firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1aac651ec250c598683dd17ca2002c07
11595ac82e017f95190c2a36dc77323a3fedcbfc
93fa640d042452ae8455d026e30e3b4594c13d4be65f3552a4b5edae027c02f9
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Backoff, Content-Length, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 10 Oct 2022 22:08:04 GMT
Expires: Mon, 10 Oct 2022 22:28:33 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 680c9e756bdd27fcfeee763a87afaa06.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: Psg8ivqWNmNyA59tRpVTRGa0n4IYg3wNpzfzI7C2vFgvJAUgk9y8VA==
Age: 1510
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 03c3cfc567661cca575e54ad505acd08
e73f7955b0c794a9cf8ff77b3ecaf436354521fe
50017e6eb57c5bcaa8dc74af6e3967362ec6b8f177a5bf722dd2d215698c4fa9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50017E6EB57C5BCAA8DC74AF6E3967362EC6B8F177A5BF722DD2D215698C4FA9"
Last-Modified: Sun, 09 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2601
Expires: Mon, 10 Oct 2022 23:16:35 GMT
Date: Mon, 10 Oct 2022 22:33:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3d0ffae9abfdf558a6286013a0201c8b
2dc8ea0000a1b0c0f849611fdd73429bca51bfad
8e19eab9b6d16819f9ef3920971542cbcf5dd18280617e2de1a3827f0c149398
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8E19EAB9B6D16819F9EF3920971542CBCF5DD18280617E2DE1A3827F0C149398"
Last-Modified: Sun, 09 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10241
Expires: Tue, 11 Oct 2022 01:23:55 GMT
Date: Mon, 10 Oct 2022 22:33:14 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: W+J+9AdR9QZV8jdqgoUbu3ffHlh7s7jC+p7jw+/wqxXJpVKxkKp24YKhGY9YB/iA/nyIlLhsxwM=
x-amz-request-id: EGNTHY81QJR7Z0H5
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 10 Oct 2022 22:32:41 GMT
age: 33
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 10 Oct 2022 22:33:14 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/
302 Found 0 B URL HTTP/1.1 www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert openphish Comcast Corporation
fortinet Phishing
GET /menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/ HTTP/1.1
Host: www.swancommunications.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Mon, 10 Oct 2022 22:33:14 GMT
Server: Apache
location: index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Mon, 10 Oct 2022 21:41:37 GMT
Expires: Mon, 10 Oct 2022 22:33:38 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 04bb33465149b34afca4988622dca584.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: HRaH1QHzJBCsumUMLiaeGclB6An-Nax-Vb57-9iQL0LM6SX7P4MkgA==
Age: 3097
ocsp.digicert.com/
200 OK 471 B IP
Hash d545bc725dcd5d6f1dfc10a8b35aeb3a
82d92587953dac8a05d691730b8318719328de6b
9d1e6f1bf4b1c138d9e07e67264cb9ac5090a1c338ff72c87e1758e187cccb24
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4997
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 22:33:14 GMT
Last-Modified: Mon, 10 Oct 2022 21:09:57 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff
200 OK 17 kB URL HTTP/1.1 www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1920), with CRLF line terminators
Hash 93725c706eda8c42b41bcca4d3e64969
72011789b5cc39176eebb2fe5eeeefc1fbcf362b
5668f66541c53b709dc5b04fc475dab7bb8251b3ebf7a2274a2eaa0db53992ef
GET /menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff HTTP/1.1
Host: www.swancommunications.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 10 Oct 2022 22:33:14 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 20:01:45 GMT
Accept-Ranges: bytes
Content-Length: 16803
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html
www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/tracking-aws.js
200 OK 2.5 kB URL HTTP/1.1 www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/tracking-aws.js
IP
File type ASCII text, with very long lines (2546), with no line terminators
Hash 576b123770b3c1ada8d4260344726960
c8716f7d0fe73d9edf5ec333e9fc5500f7543fe9
11da464f86f5ff9850e1ef53dd13336cfbfd38a8f3808d7826d0c1a2d925563f
Analyzer Verdict Alert fortinet Phishing
GET /menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/tracking-aws.js HTTP/1.1
Host: www.swancommunications.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff
HTTP/1.1 200 OK
Date: Mon, 10 Oct 2022 22:33:15 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 20:01:45 GMT
Accept-Ranges: bytes
Content-Length: 2546
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/lodash-slim.js
200 OK 23 kB URL HTTP/1.1 www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/lodash-slim.js
IP
File type ASCII text, with very long lines (1486)
Hash 542a4d4d47e89ca290d850a6a0ae09b4
56445e16057d5b725ae11f5e85db661120515299
49d0c079f8431833fb59275e68a7db8b9215dc52068ff63c179e32dfe618a8c4
Analyzer Verdict Alert fortinet Phishing
GET /menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/lodash-slim.js HTTP/1.1
Host: www.swancommunications.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff
HTTP/1.1 200 OK
Date: Mon, 10 Oct 2022 22:33:15 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 20:01:45 GMT
Accept-Ranges: bytes
Content-Length: 23346
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/1011719316x32.js
200 OK 1.7 kB URL HTTP/1.1 www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/1011719316x32.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (433)
Hash fa05120ba52f7ee87e3521b726d66fd0
d7ba5ed4796a436e942afac492ec02c4d9796e17
55b2a74a7498140a0e3d2e62e00a967fffac9a908c326d2294a1b37c0fb8b2f3
Analyzer Verdict Alert fortinet Phishing
GET /menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/1011719316x32.js HTTP/1.1
Host: www.swancommunications.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff
HTTP/1.1 200 OK
Date: Mon, 10 Oct 2022 22:33:15 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 20:01:45 GMT
Accept-Ranges: bytes
Content-Length: 1723
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/rta.js
404 Not Found 315 B URL HTTP/1.1 www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/rta.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/rta.js HTTP/1.1
Host: www.swancommunications.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff
HTTP/1.1 404 Not Found
Date: Mon, 10 Oct 2022 22:33:15 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/ttj
200 OK 7.4 kB URL HTTP/1.1 www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/ttj
IP
File type HTML document, ASCII text, with very long lines (7387), with no line terminators
Hash 89cf9988d16c15d5919e2efdeb341003
6554b529e37e27af64a11b0d3507073ca05fb822
0f108c7122c218a486594e6ddd029c00844979992aa9d7b00ea9d3816a3e5be5
Analyzer Verdict Alert fortinet Phishing
GET /menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/ttj HTTP/1.1
Host: www.swancommunications.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff
HTTP/1.1 200 OK
Date: Mon, 10 Oct 2022 22:33:15 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 20:01:45 GMT
Accept-Ranges: bytes
Content-Length: 7387
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/tracking-DTM.js
200 OK 1.6 kB URL HTTP/1.1 www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/tracking-DTM.js
IP
File type ASCII text, with very long lines (1624), with no line terminators
Hash 1fb3947058db50b6b3d0487328e3f86e
471f8733093ede4b0e075751bb89e0678d06a4f1
0df906e16d1ed57a686d542ac0e7a620eafb715c12ee0a0c648653b569e72a9b
Analyzer Verdict Alert fortinet Phishing
GET /menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/tracking-DTM.js HTTP/1.1
Host: www.swancommunications.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff
HTTP/1.1 200 OK
Date: Mon, 10 Oct 2022 22:33:15 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 20:01:45 GMT
Accept-Ranges: bytes
Content-Length: 1624
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/fonts-remote.css
200 OK 3.2 kB URL HTTP/1.1 www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/fonts-remote.css
IP
File type ASCII text, with very long lines (3243), with no line terminators
Hash 709e5291d3bbec4524a53edf4c343352
de3799da5fc172ae2a76c5b4716b1f621ae3c2c6
25910ca8aaacdd039f7e596b4f446ac4c71f67ff3911d5969dfba9b7f1a6688f
GET /menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/fonts-remote.css HTTP/1.1
Host: www.swancommunications.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff
HTTP/1.1 200 OK
Date: Mon, 10 Oct 2022 22:33:15 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 20:01:45 GMT
Accept-Ranges: bytes
Content-Length: 3243
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/scripts-responsive.js
200 OK 7.3 kB URL HTTP/1.1 www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/scripts-responsive.js
IP
File type ASCII text, with very long lines (7303), with no line terminators
Hash e98c1a1adf5539adda926dc57b56df92
3024e9e83dc44d9d9e6e7b1437110d68ca80e54f
aceb470e2f0767fe13270d4f84dc14e347889dd34762dd6eb095db9581051e89
Analyzer Verdict Alert fortinet Phishing
