Overview

URL r.email.lartace.fr/track/click/1ue2nxpd9ilavf5rd
IP104.16.234.163
ASNAS13335 CloudFlare, Inc.
Location United States
Report completed2017-09-14 09:12:19 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2017-09-14 2 u360.d-bi.fr/hmx000000000147.js Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.16.234.163

Date UQ / IDS / BL URL IP
2017-11-22 18:50:02 +0100
0 - 0 - 0 r.news.planminceur.com/track/click/chm1zvqzxafva3d 104.16.234.163
2017-11-22 15:19:28 +0100
0 - 0 - 0 r.macri.com.ar/track/click/1wn3s9d9bu6b7d 104.16.234.163
2017-11-21 06:05:20 +0100
0 - 0 - 0 r.safetystorefront.com/32nj8oyp9ihjf.html 104.16.234.163
2017-11-20 23:07:01 +0100
0 - 0 - 0 r.email.risetechnical.co.uk/9qleg2s7xhpwjg.html 104.16.234.163
2017-11-17 15:04:11 +0100
0 - 0 - 0 r.seminari.org 104.16.234.163
2017-11-14 13:13:56 +0100
0 - 0 - 0 r.sibmail.gamsoftwaresolutions.com/track/clic (...) 104.16.234.163
2017-11-13 08:51:59 +0100
0 - 0 - 0 r.info-brien2017.com/track/click/90wrp8tra806xjd 104.16.234.163
2017-11-09 13:30:30 +0100
0 - 0 - 0 r.sb.spartonre.com/track/click/n2aj2qgdca6srd 104.16.234.163
2017-11-07 15:02:40 +0100
0 - 0 - 0 r.sib.opera-energie.com/tr/cl/U3-6CfIQVNV1jw- (...) 104.16.234.163
2017-11-06 15:11:40 +0100
0 - 0 - 0 r.newsletter.opessoftware.com/track/click/228 (...) 104.16.234.163

Last 10 reports on ASN: AS13335 CloudFlare, Inc.

Date UQ / IDS / BL URL IP
2017-11-24 12:09:50 +0100
2 - 0 - 2 corneey.com/q1ReXB 104.28.2.23
2017-11-24 12:08:39 +0100
0 - 0 - 0 https://www.fimfiction.net/blog/781538/1080pf (...) 104.20.175.25
2017-11-24 12:02:10 +0100
0 - 0 - 1 cheathappens.com/trainers/sc-apache51-afc5519 (...) 104.20.89.146
2017-11-24 11:58:39 +0100
0 - 0 - 0 www.gbmods.co/wp-content/uploads/Themes/GBWA_ (...) 104.25.127.37
2017-11-24 11:58:35 +0100
0 - 0 - 1 www.dhmeats.com/ 104.18.56.40
2017-11-24 11:54:53 +0100
0 - 0 - 44 https://www.angner.se/ 104.28.16.18
2017-11-24 11:47:44 +0100
0 - 0 - 20 www.can-ho-lexington-residence.com/wp-content (...) 104.28.29.237
2017-11-24 11:47:36 +0100
0 - 0 - 1 www.rue21.com/store/guys/_/N-97i?utm_source=c (...) 104.16.162.234
2017-11-24 11:45:04 +0100
0 - 0 - 0 https://bettercoloncleansingguide.com/quicktr (...) 104.24.99.254
2017-11-24 11:41:13 +0100
0 - 0 - 11 https://roi-socialmedia.com/css/apps/Mobile825/ 104.18.36.83

No other reports on domain: lartace.fr



JavaScript

Executed Scripts (28)


Executed Evals (3)

#1 JavaScript::Eval (size: 821, repeated: 1) - SHA256: 0423004619d50ddd9f26f1546000a481287a95343375e823a09a3a98d4d5c382

                                        (function() {
    var a = "/" + google_tag_manager["GTM-NVK42H"].macro('gtm1') + "/" + google_tag_manager["GTM-NVK42H"].macro('gtm2'),
        b = google_tag_manager["GTM-NVK42H"].macro('gtm3');
    if (google_tag_manager["GTM-NVK42H"].macro('gtm4')) {
        var c = b.length;
        b.length == c && (b += google_tag_manager["GTM-NVK42H"].macro('gtm5'))
    } else b = b.replace("//", google_tag_manager["GTM-NVK42H"].macro('gtm6'));
    a += "/" + b;
    google_tag_manager["GTM-NVK42H"].macro('gtm7') && "-" != google_tag_manager["GTM-NVK42H"].macro('gtm8') && (a += "/" + google_tag_manager["GTM-NVK42H"].macro('gtm9'));
    google_tag_manager["GTM-NVK42H"].macro('gtm10') && (a += "?f\x3d" + google_tag_manager["GTM-NVK42H"].macro('gtm11'));
    a += "#" + google_tag_manager["GTM-NVK42H"].macro('gtm12');
    google_tag_manager["GTM-NVK42H"].macro('gtm13') && (a += "?" + google_tag_manager["GTM-NVK42H"].macro('gtm14'));
    return a
})();
                                    

#2 JavaScript::Eval (size: 830, repeated: 1) - SHA256: a5dcd3ca104c6ba83168804d941fd56e2e733f1b29881f9bf07c3a292a516a27

                                        (function() {
    var a = "/" + google_tag_manager["GTM-NVK42H"].macro('gtm15') + "/" + google_tag_manager["GTM-NVK42H"].macro('gtm16'),
        b = google_tag_manager["GTM-NVK42H"].macro('gtm17');
    if (google_tag_manager["GTM-NVK42H"].macro('gtm18')) {
        var c = b.length;
        b.length == c && (b += google_tag_manager["GTM-NVK42H"].macro('gtm19'))
    } else b = b.replace("//", google_tag_manager["GTM-NVK42H"].macro('gtm20'));
    a += "/" + b;
    google_tag_manager["GTM-NVK42H"].macro('gtm21') && "-" != google_tag_manager["GTM-NVK42H"].macro('gtm22') && (a += "/" + google_tag_manager["GTM-NVK42H"].macro('gtm23'));
    google_tag_manager["GTM-NVK42H"].macro('gtm24') && (a += "?f\x3d" + google_tag_manager["GTM-NVK42H"].macro('gtm25'));
    a += "#" + google_tag_manager["GTM-NVK42H"].macro('gtm26');
    google_tag_manager["GTM-NVK42H"].macro('gtm27') && (a += "?" + google_tag_manager["GTM-NVK42H"].macro('gtm28'));
    return a
})();
                                    

#3 JavaScript::Eval (size: 21, repeated: 1) - SHA256: d71ae806c8194d5f712e2b072fab4e7bbb8ecf3bc33a62851fa1b259b0e1d0d9

                                        self.tagsZone.accueil
                                    

Executed Writes (1)

#1 JavaScript::Write (size: 220, repeated: 1) - SHA256: a6f499cbdcf9fb2b9a9760e227b4b5acc48bc02ced5674f45765619ec8d52e6b

                                        < img alt = ""
SRC = "http://deliv.leboncoin.fr/RealMedia/ads/adstream.track/1236450548?XE&epmAccountKey=1001&epmXTransKey=264&epmXtransStep=0&ProductCategory=&ItemDescription=&XE"
style = "width:0px;height:0px;border:none" / >
                                    


HTTP Transactions (78)


Request Response
                                        
                                            GET /track/click/1ue2nxpd9ilavf5rd HTTP/1.1 
Host: r.email.lartace.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.16.234.163
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Thu, 14 Sep 2017 07:11:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d5281324ee043585cf9416ce79d0083041505373093; expires=Fri, 14-Sep-18 07:11:33 GMT; path=/; domain=.lartace.fr; HttpOnly
X-Sib-Server: SENDINBLUE-red2-3
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Server: cloudflare-nginx
CF-RAY: 39e1886ba50342a9-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   509
Md5:    98b34a374d5ed4dd7fbcb034ffd34ffe
Sha1:   ae2a6c852d3a5e41f5b3a68194a44632e44dc352
Sha256: e950d74016c89d283bc9200a8a8d138044d81359c7b92e112fa1dc07c5e85bec
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 14 Sep 2017 07:11:34 GMT
Server: Apache
Last-Modified: Thu, 14 Sep 2017 01:17:47 GMT
Expires: Thu, 21 Sep 2017 01:17:47 GMT
Etag: 222362EB04D2C2DF44023CA7E5AE33C6C8AB3409
Cache-Control: max-age=582972,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp18
Content-Length: 280
Connection: close


--- Additional Info ---
Magic:  data
Size:   280
Md5:    1c96529bee4e85de140e58db56d0a754
Sha1:   222362eb04d2c2df44023ca7e5ae33c6c8ab3409
Sha256: 0ce9484326cfb5906dfb1b5297d13052877e5887413a6cfb65c21c347c258792
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 14 Sep 2017 07:11:34 GMT
Server: Apache
Last-Modified: Mon, 11 Sep 2017 21:19:01 GMT
Expires: Mon, 18 Sep 2017 21:19:01 GMT
Etag: C9A884D93E4B996BF11A0272A62C45D7B41EAF15
Cache-Control: max-age=395846,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp18
Content-Length: 312
Connection: close


