Overview

URL wetter.zernetsch.de/
IP82.165.72.61
ASNAS8560 1&1 Internet AG
Location Germany
Report completed2017-08-13 06:10:01 CEST
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2017-08-13 2 u360.d-bi.fr/hmx000000000163.js Malware
2017-08-13 2 u360.d-bi.fr/e.js Malware
2017-08-13 2 u360.d-bi.fr/e.js Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 82.165.72.61

Date UQ / IDS / BL URL IP
2017-08-16 18:58:37 +0200
0 - 1 - 0 ihk-aschaffenburg.de/ 82.165.72.61
2017-08-16 18:06:36 +0200
0 - 0 - 3 wetter.zernetsch.de/ 82.165.72.61
2017-08-12 06:23:47 +0200
0 - 0 - 3 wetter.zernetsch.de/ 82.165.72.61
2017-08-11 16:20:31 +0200
0 - 0 - 3 wetter.zernetsch.de/ 82.165.72.61
2017-08-10 21:53:53 +0200
0 - 1 - 0 ihk-aschaffenburg.de/ 82.165.72.61
2017-08-10 08:02:36 +0200
0 - 0 - 3 wetter.zernetsch.de/ 82.165.72.61
2017-08-10 05:53:32 +0200
0 - 1 - 0 ihk-aschaffenburg.de/ 82.165.72.61
2017-08-10 03:54:20 +0200
0 - 1 - 0 ihk-aschaffenburg.de/ 82.165.72.61
2017-08-09 20:01:40 +0200
0 - 0 - 3 wetter.zernetsch.de/ 82.165.72.61
2017-08-09 09:53:11 +0200
0 - 1 - 0 ihk-aschaffenburg.de/ 82.165.72.61

Last 10 reports on ASN: AS8560 1&1 Internet AG

Date UQ / IDS / BL URL IP
2017-08-19 03:49:28 +0200
0 - 2 - 0 old.fttpintores.com/ 82.165.141.26
2017-08-19 03:46:07 +0200
0 - 1 - 0 casabrancaimoveisbetim.com.br/ 74.208.88.113
2017-08-19 03:40:29 +0200
0 - 0 - 2 cochesvigo.es/ 217.160.78.167
2017-08-19 03:40:17 +0200
0 - 3 - 0 codeofsilence.co.uk/ 109.228.30.176
2017-08-19 03:37:54 +0200
0 - 0 - 13 hotelmontuori.com/ 212.227.248.156
2017-08-19 03:32:13 +0200
0 - 0 - 16 carlosbusto.com/ 87.106.5.104
2017-08-19 03:28:07 +0200
0 - 0 - 7 bmlc.org.uk/ 87.106.249.93
2017-08-19 03:24:18 +0200
0 - 0 - 2 appleairdrop.com/ 74.208.236.14
2017-08-19 03:20:42 +0200
0 - 0 - 6 rotulosromo.es/ 82.165.135.55
2017-08-19 03:18:23 +0200
0 - 0 - 1 www.androidcreator.com/apk/app272890.apk 82.165.61.18

No other reports on domain: .



JavaScript

Executed Scripts (30)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (125)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: wetter.zernetsch.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         82.165.72.61
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Sun, 13 Aug 2017 04:09:25 GMT
Server: Apache
Location: https://wetter.zernetsch.de/
Content-Length: 236
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   236
Md5:    c4e9845e315c7e1d7b8622f9193d3e72
Sha1:   db9a0a3507fceff46144e55afdaed199a18a7013
Sha256: 1a661f50b337fe84e162d3d7c0361c712e16003e23497edc9461cbc0dcafafd6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         195.159.219.18
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "EAA0A6276D7796CCF7575F87B717CDC6E9F0D78C3A67AAE822947BD1296BB2EC"
Last-Modified: Thu, 10 Aug 2017 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=43200
Expires: Sun, 13 Aug 2017 16:09:25 GMT
Date: Sun, 13 Aug 2017 04:09:25 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    f0ab73e80594be2f82d295a759c04982
Sha1:   34fdc2760390c97f79f487a20de108794f0ad446
Sha256: eaa0a6276d7796ccf7575f87b717cdc6e9f0d78c3a67aae822947bd1296bb2ec
                                        
                                            POST / HTTP/1.1 
Host: isrg.trustid.ocsp.identrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         192.35.177.195
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 13 Aug 2017 04:09:26 GMT
Content-Transfer-Encoding: Binary
Last-Modified: Sat, 12 Aug 2017 20:05:40 GMT
Etag: "42bff78f27f1ae4edfa44c5c70dfa7c1338b88c4"
Expires: Sun, 13 Aug 2017 20:05:40 GMT
Cache-Control: max-age=43200,public,no-transform,must-revalidate
Content-Length: 1398
Connection: close


--- Additional Info ---
Magic:  data
Size:   1398
Md5:    936ed1d357fe9241698a386db8681884
Sha1:   42bff78f27f1ae4edfa44c5c70dfa7c1338b88c4
Sha256: b13e8bd61228d3541c5e9beccc9455f8052f9a885557538bf2b9e1954922f10d
                                        
                                            GET / HTTP/1.1 
Host: wetter.zernetsch.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         82.165.72.61
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Sun, 13 Aug 2017 04:09:26 GMT
Server: Apache
X-Powered-By: PHP/7.0.22, PleskLin
Location: https://my.netatmo.com
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         72.167.239.239
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 13 Aug 2017 04:09:26 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=122051, public, no-transform, must-revalidate
Last-Modified: Sun, 13 Aug 2017 03:50:41 GMT
Expires: Mon, 14 Aug 2017 15:50:41 GMT
Etag: "fa8281611a43cabbd460b471fb4a54543410cd8f"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1776
Connection: close


--- Additional Info ---
Magic:  data
Size:   1776
Md5:    ea321ac2a7362f01ecb63ca0ada197a1
Sha1:   fa8281611a43cabbd460b471fb4a54543410cd8f
Sha256: 289690d131c895c4adfbedf0199dc2f9b961dba0f339236ab425707ac92552f2
                                        
                                            GET / HTTP/1.1 
Host: my.netatmo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         195.154.179.238
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 13 Aug 2017 04:09:26 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: netatmocomci_csrf_cookie_na=7d084e6be4ebced00e9712c00c589a1c; expires=Sun, 13-Aug-2017 16:09:26 GMT; Max-Age=43200; path=/; domain=.netatmo.com; secure; httponly
Cache-Control: no-cache, must-revalidate
Expires: 0
Location: https://auth.netatmo.com/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Vary: User-Agent
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=10886400; includeSubDomains
X-Powered-By: Netatmo


--- Additional Info ---
                                        
                                            GET /access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F HTTP/1.1 
Host: auth.netatmo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: netatmocomci_csrf_cookie_na=7d084e6be4ebced00e9712c00c589a1c

                                         
                                         195.154.172.147
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 13 Aug 2017 04:09:27 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: netatmocomci_csrf_cookie_na=7d084e6be4ebced00e9712c00c589a1c; expires=Sun, 13-Aug-2017 16:09:27 GMT; Max-Age=43200; path=/; domain=.netatmo.com; httponly
Location: /en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Vary: User-Agent
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=10886400; includeSubDomains
X-Powered-By: Netatmo


--- Additional Info ---
                                        
                                            GET /en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F HTTP/1.1 
Host: auth.netatmo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: netatmocomci_csrf_cookie_na=7d084e6be4ebced00e9712c00c589a1c

                                         
                                         195.154.172.147
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 13 Aug 2017 04:09:27 GMT
Content-Length: 5899
Connection: keep-alive
Set-Cookie: netatmocomci_csrf_cookie_na=7d084e6be4ebced00e9712c00c589a1c; expires=Sun, 13-Aug-2017 16:09:27 GMT; Max-Age=43200; path=/; domain=.netatmo.com; httponly netatmocomlocale=en-US; path=/; domain=.netatmo.com netatmocomask_application=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.netatmo.com; httponly netatmocomask_application_scope=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.netatmo.com; httponly netatmocomrefresh_token=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.auth.netatmo.com; httponly netatmocomaccess_token=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.netatmo.com; httponly netatmocomlogin=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.netatmo.com; httponly
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=10886400; includeSubDomains
X-Powered-By: Netatmo


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5899
Md5:    49f70eb8f63b5ad05f3fe4f30926e401
Sha1:   15892be00194d49360f171ec97132d50cae54d1b
Sha256: 9b8a94a75b57634a16fd374d406c35d6a816dc5b8720648b0fd6ce84f33c3f56
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 106
Content-Type: application/ocsp-request

                                         
                                         72.167.239.239
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 13 Aug 2017 04:09:27 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=120563, public, no-transform, must-revalidate
Last-Modified: Sun, 13 Aug 2017 03:24:36 GMT
Expires: Mon, 14 Aug 2017 15:24:36 GMT
Etag: "730860bbf8f95f86e32e20ef8ef9f045b93d6cf0"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1775
Connection: close


--- Additional Info ---
Magic:  data
Size:   1775
Md5:    937a197ef7a2035d6319cd3edbd14967
Sha1:   730860bbf8f95f86e32e20ef8ef9f045b93d6cf0
Sha256: 4f580a31d2081785f5784155d8bf3980c670f45583275a74b4713470e55045ce
                                        
                                            GET /dist/css/template.css?v=94 HTTP/1.1 
Host: auth.netatmo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: netatmocomci_csrf_cookie_na=7d084e6be4ebced00e9712c00c589a1c; netatmocomlocale=en-US

                                         
                                         195.154.172.147
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sun, 13 Aug 2017 04:09:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Jul 2017 11:32:30 GMT
Etag: "a828ab-a4121-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=604800
Expires: Sun, 20 Aug 2017 04:09:27 GMT
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=10886400; includeSubDomains
X-Powered-By: Netatmo


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   72753
Md5:    3a2a3f5ca6a3fd0da2599aa0789bd3cc
Sha1:   8f37e28d09dced9ba76b3c77ccf18bd38d1844ea
Sha256: 7f84e1920b438c3892edca1df383cc1113757023f52161de53f75cff05239116
                                        
                                            GET /count/2f1fe6 HTTP/1.1 
Host: hello.myfonts.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         13.33.97.28
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 2
Connection: keep-alive
Date: Wed, 12 Jul 2017 16:54:09 GMT
Last-Modified: Mon, 31 Mar 2014 08:42:41 GMT
Etag: "81051bcc2cf1bedf378224b0a93e2877"
Cache-Control: max-age=0,s-maxage=21600
Accept-Ranges: bytes
Server: AmazonS3
Age: 11255
X-Cache: Error from cloudfront
Via: 1.1 532af41a1b336975aee3f1ec47beb4ea.cloudfront.net (CloudFront)
X-Amz-Cf-Id: cUJiuSs2LTuboJeANmjJCLqwamr-v9qGWs8D4fpdD-4dfvo4omWi5g==


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   2
Md5:    81051bcc2cf1bedf378224b0a93e2877
Sha1:   ba8ab5a0280b953aa97435ff8946cbcbb2755a27
Sha256: 7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
                                        
                                            GET /images/favicons/favicon.ico?v=94 HTTP/1.1 
Host: auth.netatmo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: netatmocomci_csrf_cookie_na=7d084e6be4ebced00e9712c00c589a1c; netatmocomlocale=en-US

                                         
                                         195.154.172.147
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Server: nginx
Date: Sun, 13 Aug 2017 04:09:27 GMT
Content-Length: 137
Connection: keep-alive
Last-Modified: Mon, 26 Jun 2017 13:25:35 GMT
Etag: "aa1f27-13e-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=15552000
Expires: Fri, 09 Feb 2018 04:09:27 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=10886400; includeSubDomains
X-Powered-By: Netatmo


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   137
Md5:    82c2244e46b07651dfd8f561a8833383
Sha1:   b06d13d9f0ea905df06fd892ed3d06057d14ef3a
Sha256: 6d07b7b9edead1dc79997f4759853504f5f85402db8d1d3d0d02614a90848cf2
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.209.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 13 Aug 2017 04:09:27 GMT
Expires: Thu, 17 Aug 2017 04:09:27 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    88141c63c352ca742c5b629730b45893
Sha1:   3301bc486f109bf98fdf45a815d3b953afb5dcca
Sha256: 5af694cbf2deb11f62ceadf0df0969d5af69b6f0f447098e2ab30dcc3f9429b9
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=449901, public, no-transform, must-revalidate
Last-Modified: Fri, 11 Aug 2017 09:05:56 GMT
Expires: Fri, 18 Aug 2017 09:05:56 GMT
Date: Sun, 13 Aug 2017 04:09:27 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    6e41d8ae633c12ff014b571741af0fe1
Sha1:   b83f29a7f1d6c0cf9fb0b92adf8b42d085e0c43a
Sha256: 4f40467a73a3f4f41b3750ff9414f5bc4cc834b4dd7ea1f2627f30f45b21f84f
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.209.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 13 Aug 2017 04:09:27 GMT
Expires: Thu, 17 Aug 2017 04:09:27 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    22b5542cf157c92bac3bb54b901bc739
Sha1:   950e17c95c5e632fe2b9dd84898ff4b21cc1f580
Sha256: 7459608d6c197d6bf0a17ba5609b2554c45e0b3039863ed9e9ef34a13597ac33
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         216.58.209.142
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Sun, 13 Aug 2017 02:12:21 GMT
Expires: Sun, 13 Aug 2017 04:12:21 GMT
Last-Modified: Tue, 01 Aug 2017 03:25:32 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 13249
Cache-Control: public, max-age=7200
Age: 7026
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   13249
Md5:    bba76bf50b45d005190ee3000d6deb86
Sha1:   6246a684a2d0ed18eb8946b56db1f328b688693a
Sha256: 6013ebd6cca20acf12020e8b8318d68ff4ae18aa392a6e4d9a4a468326acb02c
                                        
                                            GET /tagcmd/tc_Netatmo_1.js?v=94 HTTP/1.1 
Host: static.netatmo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: netatmocomci_csrf_cookie_na=7d084e6be4ebced00e9712c00c589a1c; netatmocomlocale=en-US