GET /menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/scripts-responsive.js HTTP/1.1
Host: www.swancommunications.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff
HTTP/1.1 200 OK
Date: Mon, 10 Oct 2022 22:33:15 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 20:01:45 GMT
Accept-Ranges: bytes
Content-Length: 7303
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/data.json
200 OK 169 B URL HTTP/1.1 www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/data.json
IP
File type ASCII text, with no line terminators
Hash d64e6c5a8ce0f0383b88a1be77b053ee
a316ca3df9822a7e638623d92e5aeacb3f4e3a2e
c3d83128029acb4b1c9ae295ea823c9adb93e1cfa1e81d200e30adba82b3d4d3
Analyzer Verdict Alert fortinet Phishing
GET /menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/data.json HTTP/1.1
Host: www.swancommunications.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff
HTTP/1.1 200 OK
Date: Mon, 10 Oct 2022 22:33:15 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 20:01:45 GMT
Accept-Ranges: bytes
Content-Length: 169
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/json
www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/jquery-3.js
200 OK 87 kB URL HTTP/1.1 www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/jquery-3.js
IP
File type ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
Analyzer Verdict Alert fortinet Phishing
GET /menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/jquery-3.js HTTP/1.1
Host: www.swancommunications.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff
HTTP/1.1 200 OK
Date: Mon, 10 Oct 2022 22:33:15 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 20:01:45 GMT
Accept-Ranges: bytes
Content-Length: 86927
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/tracking.js
200 OK 15 kB URL HTTP/1.1 www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/tracking.js
IP
File type ASCII text, with very long lines (14942)
Hash d8c65cf89a55791f45cf6eba34c0a6e9
05bf019faf116dfd1a9811a806e5bd0639d83c45
d1e2dfc4882d3951f8b5ce26f342fdbd83dcfc7c5d53cc455dc3703b706fc7c2
Analyzer Verdict Alert fortinet Phishing
GET /menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/tracking.js HTTP/1.1
Host: www.swancommunications.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff
HTTP/1.1 200 OK
Date: Mon, 10 Oct 2022 22:33:15 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 20:01:45 GMT
Accept-Ranges: bytes
Content-Length: 14964
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/vm-login-form-ad.js
200 OK 8.8 kB URL HTTP/1.1 www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/vm-login-form-ad.js
IP
Hash 0318627f2adf5aafb9520d94f30749a4
643454397eddf53c58e6766f58a519b0b444592c
1bdca04f41b797a00f1ac403070d6ea18a459754c41d383ffddf5b0991f04d9d
Analyzer Verdict Alert fortinet Phishing
GET /menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/vm-login-form-ad.js HTTP/1.1
Host: www.swancommunications.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff
HTTP/1.1 200 OK
Date: Mon, 10 Oct 2022 22:33:15 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 20:01:45 GMT
Accept-Ranges: bytes
Content-Length: 8775
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/moatad.js
200 OK 276 kB URL HTTP/1.1 www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/moatad.js
IP
File type ASCII text, with very long lines (761)
Size 276 kB (275951 bytes)
Hash 62628dc07dedc3f2a479575c2de3c899
a2e5f0a77a4df50476072170a47af42b28bcba02
2a150284ec831c47369e543eaaf6b57e2cbfc5102ff7d147efd3e12f26d53eaa
Analyzer Verdict Alert fortinet Phishing
GET /menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/moatad.js HTTP/1.1
Host: www.swancommunications.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff
HTTP/1.1 200 OK
Date: Mon, 10 Oct 2022 22:33:15 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 20:01:45 GMT
Accept-Ranges: bytes
Content-Length: 275951
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/satelliteLib-531bc4f46256650a84099973f0ed331f809ea5f4.js
200 OK 129 kB URL HTTP/1.1 www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/satelliteLib-531bc4f46256650a84099973f0ed331f809ea5f4.js
IP
File type ASCII text, with very long lines (32748)
Size 129 kB (129056 bytes)
Hash 01221af4231ddeec15ca85739ffc766c
f61a3d6cf1fc6262b0c1e9b8bad2c9d56dca1702
eab642baf412d4de18d20788e3784c47927549da84c4f0b5a0f6865fdbfb61a3
Analyzer Verdict Alert fortinet Phishing
GET /menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/satelliteLib-531bc4f46256650a84099973f0ed331f809ea5f4.js HTTP/1.1
Host: www.swancommunications.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff
HTTP/1.1 200 OK
Date: Mon, 10 Oct 2022 22:33:15 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 20:01:45 GMT
Accept-Ranges: bytes
Content-Length: 129056
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/styles-light.css
200 OK 45 kB URL HTTP/1.1 www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/styles-light.css
IP
File type ASCII text, with very long lines (45103), with no line terminators
Hash 0a0b49b52b3291d6b49b7713c4a4118d
8e720bff1874620ef556512d3c690c69da3c3255
e9838dd96e607f7db82a919db47ac8ead355133b2a0ac312517d76b1a9b47266
GET /menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/styles-light.css HTTP/1.1
Host: www.swancommunications.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff
HTTP/1.1 200 OK
Date: Mon, 10 Oct 2022 22:33:15 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 20:01:45 GMT
Accept-Ranges: bytes
Content-Length: 45103
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
dpm.demdex.net/id?d_visid_ver=2.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=DA11332E5321D0550A490D45%40AdobeOrg&d_nsid=0&ts=1665441195812
200 OK 1.2 kB URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=2.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=DA11332E5321D0550A490D45%40AdobeOrg&d_nsid=0&ts=1665441195812
IP
File type JSON data\012- , ASCII text, with very long lines (3454), with no line terminators
Hash 0a9a836eee45cf4df87d476170fc1568
e668239e613177cf7ff9f1287088c52ff8b554d6
c244c3a9d4921047ea3fa0cc028d78063973a6dd3fa5abada3d6830e36837855
GET /id?d_visid_ver=2.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=DA11332E5321D0550A490D45%40AdobeOrg&d_nsid=0&ts=1665441195812 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Origin: http://www.swancommunications.com
Connection: keep-alive
Referer: http://www.swancommunications.com/
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://www.swancommunications.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-2-v044-030456c97.edge-irl1.demdex.com 3 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=26863007931641530414508908970058843337; Max-Age=15552000; Expires=Sat, 08 Apr 2023 22:33:15 GMT; Path=/; Domain=.demdex.net
Vary: Origin
X-TID: /AizBqSfSEE=
Content-Length: 1171
Connection: keep-alive
www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/6d6e5a4b50313176614c77414143627a.gif
200 OK 43 B URL HTTP/1.1 www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/6d6e5a4b50313176614c77414143627a.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/6d6e5a4b50313176614c77414143627a.gif HTTP/1.1
Host: www.swancommunications.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff
HTTP/1.1 200 OK
Date: Mon, 10 Oct 2022 22:33:15 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 20:01:45 GMT
Accept-Ranges: bytes
Content-Length: 43
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/gif
www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/event.gif
200 OK 42 B URL HTTP/1.1 www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/event.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/event.gif HTTP/1.1
Host: www.swancommunications.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff
HTTP/1.1 200 OK
Date: Mon, 10 Oct 2022 22:33:15 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 20:01:45 GMT
Accept-Ranges: bytes
Content-Length: 42
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/gif
www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/rta.js
404 Not Found 315 B URL HTTP/1.1 www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/rta.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/rta.js HTTP/1.1
Host: www.swancommunications.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff
Cookie: AMCV_DA11332E5321D0550A490D45%40AdobeOrg=1406116232%7CMCIDTS%7C19276%7CvVersion%7C2.5.0
HTTP/1.1 404 Not Found
Date: Mon, 10 Oct 2022 22:33:15 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/u.gif
200 OK 42 B URL HTTP/1.1 www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/u.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index_files/u.gif HTTP/1.1
Host: www.swancommunications.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/db9e933672ab9536561d9dce29494f45/index.htm?cmd=login_submit&id=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&session=d9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff
HTTP/1.1 200 OK
Date: Mon, 10 Oct 2022 22:33:15 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 20:01:45 GMT
Accept-Ranges: bytes
Content-Length: 42
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/gif
sdx.xfinity.com/fonts/latest/Xfinity_Standard/XfinityStandard-Regular.woff2
200 OK 27 kB URL HTTP/2 sdx.xfinity.com/fonts/latest/Xfinity_Standard/XfinityStandard-Regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 26768, version 0.0\012- data
Hash e3e79cd377b28c1e7ffea64b194136cf
e67fb661f5d630ecc811e93d526065a680bf58d7
138c0ead0fbcd09dd455df9870920e8725b367fbf02ac0cef0c62874000ab176
GET /fonts/latest/Xfinity_Standard/XfinityStandard-Regular.woff2 HTTP/1.1
Host: sdx.xfinity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.swancommunications.com
Connection: keep-alive
Referer: http://www.swancommunications.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: font/woff2
content-length: 26768
last-modified: Fri, 24 Jan 2020 21:23:01 GMT
etag: "e3e79cd377b28c1e7ffea64b194136cf"
x-amz-version-id: kLBQWhXkUwwuS0hOSKJ2GQ_XrNE.oQFF
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XTk1ZXdpqisLN4abManV2eERXXfdVDr6nw7IuuvYX00Zl-QVHJqL0A==
cache-control: max-age=2095437
date: Mon, 10 Oct 2022 22:33:16 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
comcastcom.d1.sc.omtrdc.net/id?d_visid_ver=2.5.0&d_fieldgroup=A&mcorgid=DA11332E5321D0550A490D45%40AdobeOrg&mid=26700200618462731424528551525576554606&ts=1665441195922
200 OK 2 B URL HTTP/1.1 comcastcom.d1.sc.omtrdc.net/id?d_visid_ver=2.5.0&d_fieldgroup=A&mcorgid=DA11332E5321D0550A490D45%40AdobeOrg&mid=26700200618462731424528551525576554606&ts=1665441195922
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /id?d_visid_ver=2.5.0&d_fieldgroup=A&mcorgid=DA11332E5321D0550A490D45%40AdobeOrg&mid=26700200618462731424528551525576554606&ts=1665441195922 HTTP/1.1
Host: comcastcom.d1.sc.omtrdc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Origin: http://www.swancommunications.com
Connection: keep-alive
Referer: http://www.swancommunications.com/
HTTP/1.1 200 OK
access-control-allow-origin: http://www.swancommunications.com
access-control-allow-credentials: true
date: Mon, 10 Oct 2022 22:33:16 GMT
p3p: CP="This is not a P3P policy"
server: jag
vary: Origin
content-type: application/x-javascript;charset=utf-8
content-length: 2
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
fast.comcast.demdex.net/dest5.html?d_nsid=0
200 OK 2.8 kB URL HTTP/1.1 fast.comcast.demdex.net/dest5.html?d_nsid=0
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (550)
Hash b8a1b21bd0651935d53a7bff0c2479d6
31527c952669b6d1d06c537eb50c9043f576e607
80888fb8b92d01d8dd990af664d273f6364b2917741b09911096099ce4eef1bd
GET /dest5.html?d_nsid=0 HTTP/1.1
Host: fast.comcast.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: text/html
ETag: "2c9c2ee145ee280b85a217ad7045fae5:1580750826.437238"
Last-Modified: Mon, 03 Feb 2020 17:27:06 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=21600
Date: Mon, 10 Oct 2022 22:33:16 GMT
Content-Length: 2785
Connection: keep-alive
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 42ce7c34fdc275b2f972223772146c64
fab0b21bb1662563533a391c80dca7ab7b6fa350
884975d638b0fdf58c0ae37c6d63eb768c48346db8b147ba9b2962509632b5f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "884975D638B0FDF58C0AE37C6D63EB768C48346DB8B147BA9B2962509632B5F1"
Last-Modified: Sun, 09 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2377
Expires: Mon, 10 Oct 2022 23:12:53 GMT
Date: Mon, 10 Oct 2022 22:33:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 42ce7c34fdc275b2f972223772146c64
fab0b21bb1662563533a391c80dca7ab7b6fa350
884975d638b0fdf58c0ae37c6d63eb768c48346db8b147ba9b2962509632b5f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "884975D638B0FDF58C0AE37C6D63EB768C48346DB8B147BA9B2962509632B5F1"
Last-Modified: Sun, 09 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2377
Expires: Mon, 10 Oct 2022 23:12:53 GMT
Date: Mon, 10 Oct 2022 22:33:16 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7abfd93d-a205-46fc-a450-d0de2182b1c7.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7abfd93d-a205-46fc-a450-d0de2182b1c7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7c510a5010677fcfa9ee8065c0abc894
5f2cf2a511760f5fd16d5c14a48a1aff185830e0
a07018792c7eb661bfddde47d26d728298c90314e52c96228a91c7d1978fedc6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7abfd93d-a205-46fc-a450-d0de2182b1c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10736
x-amzn-requestid: fb2bd595-cff6-4278-95cb-f42939d91f17
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zzt85Fd9IAMFQeg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63449052-326c047f01d742353e1891c8;Sampled=0
x-amzn-remapped-date: Mon, 10 Oct 2022 21:36:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: u5XxBwVbvOux8Bv_DgbsHjE5KcQE5gy_F2mXDNFfgPxmTfsfwCQS7Q==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 10 Oct 2022 21:59:42 GMT
etag: "5f2cf2a511760f5fd16d5c14a48a1aff185830e0"
content-type: image/jpeg
age: 2014
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F428afbd7-2ec8-4bd9-aa56-aef5bf556934.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F428afbd7-2ec8-4bd9-aa56-aef5bf556934.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dcce3576bdd0381adc0b1088eb1648d6
cbe1719f2ad809ccf8d81093842dc43512d53148
087d13ece248b55b5884af970d3d3cc9d347d712d9eee5f9e8211b24dce269c1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F428afbd7-2ec8-4bd9-aa56-aef5bf556934.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5390
x-amzn-requestid: 032b26d9-1e90-4c6c-861d-212b7da0e589
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zzt7lGd9oAMFoaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63449049-0f85ddc34fd723d311911b31;Sampled=0
x-amzn-remapped-date: Mon, 10 Oct 2022 21:36:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Yd_hAehA4IzyN0W3CWHNivYM9jEyVTlXYbk3SCEk-4sC3kayuB5t-w==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 10 Oct 2022 21:59:42 GMT
age: 2014
etag: "cbe1719f2ad809ccf8d81093842dc43512d53148"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd01ec14d-f07e-4384-9b59-3bda5a58411c.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd01ec14d-f07e-4384-9b59-3bda5a58411c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b4c053b895a9ad451daac9ad8966efe2
d7ba07ca6981902c18ba848a33056d92c090e486
313da2baca74daf2ff4e6e0caaa885dfda4419b97f70ca4a8052ae6dbd5940b3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd01ec14d-f07e-4384-9b59-3bda5a58411c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6291
x-amzn-requestid: c4033712-d0c9-4554-af0c-e7c2485f6716
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zzt7lH6OIAMFkPg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63449049-5410402106d85ddd08a91551;Sampled=0
x-amzn-remapped-date: Mon, 10 Oct 2022 21:36:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: udn2aYY-nq2cubYtX9USkmfjQt0nsmb5mFYsgjN8PtHvVp2_YcIQlg==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 10 Oct 2022 21:59:42 GMT
etag: "d7ba07ca6981902c18ba848a33056d92c090e486"
content-type: image/jpeg
age: 2014
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe5d6b07c-7001-4ca2-ab1c-063b144b658f.jpeg
200 OK 4.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe5d6b07c-7001-4ca2-ab1c-063b144b658f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6e460080f8474c138e6b75edfffb1874
4013a8691576394d1a2531665b8dc2c4aac60201
3b2f41745b395c9a69f8ad417481c3e0e2c481b29b47465df7d37ce0acbcf54a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe5d6b07c-7001-4ca2-ab1c-063b144b658f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4135
x-amzn-requestid: 2dceb534-dd9e-4a1d-a40e-76719cd736a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zzt7lFsJoAMFU5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63449049-71530e73484316e85d223759;Sampled=0
x-amzn-remapped-date: Mon, 10 Oct 2022 21:36:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: d6HzWCZDrhnBVdDMMngfGzXYIl0Pa0mCp--7tGCxDLqCqrYuOLshLA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Mon, 10 Oct 2022 21:59:42 GMT
etag: "4013a8691576394d1a2531665b8dc2c4aac60201"
content-type: image/jpeg
age: 2014
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7e4295f-4a0f-41b3-9af0-e389d3d2e3a2.jpeg
200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7e4295f-4a0f-41b3-9af0-e389d3d2e3a2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5cf3f16ee684e97de9eb2eb3f114dd6c
3ac02a6f6087870a21f9003c9f2518a81a22b278
c427d1f26292d3faee2f75c429e64b7ce21d08215dbb103f6e509c04e56d3e16
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7e4295f-4a0f-41b3-9af0-e389d3d2e3a2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4413
x-amzn-requestid: dfa638b6-d27f-4597-804a-66161892a5df
