GET tag.leadplace.fr/libJsLP.js
145.239.193.51200 OK 4.0 kB URL GET tag.leadplace.fr/libJsLP.js
IP 145.239.193.51:443
Certificate IssuerGandi
Subject*.leadplace.fr
Fingerprint62:5E:25:4C:21:27:2A:A3:B7:39:88:51:60:43:FB:78:CC:7F:B1:6B
ValidityWed, 11 Sep 2024 00:00:00 GMT - Thu, 11 Sep 2025 23:59:59 GMT
File type JavaScript source, ASCII text
Hash 53872949cf8475adee4ad053d095adae
3de780f290378fa962a389dddafc499b271bdb0b
44c1e3ed52d2c3a70e3fdfa58a09abcfab1937951b78f65d282deb6ddf9ffba3
GET /libJsLP.js HTTP/1.1
Host: tag.leadplace.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: nginx/1.20.1
date: Wed, 02 Jul 2025 08:15:07 GMT
content-type: application/javascript
content-length: 4002
last-modified: Wed, 22 Jan 2025 18:09:54 GMT
etag: "67913472-fa2"
accept-ranges: bytes
x-iplb-request-id: 5B5A2A9A:574B_91EFC133:01BB_6864EA8B_E66FB46:37FB
x-iplb-instance: 57475
GET cdn.first-id.fr/sdk/script/flex-no-tcf-1.21.0.min.js
95.101.10.99200 OK 30 kB URL GET cdn.first-id.fr/sdk/script/flex-no-tcf-1.21.0.min.js
IP 95.101.10.99:443
ASN #20940 Akamai International B.V.
Certificate IssuerLet's Encrypt
Subjectcdn.first-id.fr
FingerprintE2:AE:2B:EC:15:18:96:30:A8:C0:E8:95:7D:D3:B1:FD:3B:AF:F1:39
ValiditySun, 11 May 2025 05:29:58 GMT - Sat, 09 Aug 2025 05:29:57 GMT
File type ASCII text, with very long lines (29768), with no line terminators
Hash 2efa56fe41494d822a8e78275d8b56bc
cf2cc562a5b69881a77d5b5cec26cc673d94da2b
f41de0268bd3fb514f40264042d47350158b5da3dc3920076838eb3f6d66137a
GET /sdk/script/flex-no-tcf-1.21.0.min.js HTTP/1.1
Host: cdn.first-id.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 10 Jun 2025 09:58:03 GMT
content-encoding: gzip
etag: W/"2efa56fe41494d822a8e78275d8b56bc"
vary: accept-encoding
content-length: 7041
cache-control: max-age=29641412
date: Wed, 02 Jul 2025 08:15:07 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1751444107630_1600457380_60083009_29_1001_1_0_21";dur=1
X-Firefox-Spdy: h2
GET urlz.fr/style.css
104.21.91.223200 OK 2.8 kB IP 104.21.91.223:443
Certificate IssuerGoogle Trust Services
Subjecturlz.fr
Fingerprint6A:55:57:9A:15:E4:33:5F:E8:D3:D6:AA:E5:7F:B5:8C:E6:2C:1A:08
ValidityTue, 17 Jun 2025 12:33:57 GMT - Mon, 15 Sep 2025 13:32:35 GMT
File type ASCII text, with CRLF line terminators
Hash 52f65e9a540850e55c347db81bae8bc5
3dda4af42ccad36773ffd358f82d46e855880ce0
fadd3db79d8a588e01a10fca68ed2007b4c1cff2e6b47f1c1bfce298839c8858
GET /style.css HTTP/1.1
Host: urlz.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 08:15:06 GMT
content-type: text/css
server: cloudflare
last-modified: Tue, 12 May 2015 22:46:16 GMT
vary: accept-encoding
expires: Thu, 31 Jul 2025 18:19:53 GMT
cache-control: max-age=2592000
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=6jS6SXupcRkVVRFW%2FBUmbx8qc9XaieJXC7ZDmVCxzVUeUvHNHQdNRoUp8dpglT8xFfoyUfyVPXF7u4YfdMYHMz0U5o2f"}]}
age: 50112
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: W/"555282b8-af5"
content-encoding: br
cf-ray: 958cb1802eb3568a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET static.kueezrtb.com/latest.js
104.22.34.123200 OK 1.4 kB URL GET static.kueezrtb.com/latest.js
IP 104.22.34.123:443
Certificate IssuerGoogle Trust Services
Subjectkueezrtb.com
FingerprintAB:F1:4E:AF:82:D3:16:0A:99:4E:E3:01:38:E8:78:1E:25:E8:2C:61
ValidityMon, 02 Jun 2025 00:14:54 GMT - Sun, 31 Aug 2025 01:14:49 GMT
File type JavaScript source, ASCII text, with very long lines (518)
Hash bfed549a7a818520144d1b1e2f334d9b
a07dd4834d83d381536884ffdb4a7c1b05de1993
4eb79c43f4d736b305fdce8077dd70044483b58b779c58c9be3a4ab9ba4079d2
GET /latest.js HTTP/1.1
Host: static.kueezrtb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://urlz.fr
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 08:15:07 GMT
content-type: text/javascript
content-encoding: br
x-amz-id-2: a7GH8RrUlzyqYkiC+IoZBJPdJc/DO0EjiMOJtl393uR903YWhMUlRBUvRoWkajsGSQ2ZCPaqurnNiPyRiZdSqXYl2kCJ7o7xwfxS8pi9hDA=
x-amz-request-id: SHX9MS1ZG3GBRXPN
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-expose-headers: x-amz-meta-access-control-allow-origin, x-amz-meta-access-control-allow-methods
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Tue, 10 Jun 2025 11:52:54 GMT
etag: W/"bfed549a7a818520144d1b1e2f334d9b"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1886861
server: cloudflare
cf-ray: 958cb188ca8592f2-CPH
X-Firefox-Spdy: h2
GET p.cpx.to/p/12773/px.js
108.128.13.145200 OK 7.0 kB IP 108.128.13.145:443
Certificate IssuerAmazon
Subjectp.cpx.to
Fingerprint1C:CB:AE:9F:29:15:08:F8:14:70:39:BC:3B:F8:79:0C:22:FA:37:1C
ValidityFri, 20 Dec 2024 00:00:00 GMT - Sun, 18 Jan 2026 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (6995), with no line terminators
Hash c7e1416511d0ed7aa63bf4fb5c7e1a67
e006bb8e4e846e1d264a452712eb2d470a546f8d
726fee1158f15d1c5037d5145da47a0f6d0d6e76c089292ba8e15a6fc43c23c5
GET /p/12773/px.js HTTP/1.1
Host: p.cpx.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 08:15:07 GMT
content-type: application/javascript; charset=UTF-8
content-length: 6995
cache-control: public, max-age=7200
X-Firefox-Spdy: h2
GET urlz.fr/images/contenu.png
104.21.91.223200 OK 1.3 kB URL GET urlz.fr/images/contenu.png
IP 104.21.91.223:443
Certificate IssuerGoogle Trust Services
Subjecturlz.fr
Fingerprint6A:55:57:9A:15:E4:33:5F:E8:D3:D6:AA:E5:7F:B5:8C:E6:2C:1A:08
ValidityTue, 17 Jun 2025 12:33:57 GMT - Mon, 15 Sep 2025 13:32:35 GMT
File type PNG image data, 778 x 30, 8-bit/color RGBA, non-interlaced
Hash aedcb1ef8128c639bddcdd0cb572acf6
ee2cb13882757b9e177d4377bf46bc5302801e39
d7da559603ea1b11ff16cec1d4133615f5903aca30b371d9a09fca7dc7467997
GET /images/contenu.png HTTP/1.1
Host: urlz.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 08:15:06 GMT
content-type: image/png
content-length: 1307
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u1kyeJPP9QPm4gqQ26Ka3eueP2Dlypp1IL1jEkpmxds9qhr7kvuc2zPt9wlbMMDSRjEIbq9FtKEjWOBm8GbtyHyrBsM1bpFRoY5kzjgfmIy3VQZhQTCfC9zU"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 12 May 2015 22:46:17 GMT
etag: "555282b9-51b"
expires: Sun, 21 Sep 2025 14:05:45 GMT
cache-control: max-age=7776000
accept-ranges: bytes
age: 756561
cf-cache-status: HIT
cf-ray: 958cb1811c90569c-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4884&min_rtt=763&rtt_var=5348&sent=106&recv=121&lost=0&retrans=0&sent_bytes=31026&recv_bytes=8184&delivery_rate=3241585&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=26895&unsent_bytes=0&cid=72570b0b0661cf15&ts=402&inflight_dur=39&x=40"
GET onetag-sys.com/usync/?pubId=2a897e3f18e6769&cb=1751444107350
51.38.120.206204 No Content 0 B URL GET onetag-sys.com/usync/?pubId=2a897e3f18e6769&cb=1751444107350
IP 51.38.120.206:443
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint26:2D:63:1A:A7:C6:41:9C:A2:F5:39:CB:C4:F2:77:55:75:D9:90:82
ValidityTue, 21 Jan 2025 00:00:00 GMT - Sat, 27 Dec 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?pubId=2a897e3f18e6769&cb=1751444107350 HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