                                         
                                         62.210.178.168
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 13 Aug 2017 04:09:27 GMT
Content-Length: 31306
Connection: keep-alive
Last-Modified: Wed, 02 Aug 2017 10:14:23 GMT
Etag: "1a29d-555c2872bd50b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=10886400; includeSubDomains
X-Powered-By: Netatmo


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   31306
Md5:    3bf38fe36ee93af63b8e5527ee38e111
Sha1:   a8384777ca62ef5a13452d2e0916e8bfe15a7312
Sha256: 5038c38e51c5f1c4e2569711428765f36f87749c13e9dd3adbe88895de2f6609
                                        
                                            GET /iframe_api HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         216.58.209.142
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
X-XSS-Protection: 1; mode=block; report=https://www.google.com/appserve/security-bugs/log/youtube
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Expires: Tue, 27 Apr 1971 19:44:06 EST
Content-Length: 740
Date: Sun, 13 Aug 2017 04:09:27 GMT
Server: YouTubeFrontEnd
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   740
Md5:    435103ece131a2f1437dc35eaf2b5fd1
Sha1:   aaa349f14b8b068435cb9021cf7e3cf8033035a8
Sha256: 9ec5d7e938c3fb251078a1680d53c51272275efceb84213192df90ec5470b5a6
                                        
                                            GET /tagcmd/tc_Netatmo_3.js?v=94 HTTP/1.1 
Host: static.netatmo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: netatmocomci_csrf_cookie_na=7d084e6be4ebced00e9712c00c589a1c; netatmocomlocale=en-US

                                         
                                         62.210.178.168
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 13 Aug 2017 04:09:27 GMT
Content-Length: 16631
Connection: keep-alive
Last-Modified: Fri, 17 Feb 2017 15:34:19 GMT
Etag: "11a8d-548bba5adaaf6-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=10886400; includeSubDomains
X-Powered-By: Netatmo


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   16631
Md5:    bb00044f58f9ca1065fa475513a509dd
Sha1:   51865ac412aab04258334c5b18661c69d2fcd4fc
Sha256: 9f5db4f1c8e3150e696d9cf714e5eb33dfb9882615e26601d547b668ae36a1a9
                                        
                                            GET /r/collect?v=1&_v=j58&a=1403131270&t=pageview&_s=1&dl=https%3A%2F%2Fauth.netatmo.com%2Fen-US%2Faccess%2Fchecklogin%3Fmessage%3D__NOT_LOGGED%26next_url%3Dhttp%253A%252F%252Fmy.netatmo.com%252F&ul=en-us&de=UTF-8&sd=24-bit&sr=1176x885&vp=1176x754&je=1&fl=10.0%20r45&_u=IEBAAEQAI~&jid=387119713&gjid=1497697505&cid=794423468.1502597368&tid=UA-27910893-2&_gid=58955493.1502597368&_r=1&z=609770890 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         216.58.209.142
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-27910893-2&cid=794423468.1502597368&jid=387119713&_gid=58955493.1502597368&gjid=1497697505&_v=j58&z=609770890
Access-Control-Allow-Origin: *
Date: Sun, 13 Aug 2017 04:09:28 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 415
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   415
Md5:    8531fcf618f0b7bc8e51333aaf9fc07c
Sha1:   891f887e4cf30d24d2ef6d0706cf60ab2c9a10fd
Sha256: 51cbfc8ede44732797253014e30f8747269bdaa0b6d14754f7a63c3d34338b66
                                        
                                            GET /dist/js/vendors.js?v=94 HTTP/1.1 
Host: auth.netatmo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: netatmocomci_csrf_cookie_na=7d084e6be4ebced00e9712c00c589a1c; netatmocomlocale=en-US

                                         
                                         195.154.172.147
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 13 Aug 2017 04:09:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Jul 2017 11:32:30 GMT
Etag: "aa1f5a-4582c-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=10886400; includeSubDomains
X-Powered-By: Netatmo


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   98899
Md5:    5cd5f8fa9f14d606d2b5febfe82bc8d1
Sha1:   a88397cd9bed6a799004923df5a7dacc0967f127
Sha256: 8eaa052c1e5e854c88a612533c91794a8658d06c2571577f02482fa0592b58c7
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.209.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 13 Aug 2017 04:09:28 GMT
Expires: Thu, 17 Aug 2017 04:09:28 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    26c2de809bbc0e8359b5139a38c4828d
Sha1:   c49fe4e44b12947524a5196455ee53daa700c25f
Sha256: eab981e3f9b7690aa40e267c544dbda225166cbae4f9c1ea6c4f63a655a3bfca
                                        
                                            GET /dist/js/template.js?v=94 HTTP/1.1 
Host: auth.netatmo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: netatmocomci_csrf_cookie_na=7d084e6be4ebced00e9712c00c589a1c; netatmocomlocale=en-US

                                         
                                         195.154.172.147
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 13 Aug 2017 04:09:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Jul 2017 11:32:30 GMT
Etag: "aa1f9e-16688d-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=10886400; includeSubDomains
X-Powered-By: Netatmo


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   440349
Md5:    ee80fe9c84b88d7966d9d576e5e10366
Sha1:   e567850aa9b13a546cf0b2e5c0e47040e9ff8946
Sha256: 53c688842a22b6e3e2c3beea68c305e708463cac18528a9aece562d1a15ecbec
                                        
                                            POST / HTTP/1.1 
Host: gp.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1415
Content-Transfer-Encoding: binary
Cache-Control: max-age=368801, public, no-transform, must-revalidate
Last-Modified: Thu, 10 Aug 2017 10:36:10 GMT
Expires: Thu, 17 Aug 2017 10:36:10 GMT
Date: Sun, 13 Aug 2017 04:09:29 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1415
Md5:    2d01409a9b92f4f7f8f5560ac97cd6ad
Sha1:   96f0a80e95c4d9f91a71b2ee30cde4305f33f865
Sha256: 3c72263782036afcf2e19a8385559b71a929189651c11494da4eb572e58e9e12
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 13 Aug 2017 04:09:29 GMT
Server: Apache
Last-Modified: Thu, 10 Aug 2017 21:02:13 GMT
Expires: Thu, 17 Aug 2017 21:02:13 GMT
Etag: 39FFF65EA3D966EB7F14322C91BBEBB9711CB3CD
Cache-Control: max-age=405763,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp16
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    96d87573085fc355ffc64c2fbc22dbf9
Sha1:   39fff65ea3d966eb7f14322c91bbebb9711cb3cd
Sha256: acebeb9b3422629bcb5cec8d9080efee10dd97dd0ec501aad327e6d0ba86ff2f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 13 Aug 2017 04:09:29 GMT
Server: Apache
Last-Modified: Sat, 12 Aug 2017 22:05:35 GMT
Expires: Sat, 19 Aug 2017 22:05:35 GMT
Etag: 96E361EA932E5FF733A244851A0775154A9E68DF
Cache-Control: max-age=582365,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp16
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    05d2891345bb948f10c5392ad2dfb313
Sha1:   96e361ea932e5ff733a244851a0775154a9e68df
Sha256: 7d8f18c6517e0881f59a764046d10edb671dbeb6bd78ebb1970b4f4a34973b23
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 13 Aug 2017 04:09:29 GMT
Server: Apache
Last-Modified: Sat, 12 Aug 2017 22:05:35 GMT
Expires: Sat, 19 Aug 2017 22:05:35 GMT
Etag: E31ED0B6BA66B8450D0522FEE6FBA87DD8C262DC
Cache-Control: max-age=582365,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp6
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    8488a7147dd072c12d26d77af9e1e7a0
Sha1:   e31ed0b6ba66b8450d0522fee6fba87dd8c262dc
Sha256: a03d55ccb4ade68e7a550f4c15c9690b7324da6373e28b02a5bd74737d72c3d8
                                        
                                            GET /r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-27910893-2&cid=794423468.1502597368&jid=387119713&_gid=58955493.1502597368&gjid=1497697505&_v=j58&z=609770890 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         173.194.221.157
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-27910893-2&cid=794423468.1502597368&jid=387119713&_v=j58&z=609770890
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Sun, 13 Aug 2017 04:09:29 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 364
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   364
Md5:    557d6106f49774ea12ff2b5925bb3936
Sha1:   a127f41909fdc9f76ac2769fd58284e5195a3b73
Sha256: 169bb8936adf4a2321d8fa6d3dcb359ef229c56ee85175d8ab5b8158cf2f95d3
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.209.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 13 Aug 2017 04:09:29 GMT
Expires: Thu, 17 Aug 2017 04:09:29 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    cfaa10ae838f25533c4e19764a8c610a
Sha1:   90021e57998d3de3d027996f3cb49ff1cc629806
Sha256: 3478ae1dc22b0222e557fa97a0b11f9fc7cfa6774015cc6afd0ddbab52859195
                                        
                                            GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-27910893-2&cid=794423468.1502597368&jid=387119713&_v=j58&z=609770890 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         216.58.209.132
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sun, 13 Aug 2017 04:09:29 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-27910893-2&cid=794423468.1502597368&jid=387119713&_v=j58&z=609770890&slf_rd=1&random=1534614860
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
                                        
                                            GET /hmx000000000163.js HTTP/1.1 
Host: u360.d-bi.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         52.48.178.142
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: public, max-age=60
Content-Encoding: gzip
Date: Sun, 13 Aug 2017 04:09:29 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
Server: hmxps
Set-Cookie: U360=rB8UzVmP0PlkeH6TDpwPAg==; expires=Tue, 28-Aug-18 04:09:29 GMT; domain=d-bi.fr; path=/
X-MyName: 3c312fb5
Content-Length: 3025
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3025
Md5:    32cb374a01b6ff0a99a1d9d1496cf156
Sha1:   44fb3c61bd5b08b993ec4858fa348192aa30159f
Sha256: 9cee2727d5fc5942b2d7ef71c673d7b1e76b4dad0be600bff00a766f59a14291

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.209.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 13 Aug 2017 04:09:29 GMT
Expires: Thu, 17 Aug 2017 04:09:29 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    2a69eb87d99995eadd23a240e457a66e
Sha1:   980292d6dc7d111501cd368a68170a3d3de713db
Sha256: 2ecfbd983be75f029b6a7890040a0cd80773fc37097d8f99ccb10127cc707cde
                                        
                                            GET /6c2a9f2742e891aeac25df8b45a3aef2.js HTTP/1.1 
Host: try.abtasty.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         13.33.96.203
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 13 Aug 2017 04:09:29 GMT
Server: Apache
Last-Modified: Thu, 10 Aug 2017 12:30:42 GMT
Etag: "525a0-556655d6ff3fc-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
CacheControl: private, max-age=0, no-cache, no-store
Pragma: no-cache
X-Cache: Miss from cloudfront
Via: 1.1 3307f052d959a259e40df1a13ab580ac.cloudfront.net (CloudFront)
X-Amz-Cf-Id: c5sqjmcf8nAP9wm-h6vRdz2h3BOtq3-royL3fPXHBF5xTb9ZgxwU_w==


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   82994
Md5:    64ebf66fbd35dd868e3ef97d3566a986
Sha1:   ec5094401907d9d9fcebbef458bb54d8976eb4fb
Sha256: f4c30da4ff9c671d06da05d31babeb722c64c7b38234bf85561677df81ac0616
                                        
                                            GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-27910893-2&cid=794423468.1502597368&jid=387119713&_v=j58&z=609770890&slf_rd=1&random=1534614860 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         216.58.209.131
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sun, 13 Aug 2017 04:09:30 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /000000000163.gif?c=B53D919AAF1D29E2C6E8256CC7874C36-13caed09222b&cgen=1&uid=&step=b3RoZXI=&hmxtagid=2-2.19-6&u=aHR0cHM6Ly9hdXRoLm5ldGF0bW8uY29tL2VuLVVTL2FjY2Vzcy9jaGVja2xvZ2luP21lc3NhZ2U9X19OT1RfTE9HR0VEJm5leHRfdXJsPWh0dHAlM0ElMkYlMkZteS5uZXRhdG1vLmNvbSUyRg==&hmxts=1502597369755&navlang=ZW4tVVM=&r= HTTP/1.1 
Host: u360.d-bi.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: U360=rB8UzVmP0PlkeH6TDpwPAg==

                                         
                                         52.48.178.142
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Cache-Control: private, no-cache, no-cache=Set-Cookie, must-revalidate, proxy-revalidate
Date: Sun, 13 Aug 2017 04:09:29 GMT
Expires: Mon, 21 Jan 1980 12:00:00 GMT
Server: hmxps
X-MyName: cec68643
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /e.js HTTP/1.1 
Host: u360.d-bi.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: U360=rB8UzVmP0PlkeH6TDpwPAg==

                                         
                                         52.48.178.142
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: private, must-revalidate, proxy-revalidate
Content-Encoding: gzip
Date: Sun, 13 Aug 2017 04:09:30 GMT
Server: hmxps
X-MyName: cec68643
Content-Length: 84
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   84
Md5:    58d314bff78ad8e8fb61dd068d27e228
Sha1:   9da7c20a35a5c25fae03a4318c1e6a97fd8e5b1e
Sha256: f350165996e6d75610725d4518e00dffe92c3629449e31424bf26d397bd7fb09

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Date: Sun, 13 Aug 2017 04:09:30 GMT
Etag: "598f88ac-1d7"
Expires: Sat, 19 Aug 2017 16:09:30 GMT
Last-Modified: Sat, 12 Aug 2017 23:01:00 GMT
Server: ECS (arn/45E4)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    85ae145799affafc2b5f5cd244f66431
Sha1:   400a8e5271c60b58356f6822b49b36ff24587609
Sha256: 07da19e1c0cbb32ce4b934bf9d92b03657a5055955145f9988b0c8880a546947
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Date: Sun, 13 Aug 2017 04:09:30 GMT
Etag: "598f83e7-1d7"
Expires: Sat, 19 Aug 2017 16:09:30 GMT
Last-Modified: Sat, 12 Aug 2017 22:40:39 GMT
Server: ECS (arn/459D)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    5875e62f80ce75807921791fe99072c8
Sha1:   f8b8fd7a195024b159b5907961087f145b2421f1
Sha256: 33b21ae606c410724daf3fdbdc963ab341f3d679bfb63f9a6c61808d1674e6d2
                                        
                                            GET /font/Proxima-Nova/webfonts/2F1FE6_1_0.woff HTTP/1.1 
Host: auth.netatmo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/dist/css/template.css?v=94
Cookie: netatmocomci_csrf_cookie_na=7d084e6be4ebced00e9712c00c589a1c; netatmocomlocale=en-US; _ga=GA1.2.794423468.1502597368; _gid=GA1.2.58955493.1502597368; _gat=1; TCID=1178069288136406991; TCSESSION=1178069287664211201; tc_cj_v2=%5Ecl_%5Dny%5B%5D%5D_mmZZZZZZKOJLOSQMPRPMKZZZ%5D; tCdebugLib=1; C360i=B53D919AAF1D29E2C6E8256CC7874C36|eyJjcmVhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ1cGRhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ0YWciOiIyLTIuMTktNiIsImNvdW50IjoxfQ==; C360i=B53D919AAF1D29E2C6E8256CC7874C36|eyJjcmVhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ1cGRhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ0YWciOiIyLTIuMTktNiIsImNvdW50IjoxfQ==

                                         
                                         195.154.172.147
HTTP/1.1 200 OK
Content-Type: application/x-font-woff
                                        
Server: nginx
Date: Sun, 13 Aug 2017 04:09:30 GMT
Content-Length: 45965
Connection: keep-alive
Last-Modified: Mon, 26 Jun 2017 13:25:34 GMT
Etag: "9e02a7-b3ba-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=15552000
Expires: Fri, 09 Feb 2018 04:09:30 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=10886400; includeSubDomains
X-Powered-By: Netatmo


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   45965
Md5:    a95da4710b2790f77c8b814b8742ccee
Sha1:   fd2020a573a300707ab1700b6cdc69d7cee6153f
Sha256: c5f7f235b4745f702dd1c6e1ddc47d857e9e88c1a9951ce944d10041ef60493b
                                        
                                            GET /e.gif?aid=000000000163&c=B53D919AAF1D29E2C6E8256CC7874C36&e=23407379520512881800000865823b1d07d14ec074b7e97d4020e4b8c43e&d=YXV0aC5uZXRhdG1vLmNvbQ== HTTP/1.1 
Host: u360.d-bi.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: U360=rB8UzVmP0PlkeH6TDpwPAg==

                                         
                                         52.48.178.142
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, no-cache, no-cache=Set-Cookie, must-revalidate, proxy-revalidate
Date: Sun, 13 Aug 2017 04:09:30 GMT
Expires: Mon, 21 Jan 1980 12:00:00 GMT
Server: hmxps
X-MyName: 2ae4c7a1
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Date: Sun, 13 Aug 2017 04:09:30 GMT
Etag: "598f9434-1d7"
Expires: Sat, 19 Aug 2017 16:09:30 GMT
Last-Modified: Sat, 12 Aug 2017 23:50:12 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    9925770847c2b27f9317955d4326d866
Sha1:   c5cb5ce9eab571d7ab14a5442161d27b59d7005f
Sha256: 9767434246c1b38352f7ac9a3248e5a8b40dfa3c9938ff66fa118ded95ba1da1
                                        
                                            GET /font/Proxima-Nova/webfonts/2F1FE6_4_0.woff HTTP/1.1 
Host: auth.netatmo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/dist/css/template.css?v=94
Cookie: netatmocomci_csrf_cookie_na=7d084e6be4ebced00e9712c00c589a1c; netatmocomlocale=en-US; _ga=GA1.2.794423468.1502597368; _gid=GA1.2.58955493.1502597368; _gat=1; TCID=1178069288136406991; TCSESSION=1178069287664211201; tc_cj_v2=%5Ecl_%5Dny%5B%5D%5D_mmZZZZZZKOJLOSQMPRPMKZZZ%5D; tCdebugLib=1; C360i=B53D919AAF1D29E2C6E8256CC7874C36|eyJjcmVhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ1cGRhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ0YWciOiIyLTIuMTktNiIsImNvdW50IjoxfQ==; C360i=B53D919AAF1D29E2C6E8256CC7874C36|eyJjcmVhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ1cGRhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ0YWciOiIyLTIuMTktNiIsImNvdW50IjoxfQ==

                                         
                                         195.154.172.147
HTTP/1.1 200 OK
Content-Type: application/x-font-woff
                                        
Server: nginx
Date: Sun, 13 Aug 2017 04:09:30 GMT
Content-Length: 45979
Connection: keep-alive
Last-Modified: Mon, 26 Jun 2017 13:25:34 GMT
Etag: "9e02bb-b3c7-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=15552000
Expires: Fri, 09 Feb 2018 04:09:30 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=10886400; includeSubDomains
X-Powered-By: Netatmo


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   45979
Md5:    c3c3da38214ea7794bd2fd93db8670a4
Sha1:   26f61745b18664a823bdc9fb30faa59cdfbfb40e
Sha256: 90756892b4037a749047fa636c9855afa9a24e6c5c088e08a91777f91fba6768
                                        
                                            GET /font/Proxima-Nova/webfonts/2F1FE6_3_0.woff HTTP/1.1 
Host: auth.netatmo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/dist/css/template.css?v=94
Cookie: netatmocomci_csrf_cookie_na=7d084e6be4ebced00e9712c00c589a1c; netatmocomlocale=en-US; _ga=GA1.2.794423468.1502597368; _gid=GA1.2.58955493.1502597368; _gat=1; TCID=1178069288136406991; TCSESSION=1178069287664211201; tc_cj_v2=%5Ecl_%5Dny%5B%5D%5D_mmZZZZZZKOJLOSQMPRPMKZZZ%5D; tCdebugLib=1; C360i=B53D919AAF1D29E2C6E8256CC7874C36|eyJjcmVhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ1cGRhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ0YWciOiIyLTIuMTktNiIsImNvdW50IjoxfQ==; C360i=B53D919AAF1D29E2C6E8256CC7874C36|eyJjcmVhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ1cGRhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ0YWciOiIyLTIuMTktNiIsImNvdW50IjoxfQ==

                                         
                                         195.154.172.147
HTTP/1.1 200 OK
Content-Type: application/x-font-woff
                                        
Server: nginx
Date: Sun, 13 Aug 2017 04:09:30 GMT
Content-Length: 45969
Connection: keep-alive
Last-Modified: Mon, 26 Jun 2017 13:25:34 GMT
Etag: "9e3823-b3be-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=15552000
Expires: Fri, 09 Feb 2018 04:09:30 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=10886400; includeSubDomains
X-Powered-By: Netatmo


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   45969
Md5:    af203fad81ad992689439db2a522d827
Sha1:   33fbdfb7419193f232d0db76cd4575fa7160b42f
Sha256: 3ad07e83692b95127a5fda967d2003d1b921b8d053e719ca6890121ecb15eb9f
                                        
                                            GET /font/font-awesome-4.4.0/fontawesome-webfont.woff?v=4.4.0 HTTP/1.1 
Host: auth.netatmo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/dist/css/template.css?v=94
Cookie: netatmocomci_csrf_cookie_na=7d084e6be4ebced00e9712c00c589a1c; netatmocomlocale=en-US; _ga=GA1.2.794423468.1502597368; _gid=GA1.2.58955493.1502597368; _gat=1; TCID=1178069288136406991; TCSESSION=1178069287664211201; tc_cj_v2=%5Ecl_%5Dny%5B%5D%5D_mmZZZZZZKOJLOSQMPRPMKZZZ%5D; tCdebugLib=1; C360i=B53D919AAF1D29E2C6E8256CC7874C36|eyJjcmVhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ1cGRhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ0YWciOiIyLTIuMTktNiIsImNvdW50IjoxfQ==; C360i=B53D919AAF1D29E2C6E8256CC7874C36|eyJjcmVhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ1cGRhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ0YWciOiIyLTIuMTktNiIsImNvdW50IjoxfQ==

                                         
                                         195.154.172.147
HTTP/1.1 200 OK
Content-Type: application/x-font-woff
                                        
Server: nginx
Date: Sun, 13 Aug 2017 04:09:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 26 Jun 2017 13:25:34 GMT
Etag: "9e02eb-13d84-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=15552000
Expires: Fri, 09 Feb 2018 04:09:30 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=10886400; includeSubDomains
X-Powered-By: Netatmo


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   81238
Md5:    38108993adeb517c56380f215a8d0ecc
Sha1:   23884310f2991a1abac2548da3ac64530810f13c
Sha256: bac9a290d9ff69939fbf06b6b0419640b6ee5778deef9147686fb019ba14e64f
                                        
                                            GET /images/common/corpo-background.jpg HTTP/1.1 
Host: auth.netatmo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/dist/css/template.css?v=94
Cookie: netatmocomci_csrf_cookie_na=7d084e6be4ebced00e9712c00c589a1c; netatmocomlocale=en-US; _ga=GA1.2.794423468.1502597368; _gid=GA1.2.58955493.1502597368; _gat=1; TCID=1178069288136406991; TCSESSION=1178069287664211201; tc_cj_v2=%5Ecl_%5Dny%5B%5D%5D_mmZZZZZZKOJLOSQMPRPMKZZZ%5D; tCdebugLib=1; C360i=B53D919AAF1D29E2C6E8256CC7874C36|eyJjcmVhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ1cGRhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ0YWciOiIyLTIuMTktNiIsImNvdW50IjoxfQ==; C360i=B53D919AAF1D29E2C6E8256CC7874C36|eyJjcmVhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ1cGRhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ0YWciOiIyLTIuMTktNiIsImNvdW50IjoxfQ==

                                         
                                         195.154.172.147
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sun, 13 Aug 2017 04:09:30 GMT
Content-Length: 162886
Connection: keep-alive
Last-Modified: Mon, 26 Jun 2017 13:25:35 GMT
Etag: "9e02f2-27c46"
Accept-Ranges: bytes
Cache-Control: max-age=15552000
Expires: Fri, 09 Feb 2018 04:09:30 GMT
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=10886400; includeSubDomains
X-Powered-By: Netatmo


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   162886
Md5:    c0a6f23466a27c586f846b9ba47b43e6
Sha1:   5531ad2b6ae96bd46e32b433bb7a13029db01e65
Sha256: e6e5f37d7d3b27af771c47238c36056a7f480b80a45c0b818755380f321179ba
                                        
                                            GET /widgets.js HTTP/1.1 
Host: platform.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         199.96.57.6
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Last-Modified: Wed, 09 Aug 2017 17:22:14 GMT
Cache-Control: public, max-age=1800
Etag: "1b70dbcafad8bd59cdf646e7f0ff327e+gzip"
Content-Encoding: gzip
Content-Length: 33387
Accept-Ranges: bytes
Date: Sun, 13 Aug 2017 04:09:31 GMT
Via: 1.1 varnish
Age: 720
Connection: keep-alive
X-Served-By: cache-tw-sto1-3-TWSTO1
X-Cache: HIT
X-Timer: S1502597371.100600,VS0,VE0
Vary: Accept-Encoding,Host
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33387
Md5:    d366e4ee11a017c10c700b24a3482587
Sha1:   033c23e75740b51987812afb9945712c745ede81
Sha256: f984a67f181f01967caaacb0e1b434c6d239902a731afa664fd6e3111f4e9997
                                        
                                            GET /font/Proxima-Nova/webfonts/2F1FE6_5_0.woff HTTP/1.1 
Host: auth.netatmo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/dist/css/template.css?v=94
Cookie: netatmocomci_csrf_cookie_na=7d084e6be4ebced00e9712c00c589a1c; netatmocomlocale=en-US; _ga=GA1.2.794423468.1502597368; _gid=GA1.2.58955493.1502597368; _gat=1; TCID=1178069288136406991; TCSESSION=1178069287664211201; tc_cj_v2=%5Ecl_%5Dny%5B%5D%5D_mmZZZZZZKOJLOSQMPRPMKZZZ%5D; tCdebugLib=1; C360i=B53D919AAF1D29E2C6E8256CC7874C36|eyJjcmVhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ1cGRhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ0YWciOiIyLTIuMTktNiIsImNvdW50IjoxfQ==; C360i=B53D919AAF1D29E2C6E8256CC7874C36|eyJjcmVhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ1cGRhdGVkIjoxNTAyNTk3MzY5NzQ4LCJ0YWciOiIyLTIuMTktNiIsImNvdW50IjoxfQ==

                                         
                                         195.154.172.147
HTTP/1.1 200 OK
Content-Type: application/x-font-woff
                                        
Server: nginx
Date: Sun, 13 Aug 2017 04:09:30 GMT
Content-Length: 45866
Connection: keep-alive
Last-Modified: Mon, 26 Jun 2017 13:25:34 GMT
Etag: "9e02cb-b35c-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=15552000
Expires: Fri, 09 Feb 2018 04:09:30 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=10886400; includeSubDomains
X-Powered-By: Netatmo


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   45866
Md5:    b56dc41de154d1a4278e3dba10b54955
Sha1:   ea0e3c18ae8a9ddb9a09e56b7aac8595381a56d6
Sha256: 4a84919c0cb08993fc34521f3beec401d072172119d160c1d380d06c8a5e52cc
                                        
                                            GET /en_US/sdk.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         31.13.70.7
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: c2d66b14e341b5ba13bf2d28216b4889
Etag: "5d624614ec78b40c1ea476bd091f01e7"
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15552000; preload; includeSubDomains
X-XSS-Protection: 0
X-Frame-Options: DENY
Timing-Allow-Origin: *
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';report-uri https://www.facebook.net/csp.php
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
Expires: Sun, 13 Aug 2017 04:17:26 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: aDl5B9eFNZvPy8kz/LCMyA==
X-FB-Debug: EDQPmYslweromn/HqRbn6rlOW28KuqhcAb4TnvIMK2LwYz+Se18e6zSRXs7CW52SKt2RsRr23+NRh2lQiDRD2Q==
Date: Sun, 13 Aug 2017 04:09:31 GMT
Connection: keep-alive
Content-Length: 63585


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   63585
Md5:    68397907d785359bcfcbc933fcb08cc8
Sha1:   c3bfeef9969e51300aceed5fdf6364ca39172875
Sha256: ced5e2f03dd7d54794dfbb58b0920f75bf4134ccb8b65f8823df3bfae389689e
                                        
                                            GET /000000000163.gif?c=B53D919AAF1D29E2C6E8256CC7874C36-13caed09222b&cgen=0&uid=&step=b3RoZXI=&hmxtagid=2-2.19-6&u=aHR0cHM6Ly9hdXRoLm5ldGF0bW8uY29tL2VuLVVTL2FjY2Vzcy9jaGVja2xvZ2luP21lc3NhZ2U9X19OT1RfTE9HR0VEJm5leHRfdXJsPWh0dHAlM0ElMkYlMkZteS5uZXRhdG1vLmNvbSUyRg==&hmxts=1502597375218&navlang=ZW4tVVM=&r= HTTP/1.1 
Host: u360.d-bi.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: U360=rB8UzVmP0PlkeH6TDpwPAg==

                                         
                                         52.48.178.142
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Cache-Control: private, no-cache, no-cache=Set-Cookie, must-revalidate, proxy-revalidate
Date: Sun, 13 Aug 2017 04:09:35 GMT
Expires: Mon, 21 Jan 1980 12:00:00 GMT
Server: hmxps
X-MyName: cec68643
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /e.js HTTP/1.1 
Host: u360.d-bi.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: U360=rB8UzVmP0PlkeH6TDpwPAg==

                                         
                                         52.48.178.142
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: private, must-revalidate, proxy-revalidate
Content-Encoding: gzip
Date: Sun, 13 Aug 2017 04:09:35 GMT
Server: hmxps
X-MyName: 2ae4c7a1
Content-Length: 84
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   84
Md5:    403e04cab75305dd5dff7bde9a998a05
Sha1:   ab77ea0ce3b7d2bd97c1b14aa7ae2a04f0b7206a
Sha256: e4461c9ff52215492fa573a468c7748abeddd0b2c7e8770c85b3113c223511ee

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /pagead/viewthroughconversion/961034102/?value=0&label=TICNCJKO0AQQ9u6gygM&guid=ON&script=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         172.217.18.130
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Sun, 13 Aug 2017 04:09:35 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.com/ads/user-lists/961034102/?value=0&label=TICNCJKO0AQQ9u6gygM&guid=ON&script=0&cdct=2&is_vtc=1&random=1912666658&fpvtc=/961034102/%3Fvalue%3D0%26label%3DTICNCJKO0AQQ9u6gygM%26guid%3DON%26script%3D0%26random%3D1124194953%26cdct%3D2%26is_vtc%3D1
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Sun, 13-Aug-2017 04:24:35 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /yts/jsbin/www-widgetapi-vflQKB5wA/www-widgetapi.js HTTP/1.1 
Host: s.ytimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         216.58.209.142
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Timing-Allow-Origin: https://www.youtube.com
Content-Length: 9069
Date: Fri, 11 Aug 2017 11:04:27 GMT
Expires: Sat, 19 Aug 2017 11:04:27 GMT
Last-Modified: Fri, 11 Aug 2017 08:22:41 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=691200
Age: 147908
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   9069
Md5:    31a396659f96344af646f7f912f1e951
Sha1:   601b4a3ede838ebb187ad59c3697d3655819eaa5
Sha256: 3ff1f60cc7a6230be65bf853126dc4a86d51a03d330e740efe443c4a38f8276e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Date: Sun, 13 Aug 2017 04:09:35 GMT
Etag: "598efe35-1d7"
Expires: Sat, 19 Aug 2017 16:09:35 GMT
Last-Modified: Sat, 12 Aug 2017 13:10:13 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    8298fcd3872b87b8ebd8c3755853daa5
Sha1:   f401c4e3694d9fa65796044ae98681bd62873d70
Sha256: f6d899cbf5483684a947967247c1e98dd0343a725e70e5a36970a105ebd63947
                                        
                                            GET /en_US/fbevents.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         31.13.70.7
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
X-Frame-Options: DENY
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://connect.facebook.net
Access-Control-Expose-Headers: X-FB-Debug, X-Loader-Length
Pragma: public
Vary: Origin, Accept-Encoding
access-control-allow-method: OPTIONS
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Strict-Transport-Security: max-age=15552000; preload; includeSubDomains
X-Content-Type-Options: nosniff
Cache-Control: public, max-age=1200
Content-Encoding: gzip
X-FB-Debug: 5aWKy7+0xgtZ7fQburyAJq/fvsPixrchyCNNoECfmQXWFjqdaBw3pZI3XoFMhJfwoUBAhIJZd3gtSmeKT9qnRw==
Date: Sun, 13 Aug 2017 04:09:35 GMT
Connection: keep-alive
Content-Length: 11487


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   11487
Md5:    4997660546f6b4ce8f43d86c9ccd2b16
Sha1:   ca34a347ebc1bb76d4051b13069145e5037d240a
Sha256: 3cb6a8330d9aff1a1899a2945ee616eb268074a2d694ecd3283428742cf5dab0
                                        
                                            POST / HTTP/1.1 
Host: ss.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1609
Content-Transfer-Encoding: binary
Cache-Control: max-age=564646, public, no-transform, must-revalidate
Last-Modified: Sat, 12 Aug 2017 16:55:31 GMT
Expires: Sat, 19 Aug 2017 16:55:31 GMT
Date: Sun, 13 Aug 2017 04:09:36 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1609
Md5:    cb6fcd5d57758c12b94144377e9a3095
Sha1:   0f45ce6cd7c92b8fdeb3e69384971c5893749d1a
Sha256: 6d3a3ad2375230773f9e032aad44fb09d571f804c9fd7c1dbf0e52b01f012408
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         13.33.99.71
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Date: Sun, 13 Aug 2017 04:09:36 GMT
Etag: "598f7f15-1d7"
Expires: Sat, 19 Aug 2017 16:09:36 GMT
Last-Modified: Sat, 12 Aug 2017 22:20:05 GMT
Server: ECS (lga/1318)
X-Cache: Miss from cloudfront
Via: 1.1 ae23574c554f69f2e2fe196240d61b29.cloudfront.net (CloudFront)
X-Amz-Cf-Id: Fg6ZlrE9PH_xIkia6xuTnL4H6LX9G2loXVfDK5LmjxbBrQP5mRXwPQ==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    8e29a98608bc901cb9d7067db193bfce
Sha1:   7d8497247812f569b8680836230fd92b3693af15
Sha256: 19cae87cb753c237ff4f20dd33498cfda0d0494ccbc9b6e5b90cf8e81bf5a55a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.rootca1.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         13.33.99.184
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 1426
Connection: keep-alive
Date: Sun, 13 Aug 2017 04:09:36 GMT
Server: WEBrick/1.3.1 (Ruby/2.3.1/2016-04-26)
X-Cache: Miss from cloudfront
Via: 1.1 e1ee31be9234bb6cbe06c324c0f40cc2.cloudfront.net (CloudFront)
X-Amz-Cf-Id: wfEtl_wW0HJ7-mlfVoYpYiDLaKKYTXXySyCP8wDFeYJLk37ScX0_Aw==


--- Additional Info ---
Magic:  data
Size:   1426
Md5:    0d2487dcbd87342d6c230b6ed0606a95
Sha1:   05b704712c178f1ad925cf80b2e7cfbcc6d1a76b
Sha256: c4be22361e89de3d69bee5d023ebc10131bac1ca76fcae9b0c41a49d8d83a462
                                        
                                            GET /connect/xd_arbiter/r/XBwzv5Yrm_1.js?version=42 HTTP/1.1 
Host: staticxx.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         31.13.70.7
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Sat, 11 Aug 2018 07:39:51 GMT
Cache-Control: public,max-age=31536000,immutable
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
X-XSS-Protection: 0
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
X-FB-Debug: HwVcUr0g2EPSmWv3RSRHHnZoQhScsC0iFmYEu0fsztEZcpU5p3wdXENlvlUGdyhTtUfH4SsYXVG7FP3l3+gsLQ==
Date: Sun, 13 Aug 2017 04:09:36 GMT
Connection: keep-alive
Content-Length: 14357


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14357
Md5:    9a0198fceaebc1eb1e81224a18cafb83
Sha1:   5058e189fe708dd1958963d458d9ae562f175266
Sha256: b11076d57a681e1764156cac9ca84ad8cf0aabe83924ca1da382952adc663a5b
                                        
                                            GET /e.gif?aid=000000000163&c=B53D919AAF1D29E2C6E8256CC7874C36&e=75257379520511519200000362223b1d07d14ec074b7e97d4020e4b8c43e&d=YXV0aC5uZXRhdG1vLmNvbQ==&eold=23407379520512881800000865823b1d07d14ec074b7e97d4020e4b8c43e HTTP/1.1 
Host: u360.d-bi.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: U360=rB8UzVmP0PlkeH6TDpwPAg==

                                         
                                         52.48.178.142
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, no-cache, no-cache=Set-Cookie, must-revalidate, proxy-revalidate
Date: Sun, 13 Aug 2017 04:09:35 GMT
Expires: Mon, 21 Jan 1980 12:00:00 GMT
Server: hmxps
X-MyName: cec68643
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            POST / HTTP/1.1 
Host: tg.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1451
Content-Transfer-Encoding: binary
Cache-Control: max-age=530499, public, no-transform, must-revalidate
Last-Modified: Sat, 12 Aug 2017 07:31:15 GMT
Expires: Sat, 19 Aug 2017 07:31:15 GMT
Date: Sun, 13 Aug 2017 04:09:36 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1451
Md5:    b13471f271ef4ce37523b9b45bc8e99f
Sha1:   a9e0321506fcb4faa8f1031641c2b6fdac734b06
Sha256: 90f9acd1cfec7c4272a364c8f23bc086f055af5a9f5f3cd3c6d1798b45fb3b71
                                        
                                            GET /SemiCachedScripts/ebOneTag.js HTTP/1.1 
Host: secure-ds.serving-sys.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         95.100.3.181
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Encoding: gzip
Last-Modified: Sun, 16 Jul 2017 10:30:29 GMT
Etag: W/"8cc498c1efed21:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ARR/2.5, ASP.NET
Content-Length: 11819
Cache-Control: max-age=784
Date: Sun, 13 Aug 2017 04:09:36 GMT
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   11819
Md5:    8fb44faedf37c9c22ce7e14156038c08
Sha1:   96027d1846bda6a3f4a9f096fe10fd9c67fe1fda
Sha256: 96f3008cb284c9c53ee2a925b60f767f8ab883900ffcc03631f1f2b223f119e9
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 108
Content-Type: application/ocsp-request

                                         
                                         72.167.239.239
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 13 Aug 2017 04:09:37 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=120004, public, no-transform, must-revalidate
Last-Modified: Sun, 13 Aug 2017 03:14:58 GMT
Expires: Mon, 14 Aug 2017 15:14:58 GMT
Etag: "ac3d1fc7afaa3207b82238b70d2300b321122afe"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1777
Connection: close


--- Additional Info ---
Magic:  data
Size:   1777
Md5:    003c071dc485b9f3fb334b13df7df405
Sha1:   ac3d1fc7afaa3207b82238b70d2300b321122afe
Sha256: bbc89918b22dd943f5498156653b813ebaf1495ce4c4370a87a836183b4c7710
                                        
                                            GET /impression.php/f1185503f3b971/?api_key=292716490799017&lid=115&payload=%7B%22source%22%3A%22jssdk%22%7D HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         157.240.3.35
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.facebook.com
Access-Control-Expose-Headers: X-FB-Debug, X-Loader-Length
Pragma: no-cache
Vary: Origin, Accept-Encoding
public-key-pins-report-only: max-age=500; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
access-control-allow-method: OPTIONS
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Cache-Control: private, no-cache, no-store, must-revalidate
Content-Encoding: gzip
X-FB-Debug: GzNBMotAJiR1lcLhfKneqwg7S4WH0JjnsKnovXWf4xo7sAFiB5Z/6FPoXVZrrfHw0BRD3RKczqdAGMdndfDRRw==
Date: Sun, 13 Aug 2017 04:09:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   57
Md5:    9539fdb766538c525a3e11e03853b8c9
Sha1:   cd658fd453cb9e7af5aede2e9c6050d81c0e2fdc
Sha256: 88882a6963e4a4313761bf5e5be68a015ec125c023fba749a9ec0aca7a9124af
                                        
                                            GET /yieldify/code.js?yieldify_id=4706&loca=https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F HTTP/1.1 
Host: app.yieldify.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         34.249.224.53
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=utf-8
                                        
Content-Encoding: gzip
Date: Sun, 13 Aug 2017 04:09:36 GMT
Server: nginx/1.8.1 + Phusion Passenger 4.0.60
Status: 200 OK
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Powered-By: Phusion Passenger 4.0.60
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Sun Aug 13 06:09:36 2017
Size:   1173
Md5:    19c0d28e47affa71d8d3a1797372dc2e
Sha1:   982427d9d969d4343b39490b8a1df483be54e1cb
Sha256: 3bd00982ee47c1b99da92bcbb55b4ad1cfde4356ba4f8d5523ea7ff9036d8198
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request

                                         
                                         104.16.25.216
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 13 Aug 2017 04:09:37 GMT
Content-Length: 1570
Connection: keep-alive
Set-Cookie: __cfduid=d852f599355dafb15dc5b429381c1f2bf1502597377; expires=Mon, 13-Aug-18 04:09:37 GMT; path=/; domain=.globalsign.com; HttpOnly
Last-Modified: Sun, 13 Aug 2017 02:52:16 GMT
Expires: Thu, 17 Aug 2017 02:52:16 GMT
Etag: "84e00236f8a90b1a735731daa1a91156e2926256"
Cache-Control: public, no-transform, must-revalidate
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 38d8d1e7c5cb42bb-OSL