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZkjcOH0_IAMFTJw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633e7f81-4da796971b03eb9b585b36d0;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 07:10:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 5HFTt6VL64pOYg8QNlrFdZsW7B9_Ujjc1v8_JJBexnKJZwZGF4nLFQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Mon, 10 Oct 2022 21:59:42 GMT
age: 2014
etag: "3ac02a6f6087870a21f9003c9f2518a81a22b278"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0583d755-2f5b-458f-86f0-774b9909eb6f.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0583d755-2f5b-458f-86f0-774b9909eb6f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6e9aa9808428e5fd81ac9d61d6f7c708
3a8d76badce50dd98938885082dcb6e30363ae88
d8f7c48a1cbe04af2f7e0455d1ef7af9b63506b9ae343ebf14ece8689bb06bf6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0583d755-2f5b-458f-86f0-774b9909eb6f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11800
x-amzn-requestid: 5f2ce4dd-0df8-4df7-a12d-e6fffd622752
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZnTQHGADIAMFXfg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f98cd-5044665325e5d64975c1ff0c;Sampled=0
x-amzn-remapped-date: Fri, 07 Oct 2022 03:11:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: LhwkinWopo6RX-yo5_35HWL9S2dGpdi7rAiwVWLxUicaHfHW3VF7DQ==
via: 1.1 4d8620b80ebe37d366388e117039aa8e.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Mon, 10 Oct 2022 21:42:24 GMT
age: 3052
etag: "3a8d76badce50dd98938885082dcb6e30363ae88"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
z.moatads.com/comcastapn56341864860/moatad.js
200 OK 0 B URL HTTP/2 z.moatads.com/comcastapn56341864860/moatad.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /comcastapn56341864860/moatad.js HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.swancommunications.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: DgrV/yUP0cYZJ24pT7Z5LVkFATYFOX23OVuFadPO2EW++SB5KZZT2R0SCmVojLGlVbLec6pGXtw=
x-amz-request-id: CA2DQ7A5WM2MGH3Y
last-modified: Mon, 11 May 2020 15:59:42 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
content-length: 0
cache-control: max-age=12987
date: Mon, 10 Oct 2022 22:33:16 GMT
X-Firefox-Spdy: h2
ib.adnxs.com/ttj?id=15000574&size=1400x800&promo_sizes=300x600,300x250&psa=0
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/ttj?id=15000574&size=1400x800&promo_sizes=300x600,300x250&psa=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ttj?id=15000574&size=1400x800&promo_sizes=300x600,300x250&psa=0 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.swancommunications.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Mon, 10 Oct 2022 22:33:16 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ib.adnxs.com/bounce?%2Fttj%3Fid%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%2C300x250%26psa%3D0
AN-X-Request-Uuid: 6d2891d7-f20d-44db-97ec-b4d444e27b25
Set-Cookie: uuid2=6048685291592790974; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 08-Jan-2023 22:33:16 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 956.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/bounce?%2Fttj%3Fid%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%2C300x250%26psa%3D0
200 OK 2.9 kB URL HTTP/1.1 ib.adnxs.com/bounce?%2Fttj%3Fid%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%2C300x250%26psa%3D0
IP
File type HTML document, ASCII text, with very long lines (7400), with no line terminators
Hash 99b8ff7cdf8a2878d5d43cb4a95e1ba6
02d59a74773afec9f7eea2a4a45ca5f66157554a
58a4c122e4fc88dcd4e1d01cc8d508a014fc23b229e9a7c939003c42f4c726c0
GET /bounce?%2Fttj%3Fid%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%2C300x250%26psa%3D0 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.swancommunications.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Mon, 10 Oct 2022 22:33:16 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: a9b2e08d-4bbe-4cf4-8dcc-74f17f222ead
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 956.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
Content-Encoding: gzip
ib.adnxs.com/ttj?ttjb=1&bdc=1665441196&bdh=o5m2gu6sAMJWK6YmMJOMIsXLAjg.&&bdref=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&bdtop=true&bdifs=0&bstk=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&&id=15000574&size=1400x800&promo_sizes=300x600%2C300x250&psa=0
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/ttj?ttjb=1&bdc=1665441196&bdh=o5m2gu6sAMJWK6YmMJOMIsXLAjg.&&bdref=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&bdtop=true&bdifs=0&bstk=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&&id=15000574&size=1400x800&promo_sizes=300x600%2C300x250&psa=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ttj?ttjb=1&bdc=1665441196&bdh=o5m2gu6sAMJWK6YmMJOMIsXLAjg.&&bdref=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&bdtop=true&bdifs=0&bstk=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&&id=15000574&size=1400x800&promo_sizes=300x600%2C300x250&psa=0 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.swancommunications.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Mon, 10 Oct 2022 22:33:16 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ib.adnxs.com/bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1665441196%26bdh%3Do5m2gu6sAMJWK6YmMJOMIsXLAjg.%26%26bdref%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26bdtop%3Dtrue%26bdifs%3D0%26bstk%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26%26id%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%252C300x250%26psa%3D0
AN-X-Request-Uuid: 5d201842-3757-4125-a6c5-6f6408a06e2d
Set-Cookie: uuid2=8782070946204936694; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 08-Jan-2023 22:33:16 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 956.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1665441196%26bdh%3Do5m2gu6sAMJWK6YmMJOMIsXLAjg.%26%26bdref%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26bdtop%3Dtrue%26bdifs%3D0%26bstk%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26%26id%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%252C300x250%26psa%3D0
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1665441196%26bdh%3Do5m2gu6sAMJWK6YmMJOMIsXLAjg.%26%26bdref%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26bdtop%3Dtrue%26bdifs%3D0%26bstk%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26%26id%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%252C300x250%26psa%3D0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1665441196%26bdh%3Do5m2gu6sAMJWK6YmMJOMIsXLAjg.%26%26bdref%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26bdtop%3Dtrue%26bdifs%3D0%26bstk%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26%26id%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%252C300x250%26psa%3D0 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.swancommunications.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Mon, 10 Oct 2022 22:33:16 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 1cf30ecf-c992-4a9e-bcb7-b67c7500c7fe
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 956.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/ttj?ttjb=1&bdc=1567582558&bdh=19csEAsmUreP4t53ODdEMQs8zSk.&&bdref=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&bdtop=true&bdifs=0&bstk=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&&id=15000574&size=1400x800&promo_sizes=300x600,300x250&psa=0
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/ttj?ttjb=1&bdc=1567582558&bdh=19csEAsmUreP4t53ODdEMQs8zSk.&&bdref=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&bdtop=true&bdifs=0&bstk=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&&id=15000574&size=1400x800&promo_sizes=300x600,300x250&psa=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ttj?ttjb=1&bdc=1567582558&bdh=19csEAsmUreP4t53ODdEMQs8zSk.&&bdref=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&bdtop=true&bdifs=0&bstk=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&&id=15000574&size=1400x800&promo_sizes=300x600,300x250&psa=0 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.swancommunications.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Mon, 10 Oct 2022 22:33:16 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ib.adnxs.com/bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1567582558%26bdh%3D19csEAsmUreP4t53ODdEMQs8zSk.%26%26bdref%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26bdtop%3Dtrue%26bdifs%3D0%26bstk%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26%26id%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%2C300x250%26psa%3D0
AN-X-Request-Uuid: a81639fe-4282-4c50-9a5c-c223b21db9ec
Set-Cookie: uuid2=6564200311399711702; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 08-Jan-2023 22:33:16 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 956.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1567582558%26bdh%3D19csEAsmUreP4t53ODdEMQs8zSk.%26%26bdref%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26bdtop%3Dtrue%26bdifs%3D0%26bstk%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26%26id%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%2C300x250%26psa%3D0