GET track.kueezrtb.com/dye?ac=2&acm=G3L&uid=f3460ddfb6d066c7&sid=ecd57a926f2f539&pvi=b7646c556a0f7b5a&h=urlz.fr&wh=1280x1024&b=Firefox&bv=134.0&dev=&os=Windows%2010&p=&abtv=9191c865-32b0-473d-80e1-13f9b569517a&uri=%2F&furl=https%3A%2F%2Furlz.fr%2F&sr=1280x1024&type=latest:preinit&_=1751444108165
172.67.21.232204 No Content 0 B URL GET track.kueezrtb.com/dye?ac=2&acm=G3L&uid=f3460ddfb6d066c7&sid=ecd57a926f2f539&pvi=b7646c556a0f7b5a&h=urlz.fr&wh=1280x1024&b=Firefox&bv=134.0&dev=&os=Windows%2010&p=&abtv=9191c865-32b0-473d-80e1-13f9b569517a&uri=%2F&furl=https%3A%2F%2Furlz.fr%2F&sr=1280x1024&type=latest:preinit&_=1751444108165
IP 172.67.21.232:443
Certificate IssuerGoogle Trust Services
Subjectkueezrtb.com
FingerprintAB:F1:4E:AF:82:D3:16:0A:99:4E:E3:01:38:E8:78:1E:25:E8:2C:61
ValidityMon, 02 Jun 2025 00:14:54 GMT - Sun, 31 Aug 2025 01:14:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dye?ac=2&acm=G3L&uid=f3460ddfb6d066c7&sid=ecd57a926f2f539&pvi=b7646c556a0f7b5a&h=urlz.fr&wh=1280x1024&b=Firefox&bv=134.0&dev=&os=Windows%2010&p=&abtv=9191c865-32b0-473d-80e1-13f9b569517a&uri=%2F&furl=https%3A%2F%2Furlz.fr%2F&sr=1280x1024&type=latest:preinit&_=1751444108165 HTTP/1.1
Host: track.kueezrtb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 02 Jul 2025 08:15:08 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 958cb18c4c2b5696-OSL
X-Firefox-Spdy: h2
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/562470542:1751441339:QsV_QTwYz7H3KIgE2zheN4sKDAJbT6itNVxKl-qq_II/958cb186bb8c56bd/1QY8TVZklXVf.s6Lrd4xroBUsFdOMvsaryQnR8V2P4Q-1751444107-1.2.1.1-zKnZUiAQmMe0sLSWlnzPonoRbnKK2xW0UstU1XQw8XaY4K_5gOEO.hw3aaUqrkXW
104.18.95.41200 OK 30 kB URL POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/562470542:1751441339:QsV_QTwYz7H3KIgE2zheN4sKDAJbT6itNVxKl-qq_II/958cb186bb8c56bd/1QY8TVZklXVf.s6Lrd4xroBUsFdOMvsaryQnR8V2P4Q-1751444107-1.2.1.1-zKnZUiAQmMe0sLSWlnzPonoRbnKK2xW0UstU1XQw8XaY4K_5gOEO.hw3aaUqrkXW
IP 104.18.95.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/agkr8/0x4AAAAAAAAzdtcUO1KvJZVY/auto/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintFC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71
ValidityFri, 27 Jun 2025 18:18:48 GMT - Thu, 25 Sep 2025 19:18:44 GMT
File type ASCII text, with very long lines (29584), with no line terminators
Hash 295ce6258c8b22ad2e93e45fda1e4203
fbe6a248a5a4b45b2c15600382d536155db49d10
f6089b592514ae667613ac08b5516701363931f6b62d06bb6bcf5530ec3aba0d
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/562470542:1751441339:QsV_QTwYz7H3KIgE2zheN4sKDAJbT6itNVxKl-qq_II/958cb186bb8c56bd/1QY8TVZklXVf.s6Lrd4xroBUsFdOMvsaryQnR8V2P4Q-1751444107-1.2.1.1-zKnZUiAQmMe0sLSWlnzPonoRbnKK2xW0UstU1XQw8XaY4K_5gOEO.hw3aaUqrkXW HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/agkr8/0x4AAAAAAAAzdtcUO1KvJZVY/auto/fbE/new/normal/auto/
cf-chl: 1QY8TVZklXVf.s6Lrd4xroBUsFdOMvsaryQnR8V2P4Q-1751444107-1.2.1.1-zKnZUiAQmMe0sLSWlnzPonoRbnKK2xW0UstU1XQw8XaY4K_5gOEO.hw3aaUqrkXW
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 34786
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 08:15:15 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: BN538x/3vwyy7JUbddz4E7WsxMlvxERQAEgUL4vXFXuPi445E9X/dAgeaK4bJmLA$sfnQKGuJ4FB+jcNebh0VmA==
priority: u=3,i=?0
server: cloudflare
cf-ray: 958cb1b93eec56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET urlz.fr/images/texte.png
104.21.91.223200 OK 7.6 kB IP 104.21.91.223:443
Certificate IssuerGoogle Trust Services
Subjecturlz.fr
Fingerprint6A:55:57:9A:15:E4:33:5F:E8:D3:D6:AA:E5:7F:B5:8C:E6:2C:1A:08
ValidityTue, 17 Jun 2025 12:33:57 GMT - Mon, 15 Sep 2025 13:32:35 GMT
File type PNG image data, 733 x 107, 8-bit/color RGBA, non-interlaced
Hash 43137cef4c6de67faf448b8bade6840e
9148120e81a8cb10216792fb265f470c54747032
29832542c9c7ed1749efffca42f2c4f09bc80385032f8e4d3fc97a0548ad67b0
GET /images/texte.png HTTP/1.1
Host: urlz.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 08:15:06 GMT
content-type: image/png
content-length: 7565
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xv05f09B6yQtMJyJUal%2Fbm2as%2BWgk%2FQIQdguiYpQeQJvCZezVYXfzaFWQIDG%2FlTKPbtPsM8apCQkQgpEC36nhN2KWmLBHzfbOy%2FOTIlCIVNAOdx7eG8tmdA0"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 12 May 2015 22:46:17 GMT
etag: "555282b9-1d8d"
expires: Tue, 30 Sep 2025 07:20:16 GMT
cache-control: max-age=7776000
accept-ranges: bytes
age: 3289
cf-cache-status: HIT
cf-ray: 958cb1811c91569c-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6085&min_rtt=1887&rtt_var=5782&sent=91&recv=119&lost=0&retrans=0&sent_bytes=10978&recv_bytes=8095&delivery_rate=578671&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=18042&unsent_bytes=0&cid=72570b0b0661cf15&ts=398&inflight_dur=36&x=40"
GET urlz.fr/images/cadre.png
104.21.91.223200 OK 6.9 kB IP 104.21.91.223:443
Certificate IssuerGoogle Trust Services
Subjecturlz.fr
Fingerprint6A:55:57:9A:15:E4:33:5F:E8:D3:D6:AA:E5:7F:B5:8C:E6:2C:1A:08
ValidityTue, 17 Jun 2025 12:33:57 GMT - Mon, 15 Sep 2025 13:32:35 GMT
File type PNG image data, 557 x 69, 8-bit/color RGBA, non-interlaced
Hash 729c665105c2d7a47680febac9f7a919
a54dbad60b42ed79445d1a9f9940b2acedf9811b
f29bd8a1055a660f59030403debfe38179d81a12e8d5d489d17cebcd79736a85
GET /images/cadre.png HTTP/1.1
Host: urlz.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 08:15:06 GMT
content-type: image/png
content-length: 6897
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6GAJ2dVIbShU7NFVEy1VRWg4vKQKg36Qyodw3vW6R%2FpkbdrwaxNlQZpHLTjNuxf%2BEiD9NJDxisOgN4FQXLAzZ3sTEufWfSfCUb7ZwVowmG3Y%2FDtP7cJ1SH3c"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 12 May 2015 22:46:17 GMT
etag: "555282b9-1af1"
expires: Sun, 21 Sep 2025 14:05:45 GMT
cache-control: max-age=7776000
accept-ranges: bytes
age: 756561
cf-cache-status: HIT
cf-ray: 958cb1811c92569c-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3366&min_rtt=461&rtt_var=3579&sent=121&recv=125&lost=0&retrans=0&sent_bytes=50583&recv_bytes=8364&delivery_rate=5467148&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=29695&unsent_bytes=0&cid=72570b0b0661cf15&ts=411&inflight_dur=46&x=40"
GET cdnfiles.azurewebsites.net/urlz
52.143.137.150200 OK 0 B URL GET cdnfiles.azurewebsites.net/urlz
IP 52.143.137.150:443
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subject*.azurewebsites.net
Fingerprint9A:AB:B3:DB:59:56:41:11:16:39:EA:8C:66:7A:85:D0:B8:03:69:84
ValidityWed, 21 May 2025 18:01:46 GMT - Sat, 16 May 2026 18:01:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /urlz HTTP/1.1
Host: cdnfiles.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Date: Wed, 02 Jul 2025 08:15:05 GMT
Server: Microsoft-IIS/10.0
Cache-Control: no-store,no-cache
Content-Encoding: gzip
Pragma: no-cache
Set-Cookie: ARRAffinity=6b45d637f16f4a6b43c79ac29092f0700c0194138a19fdb5aef7c65916525887;Path=/;HttpOnly;Secure;Domain=cdnfiles.azurewebsites.net