--- Additional Info ---
Magic:  data
Size:   312
Md5:    f0c2dcca1c41639b6c93d96a7f6e374f
Sha1:   c9a884d93e4b996bf11a0272a62c45d7b41eaf15
Sha256: f67438d81aa4a35aaf2d67ba2956d1a3f4fe3bb74f54be473fef2228358de918
                                        
                                            GET /cm.html HTTP/1.1 
Host: sibautomation.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://r.email.lartace.fr/track/click/1ue2nxpd9ilavf5rd

                                         
                                         104.18.38.74
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Thu, 14 Sep 2017 07:11:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d03f0e8e700f2e63add1fca5411c0047b1505373094; expires=Fri, 14-Sep-18 07:11:34 GMT; path=/; domain=.sibautomation.com; HttpOnly
Last-Modified: Wed, 19 Jul 2017 07:04:36 GMT
Vary: Accept-Encoding
Expires: Thu, 14 Sep 2017 09:11:34 GMT
Cache-Control: public, max-age=7200
X-Sib-Server: SENDINBLUE-web2-2
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
CF-Cache-Status: HIT
Server: cloudflare-nginx
CF-RAY: 39e18871ac2142a9-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1679
Md5:    6fdc05e0014226ab22fa08cd9057c219
Sha1:   2dce309064733af73b277a5fae9398e714854545
Sha256: 31f7e38a0e6d5fda0e891e202900ff5ebed656efc661193a083cf458eb761c69
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: r.email.lartace.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=d5281324ee043585cf9416ce79d0083041505373093

                                         
                                         104.16.234.163
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Thu, 14 Sep 2017 07:11:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Sib-Server: SENDINBLUE-red2-3
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Server: cloudflare-nginx
CF-RAY: 39e18871d63a42a9-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1026
Md5:    75b43e46678e4163c8342ab69f84aab7
Sha1:   9b67c5b13ca7883ba31231b0da1c687c532228c2
Sha256: 867753bcf9a22919303586b38ac83bf229100a0ff60951f3b396566398d31b23
                                        
                                            GET /207-20-27-5002-86278-999?advcuid=[UNIQUE_VALUE]&uadv=aHR0cHM6Ly9hZC5kb3VibGVjbGljay5uZXQvZGRtL2Nsay80MDI2ODQ4OTA7MjAyODM0NTMxO2U= HTTP/1.1 
Host: r.adv-image3.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://r.email.lartace.fr/track/click/1ue2nxpd9ilavf5rd

                                         
                                         163.172.17.22
HTTP/1.0 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 14 Sep 2017 07:11:34 GMT
Server: Apache/2.4.10 (Debian)
Set-Cookie: trackingAdvc=r7a8sle1gr323fejsql4p9u533; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: https://ad.doubleclick.net/ddm/clk/402684890;202834531;e?advcuid=[UNIQUE_VALUE]&uadv=aHR0cHM6Ly9hZC5kb3VibGVjbGljay5uZXQvZGRtL2Nsay80MDI2ODQ4OTA7MjAyODM0NTMxO2U=&advc=207-20-27-5002-86278-999
Connection: close
Content-Length: 0


--- Additional Info ---
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 14 Sep 2017 07:11:34 GMT
Expires: Mon, 18 Sep 2017 07:11:34 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    ceca7806573a6f9fe7f4c1fe98238c7a
Sha1:   1a22eca7e7e6588ab0a5a8ddb828f4e790b3d4a0
Sha256: 096a7769c0c444e182b045ee6b3f1887f32885248e05d0870d47f27336e1d39d
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=411349, public, no-transform, must-revalidate
Last-Modified: Tue, 12 Sep 2017 01:23:19 GMT
Expires: Tue, 19 Sep 2017 01:23:19 GMT
Date: Thu, 14 Sep 2017 07:11:34 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    775de2be162f21ece95211dfbf378ff2
Sha1:   5aa3f54491214e417e128fcc1b70119c2135565c
Sha256: 69abd56429cfa8fb3a69c040242457ab25397237c94b2f46ea2ce7b1848d55fe
                                        
                                            GET /ddm/clk/402684890;202834531;e?advcuid=[UNIQUE_VALUE]&uadv=aHR0cHM6Ly9hZC5kb3VibGVjbGljay5uZXQvZGRtL2Nsay80MDI2ODQ4OTA7MjAyODM0NTMxO2U=&advc=207-20-27-5002-86278-999 HTTP/1.1 
Host: ad.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://r.email.lartace.fr/track/click/1ue2nxpd9ilavf5rd

                                         
                                         216.58.211.134
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Location: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
X-Content-Type-Options: nosniff
Date: Thu, 14 Sep 2017 07:11:35 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: FLC=CLb0qwEQ44TcYBja94HAASjsrkswp9fozQU; expires=Thu, 14-Sep-2017 07:11:45 GMT; path=/; domain=.doubleclick.net IDE=AHWqTUki7tPtjUoP1J9aUQUUqL0INeEWZF35YE_d-7ZnGiJFlQ3Ylogf8JJTbdg4; expires=Sat, 14-Sep-2019 07:11:35 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
                                        
                                            GET /?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067 HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://r.email.lartace.fr/track/click/1ue2nxpd9ilavf5rd

                                         
                                         87.252.12.19
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:35 GMT
Content-Length: 3743
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3; path=/
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3743
Md5:    c4d58daade924456b4a5a3ad3945dd26
Sha1:   acc598ab4eb241d545fe8a26a194b5cc7fd46827
Sha256: 22aed5e8618829e37687a4eeb1e6f4976ed7f3a5f6a6f8336f01e4eeef347b9b
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 14 Sep 2017 07:11:35 GMT
Expires: Mon, 18 Sep 2017 07:11:35 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    8736ff2801f70a2cb7f5fc291ef2bfd7
Sha1:   3818c96f7adc8d6c67e2174008e3e73cdad3e47f
Sha256: 04ad5952f352935c1aec1262730a89210b9456c20874afa766fc05d6befd0b5f
                                        
                                            GET /css/select2.css HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3

                                         
                                         87.252.12.19
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:35 GMT
Last-Modified: Mon, 13 Mar 2017 04:05:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"58c61a9a-4520"
X-Powered-By: PleskLin
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3053
Md5:    6725305b4de67462a54c2557e3c3a451
Sha1:   0b965a6683c81fcb84cc5c3c09955f0f1a844570
Sha256: fbaaea39a75c71f29245c73083d1c285c27f05b10d2554e6863f5b51f4d4d806
                                        
                                            GET /css/bootstrap.min.css HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3

                                         
                                         87.252.12.19
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:35 GMT
Last-Modified: Mon, 13 Mar 2017 04:05:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"58c61a9e-1d9b1"
X-Powered-By: PleskLin
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   25202
Md5:    0e52f89f402961bce3e6750f39281bbc
Sha1:   e1d0ed5a0323b70c5a5e72bd48532661d69da967
Sha256: 6885bb40fb0d0bda128b31d413d505334f9e2a7352389a4b4b3939fff4b4fac1
                                        
                                            GET /css/style.css HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3

                                         
                                         87.252.12.19
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:35 GMT
Last-Modified: Mon, 13 Mar 2017 04:05:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"58c61a9a-18bc"
X-Powered-By: PleskLin
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2122
Md5:    10156c86fabe5f1f960117551406c818
Sha1:   68c7d6472afd62476d3ded7890a4d5b58f9f899f
Sha256: d713f28246e7cd434b1c3e703466599dd9de0a26691c168f6226f1d82cff32f9
                                        
                                            GET /images/logo.png HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3

                                         
                                         87.252.12.19
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:35 GMT
Content-Length: 12963
Last-Modified: Wed, 04 Jan 2017 13:13:20 GMT
Connection: keep-alive
Etag: "586cf4f0-32a3"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 151 x 80, 8-bit/color RGB, non-interlaced
Size:   12963
Md5:    e0639648a99757fd06fce56a6bbe061b
Sha1:   81542b8cb5e4b384de841652dc9c1f104b89fce6
Sha256: f9ea2077e12bfaf096a9b9b6746fbd2338a88d2c4e5a779a8d845149f0554868
                                        
                                            GET /images/home-before-ico.png HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3

                                         
                                         87.252.12.19
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:35 GMT
Content-Length: 1967
Last-Modified: Wed, 04 Jan 2017 13:13:19 GMT
Connection: keep-alive
Etag: "586cf4ef-7af"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 46 x 41, 8-bit/color RGB, non-interlaced
Size:   1967
Md5:    9e0babefb44a645f7396799fefabedee
Sha1:   ec0fb9f1e075067921451e4bde489afea50945a1
Sha256: 167f7ec07942542462b01069507a96f2195aca50a22459c9e5ba00e0e5b94aa6
                                        
                                            GET /js/jquery.dqemail.js HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3

                                         
                                         87.252.12.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:35 GMT
Last-Modified: Mon, 13 Mar 2017 04:06:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"58c61ab6-2acf"
X-Powered-By: PleskLin
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3688
Md5:    0f59e79c53bbb5f683931a5ba12ffa63
Sha1:   60ac5fd88a6c6264557710a619c0d76dede42ff7
Sha256: 7ac7f73131498292821fed195383105b486293aaaafc7ec4357939a16b149b68
                                        