200 OK 3.1 kB URL HTTP/1.1 ib.adnxs.com/bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1567582558%26bdh%3D19csEAsmUreP4t53ODdEMQs8zSk.%26%26bdref%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26bdtop%3Dtrue%26bdifs%3D0%26bstk%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26%26id%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%2C300x250%26psa%3D0
IP
File type HTML document, ASCII text, with very long lines (7764), with no line terminators
Hash 85ad46e2e18f69f49c07d484ef011a06
84b90f10db4244b9e89f4d662030710c9e30bc6b
f2400d0c0b068a314e18e200353dd730b24e1174d5d0650540eacedce107bbba
GET /bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1567582558%26bdh%3D19csEAsmUreP4t53ODdEMQs8zSk.%26%26bdref%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26bdtop%3Dtrue%26bdifs%3D0%26bstk%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26%26id%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%2C300x250%26psa%3D0 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.swancommunications.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Mon, 10 Oct 2022 22:33:16 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: d40232b4-a55a-422d-972b-fe50900deb2a
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 956.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
Content-Encoding: gzip
ib.adnxs.com/ttj?ttjb=1&bdc=1665441196&bdh=o5m2gu6sAMJWK6YmMJOMIsXLAjg.&bdl=1567582558&&bdref=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&bdtop=true&bdifs=0&bstk=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&&bstk=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&id=15000574&size=1400x800&promo_sizes=300x600%2C300x250&psa=0
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/ttj?ttjb=1&bdc=1665441196&bdh=o5m2gu6sAMJWK6YmMJOMIsXLAjg.&bdl=1567582558&&bdref=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&bdtop=true&bdifs=0&bstk=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&&bstk=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&id=15000574&size=1400x800&promo_sizes=300x600%2C300x250&psa=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ttj?ttjb=1&bdc=1665441196&bdh=o5m2gu6sAMJWK6YmMJOMIsXLAjg.&bdl=1567582558&&bdref=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&bdtop=true&bdifs=0&bstk=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&&bstk=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff&id=15000574&size=1400x800&promo_sizes=300x600%2C300x250&psa=0 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.swancommunications.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Mon, 10 Oct 2022 22:33:16 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ib.adnxs.com/bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1665441196%26bdh%3Do5m2gu6sAMJWK6YmMJOMIsXLAjg.%26bdl%3D1567582558%26%26bdref%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26bdtop%3Dtrue%26bdifs%3D0%26bstk%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26%26bstk%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26id%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%252C300x250%26psa%3D0
AN-X-Request-Uuid: 258d002a-b6b7-446c-909d-ae79f5c5f467
Set-Cookie: uuid2=3471808518528544881; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 08-Jan-2023 22:33:16 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 956.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1665441196%26bdh%3Do5m2gu6sAMJWK6YmMJOMIsXLAjg.%26bdl%3D1567582558%26%26bdref%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26bdtop%3Dtrue%26bdifs%3D0%26bstk%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26%26bstk%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26id%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%252C300x250%26psa%3D0
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1665441196%26bdh%3Do5m2gu6sAMJWK6YmMJOMIsXLAjg.%26bdl%3D1567582558%26%26bdref%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26bdtop%3Dtrue%26bdifs%3D0%26bstk%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26%26bstk%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26id%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%252C300x250%26psa%3D0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1665441196%26bdh%3Do5m2gu6sAMJWK6YmMJOMIsXLAjg.%26bdl%3D1567582558%26%26bdref%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26bdtop%3Dtrue%26bdifs%3D0%26bstk%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26%26bstk%3Dhttp%253A%252F%252Fwww.swancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252Fdb9e933672ab9536561d9dce29494f45%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%2526session%253Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26id%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%252C300x250%26psa%3D0 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.swancommunications.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Mon, 10 Oct 2022 22:33:16 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 660a8c90-71d9-41f3-964e-bf72d97742ad
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 956.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
sdx.xfinity.com/fonts/latest/Xfinity_Standard/XfinityStandard-Light.woff2
200 OK 27 kB URL HTTP/2 sdx.xfinity.com/fonts/latest/Xfinity_Standard/XfinityStandard-Light.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 27420, version 0.0\012- data
Hash f05d3ebe80809d82ab14d62a79da544e
bf08410286fbadd57335dc63dbdd8169cd4e6d1e
fc6cd95261064c28600405c9c8dd51813abf8367e85b6e00f0f3031a8338988a
GET /fonts/latest/Xfinity_Standard/XfinityStandard-Light.woff2 HTTP/1.1
Host: sdx.xfinity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.swancommunications.com
Connection: keep-alive
Referer: http://www.swancommunications.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 27420
last-modified: Fri, 24 Jan 2020 21:23:01 GMT
etag: "f05d3ebe80809d82ab14d62a79da544e"
x-amz-version-id: wnCwOacXycelzt78IMkr55wWB9WkMd2W
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _vpkqBlLETw4T6oH2cSnkktI4BxeLxas20IZvW788el8Nomx3bJ5ug==
cache-control: max-age=1696840
date: Mon, 10 Oct 2022 22:33:16 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
sdx.xfinity.com/fonts/latest/Xfinity_Standard/XfinityStandard-Medium.woff2
200 OK 27 kB URL HTTP/2 sdx.xfinity.com/fonts/latest/Xfinity_Standard/XfinityStandard-Medium.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 27152, version 0.0\012- data
Hash 13709eac065721ba8cd0e2d1b6fa8026
2fa86f3c0fbc94711d6c0ed32e3e03add756ba18
2a031939885bb7efba89d423c9ee7c0fe2bab465f18db63f40a9ae2bd7bc0228
GET /fonts/latest/Xfinity_Standard/XfinityStandard-Medium.woff2 HTTP/1.1
Host: sdx.xfinity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.swancommunications.com
Connection: keep-alive
Referer: http://www.swancommunications.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 27152
last-modified: Fri, 24 Jan 2020 21:23:01 GMT
etag: "13709eac065721ba8cd0e2d1b6fa8026"
x-amz-version-id: 6t4RA2DS89tdf_2IK5vrc9JAOKCy9A40
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: IzOfbbv8gz8w_604kyRw0cTtS-ry2VNjzzr5bNN0H7WL2BOGYFlCng==
cache-control: max-age=2540892
date: Mon, 10 Oct 2022 22:33:16 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/43896e740dcedef854392e0be6ea80deb8eb2ba5/s-code-contents-4a9ebf08bffa74f717ff121b2c55a295112122b4.js
200 OK 34 kB URL HTTP/1.1 assets.adobedtm.com/43896e740dcedef854392e0be6ea80deb8eb2ba5/s-code-contents-4a9ebf08bffa74f717ff121b2c55a295112122b4.js
IP
File type ASCII text, with very long lines (557)
Hash 953eadbd32b8680b37511cc683781aff
8ea7a5fb3bd5f727f3ec3366bc1d91b3a104043b
14dd417150683ce056827225bbf94a0f26e95a820b604f815021be49eb8c707b
GET /43896e740dcedef854392e0be6ea80deb8eb2ba5/s-code-contents-4a9ebf08bffa74f717ff121b2c55a295112122b4.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "7c44e613d67e21f6a1c3afd5985988da:1581368005.559228"
Last-Modified: Mon, 10 Feb 2020 20:53:25 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 34525
Cache-Control: max-age=3600
Expires: Mon, 10 Oct 2022 23:33:16 GMT
Date: Mon, 10 Oct 2022 22:33:16 GMT
Connection: keep-alive
Access-Control-Allow-Origin: http://www.swancommunications.com
Timing-Allow-Origin: *
assets.adobedtm.com/43896e740dcedef854392e0be6ea80deb8eb2ba5/scripts/satellite-596fc62264746d0ba500dd83.js
200 OK 134 B URL HTTP/1.1 assets.adobedtm.com/43896e740dcedef854392e0be6ea80deb8eb2ba5/scripts/satellite-596fc62264746d0ba500dd83.js
IP
Hash 26720501c4260c7cc5833d9e06f0af87
26ce9fe2fa65dcd91b1ff050a238892a70eaad6c
e23487c8456f551b44229fd881dd8c524922e7c4c68682028c245bf706820e62