ARRAffinitySameSite=6b45d637f16f4a6b43c79ac29092f0700c0194138a19fdb5aef7c65916525887;Path=/;HttpOnly;SameSite=None;Secure;Domain=cdnfiles.azurewebsites.net
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Powered-By: ASP.NET
GET urlz.fr/images/footer.png
104.21.91.223200 OK 8.3 kB URL GET urlz.fr/images/footer.png
IP 104.21.91.223:443
Certificate IssuerGoogle Trust Services
Subjecturlz.fr
Fingerprint6A:55:57:9A:15:E4:33:5F:E8:D3:D6:AA:E5:7F:B5:8C:E6:2C:1A:08
ValidityTue, 17 Jun 2025 12:33:57 GMT - Mon, 15 Sep 2025 13:32:35 GMT
File type PNG image data, 778 x 78, 8-bit/color RGBA, non-interlaced
Hash f91163f48185246edb6744d77cd9cd51
e1ab9366b6896969e461514840f22056d8a1ea3e
0411c6503d132e61557a934a59afb70f965df51be1684c72fb6ee15d1be8e766
GET /images/footer.png HTTP/1.1
Host: urlz.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 08:15:06 GMT
content-type: image/png
content-length: 8258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PRaX62hSgY59x%2FWjBzf7O4TQRpIqpYyQ7Mfl7kZnjPCcxPujT%2FGPEyJOypAzCLNPjoq09G8K9g8ICF27pWb5SXkT9GJ%2FAJ3N8fUviWwUvqI2%2B%2FfC3nXWtr%2Fb"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 12 May 2015 22:46:18 GMT
etag: "555282ba-2042"
expires: Thu, 25 Sep 2025 18:33:22 GMT
cache-control: max-age=7776000
accept-ranges: bytes
age: 394903
cf-cache-status: HIT
cf-ray: 958cb1811c93569c-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4884&min_rtt=763&rtt_var=5348&sent=100&recv=121&lost=0&retrans=0&sent_bytes=23578&recv_bytes=8184&delivery_rate=3241585&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=26895&unsent_bytes=0&cid=72570b0b0661cf15&ts=401&inflight_dur=39&x=40"
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/562470542:1751441339:QsV_QTwYz7H3KIgE2zheN4sKDAJbT6itNVxKl-qq_II/958cb186bb8c56bd/1QY8TVZklXVf.s6Lrd4xroBUsFdOMvsaryQnR8V2P4Q-1751444107-1.2.1.1-zKnZUiAQmMe0sLSWlnzPonoRbnKK2xW0UstU1XQw8XaY4K_5gOEO.hw3aaUqrkXW
104.18.95.41200 OK 289 kB URL POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/562470542:1751441339:QsV_QTwYz7H3KIgE2zheN4sKDAJbT6itNVxKl-qq_II/958cb186bb8c56bd/1QY8TVZklXVf.s6Lrd4xroBUsFdOMvsaryQnR8V2P4Q-1751444107-1.2.1.1-zKnZUiAQmMe0sLSWlnzPonoRbnKK2xW0UstU1XQw8XaY4K_5gOEO.hw3aaUqrkXW
IP 104.18.95.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/agkr8/0x4AAAAAAAAzdtcUO1KvJZVY/auto/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintFC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71
ValidityFri, 27 Jun 2025 18:18:48 GMT - Thu, 25 Sep 2025 19:18:44 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 289 kB (288712 bytes)
Hash 66b7aeeb8bd9dc749413f2c6b96a3fc4
0db41102da5cb4033516fec1c0ca42bf35654ee8
c59c627f623c7d25faca529e856c0cdb0492bc129b2c48604d15b0250bcc94a1
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/562470542:1751441339:QsV_QTwYz7H3KIgE2zheN4sKDAJbT6itNVxKl-qq_II/958cb186bb8c56bd/1QY8TVZklXVf.s6Lrd4xroBUsFdOMvsaryQnR8V2P4Q-1751444107-1.2.1.1-zKnZUiAQmMe0sLSWlnzPonoRbnKK2xW0UstU1XQw8XaY4K_5gOEO.hw3aaUqrkXW HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/agkr8/0x4AAAAAAAAzdtcUO1KvJZVY/auto/fbE/new/normal/auto/
cf-chl: 1QY8TVZklXVf.s6Lrd4xroBUsFdOMvsaryQnR8V2P4Q-1751444107-1.2.1.1-zKnZUiAQmMe0sLSWlnzPonoRbnKK2xW0UstU1XQw8XaY4K_5gOEO.hw3aaUqrkXW
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 3319
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 08:15:08 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: c84IJ6YFx7+/LH0IZ1xkSG66wSufk612PgxpIRClh2soF/jsDVznEDF1HBmBZdPmFvm4lXnJ8tour8YpV61EDbQy9uHKb4sOMn7aYMBQSyb86xjHSPq4yJKDXtty8ErnMRHaVt60pzrLmUdGPKeOiBJKAIlLx64DJWKyU8oeuVGIWMcEZR2iRullLBZayIs3NZMGgdH+kPRgIvMVsb1ZquVwgoytvGJ0SFdUgL2CZMvkHzBCdSBzB25LJwhIyCyAuPUMLJThMr//QFTo+VxzkNrmYtl9BA08qt8BurNrBVxfT4hcZBnu67DAkjBydygNSc/qjciis1xdAP1L+VYxzFS5NxNN0STrLMggy+ngmMVx39R+vcdATl0hVOej/5Ci3qbIO6fBb9AUkQAdbGq0vL7rSoKOQrj0FPhsB/ICwB1ZZVxe58zMPGuNwcl60h0DDfq/G92uxee01ON45Hbupre6Gc55KpbpfY0aKf1qJMTZgqPr8J0ADh4MWcfoOCeCdD7ULksaeCFH5N7oObNFoEgMxU1E4dgofvj4/6aasIN9NeXWhIBOeKjQxfH99+s2DF3FBm85oxKP6Vp0pCUEQq4wIYd4jfy0W9f/BVWCrdGuzedU6r73C0oogFrwxG5bXWbA1AuemEZnBKG/w2YE7KurQ/RHZfe3RpD4FjWx+W6wP6RD8e0ZdSBWQxlFPcfIwNKK4K+Y/dkzzYgtbuUZt+LVwrU9qDJhCUq16k4UAW5BsDU+BLDmOPORVgcL2vMFj9PPO90FRS96N0cB2sfzWM2MBFCTnjTscynXtjDj3PEqyqr3d1h/DQrIg+cj0hwe$8WpG2eUnlTOtW7CUOxbpjA==
priority: u=3,i=?0
server: cloudflare
cf-ray: 958cb18d9e0656bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/958cb186bb8c56bd/1751444108434/a3280daf8e0eb848b84898457cfc17058197a018160dbaee6b508819f8cf7423/_f2RIibzBkodWWx
104.18.95.41401 Unauthorized 1 B URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/958cb186bb8c56bd/1751444108434/a3280daf8e0eb848b84898457cfc17058197a018160dbaee6b508819f8cf7423/_f2RIibzBkodWWx
IP 104.18.95.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/agkr8/0x4AAAAAAAAzdtcUO1KvJZVY/auto/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintFC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71
ValidityFri, 27 Jun 2025 18:18:48 GMT - Thu, 25 Sep 2025 19:18:44 GMT
File type very short file (no magic)
Hash ff44570aca8241914870afbc310cdb85
58668e7669fd564d99db5d581fcdb6a5618440b5
6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/b/pat/958cb186bb8c56bd/1751444108434/a3280daf8e0eb848b84898457cfc17058197a018160dbaee6b508819f8cf7423/_f2RIibzBkodWWx HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/agkr8/0x4AAAAAAAAzdtcUO1KvJZVY/auto/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 401 Unauthorized
date: Wed, 02 Jul 2025 08:15:14 GMT
content-type: text/plain; charset=utf-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20goygNr44OuEi4SJhFfPwXBYGXoBgWDbrua1CIGfjPdCMAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAscjm_UO_k901rNdCKgLw5bvI4i6M_jDNCIXpfs2LRbtxwLOrUyplqVvML_hVlB5tIDMuj0ihhaOFHose-Y0_UjQnNUGE_vol46VvGgscTMtTjU4xINriap8AMTIygvljEBt6my-nBwkUGhY3U9v5iKC-eWR5bTfvrqFsuIVxafkSfhHqDXB4KLGNjvOOV71GGJ9x4yxA-C2OcULZ1uDDKuvAaMhuiWdF6OzSTXruP9yPg1vmuteavOW1re0YDbCbtK16PhHdSzWym7v_FrvId-2zf26j50FlTd_vl_DcKNDVCgWDoU0uX3cU6V3rSQoVXREEqPr-2ywSGru8ZuXRoQIDAQAB", max-age=20, PrivateToken challenge="AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIKMoDa-ODrhIuEiYRXz8FwWBl6AYFg267mtQiBn4z3QjABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsLS4HBnLGydwK-bLQGRCaoyMsrXBRrDgQVmxS06j3UF0nYSd6GdTGCKIu1WV60eg-tJtTttfEVq7wHVQf4vzjYBidmCh88ebzxKv2GB6PESSodf5MsEup9xd5dxpkYScgL1CCJq89kRrOQ_CS61bvkL_oGyZf4ffqG5THgaOsopqj8dFLH6_SMy9yf8EgMYqpyjxfKsD-1_qb1m1DRjJEKPWKIGwmHXIKQJUqsxZFm4_Inwkxx7QMpVP4GyqlTxFVz7stWwJRSkMLHjEM_IWLUYfPhuwIUVqmRjGsY1n8flA1bRfxaWHNDxoi25-M2BKTP9NkNNJBbTKErhrZ9LGywIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIKMoDa-ODrhIuEiYRXz8FwWBl6AYFg267mtQiBn4z3QjABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEArFBSpY0YPcNslVpklXsEb2gfZsCpmIVdQhoS4K7cHrhquWhyk4MLkyi7_s6aWrx_Xf7HlTYTdYhnNJYeSmBvNR-rT9Jr-vgHew2EKxCRkzFMKPiBFgHMw6CQNwFmH4vtDoB7QjzQGuScPRdzh7kPu8509ew2xkFnr9tjB-6n7HM01yE-AK-YLGAsO2pnr7E7uB1wVPOxxon_JAZ3bYOfTUgjOOdXlFNC8lcuocjbz6S74A95qx_Ud-iEvXXfOoBv5KLuG4xndLeZHQmGd8Zt7VxbSldzBAmsB7NLLExZxPD-x71RLAY9HVS2lcMOPbQ3diWMBwpfS95tytYOn-a5rwIDAQAB", max-age=20