                                            GET /js/jquery.dqephone.js HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3

                                         
                                         87.252.12.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:35 GMT
Last-Modified: Mon, 13 Mar 2017 04:06:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"58c61ab4-1e35"
X-Powered-By: PleskLin
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2626
Md5:    d9dacc514d41a034f89e60cf1d3f44c2
Sha1:   1a1485c68fd024e2c54c12c9e13d1d6203de5fc0
Sha256: ed43db1becac99335235b88470399372bcad2d19645c6833edeefd23fb8abf09
                                        
                                            GET /js/i18n/fr.js HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3

                                         
                                         87.252.12.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:35 GMT
Content-Length: 472
Connection: keep-alive
X-Accel-Version: 0.01
Last-Modified: Mon, 13 Mar 2017 04:06:24 GMT
Etag: "386-54a94d5af9e9a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   472
Md5:    12d0d1494aa6040cf4deed3c1a5e330f
Sha1:   26d9cca6eb761c5233c83efdefd02feb502b8ec3
Sha256: ba8e25fbfbd607dce212d63f70daec1b4d87ec9b6b4e894fdab0f5427c1c3626
                                        
                                            GET /js/bootstrap.min.js HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3

                                         
                                         87.252.12.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:35 GMT
Last-Modified: Mon, 13 Mar 2017 04:06:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"58c61ab7-900a"
X-Powered-By: PleskLin
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   11810
Md5:    6d47c181fd47659518aa7fd63918b5d8
Sha1:   5cb8a1a379574a1153e53f830f46dd72164884df
Sha256: 18ad653901b48a3d13d6fa6984dfdb74a7e6a91cfac6cef7978a51bdcc935aa8
                                        
                                            GET /js/custom-script.js HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3

                                         
                                         87.252.12.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:35 GMT
Last-Modified: Mon, 27 Mar 2017 09:12:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"58d8d76d-1887"
X-Powered-By: PleskLin
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2153
Md5:    197400d2959fcfde51663e39b1682996
Sha1:   3b5a1882d35974312e8819fa9a4e302099fd106c
Sha256: 15dd301daae77525ec990edb0509db73003fee6ed785148da55962872e10f146
                                        
                                            GET /css?family=Nunito HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Thu, 14 Sep 2017 07:11:35 GMT
Date: Thu, 14 Sep 2017 07:11:35 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   189
Md5:    92e7c48568a015492d0a7c7b5616cc68
Sha1:   339f2488f840094443a43db635c1ac27b62986fe
Sha256: 79f8de2e8b1d7734eb7494c0b9eea5d7632eac3cef35d2ca9dea6b0a859019fe
                                        
                                            GET /js/jquery.js HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3

                                         
                                         87.252.12.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:35 GMT
Last-Modified: Mon, 13 Mar 2017 04:06:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"58c61ab5-1762c"
X-Powered-By: PleskLin
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   38825
Md5:    c3fe8f4505ffe9bad0bacb75ed08f4e0
Sha1:   0ed272eccf87c0ed9be4720214a321f7cf5c70e0
Sha256: 26e2d03ab236b558e201a02bd6a7624475c4f3934974905b7fd1c0e73e56ca22
                                        
                                            GET /js/select2.js HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3

                                         
                                         87.252.12.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:35 GMT
Last-Modified: Mon, 13 Mar 2017 04:06:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"58c61abb-22a6e"
X-Powered-By: PleskLin
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   39183
Md5:    df4d9e8c87dc61f6cbb7eb74bc61061f
Sha1:   f3de3ca501e445b2f307a0696881faee3e3210b1
Sha256: ba5fbc79530b6073411befa03413a256751dcd09b95a44467fed98bad8cc9fe4
                                        
                                            GET /images/person0ico.png HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3

                                         
                                         87.252.12.19
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:35 GMT
Content-Length: 2700
Last-Modified: Wed, 04 Jan 2017 13:13:26 GMT
Connection: keep-alive
Etag: "586cf4f6-a8c"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 46 x 41, 8-bit/color RGB, non-interlaced
Size:   2700
Md5:    97b04e93e27d8e8b36610a4e9b02afa1
Sha1:   191948104ce8ae2e4890b3d1974e8241d71528b0
Sha256: e6c638d97717222bdb0c3deda11f50f91929de8cf9ae388b825da0d15c3f9676
                                        
                                            GET /images/notes-icon.png HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3

                                         
                                         87.252.12.19
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:35 GMT
Content-Length: 1544
Last-Modified: Wed, 04 Jan 2017 13:13:23 GMT
Connection: keep-alive
Etag: "586cf4f3-608"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 46 x 41, 8-bit/color RGB, non-interlaced
Size:   1544
Md5:    45dae09cd2ea85b855304d6248a2ef5c
Sha1:   ad4dae364a63d9c301e7707f1bbe2fc380c4fb23
Sha256: 276f288a70e82357b2e16c860f8496786b065b40aa560db0dc870a9e34147a5a
                                        
                                            GET /images/wallet-icon.png HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3

                                         
                                         87.252.12.19
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:35 GMT
Content-Length: 1975
Last-Modified: Wed, 04 Jan 2017 13:13:29 GMT
Connection: keep-alive
Etag: "586cf4f9-7b7"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 46 x 41, 8-bit/color RGB, non-interlaced
Size:   1975
Md5:    d9a4f8310846ac1b8cc9737f76320b75
Sha1:   700f202409d1f6d4063ed4e8badab2cf10bee098
Sha256: f198983e782bd19a38089da40d23b5d7b001c25a1fae385ea7991cb72b1328c8
                                        
                                            GET /images/trusted-ico.png HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3

                                         
                                         87.252.12.19
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:35 GMT
Content-Length: 2494
Last-Modified: Wed, 04 Jan 2017 13:13:28 GMT
Connection: keep-alive
Etag: "586cf4f8-9be"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 46 x 41, 8-bit/color RGB, non-interlaced
Size:   2494
Md5:    a10630ff59d598c091c8c479ce23b276
Sha1:   fa349696aecd489a0f98934ea483358488d7944d
Sha256: 37a080eeccf9d864c1cdda7117a53a1edd2fc6f3f083860b308046809411d1f0
                                        
                                            GET /images/contact-form-left-outer.png HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/css/style.css
Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3

                                         
                                         87.252.12.19
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:35 GMT
Content-Length: 3098
Last-Modified: Wed, 04 Jan 2017 13:13:18 GMT
Connection: keep-alive
Etag: "586cf4ee-c1a"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 30 x 35, 8-bit/color RGBA, non-interlaced
Size:   3098
Md5:    f2a1d05b5e0797e462ad26d7d5df129e
Sha1:   2fff97ab66e54906373c07aa72f818987b472602
Sha256: 264f4fa5196a441d8fe57fd95fd8889f62c93a1c9f30232318cb10ca2c9f7819
                                        
                                            GET /images/banner-left-image.png HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3

                                         
                                         87.252.12.19
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:35 GMT
Content-Length: 177807
Last-Modified: Tue, 01 Aug 2017 11:09:57 GMT
Connection: keep-alive
Etag: "59806185-2b68f"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 467 x 290, 8-bit/color RGB, non-interlaced
Size:   177807
Md5:    47962a2799d032f14cb65606a55cf113
Sha1:   da8c27c427c729a0da011d6ad438f05f10969a48
Sha256: 460d9f26f9ec8d117c62132744049a1312a6870f880a3e2dc6721f5077949121
                                        
                                            GET /images/radio-unselected.png HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/css/style.css
Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3

                                         
                                         87.252.12.19
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:35 GMT
Content-Length: 1486
Last-Modified: Wed, 04 Jan 2017 13:13:26 GMT
Connection: keep-alive
Etag: "586cf4f6-5ce"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 18 x 18, 8-bit/color RGBA, non-interlaced
Size:   1486
Md5:    495482ec90f4a278d129a16640aad0e9
Sha1:   a312a3ef2d60a2ccddf324b7b88bee09b655f305
Sha256: 65693ea307eda1512e965621c05d85d3174655c8e985db4573da7f27fc219d03
                                        
                                            GET /images/radio-selected.png HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/css/style.css
Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3

                                         
                                         87.252.12.19
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:35 GMT
Content-Length: 1664
Last-Modified: Wed, 04 Jan 2017 13:13:25 GMT
Connection: keep-alive
Etag: "586cf4f5-680"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 18 x 18, 8-bit/color RGBA, non-interlaced
Size:   1664
Md5:    cc15d47ef84f32ab7192df7dfc15f624
Sha1:   63047a49a4723ada1f966fc05b907b8d1ddc1431
Sha256: 1507cdb691e04724475dcedf60edb17f5abb0eb4cc33f82265698f4cbb787e85
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 14 Sep 2017 07:11:35 GMT
Expires: Mon, 18 Sep 2017 07:11:35 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    1b503f238e140231106c31493e4c0954
Sha1:   0b050763b8d7f541434654c86640a7cbbfd11744
Sha256: 9ddacf6e9b25ca0142b5c7b608e4d91a1a2e06b800fb0918784913300922c17d
                                        