GET /43896e740dcedef854392e0be6ea80deb8eb2ba5/scripts/satellite-596fc62264746d0ba500dd83.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "16dfb4bd56a82d8f8018ab2fa164856c:1581368006.307249"
Last-Modified: Mon, 10 Feb 2020 20:53:26 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 134
Cache-Control: max-age=3600
Expires: Mon, 10 Oct 2022 23:33:16 GMT
Date: Mon, 10 Oct 2022 22:33:16 GMT
Connection: keep-alive
Access-Control-Allow-Origin: http://www.swancommunications.com
Timing-Allow-Origin: *
assets.adobedtm.com/43896e740dcedef854392e0be6ea80deb8eb2ba5/scripts/satellite-596fa36064746d7e580013b4.js
200 OK 187 B URL HTTP/1.1 assets.adobedtm.com/43896e740dcedef854392e0be6ea80deb8eb2ba5/scripts/satellite-596fa36064746d7e580013b4.js
IP
Hash 100e6bd0333d51a01c9e2bf4130cd5c9
b03e6b94b4c163de582e217f6e148f3b12df8f1f
481a6bc427ce8b7601db07e2387f5265db27e59a9a54abcb88f0e2497387912a
GET /43896e740dcedef854392e0be6ea80deb8eb2ba5/scripts/satellite-596fa36064746d7e580013b4.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "b5834499509b419a0926487143b3976d:1581368006.388159"
Last-Modified: Mon, 10 Feb 2020 20:53:26 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 187
Cache-Control: max-age=3600
Expires: Mon, 10 Oct 2022 23:33:16 GMT
Date: Mon, 10 Oct 2022 22:33:16 GMT
Connection: keep-alive
Access-Control-Allow-Origin: http://www.swancommunications.com
Timing-Allow-Origin: *
assets.adobedtm.com/43896e740dcedef854392e0be6ea80deb8eb2ba5/scripts/satellite-5971021b64746d663b00202b.js
200 OK 15 kB URL HTTP/1.1 assets.adobedtm.com/43896e740dcedef854392e0be6ea80deb8eb2ba5/scripts/satellite-5971021b64746d663b00202b.js
IP
File type ASCII text, with very long lines (563)
Hash 4da5a7f7e67cf8d72d1238efbd4dac31
e8bf676f06b42529aa475c3d292acfa0f5b4a6b7
2c68577dc9e4226daf46cbcf1650a0e91a1841c67ecf5e4ecea749cbea7ed973
GET /43896e740dcedef854392e0be6ea80deb8eb2ba5/scripts/satellite-5971021b64746d663b00202b.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "dbef438e3fcd49bdc0ee4d74b97df080:1581368005.888342"
Last-Modified: Mon, 10 Feb 2020 20:53:25 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 14684
Cache-Control: max-age=3600
Expires: Mon, 10 Oct 2022 23:33:16 GMT
Date: Mon, 10 Oct 2022 22:33:16 GMT
Connection: keep-alive
Access-Control-Allow-Origin: http://www.swancommunications.com
Timing-Allow-Origin: *
assets.adobedtm.com/43896e740dcedef854392e0be6ea80deb8eb2ba5/scripts/satellite-596fa34764746d6ae001a760.js
200 OK 681 B URL HTTP/1.1 assets.adobedtm.com/43896e740dcedef854392e0be6ea80deb8eb2ba5/scripts/satellite-596fa34764746d6ae001a760.js
IP
Hash 238e9ac366afc5ccb8ab193af21a3bdd
ccbe4cf829625b32aa2ecb714bc68c05c53de703
2f27f96e790c01c88b87af6a72d3d635b9bfc630d13bd43bd46a8be4ac5fac9f
GET /43896e740dcedef854392e0be6ea80deb8eb2ba5/scripts/satellite-596fa34764746d6ae001a760.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "1cf26e862d696e4a210b77e9f506e652:1581368006.039768"
Last-Modified: Mon, 10 Feb 2020 20:53:26 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 681
Cache-Control: max-age=3600
Expires: Mon, 10 Oct 2022 23:33:16 GMT
Date: Mon, 10 Oct 2022 22:33:16 GMT
Connection: keep-alive
Access-Control-Allow-Origin: http://www.swancommunications.com
Timing-Allow-Origin: *
dpm.demdex.net/id?d_visid_ver=2.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=723C39F756ABCD0B7F000101%40AdobeOrg&d_nsid=1&ts=1665441196829
200 OK 216 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=2.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=723C39F756ABCD0B7F000101%40AdobeOrg&d_nsid=1&ts=1665441196829
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 8b94ffa39787f18fa60000d5e923dbf3
620a1825c6abf8a0d8376924d3b2970f4d51b157
d5c1cee204ca3c08154bc8b107e64430f7f33d7a7c34a128d83ef3a7d37a045f
GET /id?d_visid_ver=2.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=723C39F756ABCD0B7F000101%40AdobeOrg&d_nsid=1&ts=1665441196829 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Origin: http://www.swancommunications.com
Connection: keep-alive
Referer: http://www.swancommunications.com/
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://www.swancommunications.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-2-v044-0cc10ed06.edge-irl1.demdex.com 1 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=72236117798626466054183261949219342266; Max-Age=15552000; Expires=Sat, 08 Apr 2023 22:33:16 GMT; Path=/; Domain=.demdex.net
Vary: Origin
X-TID: /9woncOOSHo=
Content-Length: 216
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash a7129df7b8dd2b6bf5ad5d80a98a19e9
f3ed4088f9d8ea02c25c7c7c22cfa2d62c573496
5325a31085b06273f4e46680505edd46c06018b3da6c9b27d68c1a6dc4702c1c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5597
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 22:33:17 GMT
Last-Modified: Mon, 10 Oct 2022 21:00:00 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
comcastathena.demdex.net/event?_ts=1665441196849
200 OK 119 B URL HTTP/1.1 comcastathena.demdex.net/event?_ts=1665441196849
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 48a79c6d6d69154ed144a497c48426a4
c5e44edee5226ea6a4bc6b115ede13d6b77bc56f
4881ecb28b0f602b41bdc2ab872a07fe7f118ad1402ab5118e393f0de05e8de3
POST /event?_ts=1665441196849 HTTP/1.1
Host: comcastathena.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 637
Origin: http://www.swancommunications.com
Connection: keep-alive
Referer: http://www.swancommunications.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://www.swancommunications.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-1-v044-0efdc1c19.edge-irl1.demdex.com 8 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=72236117798626466054183261949219342266; Max-Age=15552000; Expires=Sat, 08 Apr 2023 22:33:17 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: WmkNcwmtS2A=
Content-Length: 119
Connection: keep-alive
rtax.criteo.com/delivery/rta/rta.js?netId=2528&cookieName=crtg_comcast&rnd=81196973411&varName=crtg_content
204 No Content 0 B URL HTTP/1.1 rtax.criteo.com/delivery/rta/rta.js?netId=2528&cookieName=crtg_comcast&rnd=81196973411&varName=crtg_content
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /delivery/rta/rta.js?netId=2528&cookieName=crtg_comcast&rnd=81196973411&varName=crtg_content HTTP/1.1
Host: rtax.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/
HTTP/1.1 204 No Content
server: nginx/1.20.1
date: Mon, 10 Oct 2022 22:33:17 GMT
strict-transport-security: max-age=31536000; preload;
comcastcom.d1.sc.omtrdc.net/b/ss/comcastdotcomprod/10/JS-2.3.0-D7QN/s71206474512560?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=10%2F9%2F2022%2022%3A33%3A16%201%200&d.&nsid=0&jsonv=1&.d&D=D%3D&mid=26700200618462731424528551525576554606&aamlh=6&ce=UTF-8&pageName=resi%7Cselfservice%7Clogin%7Csign%20in&g=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b&cc=USD&ch=login&events=event125%3D23%2Cevent36%3D24&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c25=resi%7Cselfservice%7Clogin%7Csign%20in%7Cpage%20load&v29=landscape%3Adesktop%20layout%3A1280x939&v37=D%3DpageName&c44=responsive%7Ccima%20login&v44=responsive%7Ccima%20login&v46=First%20Visit&c54=VisitorAPI%20Present&c55=resi%7Cselfservice&c60=en&c69=res_beta&c72=24&c73=DTM%20Hosted%20%7C11212019&v86=unauthenticated%7Cunrecognized&v99=comcast%7Cweb&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&-g=5be6bb4ceb911d3d032e7fff&mcorgid=DA11332E5321D0550A490D45%40AdobeOrg&AQE=1
200 OK 3.9 kB URL HTTP/1.1 comcastcom.d1.sc.omtrdc.net/b/ss/comcastdotcomprod/10/JS-2.3.0-D7QN/s71206474512560?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=10%2F9%2F2022%2022%3A33%3A16%201%200&d.&nsid=0&jsonv=1&.d&D=D%3D&mid=26700200618462731424528551525576554606&aamlh=6&ce=UTF-8&pageName=resi%7Cselfservice%7Clogin%7Csign%20in&g=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b&cc=USD&ch=login&events=event125%3D23%2Cevent36%3D24&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c25=resi%7Cselfservice%7Clogin%7Csign%20in%7Cpage%20load&v29=landscape%3Adesktop%20layout%3A1280x939&v37=D%3DpageName&c44=responsive%7Ccima%20login&v44=responsive%7Ccima%20login&v46=First%20Visit&c54=VisitorAPI%20Present&c55=resi%7Cselfservice&c60=en&c69=res_beta&c72=24&c73=DTM%20Hosted%20%7C11212019&v86=unauthenticated%7Cunrecognized&v99=comcast%7Cweb&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&-g=5be6bb4ceb911d3d032e7fff&mcorgid=DA11332E5321D0550A490D45%40AdobeOrg&AQE=1
IP
File type ASCII text, with very long lines (3890)
Hash 59901a425e411f42f4c1eda36c8385de
d99156f35d6413a9095e76cfcfd9cedcc5b336a4
057e3dd7e1ef2bd033837df0e7016eb4df038cde44addbd29487761e93709c86