priority: u=4,i=?0
server: cloudflare
cf-ray: 958cb1b3ae4756bd-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET twemoji.maxcdn.com/v/latest/svg/1f680.svg
0.0.0.0 0 B URL GET twemoji.maxcdn.com/v/latest/svg/1f680.svg
IP 0.0.0.0:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /v/latest/svg/1f680.svg HTTP/1.1
Host: twemoji.maxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET urlz.fr/images/header.png
104.21.91.223200 OK 19 kB URL GET urlz.fr/images/header.png
IP 104.21.91.223:443
Certificate IssuerGoogle Trust Services
Subjecturlz.fr
Fingerprint6A:55:57:9A:15:E4:33:5F:E8:D3:D6:AA:E5:7F:B5:8C:E6:2C:1A:08
ValidityTue, 17 Jun 2025 12:33:57 GMT - Mon, 15 Sep 2025 13:32:35 GMT
File type PNG image data, 778 x 111, 8-bit/color RGBA, non-interlaced
Hash 96f776615bb146f32a6aa4a1e04813f5
221c0759a2e0b762cb61ed8128f9817b19e284d7
e76cec327808a8b870217ed5211473cb0ecd23d110c5aea59cd97e99116481fb
GET /images/header.png HTTP/1.1
Host: urlz.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 08:15:06 GMT
content-type: image/png
content-length: 18960
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2teAPp%2BdnXjY9f%2BjrifDGopNs5dTqXMwqHg8ScdLrEs6tuSFkW9r16O5mowMmGzoqzOnm8epBNgab11PeGRchyu%2FUPvtnrNRfK3PlnoYOTEMAXfKLqcrLvbk"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 12 May 2015 22:46:18 GMT
etag: "555282ba-4a10"
expires: Thu, 25 Sep 2025 18:33:22 GMT
cache-control: max-age=7776000
accept-ranges: bytes
age: 394903
cf-cache-status: HIT
cf-ray: 958cb1811c8f569c-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6085&min_rtt=1887&rtt_var=5782&sent=89&recv=119&lost=0&retrans=0&sent_bytes=9125&recv_bytes=8095&delivery_rate=578671&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=18042&unsent_bytes=0&cid=72570b0b0661cf15&ts=398&inflight_dur=36&x=40"
GET www.googletagmanager.com/gtag/js?id=UA-162669458-1
142.250.178.72200 OK 286 kB URL GET www.googletagmanager.com/gtag/js?id=UA-162669458-1
IP 142.250.178.72:443
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
File type JavaScript source, ASCII text, with very long lines (5913)
Size 286 kB (285651 bytes)
Hash a5e45f54e93a8584cfb5ee68e5a482cb
e78d4ec0428cd7c8bb91fb32c3e7f979357c43b7
414ed680c14ef27ce182417b14a21bf14813d40114e5f38652e17fd0b4de967c
GET /gtag/js?id=UA-162669458-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 02 Jul 2025 08:15:06 GMT
expires: Wed, 02 Jul 2025 08:15:06 GMT
cache-control: private, max-age=900
last-modified: Wed, 02 Jul 2025 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 100420
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/958cb186bb8c56bd/1751444108430/MWjHyU_2kw1veUM
104.18.95.41200 OK 355 B URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/958cb186bb8c56bd/1751444108430/MWjHyU_2kw1veUM
IP 104.18.95.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/agkr8/0x4AAAAAAAAzdtcUO1KvJZVY/auto/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintFC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71
ValidityFri, 27 Jun 2025 18:18:48 GMT - Thu, 25 Sep 2025 19:18:44 GMT
File type PNG image data, 29 x 56, 8-bit/color RGBA, non-interlaced
Hash 9a42976ea4b07ea938a93eb04bc9f8f0
ecc07b744ce50e3f20714dfde270aad709ed5635
8d9b5c2b401c334fb6ffa92bd7860b5f63990fc533ca60bb93f2f9c79267f45b
GET /cdn-cgi/challenge-platform/h/b/d/958cb186bb8c56bd/1751444108430/MWjHyU_2kw1veUM HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/agkr8/0x4AAAAAAAAzdtcUO1KvJZVY/auto/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 08:15:12 GMT
content-type: image/png
content-length: 355
priority: u=4,i=?0
server: cloudflare
cf-ray: 958cb1a96c7656bd-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/agkr8/0x4AAAAAAAAzdtcUO1KvJZVY/auto/fbE/new/normal/auto/
104.18.95.41200 OK 26 kB URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/agkr8/0x4AAAAAAAAzdtcUO1KvJZVY/auto/fbE/new/normal/auto/
IP 104.18.95.41:443
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintFC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71
ValidityFri, 27 Jun 2025 18:18:48 GMT - Thu, 25 Sep 2025 19:18:44 GMT
File type HTML document, ASCII text, with very long lines (26531), with no line terminators
Hash 688740167f782495d5125161a684e5e0
be2ffa04fd64dd8b8da2f90b3b1f1af4e9cc84f0
05e35583088a5336cdd7063bb7197cbbccf9005621135a3838ded2589071fbc8
GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/agkr8/0x4AAAAAAAAzdtcUO1KvJZVY/auto/fbE/new/normal/auto/ HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 08:15:07 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
content-security-policy: default-src 'none'; script-src 'nonce-Epae9P2Y69jK3dNI' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
referrer-policy: same-origin
document-policy: js-profiling
priority: u=4,i=?0
server: cloudflare
cf-ray: 958cb186bb8c56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
104.21.91.223200 OK 14 kB IP 104.21.91.223:443
Certificate IssuerGoogle Trust Services
Subjecturlz.fr
Fingerprint6A:55:57:9A:15:E4:33:5F:E8:D3:D6:AA:E5:7F:B5:8C:E6:2C:1A:08
ValidityTue, 17 Jun 2025 12:33:57 GMT - Mon, 15 Sep 2025 13:32:35 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1713), with CRLF, LF, NEL line terminators
Hash f675051289cbcadcd48c932ff4fa6a5b
0b3fc133dca5487b60c1d840916f44a3d66dcfea
8ebffe82b80863c9c17d00436dbd0daf71cdc0f7fa8a2e4f3c7140e3d6752ada
GET / HTTP/1.1
Host: urlz.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 08:15:05 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
expires: Wed, 02 Jul 2025 08:16:05 GMT
cache-control: max-age=60
x-fastcgi-cache: MISS
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=RZZvbn%2FlD9hFQIkioxuhuyJbq3AcXpyUZ9EdTzmwqxjvDpxu3YQrfiab2eKrmw7FsUGOUIZ%2BOI1vuY5E%2FuMIYrhYdipw"}]}
content-encoding: br
cf-ray: 958cb17d6bfc568a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-YETLCG4WNK&cx=c>m=457e56u2za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056
142.250.178.72200 OK 345 kB URL GET www.googletagmanager.com/gtag/js?id=G-YETLCG4WNK&cx=c>m=457e56u2za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056
IP 142.250.178.72:443
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
File type JavaScript source, ASCII text, with very long lines (6004)
Size 345 kB (345199 bytes)
Hash 504c142b6a35eadee41676252ae2fe61
40bf0eba0d644faea082c0a9a6d186feabe53d9d
ef18ff57689f9e82bbf115f51cc3d9a1b6f03f8025ed57b7bd90b8d471390a1e
GET /gtag/js?id=G-YETLCG4WNK&cx=c>m=457e56u2za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 02 Jul 2025 08:15:07 GMT
expires: Wed, 02 Jul 2025 08:15:07 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 120288