                                            GET /gtm.js?id=GTM-NVK42H HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067

                                         
                                         216.58.211.136
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Access-Control-Allow-Origin: http://www.googletagmanager.com
Access-Control-Allow-Headers: Cache-Control
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Thu, 14 Sep 2017 07:11:35 GMT
Expires: Thu, 14 Sep 2017 07:11:35 GMT
Cache-Control: private, max-age=900
Server: Google Tag Manager (scaffolding)
Content-Length: 28209
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   28209
Md5:    bf3378af60bdb6decf460296247ac32d
Sha1:   ed438c7ecbcdd5ca40dfff3efae94b851447d659
Sha256: 841917b3b6882b44d3c6ebf69d8ffc28b35c8fac170e65c814c0e288c64f082c
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
If-Modified-Since: Fri, 03 Oct 2014 00:48:42 GMT

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Thu, 14 Sep 2017 06:50:40 GMT
Expires: Thu, 14 Sep 2017 08:50:40 GMT
Last-Modified: Thu, 07 Sep 2017 21:20:25 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 13819
Cache-Control: public, max-age=7200
Age: 1256


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   13819
Md5:    53dfd927b6f570e3d49b592a0a4804a9
Sha1:   33a4ece271c86618af1d992939eabf30089ac69a
Sha256: 99054b819a0a00abd9243516256f75e8190672f1f0d371a2594c3aca46275cd4
                                        
                                            GET /pagead/conversion_async.js HTTP/1.1 
Host: www.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Etag: 16363774644248485532
Date: Thu, 14 Sep 2017 07:11:36 GMT
Expires: Thu, 14 Sep 2017 07:11:36 GMT
Cache-Control: private, max-age=86400
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 5032
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5032
Md5:    e5c1771cf3708ea16854a587019a7cf7
Sha1:   c6afd83031f988fbdbd10f56bb5523289520a010
Sha256: 6e9fcc71ed106adf6b4958f8d497f40aa12cc7866fd118604168921af589ba1c
                                        
                                            GET /activityi;src=1234796;type=maiso327;cat=maiso016;ord=4552635916437;~oref=http%3A%2F%2Fvotre-maison.maisons-phenix.com%2F%3Futm_source%3Daffiliation%26utm_medium%3DAdventureConseil%26utm_campaign%3DAout2017_Affiliation_VotreMaison%26cc%3DMINATPHXWEBWEB120516000067? HTTP/1.1 
Host: 1234796.fls.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: FLC=CLb0qwEQ44TcYBja94HAASjsrkswp9fozQU; IDE=AHWqTUki7tPtjUoP1J9aUQUUqL0INeEWZF35YE_d-7ZnGiJFlQ3Ylogf8JJTbdg4

                                         
                                         216.58.211.134
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Thu, 14 Sep 2017 07:11:36 GMT
Expires: Thu, 14 Sep 2017 07:11:36 GMT
Cache-Control: private, max-age=0
Strict-Transport-Security: max-age=21600
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 690
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   690
Md5:    30c12f61a87cfe2557d8e9638a37fc30
Sha1:   6833384c5b77f8d88ae77b309cff7d16a968ece1
Sha256: 8f139e5d99a8dbbc860839ba82a637351655a246a8ec5bcf33ef0f8bae89c655
                                        
                                            GET /activityi;src=1234796;type=maiso327;cat=maiso942;ord=1413695638709;~oref=http%3A%2F%2Fvotre-maison.maisons-phenix.com%2F%3Futm_source%3Daffiliation%26utm_medium%3DAdventureConseil%26utm_campaign%3DAout2017_Affiliation_VotreMaison%26cc%3DMINATPHXWEBWEB120516000067? HTTP/1.1 
Host: 1234796.fls.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: FLC=CLb0qwEQ44TcYBja94HAASjsrkswp9fozQU; IDE=AHWqTUki7tPtjUoP1J9aUQUUqL0INeEWZF35YE_d-7ZnGiJFlQ3Ylogf8JJTbdg4

                                         
                                         216.58.211.134
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Thu, 14 Sep 2017 07:11:36 GMT
Expires: Thu, 14 Sep 2017 07:11:36 GMT
Cache-Control: private, max-age=0
Strict-Transport-Security: max-age=21600
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 1013
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1013
Md5:    ea139b678849085647c23fd0d26ef5f0
Sha1:   2e945bb861fea9bc28b60b4e975a6da97edc8fda
Sha256: aaaee225fda85cf90645305ef5266255f973442d62763a4f0b3c29ae54b65814
                                        
                                            GET /activityi;src=1234796;type=maiso327;cat=_mp_l0;ord=5546261462947;~oref=http%3A%2F%2Fvotre-maison.maisons-phenix.com%2F%3Futm_source%3Daffiliation%26utm_medium%3DAdventureConseil%26utm_campaign%3DAout2017_Affiliation_VotreMaison%26cc%3DMINATPHXWEBWEB120516000067? HTTP/1.1 
Host: 1234796.fls.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: FLC=CLb0qwEQ44TcYBja94HAASjsrkswp9fozQU; IDE=AHWqTUki7tPtjUoP1J9aUQUUqL0INeEWZF35YE_d-7ZnGiJFlQ3Ylogf8JJTbdg4

                                         
                                         216.58.211.134
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Thu, 14 Sep 2017 07:11:36 GMT
Expires: Thu, 14 Sep 2017 07:11:36 GMT
Cache-Control: private, max-age=0
Strict-Transport-Security: max-age=21600
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 177
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   177
Md5:    9393b28661a65a763699c108887882eb
Sha1:   c237ba6491e6fb9ca57da33dd9d048ca8e86cfda
Sha256: 2bdce28c6fb3cb210861d4aba734ab7aedfc979a8fa273512a61d8cf8afc78b0
                                        
                                            GET /u/7/p53471.js?zone=accueil&m_md5=MAIL HTTP/1.1 
Host: img.metaffiliation.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067

                                         
                                         192.229.220.129
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=86400
Date: Thu, 14 Sep 2017 07:11:36 GMT
Etag: "57d5ccdb-246d+gzip"
Last-Modified: Sun, 11 Sep 2016 21:30:03 GMT
Server: nginx
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 2765


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Sun Sep 11 23:30:03 2016
Size:   2765
Md5:    9b9d358f903c93aac742b2c53bbdc68c
Sha1:   d8b7b5667a08d2834cf8d489d9722f412363872c
Sha256: 5b1e2d2e411271a2219737de01f64193d78f1e345cfd0bc7e007b1b415c93761
                                        
                                            GET /91b33ee25dc9322c75366bfcec61abd0.js HTTP/1.1 
Host: try.abtasty.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067

                                         
                                         54.230.97.147
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 14 Sep 2017 07:11:36 GMT
Server: Apache
Last-Modified: Wed, 07 Jun 2017 09:18:53 GMT
Etag: "40cd2-5515b3990da93-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
CacheControl: private, max-age=0, no-cache, no-store
Pragma: no-cache
X-Cache: Miss from cloudfront
Via: 1.1 9d20a7bb63aef532ab86d12af354967a.cloudfront.net (CloudFront)
X-Amz-Cf-Id: zR_Oyi2z4En4HFcavcMzvQZuFtBn8MRtGhmXDeII8fiF4gPN_urP5Q==


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   73833
Md5:    4d6da4a1df46d8a729dac620547b34d8
Sha1:   aa2ad836cdfaedee439002d98f3fbc3c7180b080
Sha256: fc4fac4f58d4af6a89ac4f550e5a04d052c2763c3ef1d2689c84c1d33243c2a9
                                        
                                            GET /collect?v=1&_v=j61&a=884404144&t=pageview&_s=1&dl=http%3A%2F%2Fvotre-maison.maisons-phenix.com%2F%3Futm_source%3Daffiliation%26utm_medium%3DAdventureConseil%26utm_campaign%3DAout2017_Affiliation_VotreMaison%26cc%3DMINATPHXWEBWEB120516000067&dr=http%3A%2F%2Fr.email.lartace.fr%2Ftrack%2Fclick%2F1ue2nxpd9ilavf5rd&dp=%2F-%2F-%2F--%3Ff%3D-%23%2F%3Futm_source%3Daffiliation%26utm_medium%3DAdventureConseil%26utm_campaign%3DAout2017_Affiliation_VotreMaison%26cc%3DMINATPHXWEBWEB120516000067&ul=en-us&de=UTF-8&dt=Maisons%20Ph%C3%A9nix%20%7C%20Constructeur%20de%20maisons%20individuelles&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=YGBAgAQ~&jid=1606964388&gjid=569734226&cid=945342753.1505373097&tid=UA-1032763-2&_gid=1669689790.1505373097&gtm=GTM-NVK42H&cd1=-&z=2092809461 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Tue, 12 Sep 2017 11:51:02 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 156034


