8:0F:01:93
ValidityMon, 05 May 2025 14:40:08 GMT - Sun, 03 Aug 2025 15:36:33 GMT
File type HTML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /favicon.ico HTTP/1.1
Host: onedrive-files.petitsamusements.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onedrive-files.petitsamusements.de/3iLNb/?e=guillaume.porcher@natixis.com
Cookie: PHPSESSID=pjgvdt6ke1v6f76h04hgcf06kv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Mon, 12 May 2025 09:34:25 GMT
content-type: text/html; charset=iso-8859-1
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SoTaBq88K%2BtVeZO14bGRZSqVCBYUlBs3huCXDv6AxKglbSx8%2Fyw6QZbtnjytfDBQSR3g5cm4q58tTfVHDcK6WnENuDvKV3ebnWiLsq4Rg6LIeBFk6IOf7pvgUaLfk0VEkPIBQ9YUppIKKCmpz%2BngK70IMOZO"}],"group":"cf-nel","max_age":604800}
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93e8eb8e8e9a712a-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6666&min_rtt=1764&rtt_var=5970&sent=88&recv=119&lost=0&retrans=0&sent_bytes=7884&recv_bytes=7061&delivery_rate=2121&cwnd=12000&unsent_bytes=0&cid=bdd4b69a1f7a51d8&ts=705&x=16"
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=93e8eb8e8efab518&lang=auto
104.18.95.41200 OK 112 kB URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=93e8eb8e8efab518&lang=auto
IP 104.18.95.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/plmry/0x4AAAAAABaf0dyf94S8wbLM/auto/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 112 kB (112443 bytes)
Hash f5b930414d27dce0bca5276b9d2ee69f
8319a6fe128ca336688e3e0a5201fb5bb9131849
d522c06affc9f5a03d192aa2b64bc4e3fb3450985658de911c5b2ee729a974f3
GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=93e8eb8e8efab518&lang=auto HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/plmry/0x4AAAAAABaf0dyf94S8wbLM/auto/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 12 May 2025 09:34:25 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
priority: u=3,i=?0
server: cloudflare
cf-ray: 93e8eb9039a0b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1066498994:1747041294:sLj1iWfckhECqhNjsEnzWBXpeYxjX_AjzmHwwnKgaiI/93e8eb8e8efab518/DhEAB45Pc92x_ap8_VbeV4_95KWnHpNTuL9PIX7m_5E-1747042465-1.2.1.1-hXvko9osRIbFM.EpfuUnDhaPt5uhPY6VeFDHqeVSbzREasyE5rtymPFoMO5SHZqx
104.18.95.41200 OK 4.7 kB URL POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1066498994:1747041294:sLj1iWfckhECqhNjsEnzWBXpeYxjX_AjzmHwwnKgaiI/93e8eb8e8efab518/DhEAB45Pc92x_ap8_VbeV4_95KWnHpNTuL9PIX7m_5E-1747042465-1.2.1.1-hXvko9osRIbFM.EpfuUnDhaPt5uhPY6VeFDHqeVSbzREasyE5rtymPFoMO5SHZqx
IP 104.18.95.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/plmry/0x4AAAAAABaf0dyf94S8wbLM/auto/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type ASCII text, with very long lines (4716), with no line terminators
Hash d5926ebbd670ae893c803c7035501899
10af12ef05d700f5c3890c50f181e5d7905d8eeb
e75075241e14f2c3b5443baaa60ff5127d9283ba94dbda2161a86f49bd534369
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1066498994:1747041294:sLj1iWfckhECqhNjsEnzWBXpeYxjX_AjzmHwwnKgaiI/93e8eb8e8efab518/DhEAB45Pc92x_ap8_VbeV4_95KWnHpNTuL9PIX7m_5E-1747042465-1.2.1.1-hXvko9osRIbFM.EpfuUnDhaPt5uhPY6VeFDHqeVSbzREasyE5rtymPFoMO5SHZqx HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/plmry/0x4AAAAAABaf0dyf94S8wbLM/auto/fbE/new/normal/auto/
cf-chl: DhEAB45Pc92x_ap8_VbeV4_95KWnHpNTuL9PIX7m_5E-1747042465-1.2.1.1-hXvko9osRIbFM.EpfuUnDhaPt5uhPY6VeFDHqeVSbzREasyE5rtymPFoMO5SHZqx
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 45521
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 12 May 2025 09:34:36 GMT
content-type: text/html; charset=UTF-8
cf-chl-out-s: 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$QDwQDl6S4ZWACoERHQRAWg==
cf-chl-out: QK7pXmE4NCMrjOFwhVSFE8KnR12SZGA6n4OcR5jBAu63a1XrXbv0x+nhT4GEpoatkbgGeSp9PtL4XjKUsZNs4w==$w85Nn8XjKf8yJr1p20zfeQ==
priority: u=3,i=?0
server: cloudflare
cf-ray: 93e8ebd6e8d3b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET code.jquery.com/jquery-3.2.1.slim.min.js
151.101.194.137200 OK 70 kB URL GET code.jquery.com/jquery-3.2.1.slim.min.js
IP 151.101.194.137:443
Requested by https://onedrive-files.petitsamusements.de/3iLNb/?e=guillaume.porcher@natixis.com
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5
ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (32012)
Hash 5f48fc77cac90c4778fa24ec9c57f37d
9e89d1515bc4c371b86f4cb1002fd8e377c1829f
9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398
GET /jquery-3.2.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive-files.petitsamusements.de
DNT: 1
Connection: keep-alive
Referer: https://onedrive-files.petitsamusements.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-10fdd"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 12 May 2025 09:34:37 GMT
age: 2951471
x-served-by: cache-lga21963-LGA, cache-hel1410020-HEL
x-cache: HIT, HIT
x-cache-hits: 38, 35159
x-timer: S1747042478.621956,VS0,VE0
vary: Accept-Encoding
content-length: 23856
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
104.17.24.14200 OK 19 kB URL GET cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
IP 104.17.24.14:443
Requested by https://onedrive-files.petitsamusements.de/3iLNb/?e=guillaume.porcher@natixis.com
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC
ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File type JavaScript source, ASCII text, with very long lines (19015)
Hash 70d3fda195602fe8b75e0097eed74dde
c3b977aa4b8dfb69d651e07015031d385ded964b
a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66
GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://onedrive-files.petitsamusements.de
DNT: 1
Connection: keep-alive
Referer: https://onedrive-files.petitsamusements.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 12 May 2025 09:34:37 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
server: cloudflare
strict-transport-security: max-age=15780000
cf-ray: 93e8ebdcdf85569b-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 195504
expires: Sat, 02 May 2026 09:34:37 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3YoZ7GgD%2BwwpEvX1SOVLyN1QnxGuM5ww8msj7MTDhxXfxlW18LG7vQCxYF0NScbSAID67y4qnyFJKAmLLwbj7Zqu5VyXz2knutPYlodjLAR8cb5Jpj3PowAZmb%2BqT1wY6E1eOQ2%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 6416617147-1317754460.cos.ap-tokyo.myqcloud.com/bootstrap.min.js
43.128.240.48200 OK 559 kB URL GET 6416617147-1317754460.cos.ap-tokyo.myqcloud.com/bootstrap.min.js
IP 43.128.240.48:443
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://onedrive-files.petitsamusements.de/3iLNb/?e=guillaume.porcher@natixis.com
Certificate IssuerGlobalSign nv-sa
Subject*.cos.ap-tokyo.myqcloud.com