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=958cb186bb8c56bd&lang=auto
104.18.95.41200 OK 146 kB URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=958cb186bb8c56bd&lang=auto
IP 104.18.95.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/agkr8/0x4AAAAAAAAzdtcUO1KvJZVY/auto/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintFC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71
ValidityFri, 27 Jun 2025 18:18:48 GMT - Thu, 25 Sep 2025 19:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 146 kB (146326 bytes)
Hash 6ee2774b0f5e99379422109d3c74bf38
087d637b27f717a3d53b9cdbb9f1af9d200854ec
7b9ceba651c591020728269c86a64bb5747685a28a4ba53aabe6a6c18fa3b387
GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=958cb186bb8c56bd&lang=auto HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/agkr8/0x4AAAAAAAAzdtcUO1KvJZVY/auto/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 08:15:07 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
priority: u=3,i=?0
server: cloudflare
cf-ray: 958cb188beab56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET urlz.fr/images/favicon.ico
104.21.91.223200 OK 138 kB URL GET urlz.fr/images/favicon.ico
IP 104.21.91.223:443
Certificate IssuerGoogle Trust Services
Subjecturlz.fr
Fingerprint6A:55:57:9A:15:E4:33:5F:E8:D3:D6:AA:E5:7F:B5:8C:E6:2C:1A:08
ValidityTue, 17 Jun 2025 12:33:57 GMT - Mon, 15 Sep 2025 13:32:35 GMT
File type MS Windows icon resource - 6 icons, -128x-128, 32 bits/pixel, 96x96, 32 bits/pixel
Size 138 kB (137750 bytes)
Hash 5f6c8bc9f203ba0be5be405e4d8727ad
b6cf14cec161d071fe54328be8c8ef1f1712cd31
299fd664bbca1c8d9df4988970941b7498161630121a4d2a7af3261e7373905d
GET /images/favicon.ico HTTP/1.1
Host: urlz.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 08:15:07 GMT
content-type: image/x-icon
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2YkvfqkIz3%2BvWRFmLKtlV9M3SrRZxzw8bLbDYHgzVy2yigPn%2FrMfNtAhtLdtXvzc6lEtLtjp%2FSpr%2BlDuO5y88Kg8%2FO16Y5yG9rsJiYFq2Jl0m7Hs6fynmQOi"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 12 May 2015 22:46:19 GMT
etag: W/"555282bb-21a16"
expires: Thu, 25 Sep 2025 18:33:23 GMT
cache-control: max-age=7776000
age: 394903
cf-cache-status: HIT
content-encoding: br
cf-ray: 958cb184aca5569c-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2930&min_rtt=461&rtt_var=2719&sent=131&recv=129&lost=0&retrans=0&sent_bytes=59264&recv_bytes=8965&delivery_rate=5467148&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=29695&unsent_bytes=0&cid=72570b0b0661cf15&ts=966&inflight_dur=52&x=40"
GET cdn.first-id.fr/sdk/loader/loader-flex-no-tcf.min.js?id=T656dc5f8NdhGJ
95.101.10.99200 OK 3.0 kB URL GET cdn.first-id.fr/sdk/loader/loader-flex-no-tcf.min.js?id=T656dc5f8NdhGJ
IP 95.101.10.99:443
ASN #20940 Akamai International B.V.
Certificate IssuerLet's Encrypt
Subjectcdn.first-id.fr
FingerprintE2:AE:2B:EC:15:18:96:30:A8:C0:E8:95:7D:D3:B1:FD:3B:AF:F1:39
ValiditySun, 11 May 2025 05:29:58 GMT - Sat, 09 Aug 2025 05:29:57 GMT
File type JavaScript source, ASCII text, with very long lines (2991), with no line terminators
Hash fd98fad2ea1bd3412e1e32f1c35c74ef
d47b2ecef331ff51c717d6a62e270c7fa87fef29
5ab89f26541a283a7de8c867a84c11b3273efab6862fc555fd8e72877f203fc8
GET /sdk/loader/loader-flex-no-tcf.min.js?id=T656dc5f8NdhGJ HTTP/1.1
Host: cdn.first-id.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 10 Jun 2025 09:58:13 GMT
content-encoding: gzip
etag: W/"fd98fad2ea1bd3412e1e32f1c35c74ef"
vary: accept-encoding
content-length: 1354
cache-control: max-age=366
date: Wed, 02 Jul 2025 08:15:07 GMT
alt-svc: h3=":443"; ma=93600
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1751444107503_1600457380_60082979_30_969_1_26_21";dur=1
X-Firefox-Spdy: h2
GET static.kueezrtb.com/js/latest_cls.js?_=1751444107724
172.67.21.232200 OK 229 kB URL GET static.kueezrtb.com/js/latest_cls.js?_=1751444107724
IP 172.67.21.232:443
Certificate IssuerGoogle Trust Services
Subjectkueezrtb.com
FingerprintAB:F1:4E:AF:82:D3:16:0A:99:4E:E3:01:38:E8:78:1E:25:E8:2C:61
ValidityMon, 02 Jun 2025 00:14:54 GMT - Sun, 31 Aug 2025 01:14:49 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 229 kB (228757 bytes)
Hash bdcc89f334bbb76d5b7235bb3fb0bd95
8f9c52e81962bfde19d03e16280a8309289b0a92
8546e27fb32bb97b88d27133e5223be89de34613ed3f2241265362d4551e66dc
GET /js/latest_cls.js?_=1751444107724 HTTP/1.1
Host: static.kueezrtb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 08:15:07 GMT
content-type: text/javascript
content-encoding: br
x-amz-id-2: t+W0DVVcWZA8IH7Jc1vi42zJbpkbMyi7thC/M8POMcxb2B1iqXYiU8+QUE5thAVYRtnbxwu3QhnqpzPvwjsvkzz1MgzwEdlNs1lG6NlOUmM=
x-amz-request-id: MY97X849KDNGSYKT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-expose-headers: x-amz-meta-access-control-allow-origin, x-amz-meta-access-control-allow-methods
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Tue, 10 Jun 2025 11:53:17 GMT
etag: W/"bdcc89f334bbb76d5b7235bb3fb0bd95"
cf-cache-status: HIT
age: 1887690
server: cloudflare
cf-ray: 958cb18a9a1c5696-OSL
X-Firefox-Spdy: h2
GET urlz.fr/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
104.21.91.223200 OK 12 kB URL GET urlz.fr/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP 104.21.91.223:443
Certificate IssuerGoogle Trust Services
Subjecturlz.fr
Fingerprint6A:55:57:9A:15:E4:33:5F:E8:D3:D6:AA:E5:7F:B5:8C:E6:2C:1A:08
ValidityTue, 17 Jun 2025 12:33:57 GMT - Mon, 15 Sep 2025 13:32:35 GMT
File type JavaScript source, ASCII text, with very long lines (12331)
Hash 88a769d2fe35899fd45a332a0a032cc0
514c6c1d8475d17e412849a4c90159517d0fa10a
ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: urlz.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 08:15:06 GMT
content-type: application/javascript
expires: Wed, 02 Jul 2025 09:03:06 GMT
cache-control: public
vary: accept-encoding
x-frame-options: DENY
x-content-type-options: nosniff
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=zFtew2BhjjRKS80LjvyClCRjVfgWDzFXziD3Lxe%2FOcheqRFhuD%2B5ijWn%2Bc6%2F7svzjb5YZHJ8Dvf0Ow2%2BLexcn7URjXm3"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
server: cloudflare
cf-ray: 958cb1803ec6568a-OSL
X-Firefox-Spdy: h2
GET urlz.fr/images/loading.gif
104.21.91.223200 OK 8.8 kB URL GET urlz.fr/images/loading.gif
IP 104.21.91.223:443
Certificate IssuerGoogle Trust Services
Subjecturlz.fr
Fingerprint6A:55:57:9A:15:E4:33:5F:E8:D3:D6:AA:E5:7F:B5:8C:E6:2C:1A:08
ValidityTue, 17 Jun 2025 12:33:57 GMT - Mon, 15 Sep 2025 13:32:35 GMT
File type GIF image data, version 89a, 32 x 32
Hash 0317594cf5315ffa11a7060f12e77638
bb38f8bfc7ac9cb20b754bf3471d589289ca9087
229b555e9199ffa5209a18ed5f75d34128ba2f58921849f8eaad92be08ede149
GET /images/loading.gif HTTP/1.1
Host: urlz.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 08:15:06 GMT
content-type: image/gif
content-length: 8787
server: cloudflare
last-modified: Tue, 12 May 2015 22:46:17 GMT
etag: "555282b9-2253"
expires: Thu, 25 Sep 2025 18:33:22 GMT