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /collect?v=1&_v=j61&a=884404144&t=pageview&_s=1&dl=http%3A%2F%2Fvotre-maison.maisons-phenix.com%2F%3Futm_source%3Daffiliation%26utm_medium%3DAdventureConseil%26utm_campaign%3DAout2017_Affiliation_VotreMaison%26cc%3DMINATPHXWEBWEB120516000067&dr=http%3A%2F%2Fr.email.lartace.fr%2Ftrack%2Fclick%2F1ue2nxpd9ilavf5rd&ul=en-us&de=UTF-8&dt=Maisons%20Ph%C3%A9nix%20%7C%20Constructeur%20de%20maisons%20individuelles&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=YGBAgAQ~&jid=1624227308&gjid=1841189850&cid=1002041323.1505373097&tid=UA-1032763-3&_gid=1136405724.1505373097&gtm=GTM-NVK42H&z=1183846442 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Tue, 12 Sep 2017 11:51:02 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 156034


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /s/nunito/v8/0rdItLTcOd8TSMl72RUU5w.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Nunito
Origin: http://votre-maison.maisons-phenix.com

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 23120
Date: Mon, 04 Sep 2017 16:18:37 GMT
Expires: Tue, 04 Sep 2018 16:18:37 GMT
Last-Modified: Thu, 08 Dec 2016 01:12:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 831179
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  data
Size:   23120
Md5:    fb5bcbd731c0d013fe9a00562c5773aa
Sha1:   1bd44e5b3f1b921830428545bc18b62fa3dbfc49
Sha256: a34eed2045288db5f2004b0edf51b47afeef161c6c6f778e18940eb3f3da08f7
                                        
                                            GET /quant.js HTTP/1.1 
Host: edge.quantserve.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1234796.fls.doubleclick.net/activityi;src=1234796;type=maiso327;cat=maiso942;ord=1413695638709;~oref=http%3A%2F%2Fvotre-maison.maisons-phenix.com%2F%3Futm_source%3Daffiliation%26utm_medium%3DAdventureConseil%26utm_campaign%3DAout2017_Affiliation_VotreMaison%26cc%3DMINATPHXWEBWEB120516000067?

                                         
                                         195.159.219.17
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: Apache
Last-Modified: Thu, 25 May 2017 20:26:55 GMT
Accept-Ranges: bytes
Content-Length: 5458
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: private, max-age=86400
Expires: Fri, 15 Sep 2017 07:11:37 GMT
Date: Thu, 14 Sep 2017 07:11:37 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, was "quant.min.js", from Unix, last modified: Fri Apr 28 00:50:56 2017
Size:   5458
Md5:    cce1e5cdade201139c4d113078d26d74
Sha1:   63afb7b77e7806f60aa2dc681933add1354fcea6
Sha256: bbcee65263cc43a1a863c95825c4ec7855acb416c4337ddd291796b4c1a8e4b6
                                        
                                            GET /r/collect?v=1&_v=j61&a=884404144&t=pageview&_s=1&dl=http%3A%2F%2Fvotre-maison.maisons-phenix.com%2F%3Futm_source%3Daffiliation%26utm_medium%3DAdventureConseil%26utm_campaign%3DAout2017_Affiliation_VotreMaison%26cc%3DMINATPHXWEBWEB120516000067&dr=http%3A%2F%2Fr.email.lartace.fr%2Ftrack%2Fclick%2F1ue2nxpd9ilavf5rd&ul=en-us&de=UTF-8&dt=Maisons%20Ph%C3%A9nix%20%7C%20Constructeur%20de%20maisons%20individuelles&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=YGDAAAQAI~&jid=1699509627&gjid=1434118751&cid=1002041323.1505373097&tid=UA-1032763-1&_gid=1136405724.1505373097&_r=1&gtm=GTM-NVK42H&z=2024764714 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067

                                         
                                         216.58.211.142
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-1032763-1&cid=1002041323.1505373097&jid=1699509627&_gid=1136405724.1505373097&gjid=1434118751&_v=j61&z=2024764714
Access-Control-Allow-Origin: *
Date: Thu, 14 Sep 2017 07:11:37 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 419


--- Additional Info ---
Magic:  HTML document text
Size:   419
Md5:    5e7f1852df0e3a99d7032c9ef151c8e5
Sha1:   345d4df9763e9810ef56aeef82f1f0f1aba9b484
Sha256: 47c4afe0d7e702c13bde997acd2c35c209171f78a6364d789b54ed9d6f4721d0
                                        
                                            GET /pixel?pixelID=92282&partnerID=377&clientID=7129&key=segment&returnType=js HTTP/1.1 
Host: segment-pixel.invitemedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1234796.fls.doubleclick.net/activityi;src=1234796;type=maiso327;cat=maiso942;ord=1413695638709;~oref=http%3A%2F%2Fvotre-maison.maisons-phenix.com%2F%3Futm_source%3Daffiliation%26utm_medium%3DAdventureConseil%26utm_campaign%3DAout2017_Affiliation_VotreMaison%26cc%3DMINATPHXWEBWEB120516000067?

                                         
                                         216.58.211.142
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: http://bid.g.doubleclick.net/xbbe/invitepixel/pixel?pixelID=92282&partnerID=377&clientID=7129&key=segment&returnType=js
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Thu, 14 Sep 2017 07:11:37 GMT
Server: sffe
Content-Length: 332
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  HTML document text
Size:   332
Md5:    a051522c649e861f8308653b747ba5bb
Sha1:   aec68d88b8d215ce83b3727a6bac3629d0a5bed4
Sha256: f772dc708ede7950642071371acd30f88e4488a62efe64361ee59cf89f59ee05
                                        
                                            GET /RealMedia/ads/adstream.track/1236450548?XE&epmAccountKey=1001&epmXTransKey=264&epmXtransStep=0&ProductCategory=&ItemDescription=&XE HTTP/1.1 
Host: deliv.leboncoin.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1234796.fls.doubleclick.net/activityi;src=1234796;type=maiso327;cat=maiso942;ord=1413695638709;~oref=http%3A%2F%2Fvotre-maison.maisons-phenix.com%2F%3Futm_source%3Daffiliation%26utm_medium%3DAdventureConseil%26utm_campaign%3DAout2017_Affiliation_VotreMaison%26cc%3DMINATPHXWEBWEB120516000067?

                                         
                                         193.164.197.100
HTTP/1.1 302 Found
Content-Type: text/plain; charset=UTF-8
                                        
Date: Thu, 14 Sep 2017 07:11:37 GMT
Server: Apache
Set-Cookie: OAX=TSiBe1m6K6kAA945; path=/; expires=Sat, 14-Sep-19 07:11:37 GMT; domain=.leboncoin.fr
P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml"
Content-Length: 0
Location: /RealMedia/ads/Creatives/default/empty.gif
Connection: close


--- Additional Info ---
                                        
                                            GET /hmx000000000147.js HTTP/1.1 
Host: u360.d-bi.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067

                                         
                                         52.212.200.139
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: public, max-age=60
Content-Encoding: gzip
Date: Thu, 14 Sep 2017 07:11:37 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
Server: hmxps
Set-Cookie: U360=rB8hX1m6K6lyWRzDUswjAg==; expires=Sat, 29-Sep-18 07:11:37 GMT; domain=d-bi.fr; path=/
X-MyName: 2ae4c7a1
Content-Length: 2936
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2936
Md5:    61af96ebe3bbbfdb3bb14d51e39bf12e
Sha1:   c285a47c7ddd7a0ab318ef9c3df43378e11be680
Sha256: ae02ff270faec3f9babeddc414b28600824982a32b2829e4a3c6e218de9a1549

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /bat.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067

                                         
                                         13.107.21.200
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: private,max-age=1800
Content-Length: 3324
Content-Encoding: gzip
Last-Modified: Thu, 17 Aug 2017 20:46:03 GMT
Accept-Ranges: bytes
Etag: "803718d79917d31:0"
Vary: Accept-Encoding
Set-Cookie: MUID=39D3FD2C6B39687E28B5F7D16F396B3A; domain=.bing.com; expires=Tue, 09-Oct-2018 07:11:37 GMT; path=/; MR=0; domain=bat.bing.com; expires=Tue, 13-Mar-2018 07:11:37 GMT; path=/; MUIDB=150256A9A19D611636BD5C54A079608C; path=/; httponly; expires=Tue, 09-Oct-2018 07:11:37 GMT
Access-Control-Allow-Origin: *
X-MSEdge-Ref: Ref A: A451EEEEF2FD4C60A7AEF45EF2A538E1 Ref B: STOSCHEDGE0213 Ref C: 2017-09-14T07:11:37Z
Date: Thu, 14 Sep 2017 07:11:36 GMT


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   3324
Md5:    326a73dc312cbde84e4e65cf992d8dad
Sha1:   bceed747d1aeb5efa89032a1c6fade86afe3f7f8
Sha256: 9f92080cd81b170998fc797c7293f1aa4312e3a853f048e083e65cd427bcf4de
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 14 Sep 2017 07:11:37 GMT
Expires: Mon, 18 Sep 2017 07:11:37 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    dc35ce6585bd8a46c974a6306d86cbdc
Sha1:   eddcfe636449a6e421cbb3182dee31f5069cb79b
Sha256: 7ddcced623f34af4cda856cbc1f87ea78cdf85d58884cd072a18d82f0ddd6449
                                        
                                            GET /xbbe/invitepixel/pixel?pixelID=92282&partnerID=377&clientID=7129&key=segment&returnType=js HTTP/1.1 
Host: bid.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1234796.fls.doubleclick.net/activityi;src=1234796;type=maiso327;cat=maiso942;ord=1413695638709;~oref=http%3A%2F%2Fvotre-maison.maisons-phenix.com%2F%3Futm_source%3Daffiliation%26utm_medium%3DAdventureConseil%26utm_campaign%3DAout2017_Affiliation_VotreMaison%26cc%3DMINATPHXWEBWEB120516000067?
Cookie: FLC=CLb0qwEQ44TcYBja94HAASjsrkswp9fozQU; IDE=AHWqTUki7tPtjUoP1J9aUQUUqL0INeEWZF35YE_d-7ZnGiJFlQ3Ylogf8JJTbdg4

                                         
                                         64.233.163.155
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Content-Disposition: inline
Cache-Control: no-cache
Pragma: no-cache
X-Content-Type-Options: nosniff
Date: Thu, 14 Sep 2017 07:11:37 GMT
Server: cafe
Content-Length: 257
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  ASCII text
Size:   257
Md5:    d8c0384152a5da95ab8a401d899bf39b
Sha1:   b96e79e6139201bcc2fe76b197004bc514d9765c
Sha256: f44fc477a68a8ad6263bfe6a92e3703e410b56e99424b73b19787135a0db00c9
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Date: Thu, 14 Sep 2017 07:11:37 GMT
Etag: "59b9c43d-1d7"
Expires: Wed, 20 Sep 2017 19:11:37 GMT
Last-Modified: Wed, 13 Sep 2017 23:50:21 GMT
Server: ECS (arn/46A2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    ab8f472580ed5e65b0715900ed056329
Sha1:   a5a769ef3784dc462d96412e778c8296e1c3de8d
Sha256: 7c330998f2c0be54bf934c0b7d1098fb0aad37aeb53a30a9c39f3a9d3a730ace
                                        
                                            GET /RealMedia/ads/Creatives/default/empty.gif HTTP/1.1 
Host: deliv.leboncoin.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1234796.fls.doubleclick.net/activityi;src=1234796;type=maiso327;cat=maiso942;ord=1413695638709;~oref=http%3A%2F%2Fvotre-maison.maisons-phenix.com%2F%3Futm_source%3Daffiliation%26utm_medium%3DAdventureConseil%26utm_campaign%3DAout2017_Affiliation_VotreMaison%26cc%3DMINATPHXWEBWEB120516000067?
Cookie: OAX=TSiBe1m6K6kAA945

                                         
                                         193.164.197.100
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 14 Sep 2017 07:11:37 GMT
Server: Apache
P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml"
Last-Modified: Mon, 07 Feb 2011 14:53:00 GMT
Etag: "314e1-2b-49bb263576b00"
Accept-Ranges: bytes
Content-Length: 43
Connection: close


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    fc94fb0c3ed8a8f909dbc7630a0987ff
Sha1:   56d45f8a17f5078a20af9962c992ca4678450765
Sha256: 2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Date: Thu, 14 Sep 2017 07:11:37 GMT
Etag: "59ba0aa2-1d7"
Expires: Wed, 20 Sep 2017 19:11:37 GMT
Last-Modified: Thu, 14 Sep 2017 04:50:42 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    ef1b0e3b70572778425e89f57e055435
Sha1:   4084a025f07982b78871aa0e12c50b2d42250046
Sha256: 7360877050cd18e67f80090ce103c7af89435b831bc1d222d4c271947900c80e
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: r.email.lartace.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=d5281324ee043585cf9416ce79d0083041505373093

                                         
                                         104.16.234.163
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Thu, 14 Sep 2017 07:11:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Sib-Server: SENDINBLUE-red2-2
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Server: cloudflare-nginx
CF-RAY: 39e1888452c442a9-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1023
Md5:    8c4c214b76236aa25bd4590296a4ad99
Sha1:   d89a4327b0b20487513b25f812cd085db99eea1b
Sha256: 944cb0ce9d9618f6ede7fbd85eef6c647e7ad9aa83bcb626fba3d95f3274cee2
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Date: Thu, 14 Sep 2017 07:11:37 GMT
Etag: "59b982a4-1d7"
Expires: Wed, 20 Sep 2017 19:11:37 GMT
Last-Modified: Wed, 13 Sep 2017 19:10:28 GMT
Server: ECS (arn/4692)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    18492700c77662b66527f2c222cad734
Sha1:   5c40c52383286f6147548388befab0bc79ea73ca
Sha256: c3f313c30e8c11e09a19d0030bd5df6b3c791b08e146b15968b5ae5742cdc1a2
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Date: Thu, 14 Sep 2017 07:11:37 GMT
Etag: "59b9d002-1d7"
Expires: Wed, 20 Sep 2017 19:11:37 GMT
Last-Modified: Thu, 14 Sep 2017 00:40:34 GMT
Server: ECS (arn/4694)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    8563932a5e47265919a749b6f7e5317d
Sha1:   791f09e3c4b2f513bd741b19642cb7aae03f424e
Sha256: f70dabd291705c8b282803a19ceb7b90d14c8c63ec1e08efdac1085d112448b3
                                        
                                            GET /js/advertiserv2/adperf_conversion.js HTTP/1.1 
Host: cstatic.weborama.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1234796.fls.doubleclick.net/activityi;src=1234796;type=maiso327;cat=maiso016;ord=4552635916437;~oref=http%3A%2F%2Fvotre-maison.maisons-phenix.com%2F%3Futm_source%3Daffiliation%26utm_medium%3DAdventureConseil%26utm_campaign%3DAout2017_Affiliation_VotreMaison%26cc%3DMINATPHXWEBWEB120516000067?

                                         
                                         93.184.221.133
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Content-Encoding: gzip
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cache-Control: max-age=604800
Date: Thu, 14 Sep 2017 07:11:37 GMT
Etag: "3918322446"
Expires: Thu, 21 Sep 2017 07:11:37 GMT
Last-Modified: Tue, 29 Mar 2016 15:54:19 GMT
P3P: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM"
Server: ECAcc (arn/45D9)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 1514


--- Additional Info ---
Magic:  gzip compressed data
Size:   1514
Md5:    4b0695f4af7639c972898c91f9918410
Sha1:   5733e4168a6cfef9d36ea8572d856179c6f5acfd
Sha256: 15c3a3b6cb67ec9133ae5e9567c84969d46ba0a33e4ca2a5ef1e063a0c6f6bf2
                                        
                                            GET /r/collect?t=dc&aip=1&_r=3&v=1&_v=j61&tid=UA-1032763-2&cid=945342753.1505373097&jid=1606964388&gjid=569734226&_gid=1669689790.1505373097&_u=YGBAgAQ~&z=1013013418 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: FLC=CLb0qwEQ44TcYBja94HAASjsrkswp9fozQU; IDE=AHWqTUki7tPtjUoP1J9aUQUUqL0INeEWZF35YE_d-7ZnGiJFlQ3Ylogf8JJTbdg4

                                         
                                         64.233.163.157
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Thu, 14 Sep 2017 07:11:37 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-1032763-1&cid=1002041323.1505373097&jid=1699509627&_gid=1136405724.1505373097&gjid=1434118751&_v=j61&z=2024764714 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: FLC=CLb0qwEQ44TcYBja94HAASjsrkswp9fozQU; IDE=AHWqTUki7tPtjUoP1J9aUQUUqL0INeEWZF35YE_d-7ZnGiJFlQ3Ylogf8JJTbdg4

                                         
                                         64.233.163.157
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Thu, 14 Sep 2017 07:11:37 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            POST / HTTP/1.1 
Host: gn.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1419
Content-Transfer-Encoding: binary
Cache-Control: max-age=480802, public, no-transform, must-revalidate
Last-Modified: Tue, 12 Sep 2017 20:43:52 GMT
Expires: Tue, 19 Sep 2017 20:43:52 GMT
Date: Thu, 14 Sep 2017 07:11:37 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1419
Md5:    9abe338584b7390fe4411bc4e69ee98a
Sha1:   6623e0659442cc0762380ccadd4c480ab4698bb5
Sha256: 54d017124658f7eed12a94f7d6e93d7827b31a9fc5c9ac7adbe2d5d198981265
                                        
                                            GET /r/collect?t=dc&aip=1&_r=3&v=1&_v=j61&tid=UA-1032763-3&cid=1002041323.1505373097&jid=1624227308&gjid=1841189850&_gid=1136405724.1505373097&_u=YGBAgAQ~&z=2013993264 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: FLC=CLb0qwEQ44TcYBja94HAASjsrkswp9fozQU; IDE=AHWqTUki7tPtjUoP1J9aUQUUqL0INeEWZF35YE_d-7ZnGiJFlQ3Ylogf8JJTbdg4

                                         
                                         64.233.163.157
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Thu, 14 Sep 2017 07:11:37 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /fcgi-bin/dispatch.fcgi?a.A=co&a.si=2049&a.cp=4&a.ct=a&a.re=0.0&a.isc=0&da=1505380297&g.ru=undefined&g.pu=http%3A//1234796.fls.doubleclick.net/activityi%3Bsrc%3D1234796%3Btype%3Dmaiso327%3Bcat%3Dmaiso016%3Bord%3D4552635916437%3B%7Eoref%3Dhttp%253A%252F%252Fvotre-maison.maisons-phenix.com%252F%253Futm_source%253Daffiliation%2526utm_medium%253DAdventureConseil%2526utm_campaign%253DAout2017_Affiliation_VotreMaison%2526cc%253DMINATPHXWEBWEB120516000067%3F&a.opt=N1%3A0%2CN2%3A0 HTTP/1.1 
Host: geoxiafr.solution.weborama.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1234796.fls.doubleclick.net/activityi;src=1234796;type=maiso327;cat=maiso016;ord=4552635916437;~oref=http%3A%2F%2Fvotre-maison.maisons-phenix.com%2F%3Futm_source%3Daffiliation%26utm_medium%3DAdventureConseil%26utm_campaign%3DAout2017_Affiliation_VotreMaison%26cc%3DMINATPHXWEBWEB120516000067?

                                         
                                         195.54.48.228
HTTP/1.1 302 Found
                                        
Date: Thu, 14 Sep 2017 07:11:37 GMT
Server: Apache
Access-Control-Allow-Origin: *
P3P: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM"
Last-Modified: Thu, 14 Sep 2017 07:11:37 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Set-Cookie: AFFICHE_W=GOCbGcZbwgAY23; path=/; expires=Sat, 16-Dec-2017 07:11:37 GMT; domain=.weborama.fr
Pragma: no-cache
Expires: Tue, 03 Jul 2001 06:00:00 GMT
Location: http://geoxiafr.solution.weborama.fr/fcgi-bin/dispatch.fcgi?g.bo=OK&g.rn=215884&a.A=co&a.si=2049&a.cp=4&a.ct=a&a.re=0.0&a.isc=0&da=1505380297&g.ru=undefined&g.pu=http%3A//1234796.fls.doubleclick.net/activityi%3Bsrc%3D1234796%3Btype%3Dmaiso327%3Bcat%3Dmaiso016%3Bord%3D4552635916437%3B%7Eoref%3Dhttp%253A%252F%252Fvotre-maison.maisons-phenix.com%252F%253Futm_source%253Daffiliation%2526utm_medium%253DAdventureConseil%2526utm_campaign%253DAout2017_Affiliation_VotreMaison%2526cc%253DMINATPHXWEBWEB120516000067%3F&a.opt=N1%3A0%2CN2%3A0
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
                                        
                                            GET /pagead/viewthroughconversion/1059507057/?random=1505373096941&cv=8&fst=1505373096941&num=1&fmt=3&label=ZMsfCJPkjwIQ8Zab-QM&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=2&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&frm=0&url=http%3A%2F%2Fvotre-maison.maisons-phenix.com%2F%3Futm_source%3Daffiliation%26utm_medium%3DAdventureConseil%26utm_campaign%3DAout2017_Affiliation_VotreMaison%26cc%3DMINATPHXWEBWEB120516000067&ref=http%3A%2F%2Fr.email.lartace.fr%2Ftrack%2Fclick%2F1ue2nxpd9ilavf5rd&tiba=Maisons%20Ph%C3%A9nix%20%7C%20Constructeur%20de%20maisons%20individuelles&async=1 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067
Cookie: FLC=CLb0qwEQ44TcYBja94HAASjsrkswp9fozQU; IDE=AHWqTUki7tPtjUoP1J9aUQUUqL0INeEWZF35YE_d-7ZnGiJFlQ3Ylogf8JJTbdg4

                                         
                                         216.58.209.98
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Thu, 14 Sep 2017 07:11:37 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.com/ads/user-lists/1059507057/?random=1505373096941&cv=8&fst=1505372400000&num=1&fmt=3&label=ZMsfCJPkjwIQ8Zab-QM&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=2&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&frm=0&url=http%3A%2F%2Fvotre-maison.maisons-phenix.com%2F%3Futm_source%3Daffiliation%26utm_medium%3DAdventureConseil%26utm_campaign%3DAout2017_Affiliation_VotreMaison%26cc%3DMINATPHXWEBWEB120516000067&ref=http%3A%2F%2Fr.email.lartace.fr%2Ftrack%2Fclick%2F1ue2nxpd9ilavf5rd&tiba=Maisons%20Ph%C3%A9nix%20%7C%20Constructeur%20de%20maisons%20individuelles&async=1&cdct=2&is_vtc=1&random=3202126505
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /seg?add=4306801&t=2 HTTP/1.1 
Host: secure.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1234796.fls.doubleclick.net/activityi;src=1234796;type=maiso327;cat=maiso016;ord=4552635916437;~oref=http%3A%2F%2Fvotre-maison.maisons-phenix.com%2F%3Futm_source%3Daffiliation%26utm_medium%3DAdventureConseil%26utm_campaign%3DAout2017_Affiliation_VotreMaison%26cc%3DMINATPHXWEBWEB120516000067?

                                         
                                         185.33.223.216
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.11.5
Date: Thu, 14 Sep 2017 07:11:39 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://secure.adnxs.com/bounce?%2Fseg%3Fadd%3D4306801%26t%3D2
AN-X-Request-Uuid: 4036a36f-5acd-44a6-b796-7deff3b85f3d
Set-Cookie: sess=1; Path=/; Max-Age=86400; Expires=Fri, 15-Sep-2017 07:11:39 GMT; Domain=.adnxs.com; HttpOnly uuid2=2307461085240524446; Path=/; Max-Age=7776000; Expires=Wed, 13-Dec-2017 07:11:39 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 312.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.222.58:80


--- Additional Info ---
                                        
                                            GET /fcgi-bin/dispatch.fcgi?g.bo=OK&g.rn=215884&a.A=co&a.si=2049&a.cp=4&a.ct=a&a.re=0.0&a.isc=0&da=1505380297&g.ru=undefined&g.pu=http%3A//1234796.fls.doubleclick.net/activityi%3Bsrc%3D1234796%3Btype%3Dmaiso327%3Bcat%3Dmaiso016%3Bord%3D4552635916437%3B%7Eoref%3Dhttp%253A%252F%252Fvotre-maison.maisons-phenix.com%252F%253Futm_source%253Daffiliation%2526utm_medium%253DAdventureConseil%2526utm_campaign%253DAout2017_Affiliation_VotreMaison%2526cc%253DMINATPHXWEBWEB120516000067%3F&a.opt=N1%3A0%2CN2%3A0 HTTP/1.1 
Host: geoxiafr.solution.weborama.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1234796.fls.doubleclick.net/activityi;src=1234796;type=maiso327;cat=maiso016;ord=4552635916437;~oref=http%3A%2F%2Fvotre-maison.maisons-phenix.com%2F%3Futm_source%3Daffiliation%26utm_medium%3DAdventureConseil%26utm_campaign%3DAout2017_Affiliation_VotreMaison%26cc%3DMINATPHXWEBWEB120516000067?
Cookie: AFFICHE_W=GOCbGcZbwgAY23

                                         
                                         195.54.48.228
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Thu, 14 Sep 2017 07:11:37 GMT
Server: Apache
Access-Control-Allow-Origin: *
P3P: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM"
Last-Modified: Thu, 14 Sep 2017 07:11:37 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Set-Cookie: AFFICHE_W=GOCbGcZbwgAY23; path=/; expires=Sat, 16-Dec-2017 07:11:37 GMT; domain=.weborama.fr
Pragma: no-cache
Expires: Tue, 03 Jul 2001 06:00:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   25
Md5:    363f411ba212d4d1ccf7856f856145e9
Sha1:   08331057577f273187dd15e7c6f57937835e0aff
Sha256: c50b40612adfdbf2e228758746fc7927cf440cb9bb5a8280c00d7946632a1943
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 14 Sep 2017 07:11:37 GMT
Expires: Mon, 18 Sep 2017 07:11:37 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c1884309a5ab371d497ad5a91e8bc1bc
Sha1:   9570ddd00fb6f97b4987aeb91ca93b5399a98086
Sha256: 50467a5bd0f78b42cdcae496fc66a9ba488652362e9fb6c8935cf809550b5d2c
                                        
                                            GET /en_US/fbevents.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067

                                         
                                         157.240.2.25
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
X-Frame-Options: DENY
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://connect.facebook.net
Access-Control-Expose-Headers: X-FB-Debug, X-Loader-Length
Pragma: public
Vary: Origin, Accept-Encoding
access-control-allow-method: OPTIONS
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Strict-Transport-Security: max-age=15552000; preload; includeSubDomains
X-Content-Type-Options: nosniff
Cache-Control: public, max-age=1200
Content-Encoding: gzip
X-FB-Debug: o6DPmvzdbzy25kBPSSzWEHffeVAIFjtEglG0R6F3K07NLi4FlS1MP9/HCaCL2o/TQLbXhS86QbTRYK071G6V4w==
Date: Thu, 14 Sep 2017 07:11:37 GMT
Connection: keep-alive
Content-Length: 11294


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   11294
Md5:    7c0039286ccddb2d8bc53784ca73f44f
Sha1:   78421e1fa11cb40c96128cb6f6c5af24042351a8
Sha256: 2d6ca26b7bf0f12ead527b7fe207ba6f9630c39298c2f4e3c68d59a030f1770e
                                        
                                            GET /bounce?%2Fseg%3Fadd%3D4306801%26t%3D2 HTTP/1.1 
Host: secure.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1234796.fls.doubleclick.net/activityi;src=1234796;type=maiso327;cat=maiso016;ord=4552635916437;~oref=http%3A%2F%2Fvotre-maison.maisons-phenix.com%2F%3Futm_source%3Daffiliation%26utm_medium%3DAdventureConseil%26utm_campaign%3DAout2017_Affiliation_VotreMaison%26cc%3DMINATPHXWEBWEB120516000067?
Cookie: sess=1; uuid2=2307461085240524446

                                         
                                         185.33.223.216
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.11.5
Date: Thu, 14 Sep 2017 07:11:39 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_sc&uid=2307461085240524446
AN-X-Request-Uuid: 1952c639-6d4a-42c1-bcb0-35134397deee
Set-Cookie: anj=dTM7k!M4.oE:2jUF']wIg2E>>m<W*(!]tbPB*SQMUkEiX)J1LFu'=/9Aj2^W*c*_[*b_[''%P^p; Path=/; Max-Age=7776000; Expires=Wed, 13-Dec-2017 07:11:39 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Fri, 15-Sep-2017 07:11:39 GMT; Domain=.adnxs.com; HttpOnly uuid2=2307461085240524446; Path=/; Max-Age=7776000; Expires=Wed, 13-Dec-2017 07:11:39 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 312.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.223.86:80


--- Additional Info ---
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 14 Sep 2017 07:11:38 GMT
Expires: Mon, 18 Sep 2017 07:11:38 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   859
Md5:    fea6f992df69151495c06dbc1cc02de3
Sha1:   a128c69d868acfae1660f89b5221aff084968d50
Sha256: f3c295a9f3d13f7c957089b7115c31d6e48cf7dfb64f051a3c8ebcb94e3241c2
                                        
                                            GET /pixel?google_nid=appnexus&google_cm&google_sc&uid=2307461085240524446 HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1234796.fls.doubleclick.net/activityi;src=1234796;type=maiso327;cat=maiso016;ord=4552635916437;~oref=http%3A%2F%2Fvotre-maison.maisons-phenix.com%2F%3Futm_source%3Daffiliation%26utm_medium%3DAdventureConseil%26utm_campaign%3DAout2017_Affiliation_VotreMaison%26cc%3DMINATPHXWEBWEB120516000067?
Cookie: FLC=CLb0qwEQ44TcYBja94HAASjsrkswp9fozQU; IDE=AHWqTUki7tPtjUoP1J9aUQUUqL0INeEWZF35YE_d-7ZnGiJFlQ3Ylogf8JJTbdg4

                                         
                                         216.58.209.98
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://ib.adnxs.com/setuid?entity=101&uid=2307461085240524446&code=CAESECqI34mszUvdwgqDfRyjF6E&google_cver=1
Date: Thu, 14 Sep 2017 07:11:38 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 318
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   318
Md5:    3225b30fbbdea44378a00710707dfaa0
Sha1:   f9643cbeafcc7ce833205f399dde0d24e7e3a294
Sha256: 7573a7a9af66b9786256780a902302d9bfd954f15636aedcd674e9243ad2cad6
                                        
                                            GET /ads/user-lists/1059507057/?random=1505373096941&cv=8&fst=1505372400000&num=1&fmt=3&label=ZMsfCJPkjwIQ8Zab-QM&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=2&u_tz=120&u_java=true&u_nplug=10&u_nmime=92&frm=0&url=http%3A%2F%2Fvotre-maison.maisons-phenix.com%2F%3Futm_source%3Daffiliation%26utm_medium%3DAdventureConseil%26utm_campaign%3DAout2017_Affiliation_VotreMaison%26cc%3DMINATPHXWEBWEB120516000067&ref=http%3A%2F%2Fr.email.lartace.fr%2Ftrack%2Fclick%2F1ue2nxpd9ilavf5rd&tiba=Maisons%20Ph%C3%A9nix%20%7C%20Constructeur%20de%20maisons%20individuelles&async=1&cdct=2&is_vtc=1&random=3202126505&ipr=y&ulfeg=n HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 14 Sep 2017 07:11:38 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Server: adclick_server
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST / HTTP/1.1 
Host: rc.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1034
Content-Transfer-Encoding: binary
Cache-Control: max-age=486830, public, no-transform, must-revalidate
Last-Modified: Tue, 12 Sep 2017 22:22:43 GMT
Expires: Tue, 19 Sep 2017 22:22:43 GMT
Date: Thu, 14 Sep 2017 07:11:38 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1034
Md5:    199dfcc77903b6f98ceb0c5b488df032
Sha1:   2ef5f0a814277ad220d30f64c095692fd1f595b4
Sha256: 68960cf34558d007a1095478c814582b53881d8c2c868566edb32d75edc5fbc6
                                        
                                            GET /setuid?entity=101&uid=2307461085240524446&code=CAESECqI34mszUvdwgqDfRyjF6E&google_cver=1 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1234796.fls.doubleclick.net/activityi;src=1234796;type=maiso327;cat=maiso016;ord=4552635916437;~oref=http%3A%2F%2Fvotre-maison.maisons-phenix.com%2F%3Futm_source%3Daffiliation%26utm_medium%3DAdventureConseil%26utm_campaign%3DAout2017_Affiliation_VotreMaison%26cc%3DMINATPHXWEBWEB120516000067?
Cookie: sess=1; uuid2=2307461085240524446; anj=dTM7k!M4.oE:2jUF']wIg2E>>m<W*(!]tbPB*SQMUkEiX)J1LFu'=/9Aj2^W*c*_[*b_[''%P^p

                                         
                                         185.33.223.206
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.11.10
Date: Thu, 14 Sep 2017 07:11:40 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: 38b961aa-75e9-407d-9955-e26b1eaa5dde
Set-Cookie: anj=dTM7k!M4.FDYRWSF']wIg2E>>m<W*(!]tb$8iYXJTtixu:Sd'fFpOwkCwzQ]>PkYHnn>E5Tp.L8UfIJ125tDiNQq'iW:Vxk'6mCJ6$Hh<!_4uw^t2q1; Path=/; Max-Age=7776000; Expires=Wed, 13-Dec-2017 07:11:40 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Fri, 15-Sep-2017 07:11:40 GMT; Domain=.adnxs.com; HttpOnly uuid2=2307461085240524446; Path=/; Max-Age=7776000; Expires=Wed, 13-Dec-2017 07:11:40 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 301.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.223.239:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3; _ga2=GA1.3.945342753.1505373097; _ga2_gid=GA1.3.1669689790.1505373097; _dc_gtm_UA-1032763-2=1; _ga=GA1.3.1002041323.1505373097; _gid=GA1.3.1136405724.1505373097; _dc_gtm_UA-1032763-3=1; _gat_UA-1032763-1=1; _uetsid=_uetf4121866

                                         
                                         87.252.12.19
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 04 Jan 2017 13:07:05 GMT
Etag: W/"404-54544762690c8"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   609
Md5:    43085b65b87b268bd65e85eb67a51308
Sha1:   0fd6dcdf62593c436b68073c6e06d52129b501c0
Sha256: cdc147bb4710914a4c342a7987473512e0ebf618d1328a023423d6e26bed7ee4
                                        
                                            GET /aff.php?maff=S4D0DF1010&r=1505373098398&altid=MAIL HTTP/1.1 
Host: action.metaffiliation.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://votre-maison.maisons-phenix.com/?utm_source=affiliation&utm_medium=AdventureConseil&utm_campaign=Aout2017_Affiliation_VotreMaison&cc=MINATPHXWEBWEB120516000067

                                         
                                         95.131.136.1
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:38 GMT
Transfer-Encoding: chunked
Connection: close
X-TRK-SRV: 23
X-TRK-PROC: 53471
P3P: CP="NOI DSP COR CUR ADMa PSAa OUR IND NAV COM",policyref="http://www.netaffiliation.com/w3c/p3p.xml"
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Thu, 14 Sep 2017 07:11:38 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-TRK-DECISION: 7
X-TRK-D: 0.0014569759368896


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: votre-maison.maisons-phenix.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PHPSESSID=1v50o181kbb5ptc6a6iitidff3; _ga2=GA1.3.945342753.1505373097; _ga2_gid=GA1.3.1669689790.1505373097; _dc_gtm_UA-1032763-2=1; _ga=GA1.3.1002041323.1505373097; _gid=GA1.3.1136405724.1505373097; _dc_gtm_UA-1032763-3=1; _gat_UA-1032763-1=1; _uetsid=_uetf4121866

                                         
                                         87.252.12.19
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx
Date: Thu, 14 Sep 2017 07:11:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 04 Jan 2017 13:07:05 GMT
Etag: W/"404-54544762690c8"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   609
Md5:    43085b65b87b268bd65e85eb67a51308
Sha1:   0fd6dcdf62593c436b68073c6e06d52129b501c0
Sha256: cdc147bb4710914a4c342a7987473512e0ebf618d1328a023423d6e26bed7ee4