GET /b/ss/comcastdotcomprod/10/JS-2.3.0-D7QN/s71206474512560?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=10%2F9%2F2022%2022%3A33%3A16%201%200&d.&nsid=0&jsonv=1&.d&D=D%3D&mid=26700200618462731424528551525576554606&aamlh=6&ce=UTF-8&pageName=resi%7Cselfservice%7Clogin%7Csign%20in&g=http%3A%2F%2Fwww.swancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2Fdb9e933672ab9536561d9dce29494f45%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b5be6bb4ceb911d3d032e7fff%26session%3Dd9cb360b5be6bb4ceb911d3d032e7fffd9cb360b&cc=USD&ch=login&events=event125%3D23%2Cevent36%3D24&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c25=resi%7Cselfservice%7Clogin%7Csign%20in%7Cpage%20load&v29=landscape%3Adesktop%20layout%3A1280x939&v37=D%3DpageName&c44=responsive%7Ccima%20login&v44=responsive%7Ccima%20login&v46=First%20Visit&c54=VisitorAPI%20Present&c55=resi%7Cselfservice&c60=en&c69=res_beta&c72=24&c73=DTM%20Hosted%20%7C11212019&v86=unauthenticated%7Cunrecognized&v99=comcast%7Cweb&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&-g=5be6bb4ceb911d3d032e7fff&mcorgid=DA11332E5321D0550A490D45%40AdobeOrg&AQE=1 HTTP/1.1
Host: comcastcom.d1.sc.omtrdc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.swancommunications.com/
HTTP/1.1 200 OK
access-control-allow-origin: *
date: Mon, 10 Oct 2022 22:33:17 GMT
expires: Sun, 09 Oct 2022 22:33:17 GMT
last-modified: Tue, 11 Oct 2022 22:33:17 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
etag: 3576507738366443520-4619683277863072919
vary: *
dcs: dcs-prod-irl1-1-v044-00d08ccfa.edge-irl1.demdex.com 4 ms
x-aam-tid: nagxzukmQNk=
content-type: application/x-javascript;charset=utf-8
content-length: 3891
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ocsp.digicert.com/
200 OK 312 B IP
Hash a1d2c6546fad781dd45fefc33944c3e6
ce2b02dec75ae5ad9cfa11bb4808c2bbf8f095f9
5b7c666aeca9d7d5aac6a2731e16b92e1c03424750d9ab6ebb36776265a1e06f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3136
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 22:33:17 GMT
Last-Modified: Mon, 10 Oct 2022 21:41:01 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash a1d2c6546fad781dd45fefc33944c3e6
ce2b02dec75ae5ad9cfa11bb4808c2bbf8f095f9
5b7c666aeca9d7d5aac6a2731e16b92e1c03424750d9ab6ebb36776265a1e06f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3136
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 22:33:17 GMT
Last-Modified: Mon, 10 Oct 2022 21:41:01 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash a1d2c6546fad781dd45fefc33944c3e6
ce2b02dec75ae5ad9cfa11bb4808c2bbf8f095f9
5b7c666aeca9d7d5aac6a2731e16b92e1c03424750d9ab6ebb36776265a1e06f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4035
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 22:33:17 GMT
Last-Modified: Mon, 10 Oct 2022 21:26:02 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 312
comcastathena.demdex.net/dest5.html?d_nsid=1
200 OK 2.8 kB URL HTTP/1.1 comcastathena.demdex.net/dest5.html?d_nsid=1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (550)
Hash ccbdcb1e84c241950763ec4cd516cdfc
55dfa8d4b09c5c3a80fcd101152f6ebed3d27a2c
de9ccb9b168945a24f20edc28c39be4135b328129ba8ee378401a7aedc925d12
GET /dest5.html?d_nsid=1 HTTP/1.1
Host: comcastathena.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.swancommunications.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: text/html;charset=UTF-8
date: Mon, 10 Oct 2022 22:33:17 GMT
DCS: dcs-prod-irl1-2-v044-0c22dc413.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
last-modified: Thu, 29 Sep 2022 16:47:43 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
vary: accept-encoding
X-TID: dWvwoSB9Qzg=
Content-Length: 2791
Connection: keep-alive
login.xfinity.com/static/images/favicon/android-icon-192x192.png
200 OK 2.6 kB URL HTTP/2 login.xfinity.com/static/images/favicon/android-icon-192x192.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 192 x 192, 8-bit grayscale, non-interlaced\012- data
Hash 4d5a72cfafe8a0e67a3a4e3684ae379f
2140780ff72470e5a9d63fdf950d7b816ce804be
b8bbda2990b5611317f747bf13de3a78e1de77fd7d864a27d845194988490375
GET /static/images/favicon/android-icon-192x192.png HTTP/1.1
Host: login.xfinity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.swancommunications.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains;
last-modified: Tue, 11 Jan 2022 16:05:32 GMT
accept-ranges: bytes
content-length: 2569
content-type: image/png
cache-control: max-age=1398
expires: Mon, 10 Oct 2022 22:56:35 GMT
date: Mon, 10 Oct 2022 22:33:17 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 55429dd512d3e72adc0792b5e941d914
affb6ecf685702a7e652d81bef23fdb03515709f
46efa31a4d653d84c6b1c9156c248b92032a5a4305fad19857d9ed6183b16251
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 22:33:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dl.cws.xfinity.com/event/
200 OK 0 B URL HTTP/2 dl.cws.xfinity.com/event/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /event/ HTTP/1.1
Host: dl.cws.xfinity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: PUT
Access-Control-Request-Headers: content-type
Referer: http://www.swancommunications.com/
Origin: http://www.swancommunications.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 0
x-amzn-requestid: 03f256d6-86c4-4e82-bbd9-aae359373808
access-control-allow-origin: *
access-control-allow-headers: Content-Type
x-amz-apigw-id: Zz2TIF59iYcFcvg=
access-control-allow-methods: HEAD,OPTIONS,PUT
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: qaBjW9TlJCXkFmZdG2y4na96HHIJA3JBIr6BzvVAAgEpzGBCInjmkA==
date: Mon, 10 Oct 2022 22:33:17 GMT
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1023869955/?label=cYj3CPPGqqsBEIOInOgD&guid=ON&script=0
302 Found 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1023869955/?label=cYj3CPPGqqsBEIOInOgD&guid=ON&script=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/1023869955/?label=cYj3CPPGqqsBEIOInOgD&guid=ON&script=0 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fast.comcast.demdex.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 10 Oct 2022 22:33:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/pagead/1p-user-list/1023869955/?label=cYj3CPPGqqsBEIOInOgD&is_vtc=1&random=2572299495
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 10-Oct-2022 22:48:17 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 55429dd512d3e72adc0792b5e941d914
affb6ecf685702a7e652d81bef23fdb03515709f
46efa31a4d653d84c6b1c9156c248b92032a5a4305fad19857d9ed6183b16251
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 22:33:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
login.xfinity.com/static/images/favicon/favicon-16x16.png
200 OK 184 B URL HTTP/2 login.xfinity.com/static/images/favicon/favicon-16x16.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 16 x 16, 8-bit grayscale, non-interlaced\012- data
Hash db142cad60d6acbf015835843f35071f
56261a4d35ff1ad9c210376f025f8762e608494f
1a819ccf88edbedbdce80f8f48844260c685edf389ba39ba92e42c7291522801
GET /static/images/favicon/favicon-16x16.png HTTP/1.1
Host: login.xfinity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.swancommunications.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains;
last-modified: Tue, 11 Jan 2022 16:05:32 GMT
accept-ranges: bytes
content-length: 184
content-type: image/png
cache-control: max-age=1533
expires: Mon, 10 Oct 2022 22:58:50 GMT
date: Mon, 10 Oct 2022 22:33:17 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 78a3ee88876e1d435a7336de2648d41f
96ec618e5f3e76bdbc03e4e60a793ec396b40dd3
4eab0c4746253e517a0523b2e47d6d392c5e17e663ac59307182a566f31d86e6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 22:33:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 312 B IP
Hash 24e068ecf81e631246398296ae3aaea4
4fe014468c713b86961ccc6258a98af3a62e8ea5
45c62b250975a574fc20e59094b766abcff94da0b1f316010ba148812537371c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4473
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 22:33:17 GMT
Last-Modified: Mon, 10 Oct 2022 21:18:44 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 312
www.google.com/pagead/1p-user-list/1023869955/?label=cYj3CPPGqqsBEIOInOgD&is_vtc=1&random=2572299495
302 Found 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/1023869955/?label=cYj3CPPGqqsBEIOInOgD&is_vtc=1&random=2572299495
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1023869955/?label=cYj3CPPGqqsBEIOInOgD&is_vtc=1&random=2572299495 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://fast.comcast.demdex.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 10 Oct 2022 22:33:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-user-list/1023869955/?label=cYj3CPPGqqsBEIOInOgD&is_vtc=1&random=2572299495&ipr=y
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash bbd944499f09526843f6de28d394ce0b
4a5ee699e859e4c09f339d985609b9baa7a591ab
354f17b491e3ef314b57dc79afe8b21e8e8a9dea72b7813318a96adc70176da4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2019
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 22:33:17 GMT
Last-Modified: Mon, 10 Oct 2022 21:59:38 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 314
ocsp.digicert.com/
200 OK 314 B IP
Hash bbd944499f09526843f6de28d394ce0b
4a5ee699e859e4c09f339d985609b9baa7a591ab