--- Additional Info ---
Magic:  data
Size:   1570
Md5:    484772775330deabdd50b5c568872b06
Sha1:   84e00236f8a90b1a735731daa1a91156e2926256
Sha256: d021773e95563714efb4623d73f69cc48071b713a60d39750bcd711882a211c3
                                        
                                            GET /dc3/?chn=DIRECT_ACCESS&src=&type=C&limit=10&rand=0.2640008275968202 HTTP/1.1 
Host: netatmo.commander1.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         95.131.143.207
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sun, 13 Aug 2017 04:09:37 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADM DEV PSA OUR IND UNI PUR COM NAV INT STA"
Set-Cookie: tc_cj_v2=%5Ecl_%5Dny%5B%5D%5D_mmZZZZZZKOJLOSQMQQJJJZZZ%5D; expires=Mon, 13-Aug-2018 04:09:37 GMT; path=/; domain=netatmo.commander1.com
Cache-Control: private, max-age=486000, pre-check=486000
Pragma: private
Expires: Sat, 11 Nov 17 06:09:37 +0100
Server: web
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   54
Md5:    88dcd7871047159715d7f44b58f38d73
Sha1:   42fcfec12054feaca65da3fc6a821caef6fc701e
Sha256: 2b58eb0ca672e1bd4664d396ebdcbd97e51edbe64b682592125e79a7a58d3ab4
                                        
                                            POST / HTTP/1.1 
Host: tj.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1414
Content-Transfer-Encoding: binary
Cache-Control: max-age=305100, public, no-transform, must-revalidate
Last-Modified: Wed, 9 Aug 2017 16:50:48 GMT
Expires: Wed, 16 Aug 2017 16:50:48 GMT
Date: Sun, 13 Aug 2017 04:09:37 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1414
Md5:    66cd4013da03f822a40a38bd674c0140
Sha1:   15472d7e06d1e97b7c4303faf428886bcfc1b5d7
Sha256: 5f2b9733f994476c7c36a6eda967ebcd2ec1ed3eaf62c50e6f63f1099648aae6
                                        
                                            GET /measure/measure.js HTTP/1.1 
Host: cdn.tagcommander.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         192.229.233.55
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Content-Encoding: gzip
Accept-Ranges: bytes
Cache-Control: max-age=86400
Date: Sun, 13 Aug 2017 04:09:37 GMT
Etag: "1509872913"
Expires: Mon, 14 Aug 2017 04:09:37 GMT
Last-Modified: Thu, 13 Apr 2017 14:46:58 GMT
Server: ECS (arn/4597)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 2679


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Thu Apr 13 16:46:58 2017
Size:   2679
Md5:    05daf70e886e8f4ae64f84de95558490
Sha1:   86dcbaad1df0cbc5ad32669903036ab3d9940ce8
Sha256: 1284f54642e5b655bfad035949ff9a630a33927250eecd5069c9739d33546618
                                        
                                            GET /reach?tc_s=2338 HTTP/1.1 
Host: engage.commander1.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         95.131.143.205
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
                                        
Date: Sun, 13 Aug 2017 04:09:37 GMT
Content-Length: 53
Connection: close
Set-Cookie: TCID=201708130609371036670461; Domain=.commander1.com; Path=/; Expires=Mon, 13 Aug 2018 04:09:37 GMT; HttpOnly
Location: /reach?tc_firsttime=1&tc_s=2338
Vary: Accept
Server: web
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   53
Md5:    f2a4c1a52f17109f0b1559f9ae838594
Sha1:   55f9c38c51bfd7f924c0ce9f52d60f3fe5a22384
Sha256: e7156f94aa3df9118f2979d4976659e9fbc4316226cb122ef4dc975e1f9f0511
                                        
                                            POST / HTTP/1.1 
Host: ss.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1609
Content-Transfer-Encoding: binary
Cache-Control: max-age=320463, public, no-transform, must-revalidate
Last-Modified: Wed, 9 Aug 2017 21:06:11 GMT
Expires: Wed, 16 Aug 2017 21:06:11 GMT
Date: Sun, 13 Aug 2017 04:09:37 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1609
Md5:    0942f84ca4ac1139efaccc4ca5bc814e
Sha1:   257e4e50dcc10d433fb62130d5199dbf7b35c917
Sha256: b6519642f44cd100d916fd07fc64ddd800f26448e43289f769ce46e186ada150
                                        
                                            GET /tags/r?containerTagId=7901&sku= HTTP/1.1 
Host: www.awltovhc.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         63.215.202.80
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: Resin/3.1.14
P3P: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT"
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Expires: Sun, 13 Aug 2017 04:09:37 GMT
Connection: close
Transfer-Encoding: chunked
Date: Sun, 13 Aug 2017 04:09:36 GMT


--- Additional Info ---
Magic:  HTML document text
Size:   26
Md5:    b256d97fbb697428b7a1286ea33539c0
Sha1:   7e4e54e0434406746420141881f419ac165d3edc
Sha256: f70b370debd085dd9e9fb6495c796cdccf41c44574cc185dbe124f3ea8237623
                                        
                                            GET /tags/target.php?source=508 HTTP/1.1 
Host: email-reflex.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         80.70.210.161
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 13 Aug 2017 04:09:37 GMT
Transfer-Encoding: chunked
X-Powered-By: PHP/5.5.38-1~dotdeb+7.1
Set-Cookie: uuid=388b99c0-7fdd-11e7-9efb-005056a8120f; expires=Sun, 20-Aug-2017 04:09:37 GMT; Max-Age=604800 rivi=1; expires=Mon, 14-Aug-2017 04:09:37 GMT; Max-Age=86400
Location: https://itm.ivitrack.com/v1/eperflex/itm.gif
P3P: policyref="/w3c/p3p.xml", CP="CAO PSA OUR"


--- Additional Info ---
                                        
                                            GET /ads/user-lists/961034102/?value=0&label=TICNCJKO0AQQ9u6gygM&guid=ON&script=0&cdct=2&is_vtc=1&random=1912666658&fpvtc=/961034102/%3Fvalue%3D0%26label%3DTICNCJKO0AQQ9u6gygM%26guid%3DON%26script%3D0%26random%3D1124194953%26cdct%3D2%26is_vtc%3D1 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         216.58.209.132
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://www.google.no/ads/user-lists/961034102/?value=0&label=TICNCJKO0AQQ9u6gygM&guid=ON&script=0&cdct=2&is_vtc=1&random=1912666658&fpvtc=/961034102/%3Fvalue%3D0%26label%3DTICNCJKO0AQQ9u6gygM%26guid%3DON%26script%3D0%26random%3D1124194953%26cdct%3D2%26is_vtc%3D1&ipr=y&ulfeg=n
Cache-Control: private, max-age=43200
Date: Sun, 13 Aug 2017 04:09:35 GMT
Expires: Sun, 13 Aug 2017 04:09:35 GMT
X-Content-Type-Options: nosniff
Server: adclick_server
Content-Length: 510
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   510
Md5:    4a587db4f06a05a8015a3706568a0f97
Sha1:   0cf38544ebfed3c540babebb7cdd8be6734ebd0d
Sha256: ee8817f36922605c44b178c1ebba827d1b9de000411af55137f0c4a97a9a28f6
                                        
                                            GET /Serving?cn=ot&onetagid=5074&dispType=js&sync=0&sessionid=7633175968807954505&pageurl=$$https%3A//auth.netatmo.com/en-US/access/checklogin%3Fmessage%3D__NOT_LOGGED%26next_url%3Dhttp%253A%252F%252Fmy.netatmo.com%252F$$&activityValues=$$tp_env_template=category_main&tp_env_language=en-US&tp_env_work=prod&tp_env_channel=d&tp_env_country=NO$$&acp=$$tp_page_cat1=&tp_page_name=&tp_env_template=category_main&tp_env_language=en-US&tp_product_id=&tp_product_item_id=&tp_product_sku=&tp_product_name=&tp_product_category=&tp_order_products_number=$$&ns=0&rnd=5071672467953562 HTTP/1.1 
Host: bs.serving-sys.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         80.252.91.53
HTTP/1.1 200
Content-Type: text/html; charset=UTF-8
                                        
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Encoding: gzip
Expires: Sun, 05-Jun-2005 22:00:00 GMT
Server: Microsoft-IIS/7.5
Set-Cookie: OT_5074=1 OT2=0001fi1giU; expires=Sat, 11-Nov-2017 00:09:00 GMT; domain=.serving-sys.com; path=/ eyeblaster=; expires=Mon, 01-Jan-2000 00:00:00 GMT; domain=.serving-sys.com; path=/ u2=2d013515-6b7c-4a97-9c89-41d20a739b404fL080; expires=Sat, 11-Nov-2017 00:09:00 GMT; domain=.serving-sys.com; path=/
Access-Control-Allow-Origin: *
X-Powered-By: ASP.NET
P3P: CP="NOI DEVa OUR BUS UNI"
Date: Sun, 13 Aug 2017 04:09:36 GMT
Content-Length: 480


--- Additional Info ---
Magic:  gzip compressed data, from NTFS filesystem (NT)
Size:   480
Md5:    41c5d09946662977d84fb75d7503b2ad
Sha1:   7c0063bdf7b1a14060256f0f8d143f8fd706a28a
Sha256: 7d9e46401abf240a4362f4e2682aa50f37de152a75711b3d268b9c1437d6f6bf
                                        
                                            GET /ads/user-lists/961034102/?value=0&label=TICNCJKO0AQQ9u6gygM&guid=ON&script=0&cdct=2&is_vtc=1&random=1912666658&fpvtc=/961034102/%3Fvalue%3D0%26label%3DTICNCJKO0AQQ9u6gygM%26guid%3DON%26script%3D0%26random%3D1124194953%26cdct%3D2%26is_vtc%3D1&ipr=y&ulfeg=n HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         216.58.209.131
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sun, 13 Aug 2017 04:09:37 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Server: adclick_server
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /code_revisions/000/000/118/original/yieldify_1472724462.js?1472724467 HTTP/1.1 
Host: d33wq5gej88ld6.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         13.33.99.78
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 87289
Connection: keep-alive
Date: Wed, 12 Jul 2017 17:06:51 GMT
Last-Modified: Thu, 01 Sep 2016 10:07:48 GMT
Etag: "7bad128ad299c50cdcb7fc73ba06d5ed"
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
Age: 16228
X-Cache: Hit from cloudfront
Via: 1.1 e1ee31be9234bb6cbe06c324c0f40cc2.cloudfront.net (CloudFront)
X-Amz-Cf-Id: u_U1iM5uJ2inaW92GLdEmYbGykFdf9b06T0dHI-Nks22pAyhoT9PJA==


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   87289
Md5:    7bad128ad299c50cdcb7fc73ba06d5ed
Sha1:   22e8edd1d3b9468a5c4854e036e8027d682c8ef8
Sha256: 2fe34e94aa939055cc2f43ff798ec17f42cd7b3ca9c98c23cccf96c1fb801def
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Date: Sun, 13 Aug 2017 04:09:38 GMT
Etag: "598f6a06-1d7"
Expires: Sat, 19 Aug 2017 16:09:38 GMT
Last-Modified: Sat, 12 Aug 2017 20:50:14 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    7a7724f712df0037f60d1350b43cd512
Sha1:   7f5cab9db60a6bba62387a1c473ce17f12293aa0
Sha256: 9436e8781b00667ded88dd60ec93e1c240179b9d94b7a399acfd4e480676994c
                                        
                                            GET /s3/?tcs=2338&rand=0.3229520033732546&pt=category_main HTTP/1.1 
Host: netatmo.commander1.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: tc_cj_v2=%5Ecl_%5Dny%5B%5D%5D_mmZZZZZZKOJLOSQMQQJJJZZZ%5D

                                         
                                         95.131.143.207
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Date: Sun, 13 Aug 2017 04:09:37 GMT
Content-Length: 20
Connection: close
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADM DEV PSA OUR IND UNI PUR COM NAV INT STA"
Set-Cookie: TCID=201708130609372666455488; expires=Mon, 13-Aug-2018 04:09:37 GMT; path=/; domain=.commander1.com
Location: //netatmo.commander1.com/s3/?firsttime=1&tcs=2338&rand=0.3229520033732546&pt=category_main
Vary: Accept-Encoding
Content-Encoding: gzip
Server: web
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /reach?tc_firsttime=1&tc_s=2338 HTTP/1.1 
Host: engage.commander1.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: TCID=201708130609371036670461

                                         
                                         95.131.143.205
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sun, 13 Aug 2017 04:09:38 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Set-Cookie: TCID=201708130609371036670461; Domain=.commander1.com; Path=/; Expires=Mon, 13 Aug 2018 04:09:38 GMT; HttpOnly
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADM DEV PSA OUR IND UNI PUR COM NAV INT STA"
Cache-Control: private, max-age=486000, pre-check=486000
Pragma: private
Expires: Sat, 11 Nov 2017 04:09:38 GMT
Server: web
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   57
Md5:    4fee2f09567bfbe5919058ee79ea0855
Sha1:   fc03b6afb75f11038eb4e7af36b61846d4a390b4
Sha256: 0ab4ad4e166f3ae2306c8217d6694deef88d2bca99d79e0d52f228c67980994b
                                        
                                            GET /v1/eperflex/itm.gif HTTP/1.1 
Host: itm.ivitrack.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         151.249.91.218
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sun, 13 Aug 2017 04:09:38 GMT
Server: PWS/8.2.1.6.8
X-Px: ms h0-s39.p1-arn ( h0-s42.p1-arn), ms h0-s42.p1-arn ( origin)
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 42
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /yieldify/campaigns.json?visit=1&yi_sign_out_class=&yi_sign_out_class_text=&yi_session_counter=1&visited_pages=&swidth=1176&sheight=754&callback=yiel.initializeCampaigns&yi_shopping_value=-1&basket=-1&user_agent=Mozilla%2F5.0%20(Windows%3B%20U%3B%20Windows%20NT%206.1%3B%20en-US%3B%20rv%3A1.9.2.13)%20Gecko%2F20101203%20Firefox%2F3.6.13&yieldify_id=4706&vt=8a129ce6-f061-4726-b85c-b5d2f67f47af&loca=https%3A%2F%2Fauth.netatmo.com%2Fen-US%2Faccess%2Fchecklogin%3Fmessage%3D__NOT_LOGGED%26next_url%3Dhttp%253A%252F%252Fmy.netatmo.com%252F&referrer=&original_referrer=&combined_referrer=null HTTP/1.1 
Host: app.yieldify.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         34.249.224.53
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=utf-8
                                        
Content-Encoding: gzip
Date: Sun, 13 Aug 2017 04:09:38 GMT
Server: nginx/1.8.1 + Phusion Passenger 4.0.60
Status: 200 OK
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Powered-By: Phusion Passenger 4.0.60
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Sun Aug 13 06:09:38 2017
Size:   179
Md5:    4b73f4631166c8786ed80343844a8a35
Sha1:   e7be2e162d97019f32b590c6104ae6869c492bed
Sha256: e0703dd374c6598984715fdbf370c4b420ecf124dcff893cfa3719d85a55384b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         13.33.99.71
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Date: Sun, 13 Aug 2017 04:09:38 GMT
Etag: "598faa75-1d7"
Expires: Sat, 19 Aug 2017 16:09:38 GMT
Last-Modified: Sun, 13 Aug 2017 01:25:09 GMT
Server: ECS (lga/1385)
X-Cache: Miss from cloudfront
Via: 1.1 4cf8078ff36de28f36ad4268309fc75d.cloudfront.net (CloudFront)
X-Amz-Cf-Id: v97nUR8xJv4Pc8LJVGZurDyNfhZ3tz3GxbrWsK2RHwSFvRNb76gOYA==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    64410939064c85781873f15280d83e8e
Sha1:   9c3e2617cbe760c0618ca8a73bfd2b3c53f3d848
Sha256: 9feb00b78f48f259e7ae2ee535561bf4b079f73a2d3bca548779630762838850
                                        
                                            GET /tr/?id=292716490799017&ev=fb_page_view&dl=https%3A%2F%2Fauth.netatmo.com%2Fen-US%2Faccess%2Fchecklogin%3Fmessage%3D__NOT_LOGGED%26next_url%3Dhttp%253A%252F%252Fmy.netatmo.com%252F&rl=&if=false&ts=1502597374955&es=APP HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         157.240.3.35
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sun, 13 Aug 2017 04:09:38 GMT
Expires: Sun, 13 Aug 2017 04:09:38 GMT
Last-Modified: Fri, 21 Dec 2012 00:00:01 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Set-Cookie: fr=0aOhWIDLe7nkgECbW..BZj9EC...1.0.BZj9EC.; expires=Saturday, 11-Nov-2017 04:09:38 GMT; path=/; domain=.facebook.com; HttpOnly; secure
Server: proxygen
Connection: keep-alive
Content-Length: 44


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   44
Md5:    b798f4ce7359fd815df4bdf76503b295
Sha1:   f8cc6addf1707ad236ad9970b0a48f9733d07da5
Sha256: 10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
                                        
                                            GET /s3/?firsttime=1&tcs=2338&rand=0.3229520033732546&pt=category_main HTTP/1.1 
Host: netatmo.commander1.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: tc_cj_v2=%5Ecl_%5Dny%5B%5D%5D_mmZZZZZZKOJLOSQMQQJJJZZZ%5D; TCID=201708130609372666455488

                                         
                                         95.131.143.207
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sun, 13 Aug 2017 04:09:38 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADM DEV PSA OUR IND UNI PUR COM NAV INT STA"
Set-Cookie: TCID=201708130609372666455488; expires=Mon, 13-Aug-2018 04:09:38 GMT; path=/; domain=.commander1.com TCSESSION=201708130609389829542573; path=/; domain=netatmo.commander1.com
Cache-Control: private, max-age=486000, pre-check=486000
Pragma: private
Expires: Sat, 11 Nov 17 06:09:38 +0100
Server: web
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   54
Md5:    88dcd7871047159715d7f44b58f38d73
Sha1:   42fcfec12054feaca65da3fc6a821caef6fc701e
Sha256: 2b58eb0ca672e1bd4664d396ebdcbd97e51edbe64b682592125e79a7a58d3ab4
                                        
                                            GET /i?stm=1502597378106&e=ue&ue_px=eyJzY2hlbWEiOiJpZ2x1OmNvbS5zbm93cGxvd2FuYWx5dGljcy5zbm93cGxvdy91bnN0cnVjdF9ldmVudC9qc29uc2NoZW1hLzEtMC0wIiwiZGF0YSI6eyJkYXRhIjp7ImV0IjoiUGFnZVZpZXcifX19&tv=1-0.0.0&tna=primary&aid=4706&p=web&tz=Europe%2FBerlin&lang=en-US&cs=UTF-8&f_pdf=1&f_qt=0&f_realp=0&f_wma=1&f_dir=0&f_fla=1&f_java=1&f_gears=0&f_ag=0&res=1176x885&cd=24&cookie=1&eid=4e869a88-872f-458c-b19d-1c11bc647ebd&dtm=1502597378059&vp=1176x754&ds=1223x1957&vid=1&sid=0d01ebe7-212a-4eec-9c34-23e7bccb21f5&duid=8a129ce6-f061-4726-b85c-b5d2f67f47af&url=https%3A%2F%2Fauth.netatmo.com%2Fen-US%2Faccess%2Fchecklogin%3Fmessage%3D__NOT_LOGGED%26next_url%3Dhttp%253A%252F%252Fmy.netatmo.com%252F&cx=eyJzY2hlbWEiOiJpZ2x1OmNvbS5zbm93cGxvd2FuYWx5dGljcy5zbm93cGxvdy9jb250ZXh0cy9qc29uc2NoZW1hLzEtMC0xIiwiZGF0YSI6W119 HTTP/1.1 
Host: dc.yieldify.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         52.213.226.78
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sun, 13 Aug 2017 04:09:38 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
Set-Cookie: sp=575c644e-14f8-47ed-a4dc-6d9ee7f28ebc; Path=/; Domain=dc.yieldify.com; Expires=Mon, 13 Aug 2018 04:09:38 GMT
Vary: Origin
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    fb02f374b8f73825415db1bccd4bd76d
Sha1:   b103aa629cacdd90b39538a7561da7f8e49ad73f
Sha256: caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
                                        
                                            POST / HTTP/1.1 
Host: ss.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1609
Content-Transfer-Encoding: binary
Cache-Control: max-age=465194, public, no-transform, must-revalidate
Last-Modified: Fri, 11 Aug 2017 13:21:26 GMT
Expires: Fri, 18 Aug 2017 13:21:26 GMT
Date: Sun, 13 Aug 2017 04:09:38 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1609
Md5:    bf7be74fbe2eb0904e96823f799b3d49
Sha1:   1c629acb6176592e7bf545a857de7270aae6e4f8
Sha256: 095d1248ecc16d6db22a4241a9e1148f845340016dfe1e0ab3f739c9b18f84d4
                                        
                                            GET /geolocation.json HTTP/1.1 
Host: geo.yieldify.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Origin: https://auth.netatmo.com

                                         
                                         52.50.240.131
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip
Date: Sun, 13 Aug 2017 04:09:38 GMT
Etag: W/"7c-g3usYbK8/jg3l8UI1wBcVCUgj4I"
Expires: Sat, 01 Jan 1972 00:00:00 GMT
Pragma: no-cache
Server: nginx/1.8.1
X-Content-Type-Options: nosniff
X-Powered-By: Express
Content-Length: 126
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   126
Md5:    b4324b1483e9c6017c7316b68d1cba69
Sha1:   a1f5ab71c3edfc88ad5fb1521f26323e17ecec9c
Sha256: 066926692e2fce28692afc10d29df175e8abb515a9ea2eb273078469da38eaa6
                                        
                                            GET /j/roundtrip.js HTTP/1.1 
Host: s.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         88.221.72.224
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
x-amz-id-2: nrzMDKoSzOJIg3Z/XKS6rUBj2cKzXwejfbBSB4h91EFQDPxoZmIewNUi0aXRaoc4/5d9pUlTfjU=
x-amz-request-id: EFC26CCBFC09D6CE
Last-Modified: Thu, 01 Jun 2017 18:26:48 GMT
Etag: "2f435e54dc8269d75f07c013612d63dd"
Cache-Control: max-age=300, must-revalidate
x-amz-version-id: R5lZgL5Vf4YSub4wvlfYTYRVXmsCA67G
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 13 Aug 2017 04:09:38 GMT
Content-Length: 8171
Connection: keep-alive
Access-Control-Max-Age: 600
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   8171
Md5:    493c1d1f3b78b6a395127185dc93ce18
Sha1:   7e958b0767fa3706a1f9430f9fe3209034a0c91b
Sha256: 2d3311f34d57a15dde73c210e88119e7f18f5bf14cb838a59cb111c06650ce76
                                        
                                            GET /yieldify-styles-min.css HTTP/1.1 
Host: dwmvwp56lzq5t.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         13.33.99.51
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 1072
Connection: keep-alive
Date: Sat, 22 Jul 2017 04:07:23 GMT
Last-Modified: Tue, 24 May 2016 13:08:54 GMT
Etag: "29857cb26b85c5ef1661bad3f0c648e2"
x-amz-version-id: O4rt2QxcETW__8W7_zV_RswavfwbAikC
Accept-Ranges: bytes
Server: AmazonS3
Age: 74910
X-Cache: Hit from cloudfront
Via: 1.1 11a727876922c83c000e3ada668fa181.cloudfront.net (CloudFront)
X-Amz-Cf-Id: d6LqJv8KvHSF88n33HvPUvrwloX7yDVNiOgfElvszUOWhuU8Yysb_g==


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   1072
Md5:    29857cb26b85c5ef1661bad3f0c648e2
Sha1:   82d8a2ea44ef311b05760ab0766112c7cad40676
Sha256: 981971b7e6166d423d14fb3781cc8217630ae5155f075c22c76a54097f2e9828
                                        
                                            POST / HTTP/1.1 
Host: gp.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1415
Content-Transfer-Encoding: binary
Cache-Control: max-age=483323, public, no-transform, must-revalidate
Last-Modified: Fri, 11 Aug 2017 18:20:49 GMT
Expires: Fri, 18 Aug 2017 18:20:49 GMT
Date: Sun, 13 Aug 2017 04:09:39 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1415
Md5:    8b2fb02ba5e2bb9fe0a5734fd7778c20
Sha1:   7d174ecd497d6966a74ae73f3f95a2eaa13d34c8
Sha256: 1e3a07088d3bbb99989aae952bbeeb9347e1dd9db0fca724fef982cb6ee754a3
                                        
                                            GET /pixel/SOGDL24KHVGORCILRRJKXY/QWZSYGFGEJCODPP6EWA7UI?pv=634191913.8953767&cookie=&adroll_s_ref=&keyw=&adroll_external_data=product_id%3D&arrfrr=https%3A%2F%2Fauth.netatmo.com%2Fen-US%2Faccess%2Fchecklogin%3Fmessage%3D__NOT_LOGGED%26next_url%3Dhttp%253A%252F%252Fmy.netatmo.com%252F HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         54.243.251.148
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 13 Aug 2017 04:09:39 GMT
Location: https://s.adroll.com/pixel/SOGDL24KHVGORCILRRJKXY/QWZSYGFGEJCODPP6EWA7UI/VT5IGZM4VVD43PM2K3OPHQ.js
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.10.2
Set-Cookie: __adroll=e6da342c9904944988bb3019f2592ce2; Version=1; Expires=Wed, 12-Sep-2018 04:09:38 GMT; Max-Age=34128000; Path=/
X-Advertisable-Eid: SOGDL24KHVGORCILRRJKXY
X-Conversion-Value: 0.0
X-Pixel-Eid: QWZSYGFGEJCODPP6EWA7UI
X-Rule: *
X-Segment-Eid: VT5IGZM4VVD43PM2K3OPHQ
X-Segment-Name: *
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /pixel/SOGDL24KHVGORCILRRJKXY/QWZSYGFGEJCODPP6EWA7UI/VT5IGZM4VVD43PM2K3OPHQ.js HTTP/1.1 
Host: s.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         88.221.72.224
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
x-amz-id-2: d3XyUAuSV3ukcY3AqFkXZjOiHPtEJPemCM31IJSFy/5yrUKp0eefIoFT3Ycah5BITi2VwjEBmaw=
x-amz-request-id: 951349310FEEB88F
Last-Modified: Wed, 12 Jul 2017 21:45:10 GMT
Etag: "c956598ab61d273d63cd7c52145ce734"
Cache-Control: max-age=300, must-revalidate
x-amz-version-id: 5p129Ux7c3IwlpxT3jziFwD0Vtkr7dUw
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 13 Aug 2017 04:09:39 GMT
Content-Length: 1753
Connection: keep-alive
Access-Control-Max-Age: 600
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1753
Md5:    6e273e7796a355582708dcc294a3f677
Sha1:   98a8b7582bc6d28be2e002f39e600d44feb647d1
Sha256: 0d4fc6b4c1fc6cfb09dc2da987fd4bf648500fe6e8a84e79d86149217cdf0574
                                        
                                            GET /cm/n/out HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: __adroll=e6da342c9904944988bb3019f2592ce2

                                         
                                         54.243.251.148
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 13 Aug 2017 04:09:39 GMT
Location: https://pixel.rubiconproject.com/tap.php?v=194538&nid=3644&put=ZTZkYTM0MmM5OTA0OTQ0OTg4YmIzMDE5ZjI1OTJjZTI&expires=365
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.10.2
Set-Cookie: __adroll=e6da342c9904944988bb3019f2592ce2; Version=1; Expires=Wed, 12-Sep-2018 04:09:38 GMT; Max-Age=34128000; Path=/
Content-Length: 124
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   124
Md5:    3e8db91f053d04fea021f09c9ee56ed2
Sha1:   e894a08a078a4bac8d624d90b6ac20d5835cecd3
Sha256: fa25c450aea1e83a5d1ce7ee426a1b1dc5e4268cb32e79dcd633fafd576dac5b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Date: Sun, 13 Aug 2017 04:09:39 GMT
Etag: "598fa6eb-1d7"
Expires: Sat, 19 Aug 2017 16:09:39 GMT
Last-Modified: Sun, 13 Aug 2017 01:10:03 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    180ec0192f350efc79567780b2ab2616
Sha1:   2212b8b5db0c635a0fa5cfb3f77b5bbe0f669cba
Sha256: 04b5cff446fc7860e04e6c6d4f13285bb6a31ba1bc9a81eb3f9dcef4cfdd89ad
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Date: Sun, 13 Aug 2017 04:09:39 GMT
Etag: "598f9d91-1d7"
Expires: Sat, 19 Aug 2017 16:09:39 GMT
Last-Modified: Sun, 13 Aug 2017 00:30:09 GMT
Server: ECS (arn/45E4)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    1ef734b057700df019ea55e16aeadc83
Sha1:   a98d59320a8ca1aaada26acc4b322ae2e71fe4d7
Sha256: 61be5e7e2729e618f8b3c067df8e24e4cae4e384a3df5fdd6f756a9a01d738a8
                                        
                                            GET /cm/x/out HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: __adroll=e6da342c9904944988bb3019f2592ce2

                                         
                                         54.243.251.148
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 13 Aug 2017 04:09:39 GMT
Location: https://ib.adnxs.com/pxj?bidder=172&seg=802787&action=setuid('ZTZkYTM0MmM5OTA0OTQ0OTg4YmIzMDE5ZjI1OTJjZTI')
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.10.2
Set-Cookie: __adroll=e6da342c9904944988bb3019f2592ce2; Version=1; Expires=Wed, 12-Sep-2018 04:09:39 GMT; Max-Age=34128000; Path=/
Content-Length: 113
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   113
Md5:    00f110617ce7d90f51c258ad9abde519
Sha1:   d5d98375ad713353b5943c6cf73fa1ec1990b048
Sha256: 8c019798909cdbc688c6b2bb3c8724b1c9c4d2ce2cb0b128154d2ead8ec016bc
                                        
                                            GET /tap.php?v=194538&nid=3644&put=ZTZkYTM0MmM5OTA0OTQ0OTg4YmIzMDE5ZjI1OTJjZTI&expires=365 HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         213.19.162.90
HTTP/1.1 307 Temporary Redirect
                                        
Set-Cookie: c=1; Path=/
Location: /tap.php?cookie_redirect=1&v=194538&nid=3644&put=ZTZkYTM0MmM5OTA0OTQ0OTg4YmIzMDE5ZjI1OTJjZTI&expires=365
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Content-Length: 0
Date: Sun, 13 Aug 2017 04:09:39 GMT
Server: Rubicon Project


--- Additional Info ---
                                        
                                            GET /tap.php?cookie_redirect=1&v=194538&nid=3644&put=ZTZkYTM0MmM5OTA0OTQ0OTg4YmIzMDE5ZjI1OTJjZTI&expires=365 HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: c=1

                                         
                                         213.19.162.90
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
X-RPHost: DWpk6HUHU143TCowGsuS2w
Set-Cookie: rpb=194538%3D1; Domain=.rubiconproject.com; Expires=Tue, 12-Sep-2017 04:09:39 GMT; Path=/ put_3644=ZTZkYTM0MmM5OTA0OTQ0OTg4YmIzMDE5ZjI1OTJjZTI; Domain=.rubiconproject.com; Expires=Mon, 13-Aug-2018 03:59:59 GMT; Path=/ rpx=194538%3D66740%2C0%2C1%2C%2C; Domain=.pixel.rubiconproject.com; Expires=Tue, 12-Sep-2017 04:09:39 GMT; Path=/ khaos=J6A7OMAX-1C-ILDH; Domain=.rubiconproject.com; Expires=Sun, 11-Feb-2018 16:09:39 GMT; Path=/
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Connection: keep-alive
Content-Length: 42
Date: Sun, 13 Aug 2017 04:09:39 GMT
Server: Rubicon Project


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST / HTTP/1.1 
Host: gn.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1419
Content-Transfer-Encoding: binary
Cache-Control: max-age=515374, public, no-transform, must-revalidate
Last-Modified: Sat, 12 Aug 2017 03:16:29 GMT
Expires: Sat, 19 Aug 2017 03:16:29 GMT
Date: Sun, 13 Aug 2017 04:09:39 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1419
Md5:    92d73c425a2e350578646c0ace2ef8a4
Sha1:   3de6b71f3f3dca9b3498ad4a804ae6d04fa14fe3
Sha256: b940d5ff9aa0da61c398a771069043ba4986d6b299ca30d61137b07ccb8c3a3b
                                        
                                            GET /fb/tr/?id=1551078221805731&ev=ViewContent&cd[content_type]=product&cd[content_ids]=adroll_dummy_product_&cd[application_id]=321379434608647&cd[product_catalog_id]=827175904044220 HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: __adroll=e6da342c9904944988bb3019f2592ce2

                                         
                                         54.243.251.148
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 13 Aug 2017 04:09:39 GMT
Location: https://www.facebook.com/tr/?id=1551078221805731&ev=ViewContent&cd[content_type]=product&cd[content_ids]=adroll_dummy_product_&cd[application_id]=321379434608647&cd[product_catalog_id]=827175904044220&cd[external_id]=5to0LJkElEmIuzAZ8lks4g
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.10.2
Set-Cookie: __adroll=e6da342c9904944988bb3019f2592ce2; Version=1; Expires=Wed, 12-Sep-2018 04:09:39 GMT; Max-Age=34128000; Path=/
Content-Length: 246
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   246
Md5:    45bc53bf5e630f44e2fb52fa42073a8f
Sha1:   562abdf9155fdb4348e96e76a800e9cdadb93f68
Sha256: 608fea8deed8037da485f7eaa30141d322e950741fa3a95827a183922ded501f
                                        
                                            GET /cm/r/out HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: __adroll=e6da342c9904944988bb3019f2592ce2

                                         
                                         54.243.251.148
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 13 Aug 2017 04:09:39 GMT
Location: https://ads.yahoo.com/pixel?id=2498203&t=2&piggyback=https%3A%2F%2Fads.yahoo.com%2Fcms%2Fv1%3Fesig%3D1~bf4e7dc4546a90c08591652d78a230d3f2ef5733%26nwid%3D10001032567%26sigv%3D1
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.10.2
Set-Cookie: __adroll=e6da342c9904944988bb3019f2592ce2; Version=1; Expires=Wed, 12-Sep-2018 04:09:38 GMT; Max-Age=34128000; Path=/
Content-Length: 181
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   181
Md5:    a337d6eefc96a6a7e3c49729614293b7
Sha1:   d884b23791a9c66c3e6d30d3280430b2eaeb28c6
Sha256: 01928e639cb766d15e39dded419541a8953944e79cd475c0926d67654b8901f7
                                        
                                            GET /cm/f/out HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: __adroll=e6da342c9904944988bb3019f2592ce2

                                         
                                         54.243.251.148
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 13 Aug 2017 04:09:39 GMT
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.10.2
Set-Cookie: __adroll=e6da342c9904944988bb3019f2592ce2; Version=1; Expires=Wed, 12-Sep-2018 04:09:38 GMT; Max-Age=34128000; Path=/
Content-Length: 35
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 87a, 2 x 2
Size:   35
Md5:    d783ae3760db1e4d2c5b1599ebcf30be
Sha1:   be29fcfa80c518eeb93840ee42932c3663d59e1d
Sha256: ce4e964329e64bb7128c1c1d602433a744b48f6dbc1212e65b2b5184bd8c6617
                                        
                                            GET /cm/l/out HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: __adroll=e6da342c9904944988bb3019f2592ce2

                                         
                                         54.243.251.148
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 13 Aug 2017 04:09:39 GMT
Location: https://idsync.rlcdn.com/377928.gif?partner_uid=e6da342c9904944988bb3019f2592ce2
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.10.2
Set-Cookie: __adroll=e6da342c9904944988bb3019f2592ce2; Version=1; Expires=Wed, 12-Sep-2018 04:09:38 GMT; Max-Age=34128000; Path=/
Content-Length: 86
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   86
Md5:    196cfd4e83eacd4e076382371e6d0ecd
Sha1:   47735455dc8bd914992a1ac6cab96762e6ff6ad0
Sha256: e5a0a4561f7d973f107c1f17126943cbd7449145244f0a2104d660b95179bdb7
                                        
                                            GET /cm/w/out HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: __adroll=e6da342c9904944988bb3019f2592ce2

                                         
                                         54.243.251.148
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 13 Aug 2017 04:09:39 GMT
Location: https://analytics.twitter.com/i/adsct?p_user_id=ZTZkYTM0MmM5OTA0OTQ0OTg4YmIzMDE5ZjI1OTJjZTI&p_id=823423
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.10.2
Set-Cookie: __adroll=e6da342c9904944988bb3019f2592ce2; Version=1; Expires=Wed, 12-Sep-2018 04:09:38 GMT; Max-Age=34128000; Path=/
Content-Length: 109
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   109
Md5:    029e9386060cf6d84115f2dcb70f1892
Sha1:   4df514aaa07fbf623817a2097b34775d2cd5dd0e
Sha256: b360b62478e76f13afd3fed5cb916e95aa3e18f6803690567726bf1199a0bb80
                                        
                                            GET /cm/b/out HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: __adroll=e6da342c9904944988bb3019f2592ce2

                                         
                                         54.243.251.148
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 13 Aug 2017 04:09:39 GMT
Location: https://x.bidswitch.net/sync?dsp_id=44&user_id=ZTZkYTM0MmM5OTA0OTQ0OTg4YmIzMDE5ZjI1OTJjZTI
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.10.2
Set-Cookie: __adroll=e6da342c9904944988bb3019f2592ce2; Version=1; Expires=Wed, 12-Sep-2018 04:09:38 GMT; Max-Age=34128000; Path=/
Content-Length: 96
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   96
Md5:    45bb381e4f1e617a23d57eb58ce3efd8
Sha1:   86ac3757d7948f84cda2943d1a60316868d6c072
Sha256: b0ef19dc42fe2500541a5809184abd5f8c098e5321b2008f72b5c0c26bf97a09
                                        
                                            GET /pxj?bidder=172&seg=802787&action=setuid(%27ZTZkYTM0MmM5OTA0OTQ0OTg4YmIzMDE5ZjI1OTJjZTI%27) HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         185.33.223.204
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.11.5
Date: Sun, 13 Aug 2017 04:09:41 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fpxj%3Fbidder%3D172%26seg%3D802787%26action%3Dsetuid%28%2527ZTZkYTM0MmM5OTA0OTQ0OTg4YmIzMDE5ZjI1OTJjZTI%2527%29
AN-X-Request-Uuid: 1219724d-0314-4070-abac-af32d4f81063
Set-Cookie: sess=1; Path=/; Max-Age=86400; Expires=Mon, 14-Aug-2017 04:09:41 GMT; Domain=.adnxs.com; HttpOnly uuid2=8795962030691977902; Path=/; Max-Age=7776000; Expires=Sat, 11-Nov-2017 04:09:41 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 319.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.222.239:80


--- Additional Info ---
                                        
                                            GET /bounce?%2Fpxj%3Fbidder%3D172%26seg%3D802787%26action%3Dsetuid%28%2527ZTZkYTM0MmM5OTA0OTQ0OTg4YmIzMDE5ZjI1OTJjZTI%2527%29 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: sess=1; uuid2=8795962030691977902

                                         
                                         185.33.223.204
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.11.5
Date: Sun, 13 Aug 2017 04:09:41 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: a3c128b0-5160-4f53-b378-94ced1d2440a
Set-Cookie: anj=dTM7k!M4/8DYRWSF']wIg2HaQoTPEe!@wnf]meq8dWME4(EW<KQ!K?n; Path=/; Max-Age=7776000; Expires=Sat, 11-Nov-2017 04:09:41 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Mon, 14-Aug-2017 04:09:41 GMT; Domain=.adnxs.com; HttpOnly uuid2=8795962030691977902; Path=/; Max-Age=7776000; Expires=Sat, 11-Nov-2017 04:09:41 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 319.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.222.59:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 13 Aug 2017 04:09:39 GMT
Server: Apache
Last-Modified: Thu, 10 Aug 2017 13:44:46 GMT
Expires: Thu, 17 Aug 2017 13:44:46 GMT
Etag: 144A2CD6AE7DAFEA23BF94BB0BCA1356DD838FC7
Cache-Control: max-age=379506,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp16
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    bd5511ead2e6ec9f0b8794afed7804ba
Sha1:   144a2cd6ae7dafea23bf94bb0bca1356dd838fc7
Sha256: 4cc4880c0b80a805562e30ba9b3204cf6dc9a787ee7b0491a29401e371b2bd71
                                        
                                            GET /cm/o/out HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: __adroll=e6da342c9904944988bb3019f2592ce2

                                         
                                         54.243.251.148
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 13 Aug 2017 04:09:39 GMT
Location: https://us-u.openx.net/w/1.0/sd?id=537103138&val=e6da342c9904944988bb3019f2592ce2
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.10.2
Set-Cookie: __adroll=e6da342c9904944988bb3019f2592ce2; Version=1; Expires=Wed, 12-Sep-2018 04:09:38 GMT; Max-Age=34128000; Path=/
Content-Length: 87
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   87
Md5:    a652042a65018b95a76f40d12fffb834
Sha1:   5e193b437e3a50e4118e16cd9d7dc71524a362c3
Sha256: 8cd62498bb0af0fe2544ef6f9565942c3f54f7ccf7179fbec696b003591d1541
                                        
                                            GET /cm/g/out?google_nid=adroll4 HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: __adroll=e6da342c9904944988bb3019f2592ce2

                                         
                                         54.243.251.148
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 13 Aug 2017 04:09:39 GMT
Location: https://cm.g.doubleclick.net/pixel?google_sc&google_nid=artb&google_hm=5to0LJkElEmIuzAZ8lks4g&google_ula=1535926
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.10.2
Set-Cookie: __adroll=e6da342c9904944988bb3019f2592ce2; Version=1; Expires=Wed, 12-Sep-2018 04:09:39 GMT; Max-Age=34128000; Path=/
Content-Length: 118
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   118
Md5:    48144fb1384d7b7d14623019f6765200
Sha1:   239b1904b92742709d714c2a53585658a5abaac4
Sha256: 7513b4b0fac9a1b6b1c3d7347547c114975e5fca72aa61d0d5bcc68d37cc0992
                                        
                                            POST / HTTP/1.1 
Host: ss.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1609
Content-Transfer-Encoding: binary
Cache-Control: max-age=557271, public, no-transform, must-revalidate
Last-Modified: Sat, 12 Aug 2017 14:55:34 GMT
Expires: Sat, 19 Aug 2017 14:55:34 GMT
Date: Sun, 13 Aug 2017 04:09:40 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1609
Md5:    affa5602840215598ed7c36e71268baf
Sha1:   b747b92542a7c34018711cbe50b4e56db186d9b0
Sha256: 3c791848531b5e48634d4d1fee5f431d867c3fe54115de5c11c2da4cf7bfda11
                                        
                                            GET /sync?dsp_id=44&user_id=ZTZkYTM0MmM5OTA0OTQ0OTg4YmIzMDE5ZjI1OTJjZTI HTTP/1.1 
Host: x.bidswitch.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         35.187.60.88
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx/1.12.0
Date: Sun, 13 Aug 2017 04:09:40 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=10
Cache-Control: no-cache, no-store, must-revalidate
Location: https://x.bidswitch.net/ul_cb/sync?dsp_id=44&user_id=ZTZkYTM0MmM5OTA0OTQ0OTg4YmIzMDE5ZjI1OTJjZTI
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: tuuid=092550b5-c24f-44ae-ade0-a051da904f61; path=/; expires=Mon, 13-Aug-2018 04:09:40 GMT; domain=.bidswitch.net tuuid_last_update=1502597380; path=/; expires=Mon, 13-Aug-2018 04:09:40 GMT; domain=.bidswitch.net c=1502597380; path=/; expires=Mon, 13-Aug-2018 04:09:40 GMT; domain=.bidswitch.net


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: gn.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1419
Content-Transfer-Encoding: binary
Cache-Control: max-age=408269, public, no-transform, must-revalidate
Last-Modified: Thu, 10 Aug 2017 21:31:36 GMT
Expires: Thu, 17 Aug 2017 21:31:36 GMT
Date: Sun, 13 Aug 2017 04:09:40 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1419
Md5:    b0fb80d193544f87f95401d7f10936dc
Sha1:   3b84de7fd226641ad9bde44ad17075a6bc892454
Sha256: ff29f7d100e0a3a719a078ac0d32640082ef755218300bc481217e1cb94e9b95
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Date: Sun, 13 Aug 2017 04:09:40 GMT
Etag: "598f83c8-1d7"
Expires: Sat, 19 Aug 2017 16:09:40 GMT
Last-Modified: Sat, 12 Aug 2017 22:40:08 GMT
Server: ECS (arn/459D)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    bda5411d7846ec872e7732bf0c8d62e4
Sha1:   1bedd39e09969d2f32fcc42da4389ee5df2d449a
Sha256: deb53ea563ce33f731a3a9ad2f548e2a86d482930584d20d7958b11d906824c5
                                        
                                            GET /ul_cb/sync?dsp_id=44&user_id=ZTZkYTM0MmM5OTA0OTQ0OTg4YmIzMDE5ZjI1OTJjZTI HTTP/1.1 
Host: x.bidswitch.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: tuuid=092550b5-c24f-44ae-ade0-a051da904f61; tuuid_last_update=1502597380; c=1502597380

                                         
                                         35.187.60.88
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx/1.12.0
Date: Sun, 13 Aug 2017 04:09:40 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=10
Cache-Control: no-cache, no-store, must-revalidate
Location: //s.pubmine.com/match?bidder_id=1&external_user_id=092550b5-c24f-44ae-ade0-a051da904f61
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: tuuid=092550b5-c24f-44ae-ade0-a051da904f61; path=/; expires=Mon, 13-Aug-2018 04:09:40 GMT; domain=.bidswitch.net tuuid_last_update=1502597380; path=/; expires=Mon, 13-Aug-2018 04:09:40 GMT; domain=.bidswitch.net


--- Additional Info ---
                                        
                                            GET /pixel?google_sc&google_nid=artb&google_hm=5to0LJkElEmIuzAZ8lks4g&google_ula=1535926 HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.209.98
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://d.adroll.com/cm/g/in?google_ula=1535926,0
Date: Sun, 13 Aug 2017 04:09:40 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 246
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUkfAuKy1tw0TwApy11328aohzAb72ntlwfex8SnZIx4T7KytTEUVQ; expires=Tue, 13-Aug-2019 04:09:40 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   246
Md5:    40d2b36d5c31c32bab1a4a300077069f
Sha1:   e498c12f5e6e0ab107098d70415ab69182a33234
Sha256: 8694eb9d8b8b957e709c402ca82d70e0fc1c0f2003642b9d131a8ee5cc05e5b0
                                        
                                            GET /w/1.0/sd?id=537103138&val=e6da342c9904944988bb3019f2592ce2 HTTP/1.1 
Host: us-u.openx.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         173.241.240.143
HTTP/1.1 302 Moved Temporarily
                                        
Set-Cookie: i=ad75838d-5972-4d83-93a7-6ab3f4a0ba8d|1502597380; Version=1; Expires=Mon, 13-Aug-2018 04:09:40 GMT; Max-Age=31536000; Domain=.openx.net; Path=/
Server: OXGW/11.107.1
P3P: CP="CUR ADM OUR NOR STA NID"
Location: https://us-u.openx.net/w/1.0/sd?cc=1&id=537103138&val=e6da342c9904944988bb3019f2592ce2
Date: Sun, 13 Aug 2017 04:09:40 GMT
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /pixel?id=2498203&t=2&piggyback=https%3A%2F%2Fads.yahoo.com%2Fcms%2Fv1%3Fesig%3D1~bf4e7dc4546a90c08591652d78a230d3f2ef5733%26nwid%3D10001032567%26sigv%3D1 HTTP/1.1 
Host: ads.yahoo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         217.12.15.83
HTTP/1.1 200 OK
                                        
Date: Sun, 13 Aug 2017 04:09:40 GMT
Content-Length: 0
Server: ATS
Age: 0
Connection: keep-alive
Strict-Transport-Security: max-age=0


--- Additional Info ---
                                        
                                            GET /w/1.0/sd?cc=1&id=537103138&val=e6da342c9904944988bb3019f2592ce2 HTTP/1.1 
Host: us-u.openx.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: i=ad75838d-5972-4d83-93a7-6ab3f4a0ba8d|1502597380

                                         
                                         173.241.240.143
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Vary: Accept
Server: OXGW/11.107.1
Pragma: no-cache
P3P: CP="CUR ADM OUR NOR STA NID"
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Date: Sun, 13 Aug 2017 04:09:40 GMT
Cache-Control: private, max-age=0, no-cache
Transfer-Encoding: chunked
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max speed
Size:   447
Md5:    db21f6bea8ed9e593ea45f953bd73113
Sha1:   cb25227f24ed55a8469429589a66ee508d3d1c78
Sha256: 35f5b6551e8266a83e01fe19f9ca417d0dc5e77f9e6c08fc06af5f2301b5af62
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 106
Content-Type: application/ocsp-request

                                         
                                         72.167.239.239
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 13 Aug 2017 04:09:40 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=119645, public, no-transform, must-revalidate
Last-Modified: Sun, 13 Aug 2017 03:08:43 GMT
Expires: Mon, 14 Aug 2017 15:08:43 GMT
Etag: "84e8bbb23d4cca7b6a19a5a3b07b1002fb38e7f1"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1775
Connection: close


--- Additional Info ---
Magic:  data
Size:   1775
Md5:    28a5d5344005a2b969c9bd1a4fefc7d6
Sha1:   84e8bbb23d4cca7b6a19a5a3b07b1002fb38e7f1
Sha256: e1877555339777b0f3c4550cd333c2a129573eb8bcaf79af1288b29f919e105f
                                        
                                            GET /tr/?id=1551078221805731&ev=ViewContent&cd[content_type]=product&cd[content_ids]=adroll_dummy_product_&cd[application_id]=321379434608647&cd[product_catalog_id]=827175904044220&cd[external_id]=5to0LJkElEmIuzAZ8lks4g HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: fr=0aOhWIDLe7nkgECbW..BZj9EC...1.0.BZj9EC.

                                         
                                         157.240.3.35
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sun, 13 Aug 2017 04:09:40 GMT
Expires: Sun, 13 Aug 2017 04:09:40 GMT
Last-Modified: Fri, 21 Dec 2012 00:00:01 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Server: proxygen
Connection: keep-alive
Content-Length: 44


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   44
Md5:    b798f4ce7359fd815df4bdf76503b295
Sha1:   f8cc6addf1707ad236ad9970b0a48f9733d07da5
Sha256: 10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
                                        
                                            GET /match?bidder_id=1&external_user_id=092550b5-c24f-44ae-ade0-a051da904f61 HTTP/1.1 
Host: s.pubmine.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         104.155.5.8
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx
Date: Sun, 13 Aug 2017 04:09:41 GMT
Content-Length: 0
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Location: https://s.pubmine.com/ul_cb/match?bidder_id=1&external_user_id=092550b5-c24f-44ae-ade0-a051da904f61
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Pragma: no-cache
Set-Cookie: tuuid=5dca6ca2-d95f-4bc5-a172-ba1858b015d6; path=/; expires=Tue, 13-Aug-2019 04:09:41 GMT tuuid_last_update=1502597381; path=/; expires=Tue, 13-Aug-2019 04:09:41 GMT


--- Additional Info ---
                                        
                                            GET /ul_cb/match?bidder_id=1&external_user_id=092550b5-c24f-44ae-ade0-a051da904f61 HTTP/1.1 
Host: s.pubmine.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: tuuid=5dca6ca2-d95f-4bc5-a172-ba1858b015d6; tuuid_last_update=1502597381

                                         
                                         104.155.5.8
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 13 Aug 2017 04:09:41 GMT
Content-Length: 43
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Pragma: no-cache
Set-Cookie: tuuid=5dca6ca2-d95f-4bc5-a172-ba1858b015d6; path=/; expires=Tue, 13-Aug-2019 04:09:41 GMT tuuid_last_update=1502597381; path=/; expires=Tue, 13-Aug-2019 04:09:41 GMT rum=!1,092550b5-c24f-44ae-ade0-a051da904f61,271840181; path=/; expires=Tue, 13-Aug-2019 04:09:41 GMT


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /i/adsct?p_user_id=ZTZkYTM0MmM5OTA0OTQ0OTg4YmIzMDE5ZjI1OTJjZTI&p_id=823423 HTTP/1.1 
Host: analytics.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F

                                         
                                         199.16.156.200
HTTP/1.1 200 OK
Content-Type: image/gif;charset=utf-8
                                        
Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0
Content-Encoding: gzip
Content-Length: 65
Date: Sun, 13 Aug 2017 04:09:41 GMT
Expires: Tue, 31 Mar 1981 05:00:00 GMT
Last-Modified: Sun, 13 Aug 2017 04:09:41 GMT
Pragma: no-cache
Server: tsa_b
Set-Cookie: personalization_id="v1_SthtXadNjh8DTgJNwED8RQ=="; Expires=Tue, 13 Aug 2019 04:09:41 UTC; Path=/; Domain=.twitter.com guest_id=v1%3A150259738149871829; Expires=Tue, 13 Aug 2019 04:09:41 UTC; Path=/; Domain=.twitter.com
Status: 200 OK
Strict-Transport-Security: max-age=631138519
x-connection-hash: d11db683c609c99c4c2eceb65bcb7523
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
x-response-time: 12
x-transaction: 0037812600886d90
x-twitter-response-tags: BouncerCompliant
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   65
Md5:    2627dd381327831be501962f01cb45a3
Sha1:   91ada0ee3df9d93cfdd195477d1ed3f86a798997
Sha256: bb5a836235f4765af8072f2021f06871fc1926ef66eb9a5e7dbe124eca13fef8
                                        
                                            GET /cm/g/in?google_ula=1535926,0 HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://auth.netatmo.com/en-US/access/checklogin?message=__NOT_LOGGED&next_url=http%3A%2F%2Fmy.netatmo.com%2F
Cookie: __adroll=e6da342c9904944988bb3019f2592ce2

                                         
                                         54.243.251.148
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 13 Aug 2017 04:09:41 GMT
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.10.2
Set-Cookie: __adroll=e6da342c9904944988bb3019f2592ce2-g_1502597381; Version=1; Expires=Wed, 12-Sep-2018 04:09:41 GMT; Max-Age=34128000; Path=/
X-Result: g.-1.-1.1535926.0.-1
Content-Length: 35
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 87a, 2 x 2
Size:   35
Md5:    d783ae3760db1e4d2c5b1599ebcf30be
Sha1:   be29fcfa80c518eeb93840ee42932c3663d59e1d
Sha256: ce4e964329e64bb7128c1c1d602433a744b48f6dbc1212e65b2b5184bd8c6617