Fingerprint6F:54:5C:76:56:21:E8:24:50:92:46:CD:E8:4C:40:A1:82:85:AC:FC
ValidityTue, 18 Feb 2025 01:41:01 GMT - Sun, 22 Mar 2026 01:41:00 GMT
File type JavaScript source, ASCII text, with very long lines (65474), with CRLF line terminators
Size 559 kB (559062 bytes)
Hash 5bbcc054d800c500455795d37921649e
dbfe44592645052e0807b9c3dba9b4bc9c99a32d
64a93028565c2cdd582ab6942f3a3bba13afcad877090db66dfecd7eb21205a4
GET /bootstrap.min.js HTTP/1.1
Host: 6416617147-1317754460.cos.ap-tokyo.myqcloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onedrive-files.petitsamusements.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 559062
Connection: keep-alive
Accept-Ranges: bytes
Content-Disposition: attachment
Date: Mon, 12 May 2025 09:34:39 GMT
ETag: "5bbcc054d800c500455795d37921649e"
Last-Modified: Mon, 05 May 2025 16:38:24 GMT
Server: tencent-cos
x-cos-force-download: true
x-cos-hash-crc64ecma: 3402463377163174486
x-cos-request-id: NjgyMWMwYWZfYzhkNDIwMDlfMzdkZF8xOTZkMTUy
GET 3f3a1e8d705821c09921c8e58dcf88834af4fc7f-epos.topstructuress.icu/favicon.ico
192.185.13.17404 Not Found 12 kB URL GET 3f3a1e8d705821c09921c8e58dcf88834af4fc7f-epos.topstructuress.icu/favicon.ico
IP 192.185.13.17:443
ASN #19871 NETWORK-SOLUTIONS-HOSTING
Requested by https://3f3a1e8d705821c09921c8e58dcf88834af4fc7f-epos.topstructuress.icu/tqQpbd3BEKrH4d5C2f7xBJ3w6T57xH7PsSJwVKlAQwcg1LD8iygXP7VliahLt4qf/guillaume.porcher@natixis.com
Certificate IssuerLet's Encrypt
Subjecttopstructuress.icu
FingerprintA0:06:87:A8:C2:33:60:C6:F0:55:4B:A0:72:E1:F6:BC:9B:1B:88:82
ValiditySun, 16 Mar 2025 17:05:08 GMT - Sat, 14 Jun 2025 17:05:07 GMT
File type HTML document, ASCII text, with very long lines (358)
Hash a8063bd37d3c8fb3176a6bf140558a4d
e32cf4b407db3d3773ded13ff64b70fdbad7735f
bccb23d41c2cc69cf0c7d22c4314ca8181a513c6999b73e45307792830f4e482
GET /favicon.ico HTTP/1.1
Host: 3f3a1e8d705821c09921c8e58dcf88834af4fc7f-epos.topstructuress.icu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3f3a1e8d705821c09921c8e58dcf88834af4fc7f-epos.topstructuress.icu/tqQpbd3BEKrH4d5C2f7xBJ3w6T57xH7PsSJwVKlAQwcg1LD8iygXP7VliahLt4qf/guillaume.porcher@natixis.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
last-modified: Sat, 01 Oct 2022 14:59:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4677
content-type: text/html
date: Mon, 12 May 2025 09:34:24 GMT
server: Apache
X-Firefox-Spdy: h2
GET challenges.cloudflare.com/turnstile/v0/b/701fd2559006/api.js
104.18.95.41200 OK 48 kB URL GET challenges.cloudflare.com/turnstile/v0/b/701fd2559006/api.js
IP 104.18.95.41:443
Requested by https://onedrive-files.petitsamusements.de/3iLNb/?e=guillaume.porcher@natixis.com
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type JavaScript source, ASCII text, with very long lines (48199)
Hash 836e5c0174a12217e501c67b80a15c72
b938c4182594f1caac154d8d10a463df7cbc5b81
caa976b62fb6b8808a12c08ee3434d1b41d614d404674fd4a3fd7c0528c923f4
GET /turnstile/v0/b/701fd2559006/api.js HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onedrive-files.petitsamusements.de/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 12 May 2025 09:34:24 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 05 May 2025 16:10:46 GMT
cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 93e8eb8d9b5b5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2