cache-control: max-age=7776000
accept-ranges: bytes
age: 394903
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=CmWKNFXyC%2B70nHuW2J%2FZRME4KqVVcMPWBl1aYohomrbLxp5ioaBfbcEb%2BGM1%2BqQ%2FgX0jcx7AKa1vKoD126EZ6ZmgAWvK"}]}
cf-ray: 958cb1803ec0568a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET urlz.fr/scripts.js
104.21.91.223200 OK 430 B IP 104.21.91.223:443
Certificate IssuerGoogle Trust Services
Subjecturlz.fr
Fingerprint6A:55:57:9A:15:E4:33:5F:E8:D3:D6:AA:E5:7F:B5:8C:E6:2C:1A:08
ValidityTue, 17 Jun 2025 12:33:57 GMT - Mon, 15 Sep 2025 13:32:35 GMT
File type JavaScript source, ASCII text, with CRLF line terminators
Hash cd919612ddf3aaccd9d047a5784ddf6a
d1bd745a31ab5d897de26eacd245c6b73a24359a
e14fdca0b346f91aeb2b9cc425a55cd813268ba7e030211e068ff9981d3363e7
GET /scripts.js HTTP/1.1
Host: urlz.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 08:15:06 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1e9Ds%2FSv5DcFEqxmp%2BzB8I%2BPVeR1uB2t3Dbj9NGIqR44vqaH5ctMU0rjn%2Bgo8CmEHKZUCZXiIqKLytNC%2BRxrAR9OlYAmM1wYE4j%2FKfmPZJItsovFHiVKheu5"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 12 May 2015 22:46:16 GMT
etag: W/"555282b8-1ae"
expires: Thu, 31 Jul 2025 18:19:53 GMT
cache-control: max-age=2592000
age: 50113
cf-cache-status: HIT
content-encoding: br
cf-ray: 958cb1817c97569c-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3034&min_rtt=461&rtt_var=3348&sent=128&recv=127&lost=0&retrans=0&sent_bytes=58342&recv_bytes=8647&delivery_rate=5467148&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=29695&unsent_bytes=0&cid=72570b0b0661cf15&ts=455&inflight_dur=49&x=40"
GET www.googletagmanager.com/td?id=UA-162669458-1&v=3&t=t&pid=1711223212&seq=1&exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056&dl=urlz.fr%2F&tdp=UA-162669458-1;;0;0;0&frm=0&bt=0&ct=3&z=0
142.250.178.72204 No Content 0 B URL GET www.googletagmanager.com/td?id=UA-162669458-1&v=3&t=t&pid=1711223212&seq=1&exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056&dl=urlz.fr%2F&tdp=UA-162669458-1;;0;0;0&frm=0&bt=0&ct=3&z=0
IP 142.250.178.72:443
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /td?id=UA-162669458-1&v=3&t=t&pid=1711223212&seq=1&exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056&dl=urlz.fr%2F&tdp=UA-162669458-1;;0;0;0&frm=0&bt=0&ct=3&z=0 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
date: Wed, 02 Jul 2025 08:15:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgtc:45:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsgtc:45:0
report-to: {"group":"ascnsrsgtc:45:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgtc:45:0"}],}
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
104.18.95.41200 OK 86 B URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
IP 104.18.95.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/agkr8/0x4AAAAAAAAzdtcUO1KvJZVY/auto/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintFC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71
ValidityFri, 27 Jun 2025 18:18:48 GMT - Thu, 25 Sep 2025 19:18:44 GMT
File type PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced
Hash 70c202196187ab3c11b4e094c20c6de1
9c52b959e74aee9d79cbc9f35d1f9f65a3b8c863
6255b9231d09ebe6aa1ac19ba46bdd81f3df58989c9ef2e11d6cd6e2e7b21643
GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/agkr8/0x4AAAAAAAAzdtcUO1KvJZVY/auto/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 08:15:07 GMT
content-type: image/png
content-length: 86
priority: u=4,i=?0
server: cloudflare
cf-ray: 958cb188ae8d56bd-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST track.kueezrtb.com/dye?_=1751444107723&type=latest:boot&ac=2&acm=g3l&h=urlz.fr&uri=%2F&furl=https%3A%2F%2Furlz.fr%2F&beacon=1
172.67.21.232204 No Content 0 B URL POST track.kueezrtb.com/dye?_=1751444107723&type=latest:boot&ac=2&acm=g3l&h=urlz.fr&uri=%2F&furl=https%3A%2F%2Furlz.fr%2F&beacon=1
IP 172.67.21.232:443
Certificate IssuerGoogle Trust Services
Subjectkueezrtb.com
FingerprintAB:F1:4E:AF:82:D3:16:0A:99:4E:E3:01:38:E8:78:1E:25:E8:2C:61
ValidityMon, 02 Jun 2025 00:14:54 GMT - Sun, 31 Aug 2025 01:14:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /dye?_=1751444107723&type=latest:boot&ac=2&acm=g3l&h=urlz.fr&uri=%2F&furl=https%3A%2F%2Furlz.fr%2F&beacon=1 HTTP/1.1
Host: track.kueezrtb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://urlz.fr
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
date: Wed, 02 Jul 2025 08:15:08 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://urlz.fr
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 958cb18a39b15696-OSL
X-Firefox-Spdy: h2
GET otrack.kueezrtb.com/dye?ac=2&acm=G3L&uid=f3460ddfb6d066c7&sid=ecd57a926f2f539&pvi=b7646c556a0f7b5a&h=urlz.fr&wh=1280x1024&b=Firefox&bv=134.0&dev=&os=Windows%2010&p=&abtv=9191c865-32b0-473d-80e1-13f9b569517a&uri=%2F&furl=https%3A%2F%2Furlz.fr%2F&sr=1280x1024&type=latest:preinit&_=1751444108165
172.67.21.232204 No Content 0 B URL GET otrack.kueezrtb.com/dye?ac=2&acm=G3L&uid=f3460ddfb6d066c7&sid=ecd57a926f2f539&pvi=b7646c556a0f7b5a&h=urlz.fr&wh=1280x1024&b=Firefox&bv=134.0&dev=&os=Windows%2010&p=&abtv=9191c865-32b0-473d-80e1-13f9b569517a&uri=%2F&furl=https%3A%2F%2Furlz.fr%2F&sr=1280x1024&type=latest:preinit&_=1751444108165
IP 172.67.21.232:443
Certificate IssuerGoogle Trust Services
Subjectkueezrtb.com
FingerprintAB:F1:4E:AF:82:D3:16:0A:99:4E:E3:01:38:E8:78:1E:25:E8:2C:61
ValidityMon, 02 Jun 2025 00:14:54 GMT - Sun, 31 Aug 2025 01:14:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dye?ac=2&acm=G3L&uid=f3460ddfb6d066c7&sid=ecd57a926f2f539&pvi=b7646c556a0f7b5a&h=urlz.fr&wh=1280x1024&b=Firefox&bv=134.0&dev=&os=Windows%2010&p=&abtv=9191c865-32b0-473d-80e1-13f9b569517a&uri=%2F&furl=https%3A%2F%2Furlz.fr%2F&sr=1280x1024&type=latest:preinit&_=1751444108165 HTTP/1.1
Host: otrack.kueezrtb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 02 Jul 2025 08:15:08 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 958cb18c5c515696-OSL
X-Firefox-Spdy: h2
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/562470542:1751441339:QsV_QTwYz7H3KIgE2zheN4sKDAJbT6itNVxKl-qq_II/958cb186bb8c56bd/1QY8TVZklXVf.s6Lrd4xroBUsFdOMvsaryQnR8V2P4Q-1751444107-1.2.1.1-zKnZUiAQmMe0sLSWlnzPonoRbnKK2xW0UstU1XQw8XaY4K_5gOEO.hw3aaUqrkXW
104.18.95.41200 OK 4.7 kB URL POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/562470542:1751441339:QsV_QTwYz7H3KIgE2zheN4sKDAJbT6itNVxKl-qq_II/958cb186bb8c56bd/1QY8TVZklXVf.s6Lrd4xroBUsFdOMvsaryQnR8V2P4Q-1751444107-1.2.1.1-zKnZUiAQmMe0sLSWlnzPonoRbnKK2xW0UstU1XQw8XaY4K_5gOEO.hw3aaUqrkXW
IP 104.18.95.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/agkr8/0x4AAAAAAAAzdtcUO1KvJZVY/auto/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintFC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71
ValidityFri, 27 Jun 2025 18:18:48 GMT - Thu, 25 Sep 2025 19:18:44 GMT
File type ASCII text, with very long lines (4712), with no line terminators