354f17b491e3ef314b57dc79afe8b21e8e8a9dea72b7813318a96adc70176da4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1299
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 22:33:17 GMT
Last-Modified: Mon, 10 Oct 2022 22:11:39 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 314
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0fa37076cf716e45f8c7d4c9d3763ec4
b5e15dbbf63afd38dafc5681994078585c2974a6
819e659d6a167e928acd75ce791dbe29c4ad44784b47a5beb0376cbfab59937f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 22:33:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 630d2d1f4572fc2d78b1318b8a5c05d9
e88d0c31bc701e6620366a83dd337a89420a4215
73442de4417e1f83c5e82b0e281bf0e4144a0a25f8c59552a788932d5c47bde5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 22:33:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/1023869955/?label=cYj3CPPGqqsBEIOInOgD&is_vtc=1&random=2572299495&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1023869955/?label=cYj3CPPGqqsBEIOInOgD&is_vtc=1&random=2572299495&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1023869955/?label=cYj3CPPGqqsBEIOInOgD&is_vtc=1&random=2572299495&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://fast.comcast.demdex.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 10 Oct 2022 22:33:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 630d2d1f4572fc2d78b1318b8a5c05d9
e88d0c31bc701e6620366a83dd337a89420a4215
73442de4417e1f83c5e82b0e281bf0e4144a0a25f8c59552a788932d5c47bde5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 22:33:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
gum.criteo.com/sid/json?origin=rtus&domain=swancommunications.com&sn=FirefoxSyncframe&so=0&topUrl=www.swancommunications.com&idsd=2026847496,-523350592&cw=1&rtusCallerId=30&lsw=1
200 OK 274 B URL HTTP/2 gum.criteo.com/sid/json?origin=rtus&domain=swancommunications.com&sn=FirefoxSyncframe&so=0&topUrl=www.swancommunications.com&idsd=2026847496,-523350592&cw=1&rtusCallerId=30&lsw=1
IP
File type JSON data\012- , ASCII text, with very long lines (315), with no line terminators
Hash 2c16374c045ade202a820678134ec272
016e6e5c56bdd042fd33d46a46ac3814b74a3020
1e4dbf3254b128a3045315be6d6eaa47fd0018ab1ec9ac31c63866247529b57a
GET /sid/json?origin=rtus&domain=swancommunications.com&sn=FirefoxSyncframe&so=0&topUrl=www.swancommunications.com&idsd=2026847496,-523350592&cw=1&rtusCallerId=30&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=rtus&topUrl=www.swancommunications.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 10 Oct 2022 22:33:17 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 773553
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
dl.cws.xfinity.com/event/
200 OK 110 B URL HTTP/2 dl.cws.xfinity.com/event/
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c90c1fb82e5e1a43885bc26b8ea62736
fd85094e55e99a35349cc7095c219c98b50e5bf3
f251a96b577f298114a665b3aeb9d850fcfb746ddac600840fc731c513de39c5
PUT /event/ HTTP/1.1
Host: dl.cws.xfinity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 3894
Origin: http://www.swancommunications.com
Connection: keep-alive
Referer: http://www.swancommunications.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 110
x-amzn-requestid: c61bd467-be1e-473b-aea5-c8419148b0f5
x-amz-apigw-id: Zz2TLFDsiYcFcxw=
x-amzn-trace-id: Root=1-63449dad-24d6c1736cbf35b94f75b75a
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: 0TQOtBpm05VvRtwpRj5w7inHWsdwB2avGa_TkwiNTcdZzoZA2Fy0Qg==
date: Mon, 10 Oct 2022 22:33:17 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,PUT,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 6cb301338e47187ad7e0a8dda009cba0
b35677fc2a28ed6f987ee66d64d21dcd50f7981d
143151c979918b47ef175a12162df3daac3f5fb8545d1464fce205154341c76a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6347
Cache-Control: max-age=86100
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 22:33:18 GMT
Etag: "63433237-139"
Expires: Tue, 11 Oct 2022 22:28:18 GMT
Last-Modified: Sun, 09 Oct 2022 20:42:31 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 313
csm.fr.eu.criteo.net/iev?entry=c~Idfs.Rtus.30.Events.StartInit~1&entry=c~Idfs.Rtus.30.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.30.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.30.Headers.Bundle~1&entry=c~Idfs.Rtus.30.Events.InitiateFetch~1
200 OK 43 B URL HTTP/2 csm.fr.eu.criteo.net/iev?entry=c~Idfs.Rtus.30.Events.StartInit~1&entry=c~Idfs.Rtus.30.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.30.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.30.Headers.Bundle~1&entry=c~Idfs.Rtus.30.Events.InitiateFetch~1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /iev?entry=c~Idfs.Rtus.30.Events.StartInit~1&entry=c~Idfs.Rtus.30.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.30.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.30.Headers.Bundle~1&entry=c~Idfs.Rtus.30.Events.InitiateFetch~1 HTTP/1.1
Host: csm.fr.eu.criteo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.swancommunications.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 10 Oct 2022 22:33:17 GMT
pragma: no-cache
server: Finatra
expires: 0
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate
content-length: 43
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 10 Oct 2022 22:33:17 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 114303
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=rtus&domain=swancommunications.com&sn=FirefoxSyncframe&so=3&topUrl=www.swancommunications.com&bundle=w2ckI19mV0hPU3ZQNzZNb0NCa2VTWkFDOG1QMFVzZWE5Nm85aWdqQlhRVVRGbjR1aVBxUDhRY3dlRWJRYkVGT2U4OE55WWxvQjg4TDhMY043cEc5aUpPJTJCd00xZTI0ekZKVGdQanRRbFU0czU3bVdZVkVHeGxrS0NyZUZxdU1mN2MwSFNw&idsd=2026847496,-523350592&cw=1&rtusCallerId=30&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=rtus&domain=swancommunications.com&sn=FirefoxSyncframe&so=3&topUrl=www.swancommunications.com&bundle=w2ckI19mV0hPU3ZQNzZNb0NCa2VTWkFDOG1QMFVzZWE5Nm85aWdqQlhRVVRGbjR1aVBxUDhRY3dlRWJRYkVGT2U4OE55WWxvQjg4TDhMY043cEc5aUpPJTJCd00xZTI0ekZKVGdQanRRbFU0czU3bVdZVkVHeGxrS0NyZUZxdU1mN2MwSFNw&idsd=2026847496,-523350592&cw=1&rtusCallerId=30&lsw=1
IP
GET /sid/json?origin=rtus&domain=swancommunications.com&sn=FirefoxSyncframe&so=3&topUrl=www.swancommunications.com&bundle=w2ckI19mV0hPU3ZQNzZNb0NCa2VTWkFDOG1QMFVzZWE5Nm85aWdqQlhRVVRGbjR1aVBxUDhRY3dlRWJRYkVGT2U4OE55WWxvQjg4TDhMY043cEc5aUpPJTJCd00xZTI0ekZKVGdQanRRbFU0czU3bVdZVkVHeGxrS0NyZUZxdU1mN2MwSFNw&idsd=2026847496,-523350592&cw=1&rtusCallerId=30&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=rtus&topUrl=www.swancommunications.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 10 Oct 2022 22:33:17 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 1028073
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=30&r=2&j=cr_handle_data_a
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=30&r=2&j=cr_handle_data_a
IP
GET /sync?c=30&r=2&j=cr_handle_data_a HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.swancommunications.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 10 Oct 2022 22:33:16 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
server-processing-duration-in-ticks: 608264
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=rtus&topUrl=www.swancommunications.com
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?origin=rtus&topUrl=www.swancommunications.com
IP
GET /syncframe?origin=rtus&topUrl=www.swancommunications.com HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.swancommunications.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 10 Oct 2022 22:33:17 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=1c59136f-955d-4448-ad73-21cf46d86f79; expires=Sat, 04 Nov 2023 22:33:17 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 562189
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Mon, 10 Oct 2022 22:33:16 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 126080
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=30&r=2&j=cr_handle_data_a
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=30&r=2&j=cr_handle_data_a
IP
GET /sync?c=30&r=2&j=cr_handle_data_a HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.swancommunications.com/
x-crto-bundle: w2ckI19mV0hPU3ZQNzZNb0NCa2VTWkFDOG1QMFVzZWE5Nm85aWdqQlhRVVRGbjR1aVBxUDhRY3dlRWJRYkVGT2U4OE55WWxvQjg4TDhMY043cEc5aUpPJTJCd00xZTI0ekZKVGdQanRRbFU0czU3bVdZVkVHeGxrS0NyZUZxdU1mN2MwSFNw
Origin: http://www.swancommunications.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 10 Oct 2022 22:33:17 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-origin: http://www.swancommunications.com
server-processing-duration-in-ticks: 553792
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 10 Oct 2022 22:33:16 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 84557
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
66.84.30.17
93.184.220.29
104.110.1.60
185.235.84.195
185.89.211.116
184.86.58.27
34.250.104.41
0.0.0.0