Hash 81f988bc8c341aa23129c36fc2935640
8eb1f681433f329b658c9ae2e8407fd582a863e9
5d1a1e355561c10ca180ea60a4be6ed0fe449a80ca3ef979004c478d283d57ff
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/562470542:1751441339:QsV_QTwYz7H3KIgE2zheN4sKDAJbT6itNVxKl-qq_II/958cb186bb8c56bd/1QY8TVZklXVf.s6Lrd4xroBUsFdOMvsaryQnR8V2P4Q-1751444107-1.2.1.1-zKnZUiAQmMe0sLSWlnzPonoRbnKK2xW0UstU1XQw8XaY4K_5gOEO.hw3aaUqrkXW HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/agkr8/0x4AAAAAAAAzdtcUO1KvJZVY/auto/fbE/new/normal/auto/
cf-chl: 1QY8TVZklXVf.s6Lrd4xroBUsFdOMvsaryQnR8V2P4Q-1751444107-1.2.1.1-zKnZUiAQmMe0sLSWlnzPonoRbnKK2xW0UstU1XQw8XaY4K_5gOEO.hw3aaUqrkXW
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 44087
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 08:15:24 GMT
content-type: text/html; charset=UTF-8
cf-chl-out-s: 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$f8faNJ6Jn/inu+yfboQXkg==
cf-chl-out: DfaOHIvpOhUeJM8BPUfpB+KybV6h95RHWev89vyMdW8QdO2Xb9zO2nBXHFlCDfGZHt2FpC5CsBobfHFip2VD8g==$GfJ21fKL0KaJYZ9cZqGVXA==
priority: u=3,i=?0
server: cloudflare
cf-ray: 958cb1f31bbe56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET urlz.fr/images/bouton.png
104.21.91.223200 OK 13 kB URL GET urlz.fr/images/bouton.png
IP 104.21.91.223:443
Certificate IssuerGoogle Trust Services
Subjecturlz.fr
Fingerprint6A:55:57:9A:15:E4:33:5F:E8:D3:D6:AA:E5:7F:B5:8C:E6:2C:1A:08
ValidityTue, 17 Jun 2025 12:33:57 GMT - Mon, 15 Sep 2025 13:32:35 GMT
File type PNG image data, 383 x 66, 8-bit/color RGBA, non-interlaced
Hash 80f29a4d4f084f00a62675d8fc14b5b8
0160ae48e3f2bd041da498fd8f28fac72d3026e3
582fd83213026552edb04f13da3aa545fca3f94169b8285e7dc5642c75544e8d
GET /images/bouton.png HTTP/1.1
Host: urlz.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 08:15:06 GMT
content-type: image/png
content-length: 13106
server: cloudflare
last-modified: Tue, 12 May 2015 22:46:17 GMT
etag: "555282b9-3332"
expires: Thu, 25 Sep 2025 18:33:22 GMT
cache-control: max-age=7776000
accept-ranges: bytes
age: 394903
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=8Jy427F6859ajmtGaWBPs73lyqJebE7C34eW90%2FxWwfcnwZdveKal3iqMdn8LluxB8e2Q8yCmqjeCZ4RwXv%2Fvr0iPfWr"}]}
cf-ray: 958cb1803ebd568a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET urlz.fr/images/fond.png
104.21.91.223200 OK 1.1 kB IP 104.21.91.223:443
Certificate IssuerGoogle Trust Services
Subjecturlz.fr
Fingerprint6A:55:57:9A:15:E4:33:5F:E8:D3:D6:AA:E5:7F:B5:8C:E6:2C:1A:08
ValidityTue, 17 Jun 2025 12:33:57 GMT - Mon, 15 Sep 2025 13:32:35 GMT
File type PNG image data, 1 x 600, 8-bit/color RGB, non-interlaced
Hash f42242b202bc38d63952d3f7700589d7
ebf97eea916f80f588ff6c54a56ba29699f0aa82
5f5a71131c6277fa873eaf2d96f029b7c88e298d8434b7bd03b2b388fb82ebe8
GET /images/fond.png HTTP/1.1
Host: urlz.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 08:15:06 GMT
content-type: image/png
content-length: 1094
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HV%2BdF6VpH4wvL%2FxAxLTGqntVDJ73BRZwNZCM4y6WeFHY7Vyv5DNJWwGsiqy2cysWpDNJH9bvi8i2rDpAQ4ayLjhuSS9PdG8i8qevzo0Fyp5R20ujbUVUIffu"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 12 May 2015 22:46:17 GMT
etag: "555282b9-446"
expires: Tue, 30 Sep 2025 07:20:16 GMT
cache-control: max-age=7776000
accept-ranges: bytes
age: 3289
cf-cache-status: HIT
cf-ray: 958cb1810c8e569c-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6085&min_rtt=1887&rtt_var=5782&sent=89&recv=119&lost=0&retrans=0&sent_bytes=9125&recv_bytes=8095&delivery_rate=578671&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=18042&unsent_bytes=0&cid=72570b0b0661cf15&ts=398&inflight_dur=36&x=40"
GET challenges.cloudflare.com/turnstile/v0/b/07af8245c728/api.js
104.18.95.41200 OK 49 kB URL GET challenges.cloudflare.com/turnstile/v0/b/07af8245c728/api.js
IP 104.18.95.41:443
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintFC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71
ValidityFri, 27 Jun 2025 18:18:48 GMT - Thu, 25 Sep 2025 19:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (48827)
Hash cca133e54f2791b0cc3562449fe447b5
56b6d37ab92a7098e7a12612a2a6cee54a3c306a
c50b430d25297399159bfcf9ea12b93cd64200082534a6ee3170defa4d694657
GET /turnstile/v0/b/07af8245c728/api.js HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://urlz.fr/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 08:15:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Thu, 19 Jun 2025 22:00:39 GMT
cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
priority: u=3,i=?0
vary: Accept-Encoding
server: cloudflare
cf-ray: 958cb1832cbf56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST gtrack.kueezrtb.com/dye?_=1751444107723&type=latest:boot&ac=2&acm=g3l&h=urlz.fr&uri=%2F&furl=https%3A%2F%2Furlz.fr%2F&beacon=1
172.67.21.232204 No Content 0 B URL POST gtrack.kueezrtb.com/dye?_=1751444107723&type=latest:boot&ac=2&acm=g3l&h=urlz.fr&uri=%2F&furl=https%3A%2F%2Furlz.fr%2F&beacon=1
IP 172.67.21.232:443
Certificate IssuerGoogle Trust Services
Subjectkueezrtb.com
FingerprintAB:F1:4E:AF:82:D3:16:0A:99:4E:E3:01:38:E8:78:1E:25:E8:2C:61
ValidityMon, 02 Jun 2025 00:14:54 GMT - Sun, 31 Aug 2025 01:14:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /dye?_=1751444107723&type=latest:boot&ac=2&acm=g3l&h=urlz.fr&uri=%2F&furl=https%3A%2F%2Furlz.fr%2F&beacon=1 HTTP/1.1
Host: gtrack.kueezrtb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://urlz.fr
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
date: Wed, 02 Jul 2025 08:15:08 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://urlz.fr
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 958cb18a69db5696-OSL
X-Firefox-Spdy: h2
GET edge.hyth.io/js/v1/9e07627d-1585-4ca4-81eb-b59c498dee2f/azerion-edge.min.js
3.167.2.128403 Forbidden 0 B URL GET edge.hyth.io/js/v1/9e07627d-1585-4ca4-81eb-b59c498dee2f/azerion-edge.min.js
IP 3.167.2.128:443
Certificate IssuerAmazon
Subjectpublisher-audiences.hyth.io
Fingerprint2C:EC:5D:E6:64:D0:53:E4:1F:FB:43:DF:5C:FE:D9:C3:DD:9E:86:52
ValidityTue, 21 Jan 2025 00:00:00 GMT - Thu, 19 Feb 2026 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/v1/9e07627d-1585-4ca4-81eb-b59c498dee2f/azerion-edge.min.js HTTP/1.1
Host: edge.hyth.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: application/xml
server: AmazonS3
date: Wed, 02 Jul 2025 08:15:07 GMT
x-cache: Error from cloudfront
via: 1.1 c16cb9fc938243bd0209a41893a00da4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: QEQWSHTiE6FaSS0i8dIuI2LDFn1ZpAPrXPKswCtrlBCGMgteWBderA==
X-Firefox-Spdy: h2
GET api-v4.prod.first-id.fr/firstId?int=1&bs=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%3A%3Aen-US%3A%3A1280%3A%3A1024%3A%3A0%3A%3A48
23.36.76.120204 No Content 0 B URL GET api-v4.prod.first-id.fr/firstId?int=1&bs=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%3A%3Aen-US%3A%3A1280%3A%3A1024%3A%3A0%3A%3A48
IP 23.36.76.120:443
ASN #20940 Akamai International B.V.
Certificate IssuerLet's Encrypt
Subjectprod.first-id.fr
FingerprintD7:F9:FC:53:24:35:62:5E:3B:16:3D:12:28:35:7B:D1:CE:76:BF:97
ValidityTue, 29 Apr 2025 09:31:30 GMT - Mon, 28 Jul 2025 09:31:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /firstId?int=1&bs=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%3A%3Aen-US%3A%3A1280%3A%3A1024%3A%3A0%3A%3A48 HTTP/1.1
Host: api-v4.prod.first-id.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://urlz.fr/
Origin: https://urlz.fr
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
expires: Wed, 02 Jul 2025 08:15:08 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 02 Jul 2025 08:15:08 GMT
alt-svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600
set-cookie: thirdid=2c18b1b8e9fd4dca9e189037807d362a; Max-Age=31536000; Secure; HttpOnly; SameSite=None; Path=/; Domain=.first-id.fr
server-timing: cdn-cache; desc=MISS, edge; dur=32, origin; dur=145, ak_p; desc="1751444107994_388254836_722280104_17778_856_1_43_21";dur=1
access-control-allow-origin: https://urlz.fr
access-control-allow-credentials: true
vary: Origin
X-Firefox-Spdy: h2
GET twemoji.maxcdn.com/v/latest/svg/2705.svg
0.0.0.0 0 B URL GET twemoji.maxcdn.com/v/latest/svg/2705.svg
IP 0.0.0.0:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /v/latest/svg/2705.svg HTTP/1.1
Host: twemoji.maxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET twemoji.maxcdn.com/v/latest/svg/1f9d8-200d-2642-fe0f.svg
0.0.0.0 0 B URL GET twemoji.maxcdn.com/v/latest/svg/1f9d8-200d-2642-fe0f.svg
IP 0.0.0.0:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /v/latest/svg/1f9d8-200d-2642-fe0f.svg HTTP/1.1
Host: twemoji.maxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET adtrack.adleadevent.com/mailNotification.php?st=a96081b6-db78-48c4-9f82-b93e316fb1f7
54.171.81.36200 OK 0 B URL GET adtrack.adleadevent.com/mailNotification.php?st=a96081b6-db78-48c4-9f82-b93e316fb1f7
IP 54.171.81.36:443
Certificate IssuerAmazon
Subject*.adleadevent.com
Fingerprint0D:4C:0A:F0:10:E8:73:AA:58:DC:0F:25:94:AA:AA:8D:D7:57:90:80
ValidityMon, 28 Apr 2025 00:00:00 GMT - Thu, 28 May 2026 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mailNotification.php?st=a96081b6-db78-48c4-9f82-b93e316fb1f7 HTTP/1.1
Host: adtrack.adleadevent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0, no-cache="set-cookie"
Content-Encoding: gzip
Content-Type: application/x-javascript
Date: Wed, 02 Jul 2025 08:15:07 GMT
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Last-Modified: Wed, 02 Jul 2025 08:15:07 GMT
Pragma: no-cache
Server: Apache
Set-Cookie: AWSELB=9FC54D150466C174912E5199B1F8E822A79961F4596BFB1311DF4AD552FFCAECC412B5A4F8D63A2A90D1DB19587375008B81DF393E46C0AEB40A8EC769662133B964A72527;PATH=/
AWSELBCORS=9FC54D150466C174912E5199B1F8E822A79961F4596BFB1311DF4AD552FFCAECC412B5A4F8D63A2A90D1DB19587375008B81DF393E46C0AEB40A8EC769662133B964A72527;PATH=/;SECURE;SAMESITE=None
Vary: Accept-Encoding
Content-Length: 20
Connection: keep-alive
GET twemoji.maxcdn.com/v/latest/svg/2764.svg
0.0.0.0 0 B URL GET twemoji.maxcdn.com/v/latest/svg/2764.svg
IP 0.0.0.0:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /v/latest/svg/2764.svg HTTP/1.1
Host: twemoji.maxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET challenges.cloudflare.com/turnstile/v0/api.js
104.18.95.41302 Found 49 kB URL GET challenges.cloudflare.com/turnstile/v0/api.js
IP 104.18.95.41:443
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintFC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71
ValidityFri, 27 Jun 2025 18:18:48 GMT - Thu, 25 Sep 2025 19:18:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 02 Jul 2025 08:15:06 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public
cross-origin-resource-policy: cross-origin
location: /turnstile/v0/b/07af8245c728/api.js
vary: Accept-Encoding
server: cloudflare
cf-ray: 958cb1822b0756c4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET tmzr.themoneytizer.fr/v9.39.0u2.0.32/eb3c0e3fb1c0386f33f1e272089f2185/prebid.js
104.21.32.1200 OK 464 kB URL GET tmzr.themoneytizer.fr/v9.39.0u2.0.32/eb3c0e3fb1c0386f33f1e272089f2185/prebid.js
IP 104.21.32.1:443
Certificate IssuerGoogle Trust Services
Subjectthemoneytizer.fr
FingerprintA1:8F:DC:A2:88:2A:59:A0:F1:E0:FD:06:E0:19:93:3F:95:25:74:8E
ValidityWed, 14 May 2025 22:18:42 GMT - Tue, 12 Aug 2025 23:17:00 GMT
File type JavaScript source, ASCII text, with very long lines (58650)
Size 464 kB (463715 bytes)
Hash fe59c6cfe01333a1b62e18ca2b989bcc
e799008e28c73a9487d2b497b2da1ab14a63d13e
3592abc1f3afe03c98e475adaa1b7d695a48b8397954db1e35f255399588a07f
GET /v9.39.0u2.0.32/eb3c0e3fb1c0386f33f1e272089f2185/prebid.js HTTP/1.1
Host: tmzr.themoneytizer.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 08:15:08 GMT
content-type: application/javascript
x-amz-id-2: 6x0j8NbmNsMZV23CSc/wBwd/wR9+Qda/Dgd6KxSc7/3L/t5ua9UnwkY9RLB26edxJWenEX55TR0=
x-amz-request-id: 3R0P0YCZWFAG2TDQ
last-modified: Tue, 17 Jun 2025 22:25:02 GMT
vary: accept-encoding
x-amz-server-side-encryption: AES256
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=2h3%2Fz2XrLxHD9AytgdItGvvtgojF7WWW1kYkLtPxutnGfK9E11UEcz9wWq7VAR3pqfO8DfA1a9cKylFG6IdNP69BPYffBZAxa7piYKnUENYv6ds%3D"}]}
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
age: 927300
cache-control: max-age=2678400
cf-cache-status: HIT
etag: W/"fe59c6cfe01333a1b62e18ca2b989bcc"
content-encoding: br
cf-ray: 958cb18b0f5d56be-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET gtrack.kueezrtb.com/dye?ac=2&acm=G3L&uid=f3460ddfb6d066c7&sid=ecd57a926f2f539&pvi=b7646c556a0f7b5a&h=urlz.fr&wh=1280x1024&b=Firefox&bv=134.0&dev=&os=Windows%2010&p=&abtv=9191c865-32b0-473d-80e1-13f9b569517a&uri=%2F&furl=https%3A%2F%2Furlz.fr%2F&sr=1280x1024&type=latest:preinit&_=1751444108165
172.67.21.232204 No Content 0 B URL GET gtrack.kueezrtb.com/dye?ac=2&acm=G3L&uid=f3460ddfb6d066c7&sid=ecd57a926f2f539&pvi=b7646c556a0f7b5a&h=urlz.fr&wh=1280x1024&b=Firefox&bv=134.0&dev=&os=Windows%2010&p=&abtv=9191c865-32b0-473d-80e1-13f9b569517a&uri=%2F&furl=https%3A%2F%2Furlz.fr%2F&sr=1280x1024&type=latest:preinit&_=1751444108165
IP 172.67.21.232:443
Certificate IssuerGoogle Trust Services
Subjectkueezrtb.com
FingerprintAB:F1:4E:AF:82:D3:16:0A:99:4E:E3:01:38:E8:78:1E:25:E8:2C:61
ValidityMon, 02 Jun 2025 00:14:54 GMT - Sun, 31 Aug 2025 01:14:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dye?ac=2&acm=G3L&uid=f3460ddfb6d066c7&sid=ecd57a926f2f539&pvi=b7646c556a0f7b5a&h=urlz.fr&wh=1280x1024&b=Firefox&bv=134.0&dev=&os=Windows%2010&p=&abtv=9191c865-32b0-473d-80e1-13f9b569517a&uri=%2F&furl=https%3A%2F%2Furlz.fr%2F&sr=1280x1024&type=latest:preinit&_=1751444108165 HTTP/1.1
Host: gtrack.kueezrtb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 02 Jul 2025 08:15:08 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 958cb18c4c2f5696-OSL
X-Firefox-Spdy: h2
GET api-v6.prod.first-id.fr/firstId?int=1&bs=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%3A%3Aen-US%3A%3A1280%3A%3A1024%3A%3A0%3A%3A48
0.0.0.0 0 B URL GET api-v6.prod.first-id.fr/firstId?int=1&bs=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%3A%3Aen-US%3A%3A1280%3A%3A1024%3A%3A0%3A%3A48
IP 0.0.0.0:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /firstId?int=1&bs=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%3A%3Aen-US%3A%3A1280%3A%3A1024%3A%3A0%3A%3A48 HTTP/1.1
Host: api-v6.prod.first-id.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://urlz.fr/
Origin: https://urlz.fr
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache