Overview

URLswancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/
IP 66.84.30.17 (United States)
ASN#11989 WEBINT
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-09-05 11:39:26 UTC
StatusLoading report..
IDS alerts0
Blocklist alert16
urlquery alerts No alerts detected
Tags None

Domain Summary (27)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
comcastcom.d1.sc.omtrdc.net (2) 47742 2016-01-16 19:54:46 UTC 2022-09-04 11:22:16 UTC 15.188.95.229
ib.adnxs.com (8) 241 2012-05-23 22:36:14 UTC 2022-09-05 04:38:25 UTC 37.252.172.250
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-05 04:38:03 UTC 34.120.237.76
comcastathena.demdex.net (2) 38236 2017-01-30 17:14:31 UTC 2022-09-04 11:22:17 UTC 18.202.164.188
rtax.criteo.com (1) 24191 2012-05-29 06:45:10 UTC 2022-09-05 08:48:02 UTC 178.250.2.157
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-05 06:27:58 UTC 143.204.55.27
login.xfinity.com (2) 18995 2018-01-15 14:52:54 UTC 2022-09-04 11:22:17 UTC 23.36.79.11
r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2022-09-05 04:38:00 UTC 23.36.76.226
ag.gbc.criteo.com (3) 5925 2018-12-17 13:17:41 UTC 2022-09-05 06:13:35 UTC 185.235.84.203
sdx.xfinity.com (3) 25278 2017-06-27 16:59:20 UTC 2022-09-04 11:22:16 UTC 104.110.1.60
ocsp.pki.goog (6) 175 2017-06-14 07:23:31 UTC 2022-09-05 04:38:08 UTC 142.250.74.3
www.google.no (1) 25607 2016-04-05 19:50:59 UTC 2022-09-05 07:26:37 UTC 142.250.74.3
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-05 04:38:54 UTC 34.117.237.239
assets.adobedtm.com (5) 512 2014-01-28 04:51:35 UTC 2022-09-05 04:47:25 UTC 23.38.200.237
www.google.com (1) 7 2017-01-29 11:48:58 UTC 2022-09-05 04:11:37 UTC 142.250.74.164
gum.criteo.com (4) 381 2015-01-22 10:58:57 UTC 2022-09-05 07:01:15 UTC 178.250.0.157
gem.gbc.criteo.com (2) 6039 2019-02-06 06:21:41 UTC 2022-09-05 06:13:35 UTC 185.235.84.8
ocsp.digicert.com (8) 86 2012-05-21 07:02:23 UTC 2022-09-05 05:20:54 UTC 93.184.220.29
z.moatads.com (1) 374 2014-02-11 16:19:47 UTC 2022-09-05 04:41:42 UTC 23.38.201.146
googleads.g.doubleclick.net (1) 42 2021-02-20 15:43:32 UTC 2022-09-05 09:47:26 UTC 216.58.207.194
dnacdn.net (3) 3760 2019-09-02 15:07:45 UTC 2022-09-05 05:57:26 UTC 178.250.2.146
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-05 05:14:21 UTC 143.204.55.110
dl.cws.xfinity.com (2) 25997 2017-07-24 22:51:42 UTC 2022-09-04 11:22:17 UTC 184.86.58.27
swancommunications.com (21) 0 2019-07-11 03:46:50 UTC 2022-09-05 09:08:21 UTC 66.84.30.17 Unknown ranking
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-05 05:10:58 UTC 34.208.31.97
dpm.demdex.net (2) 204 2017-01-30 04:59:39 UTC 2022-09-05 04:38:25 UTC 52.19.46.209
fast.comcast.demdex.net (1) 0 2012-12-05 13:16:05 UTC 2022-09-04 11:22:16 UTC 23.36.76.163 Domain (demdex.net) ranked at: 5815

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
Scan Date Severity Indicator Comment
2022-09-04 2 swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c (...) Comcast Corporation

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-05 2 swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c (...) Phishing
2022-09-05 2 swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c (...) Phishing
2022-09-05 2 swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c (...) Phishing
2022-09-05 2 swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c (...) Phishing
2022-09-05 2 swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c (...) Phishing
2022-09-05 2 swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c (...) Phishing
2022-09-05 2 swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c (...) Phishing
2022-09-05 2 swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c (...) Phishing
2022-09-05 2 swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c (...) Phishing
2022-09-05 2 swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c (...) Phishing
2022-09-05 2 swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c (...) Phishing
2022-09-05 2 swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c (...) Phishing
2022-09-05 2 swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c (...) Phishing
2022-09-05 2 swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c (...) Phishing
2022-09-05 2 swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c (...) Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 66.84.30.17
Date UQ / IDS / BL URL IP
2023-01-20 14:42:01 +0000 0 - 0 - 1 nmcb4reunion.info/wp-content/uploads/2022/10/ (...) 66.84.30.17
2022-12-08 22:51:43 +0000 0 - 0 - 19 nmcb4reunion.info/ 66.84.30.17
2022-11-27 02:29:53 +0000 0 - 0 - 9 rhodestravel.us.com/destination_1.htm 66.84.30.17
2022-10-19 11:32:38 +0000 0 - 0 - 15 www.swancommunications.com/menu-widge/class-w (...) 66.84.30.17
2022-10-19 11:32:18 +0000 0 - 0 - 15 www.swancommunications.com/menu-widge/class-w (...) 66.84.30.17


Last 5 reports on ASN: WEBINT
Date UQ / IDS / BL URL IP
2023-03-21 12:26:43 +0000 23 - 0 - 9 www.blackgeeksofdragoncon.com/wp-content/uplo (...) 207.55.248.94
2023-03-21 09:07:11 +0000 0 - 0 - 3 johnstewartstudies.org/clL1rQdzP1XCeJa5O3Z/ 199.204.248.133
2023-03-21 08:50:40 +0000 0 - 0 - 1 cheap8x10s.com/oduzbo0.zip 199.204.248.120
2023-03-21 07:48:14 +0000 0 - 1 - 2 count.mail.163.com.impactmedfoundation.com/fn (...) 199.204.248.115
2023-03-21 06:21:14 +0000 0 - 0 - 6 mollybhagan.com/Camerongeneralcontractors/log (...) 199.204.248.115


Last 5 reports on domain: swancommunications.com
Date UQ / IDS / BL URL IP
2022-10-19 11:32:38 +0000 0 - 0 - 15 www.swancommunications.com/menu-widge/class-w (...) 66.84.30.17
2022-10-19 11:32:18 +0000 0 - 0 - 15 www.swancommunications.com/menu-widge/class-w (...) 66.84.30.17
2022-10-10 22:33:24 +0000 0 - 0 - 16 www.swancommunications.com/menu-widge/class-w (...) 66.84.30.17
2022-10-08 08:29:19 +0000 0 - 0 - 14 swancommunications.com/menu-widge/class-wp/pl (...) 66.84.30.17
2022-09-24 22:06:40 +0000 0 - 0 - 3 swancommunications.com/menu-widge/class-wp/pl (...) 66.84.30.17


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-02-06 00:27:15 +0000 0 - 0 - 15 ntutdc1995.com/wp-content/plugins/advanced-fl (...) 104.26.1.51
2023-02-05 18:35:05 +0000 0 - 1 - 16 ntutdc1995.com/wp-content/plugins/advanced-fl (...) 104.26.1.51
2023-02-05 15:35:13 +0000 0 - 1 - 16 ntutdc1995.com/wp-content/plugins/advanced-fl (...) 104.26.0.51
2023-02-05 12:50:23 +0000 0 - 1 - 18 ntutdc1995.com/wp-content/plugins/advanced-fl (...) 172.67.73.58
2022-10-19 11:32:38 +0000 0 - 0 - 15 www.swancommunications.com/menu-widge/class-w (...) 66.84.30.17

JavaScript

Executed Scripts (35)

Executed Evals (5)
#1 JavaScript::Eval (size: 63) - SHA256: 69714ac25497684ab944f5ab015751a4e911749caa5fe3682dc5a1e8311ba458
(new Date("2835")).toISOString() !== "2835-01-01T00:00:00.000Z"
#2 JavaScript::Eval (size: 1444) - SHA256: a3a3824427ce14633950990f664e968c67f37a32185cc75db9f7d4b8c6a61eb2
(function l(d, f) {
    function g(a) {
        return function() {
            try {
                a.sending && (a.sending = !1, m = 0, k())
            } catch (b) {}
        }
    }

    function k(a, b) {
        if (a) {
            var d = {
                qs: a,
                jsd: b
            };
            if (0 === a.indexOf("e=21&")) {
                c(d, !0);
                return
            }
            l.push(d)
        }
        0 === m && 0 < l.length && (m++, d = l.shift(), d.sending = !0, d.uid = f.Math.floor(1E10 *
            f.Math.random()), d.timeoutId = f.setTimeout(g(d), 2E3), p[d.uid] = d, c(d))
    }

    function b() {
        try {
            return new t(1, 1)
        } catch (a) {
            var b = window.document.createElement("img");
            b.height = 1;
            b.width = 1;
            return b
        }
    }

    function c(c, d) {
        if ("object" === typeof a && a && a.d && a.d.c && a.d.c()) a.d.cw() && a.p.i(c.jsd + "/pixel.gif?" + c.qs, function() {
            h(c)
        }, function() {
            e(c)
        });
        else {
            var f = b();
            f.toSend = c;
            d || (f.onerror = function() {
                e(this.toSend)
            }, f.onload = function() {
                h(this.toSend)
            });
            f.src = c.jsd + "/pixel.gif?" + c.qs
        }
    }

    function e(a) {
        a.failedAttempts = "number" ==
            typeof a.failedAttempts ? a.failedAttempts + 1 : 0;
        var b = (a.jsd + "/pixel.gif?" + a.qs).length;
        1 > a.failedAttempts ? c(a) : v && b > y && h(a)
    }

    function h(a) {
        var b = a && a.uid && p && p[a.uid];
        if (a && a.qs && "tracer=" == a.qs) return !1;
        if (b) {
            p[a.uid] = null;
            try {
                delete p[a.uid]
            } catch (c) {}
            try {
                clearTimeout(b.timeoutId)
            } catch (c) {}
            if ("boolean" != typeof b.sending || b.sending) b.sending = !1;
            else return !1
        }
        0 < m && m--;
        k()
    }
    var l = [],
        m = 0,
        t, u = f[d],
        n = f.Math.floor(1E10 * f.Math.random()),
        p = {};
    u.yh = {};
    u = u.yh;
    t = f.Image;
    u.yi = function(a, b) {
        k(a, b)
    };
    u.xq = function() {
        return n
    };
    var q, v, y = 2083;
    try {
        q = document.createElement("div"), q.innerHTML = "\x3c!--[if IE 8]>x<![endif]--\x3e", v = "x" === q.innerHTML
    } catch (A) {
        v = !1
    }
})('MoatSuperV26', window)
#3 JavaScript::Eval (size: 85) - SHA256: 45f73c8d2a08890db58f56b3c230b719caf0ab7ed54bebec1ebda5d72236a95a
((new Date("1300-02-28T21:11:11.000Z")).toISOString() !== "1300-02-28T21:11:11.000Z")
#4 JavaScript::Eval (size: 50) - SHA256: 9fda12704d141686ffade43cfc0269f3533ed4cbbdbda7ad8d37bf9e80391f9a
(function(win) {
    win['Moat#EVA'] = true;
})(window)
#5 JavaScript::Eval (size: 213) - SHA256: 930c6bad7dca98c2d55d564d9df46c283223f18ed35d30686108e6bbe3f660bd
class A {
    constructor(pp) {
        this.pp = pp;
    }
    call() {
        return this.pp;
    }
}
class B extends A {
    tS(a) {
        return super.call();
    }
    tT(a) {
        return this.call();
    }
}
const obj = new B("cab");
(obj.tS() !== obj.tT());

Executed Writes (17)
#1 JavaScript::Write (size: 261) - SHA256: 413082a486058a2d6a5d53a16843766a1804c0cf41a7e16fffd56c4023c314c1
< script type = "text/javascript"
src = "//oascentral.xfinity.com/RealMedia/ads/adstream_jx.ads/comcast.net/login_secure/notve/1586186673@x32?target=normal&_OAS_GEO_OVERRIDE_=US:UNKNOWN&am=NONE&undefined&undefined&u=undefined&theme=light&max-size=fullpage" > < /script>
#2 JavaScript::Write (size: 412) - SHA256: bab844caa2cf1a477488564869db7d4627317681cf30ab54f5dbf3d4b3e98b94
<!-- END TAG --><IMG SRC="https://oascentral.xfinity.com/RealMedia/ads/adstream_lx.ads/comcast.net/login_secure/notve/L30/388251635/x32/Comcast/APN_redirected_signin_1400x800_NO_HB/APN_redirected_signin_1400x800_NO_HB.html/6d6e5a4b50313176614c77414143627a?_RM_EMPTY_&target=normal&_OAS_GEO_OVERRIDE_=US:UNKNOWN&am=NONE&undefined&undefined&u=undefined&theme=light&max-size=fullpage" style="display:none;" alt="">
#3 JavaScript::Write (size: 324) - SHA256: 929e0e21608727cde8bde4832a4d570eaacfd67031af368dd04174ce3f610d55
< script src = "https://z.moatads.com/comcastapn56341864860/moatad.js#moatClientLevel1=.CIM_PROMOTION&moatClientLevel2=Comcast/APN_redirected_signin_1400x800_NO_HB&moatClientLevel3=APN_redirected_signin_1400x800_NO_HB&moatClientSlicer1=x32&moatClientSlicer2=comcast.net/login_secure/notve/L30"
type = "text/javascript" > < /script>
#4 JavaScript::Write (size: 10) - SHA256: 2f358f0371a6e732c4340332235199dcd91ebc46239a5ddcfe6f9a63e6ebecfe
< /script>
#5 JavaScript::Write (size: 835) - SHA256: e232a83feeb11e77fe558fc95deca8645eeca3698681f3c48a039bc764c57a0f
< script language = "javascript"
src = "https://ib.adnxs.com/ttj?ttjb=1&bdc=1662377957&bdh=JnEYr171fCXGvzmmHzgV45IlDYQ.&&bdref=http%3A%2F%2Fswancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2F8e2027c8e77048cf2d80405ad36ed907%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26session%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&bdtop=true&bdifs=0&bstk=http%3A%2F%2Fswancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2F8e2027c8e77048cf2d80405ad36ed907%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26session%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&&id=15000574&size=1400x800&promo_sizes=300x600%2C300x250&psa=0" > < /script>
#6 JavaScript::Write (size: 833) - SHA256: 2318226c9e57587cbf5b0a44fa65b68c5e40700e957186119612fb8c4ad56b8e
< script language = "javascript"
src = "https://ib.adnxs.com/ttj?ttjb=1&bdc=1567582558&bdh=19csEAsmUreP4t53ODdEMQs8zSk.&&bdref=http%3A%2F%2Fswancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2F8e2027c8e77048cf2d80405ad36ed907%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26session%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&bdtop=true&bdifs=0&bstk=http%3A%2F%2Fswancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2F8e2027c8e77048cf2d80405ad36ed907%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26session%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&&id=15000574&size=1400x800&promo_sizes=300x600,300x250&psa=0" > < /script>
#7 JavaScript::Write (size: 1163) - SHA256: 4115039df6dc069ab3c40da45369a0af1d738dc8684c53d4b2f970c3061cf330
< script language = "javascript"
src = "https://ib.adnxs.com/ttj?ttjb=1&bdc=1662377958&bdh=FJcMQmltyIevosjHzIMPhgbiXmw.&bdl=1567582558&&bdref=http%3A%2F%2Fswancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2F8e2027c8e77048cf2d80405ad36ed907%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26session%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&bdtop=true&bdifs=0&bstk=http%3A%2F%2Fswancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2F8e2027c8e77048cf2d80405ad36ed907%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26session%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&&bstk=http%3A%2F%2Fswancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2F8e2027c8e77048cf2d80405ad36ed907%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26session%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&id=15000574&size=1400x800&promo_sizes=300x600%2C300x250&psa=0" > < /script>
#8 JavaScript::Write (size: 9) - SHA256: cf14a32120c034eafc76d4138166beb8c7a968a3633a0008e74f406dd9d2126d
< script >
#9 JavaScript::Write (size: 77) - SHA256: d73fa7e3772cd00dcafe59e592a02c6c8eb7d87b64b0b50a8ce7c4075308f2ba
var x32adtag = "Comcast/APN_redirected_signin_1400x800_NO_HB".split("/")[1];
#10 JavaScript::Write (size: 2) - SHA256: 412ca345ccf75bf9c0806bce695be8de808b79984251a7a54d202cf6101dd451
}
#11 JavaScript::Write (size: 303) - SHA256: 9d080974d0acde6c7368b860c1d83c8e3d85a6f8024fb9b91cf26b5f4a3df7ed
       < noscript class = "MOAT-comcastapn56341864860?moatClientLevel1=.CIM_PROMOTION&amp;moatClientLevel2=Comcast/APN_redirected_signin_1400x800_NO_HB&amp;moatClientLevel3=APN_redirected_signin_1400x800_NO_HB&amp;moatClientSlicer1=x32&amp;moatClientSlicer2=comcast.net/login_secure/notve/L30" > < /noscript>
#12 JavaScript::Write (size: 5) - SHA256: 7879981d4f226a8f0191d36730c07205d7a5ff1c780fca9b2f905f25264cf636
#13 JavaScript::Write (size: 89) - SHA256: e56b449633d4bdfb036dc90720cf7e45ff0460c5d412c4870170461538747fff
var adtag_x32 = "camp_" + x32adtag + "_creativeId_APN_redirected_signin_1400x800_NO_HB";
#14 JavaScript::Write (size: 11) - SHA256: 742c800c05fd69a5f2237dea34dc68f8c7e67f737212bd98fdba8adc476c667a
catch (e) {}
#15 JavaScript::Write (size: 59) - SHA256: d44fe270278a68c0fc84fc8c3ed442c6c08eb556296c04b4a7d82348287279a4
<!-- BEGIN JS TAG - SignIn_notve_x32 < - DO NOT MODIFY -->
#16 JavaScript::Write (size: 132) - SHA256: cae8a199cc080afb41d4dc1fe2ddbf9c4dfcd3a8cb90a73ef5aacf0cdc8896f8
< SCRIPT SRC = "https://ib.adnxs.com/ttj?id=15000574&size=1400x800&promo_sizes=300x600,300x250&psa=0"
TYPE = "text/javascript" > < /SCRIPT>
#17 JavaScript::Write (size: 5) - SHA256: 0dd4d955accc30fd912938e3f7bbb0325a19550e0b9f37348481204a78ae5b10
try {


HTTP Transactions (95)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.27
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 05 Sep 2022 10:44:47 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: erTHcT0-IZCngTmtp3XSBqIgRO0BvfRrjV5FrU-Y8cM28tPEzadb0g==
Age: 3268


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    91dd975a7b17b2922dd23c0e49314e40
Sha1:   57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4608
Expires: Mon, 05 Sep 2022 12:56:03 GMT
Date: Mon, 05 Sep 2022 11:39:15 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Sep 2022 01:15:19 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6FTcvznnyZoz2_0iUvmYB-Zofp0LFniEoVXWsL-8aBrtjZvmGoal5w==
age: 37438
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    742edb4038f38bc533514982f3d2e861
Sha1:   cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
Sha256: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Mon, 05 Sep 2022 11:39:15 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/ HTTP/1.1 
Host: swancommunications.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         66.84.30.17
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 05 Sep 2022 11:39:15 GMT
Server: Apache
location: index.htm?cmd=login_submit&id=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&session=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - openphish: Comcast Corporation
    - fortinet: Phishing
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.27
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Mon, 05 Sep 2022 11:38:16 GMT
Cache-Control: max-age=3600
Expires: Mon, 05 Sep 2022 12:18:09 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tYOsSTuW9ceao8t4ZHpL5-YqvcA83K-SRiSnsxduYPWH1sYwdXnAkw==
Age: 60


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4397
Cache-Control: 'max-age=158059'
Date: Mon, 05 Sep 2022 11:39:16 GMT
Last-Modified: Mon, 05 Sep 2022 10:25:59 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index.htm?cmd=login_submit&id=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&session=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918 HTTP/1.1 
Host: swancommunications.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         66.84.30.17
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Mon, 05 Sep 2022 11:39:16 GMT
Server: Apache
Last-Modified: Sun, 04 Sep 2022 12:09:59 GMT
Accept-Ranges: bytes
Content-Length: 16803
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1920), with CRLF line terminators
Size:   16803
Md5:    93725c706eda8c42b41bcca4d3e64969
Sha1:   72011789b5cc39176eebb2fe5eeeefc1fbcf362b
Sha256: 5668f66541c53b709dc5b04fc475dab7bb8251b3ebf7a2274a2eaa0db53992ef
                                        
                                            GET /menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index_files/lodash-slim.js HTTP/1.1 
Host: swancommunications.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index.htm?cmd=login_submit&id=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&session=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918

search
                                         66.84.30.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 05 Sep 2022 11:39:16 GMT
Server: Apache
Last-Modified: Sun, 04 Sep 2022 12:09:59 GMT
Accept-Ranges: bytes
Content-Length: 23346
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (1486)
Size:   23346
Md5:    542a4d4d47e89ca290d850a6a0ae09b4
Sha1:   56445e16057d5b725ae11f5e85db661120515299
Sha256: 49d0c079f8431833fb59275e68a7db8b9215dc52068ff63c179e32dfe618a8c4

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: DiUeHkTzhJMDG+yx0mS4mw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         34.208.31.97
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 6zu4czm1Hqujn0clwkrSUBYtEKA=

                                        
                                            GET /menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index_files/jquery-3.js HTTP/1.1 
Host: swancommunications.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index.htm?cmd=login_submit&id=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&session=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918

search
                                         66.84.30.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 05 Sep 2022 11:39:16 GMT
Server: Apache
Last-Modified: Sun, 04 Sep 2022 12:09:59 GMT
Accept-Ranges: bytes
Content-Length: 86927
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   86927
Md5:    a09e13ee94d51c524b7e2a728c7d4039
Sha1:   0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
Sha256: 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index_files/rta.js HTTP/1.1 
Host: swancommunications.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index.htm?cmd=login_submit&id=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&session=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918

search
                                         66.84.30.17
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Mon, 05 Sep 2022 11:39:16 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index_files/vm-login-form-ad.js HTTP/1.1 
Host: swancommunications.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index.htm?cmd=login_submit&id=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&session=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918

search
                                         66.84.30.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 05 Sep 2022 11:39:16 GMT
Server: Apache
Last-Modified: Sun, 04 Sep 2022 12:09:59 GMT
Accept-Ranges: bytes
Content-Length: 8775
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   8775
Md5:    0318627f2adf5aafb9520d94f30749a4
Sha1:   643454397eddf53c58e6766f58a519b0b444592c
Sha256: 1bdca04f41b797a00f1ac403070d6ea18a459754c41d383ffddf5b0991f04d9d

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index_files/data.json HTTP/1.1 
Host: swancommunications.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index.htm?cmd=login_submit&id=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&session=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918

search
                                         66.84.30.17
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Date: Mon, 05 Sep 2022 11:39:16 GMT
Server: Apache
Last-Modified: Sun, 04 Sep 2022 12:09:59 GMT
Accept-Ranges: bytes
Content-Length: 169
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   169
Md5:    d64e6c5a8ce0f0383b88a1be77b053ee
Sha1:   a316ca3df9822a7e638623d92e5aeacb3f4e3a2e
Sha256: c3d83128029acb4b1c9ae295ea823c9adb93e1cfa1e81d200e30adba82b3d4d3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index_files/1011719316x32.js HTTP/1.1 
Host: swancommunications.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index.htm?cmd=login_submit&id=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&session=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918

search
                                         66.84.30.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 05 Sep 2022 11:39:16 GMT
Server: Apache
Last-Modified: Sun, 04 Sep 2022 12:09:59 GMT
Accept-Ranges: bytes
Content-Length: 1723
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (433)
Size:   1723
Md5:    fa05120ba52f7ee87e3521b726d66fd0
Sha1:   d7ba5ed4796a436e942afac492ec02c4d9796e17
Sha256: 55b2a74a7498140a0e3d2e62e00a967fffac9a908c326d2294a1b37c0fb8b2f3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index_files/fonts-remote.css HTTP/1.1 
Host: swancommunications.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index.htm?cmd=login_submit&id=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&session=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918

search
                                         66.84.30.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Mon, 05 Sep 2022 11:39:16 GMT
Server: Apache
Last-Modified: Sun, 04 Sep 2022 12:09:59 GMT
Accept-Ranges: bytes
Content-Length: 3243
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (3243), with no line terminators
Size:   3243
Md5:    709e5291d3bbec4524a53edf4c343352
Sha1:   de3799da5fc172ae2a76c5b4716b1f621ae3c2c6
Sha256: 25910ca8aaacdd039f7e596b4f446ac4c71f67ff3911d5969dfba9b7f1a6688f
                                        
                                            GET /menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index_files/ttj HTTP/1.1 
Host: swancommunications.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index.htm?cmd=login_submit&id=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&session=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918

search
                                         66.84.30.17
HTTP/1.1 200 OK
                                        
Date: Mon, 05 Sep 2022 11:39:17 GMT
Server: Apache
Last-Modified: Sun, 04 Sep 2022 12:09:59 GMT
Accept-Ranges: bytes
Content-Length: 7387
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (7387), with no line terminators
Size:   7387
Md5:    89cf9988d16c15d5919e2efdeb341003
Sha1:   6554b529e37e27af64a11b0d3507073ca05fb822
Sha256: 0f108c7122c218a486594e6ddd029c00844979992aa9d7b00ea9d3816a3e5be5

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index_files/tracking.js HTTP/1.1 
Host: swancommunications.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index.htm?cmd=login_submit&id=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&session=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918

search
                                         66.84.30.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 05 Sep 2022 11:39:16 GMT
Server: Apache
Last-Modified: Sun, 04 Sep 2022 12:09:59 GMT
Accept-Ranges: bytes
Content-Length: 14964
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (14942)
Size:   14964
Md5:    d8c65cf89a55791f45cf6eba34c0a6e9
Sha1:   05bf019faf116dfd1a9811a806e5bd0639d83c45
Sha256: d1e2dfc4882d3951f8b5ce26f342fdbd83dcfc7c5d53cc455dc3703b706fc7c2

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index_files/tracking-aws.js HTTP/1.1 
Host: swancommunications.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index.htm?cmd=login_submit&id=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&session=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918

search
                                         66.84.30.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 05 Sep 2022 11:39:17 GMT
Server: Apache
Last-Modified: Sun, 04 Sep 2022 12:09:59 GMT
Accept-Ranges: bytes
Content-Length: 2546
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (2546), with no line terminators
Size:   2546
Md5:    576b123770b3c1ada8d4260344726960
Sha1:   c8716f7d0fe73d9edf5ec333e9fc5500f7543fe9
Sha256: 11da464f86f5ff9850e1ef53dd13336cfbfd38a8f3808d7826d0c1a2d925563f

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index_files/tracking-DTM.js HTTP/1.1 
Host: swancommunications.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index.htm?cmd=login_submit&id=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&session=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918

search
                                         66.84.30.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 05 Sep 2022 11:39:17 GMT
Server: Apache
Last-Modified: Sun, 04 Sep 2022 12:09:59 GMT
Accept-Ranges: bytes
Content-Length: 1624
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (1624), with no line terminators
Size:   1624
Md5:    1fb3947058db50b6b3d0487328e3f86e
Sha1:   471f8733093ede4b0e075751bb89e0678d06a4f1
Sha256: 0df906e16d1ed57a686d542ac0e7a620eafb715c12ee0a0c648653b569e72a9b

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index_files/moatad.js HTTP/1.1 
Host: swancommunications.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index.htm?cmd=login_submit&id=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&session=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918

search
                                         66.84.30.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 05 Sep 2022 11:39:17 GMT
Server: Apache
Last-Modified: Sun, 04 Sep 2022 12:09:59 GMT
Accept-Ranges: bytes
Content-Length: 275951
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (761)
Size:   275951
Md5:    62628dc07dedc3f2a479575c2de3c899
Sha1:   a2e5f0a77a4df50476072170a47af42b28bcba02
Sha256: 2a150284ec831c47369e543eaaf6b57e2cbfc5102ff7d147efd3e12f26d53eaa

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index_files/scripts-responsive.js HTTP/1.1 
Host: swancommunications.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index.htm?cmd=login_submit&id=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&session=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918

search
                                         66.84.30.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 05 Sep 2022 11:39:17 GMT
Server: Apache
Last-Modified: Sun, 04 Sep 2022 12:09:59 GMT
Accept-Ranges: bytes
Content-Length: 7303
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (7303), with no line terminators
Size:   7303
Md5:    e98c1a1adf5539adda926dc57b56df92
Sha1:   3024e9e83dc44d9d9e6e7b1437110d68ca80e54f
Sha256: aceb470e2f0767fe13270d4f84dc14e347889dd34762dd6eb095db9581051e89

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index_files/styles-light.css HTTP/1.1 
Host: swancommunications.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index.htm?cmd=login_submit&id=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&session=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918

search
                                         66.84.30.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Mon, 05 Sep 2022 11:39:16 GMT
Server: Apache
Last-Modified: Sun, 04 Sep 2022 12:09:59 GMT
Accept-Ranges: bytes
Content-Length: 45103
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (45103), with no line terminators
Size:   45103
Md5:    0a0b49b52b3291d6b49b7713c4a4118d
Sha1:   8e720bff1874620ef556512d3c690c69da3c3255
Sha256: e9838dd96e607f7db82a919db47ac8ead355133b2a0ac312517d76b1a9b47266
                                        
                                            GET /menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index_files/satelliteLib-531bc4f46256650a84099973f0ed331f809ea5f4.js HTTP/1.1 
Host: swancommunications.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index.htm?cmd=login_submit&id=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&session=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918

search
                                         66.84.30.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 05 Sep 2022 11:39:16 GMT
Server: Apache
Last-Modified: Sun, 04 Sep 2022 12:09:59 GMT
Accept-Ranges: bytes
Content-Length: 129056
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (32748)
Size:   129056
Md5:    01221af4231ddeec15ca85739ffc766c
Sha1:   f61a3d6cf1fc6262b0c1e9b8bad2c9d56dca1702
Sha256: eab642baf412d4de18d20788e3784c47927549da84c4f0b5a0f6865fdbfb61a3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index_files/u.gif HTTP/1.1 
Host: swancommunications.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index.htm?cmd=login_submit&id=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&session=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918

search
                                         66.84.30.17
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 05 Sep 2022 11:39:17 GMT
Server: Apache
Last-Modified: Sun, 04 Sep 2022 12:09:59 GMT
Accept-Ranges: bytes
Content-Length: 42
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index_files/6d6e5a4b50313176614c77414143627a.gif HTTP/1.1 
Host: swancommunications.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index.htm?cmd=login_submit&id=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&session=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918

search
                                         66.84.30.17
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 05 Sep 2022 11:39:17 GMT
Server: Apache
Last-Modified: Sun, 04 Sep 2022 12:09:59 GMT
Accept-Ranges: bytes
Content-Length: 43
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    fc94fb0c3ed8a8f909dbc7630a0987ff
Sha1:   56d45f8a17f5078a20af9962c992ca4678450765
Sha256: 2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
                                        
                                            GET /menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index_files/event.gif HTTP/1.1 
Host: swancommunications.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index.htm?cmd=login_submit&id=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&session=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918

search
                                         66.84.30.17
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 05 Sep 2022 11:39:17 GMT
Server: Apache
Last-Modified: Sun, 04 Sep 2022 12:09:59 GMT
Accept-Ranges: bytes
Content-Length: 42
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /fonts/latest/Xfinity_Standard/XfinityStandard-Regular.woff2 HTTP/1.1 
Host: sdx.xfinity.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://swancommunications.com
Connection: keep-alive
Referer: http://swancommunications.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.110.1.60
HTTP/2 200 OK
content-type: font/woff2
                                        
content-length: 26768
last-modified: Fri, 24 Jan 2020 21:23:01 GMT
etag: "e3e79cd377b28c1e7ffea64b194136cf"
x-amz-version-id: kLBQWhXkUwwuS0hOSKJ2GQ_XrNE.oQFF
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XTk1ZXdpqisLN4abManV2eERXXfdVDr6nw7IuuvYX00Zl-QVHJqL0A==
cache-control: max-age=482597
date: Mon, 05 Sep 2022 11:39:17 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 26768, version 0.0\012- data
Size:   26768
Md5:    e3e79cd377b28c1e7ffea64b194136cf
Sha1:   e67fb661f5d630ecc811e93d526065a680bf58d7
Sha256: 138c0ead0fbcd09dd455df9870920e8725b367fbf02ac0cef0c62874000ab176
                                        
                                            GET /id?d_visid_ver=2.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=DA11332E5321D0550A490D45%40AdobeOrg&d_nsid=0&ts=1662377953089 HTTP/1.1 
Host: dpm.demdex.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Origin: http://swancommunications.com
Connection: keep-alive
Referer: http://swancommunications.com/

search
                                         52.19.46.209
HTTP/1.1 200 OK
Content-Type: application/json;charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://swancommunications.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
DCS: dcs-prod-irl1-2-v038-0972c09bf.edge-irl1.demdex.com 3 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=82910281194364787003172223972967356906; Max-Age=15552000; Expires=Sat, 04 Mar 2023 11:39:17 GMT; Path=/; Domain=.demdex.net
Vary: Origin
X-TID: uAfkI/0RQMs=
Content-Length: 1148
Connection: keep-alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (3420), with no line terminators
Size:   1148
Md5:    b33154cd350898f7dad6894f24e11051
Sha1:   7e610d38381d7580fe67a475886d3c02e794021e
Sha256: a586dfefd6dc4171eb4f6671b3ec86c2074d7aaa4fc739793b528db75fd553eb
                                        
                                            GET /menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index_files/rta.js HTTP/1.1 
Host: swancommunications.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/menu-widge/class-wp/plugins/images/wp-sample/8e2027c8e77048cf2d80405ad36ed907/index.htm?cmd=login_submit&id=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&session=9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918
Cookie: AMCV_DA11332E5321D0550A490D45%40AdobeOrg=1406116232%7CMCIDTS%7C19241%7CvVersion%7C2.5.0

search
                                         66.84.30.17
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Mon, 05 Sep 2022 11:39:17 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /dest5.html?d_nsid=0 HTTP/1.1 
Host: fast.comcast.demdex.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/
Upgrade-Insecure-Requests: 1

search
                                         23.36.76.163
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Accept-Ranges: bytes
ETag: "2c9c2ee145ee280b85a217ad7045fae5:1580750826.437238"
Last-Modified: Mon, 03 Feb 2020 17:27:06 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=21600
Date: Mon, 05 Sep 2022 11:39:17 GMT
Content-Length: 2785
Connection: keep-alive
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (550)
Size:   2785
Md5:    b8a1b21bd0651935d53a7bff0c2479d6
Sha1:   31527c952669b6d1d06c537eb50c9043f576e607
Sha256: 80888fb8b92d01d8dd990af664d273f6364b2917741b09911096099ce4eef1bd
                                        
                                            GET /id?d_visid_ver=2.5.0&d_fieldgroup=A&mcorgid=DA11332E5321D0550A490D45%40AdobeOrg&mid=83062907370699786993192060008449156429&ts=1662377953212 HTTP/1.1 
Host: comcastcom.d1.sc.omtrdc.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Origin: http://swancommunications.com
Connection: keep-alive
Referer: http://swancommunications.com/

search
                                         15.188.95.229
HTTP/1.1 200 OK
content-type: application/x-javascript;charset=utf-8
                                        
access-control-allow-origin: http://swancommunications.com
access-control-allow-credentials: true
date: Mon, 05 Sep 2022 11:39:17 GMT
p3p: CP="This is not a P3P policy"
server: jag
vary: Origin
content-length: 2
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   2
Md5:    99914b932bd37a50b983c5e7c90ae93b
Sha1:   bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
Sha256: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                        
                                            GET /comcastapn56341864860/moatad.js HTTP/1.1 
Host: z.moatads.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://swancommunications.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.38.201.146
HTTP/2 200 OK
content-type: application/x-javascript
                                        
x-amz-id-2: DgrV/yUP0cYZJ24pT7Z5LVkFATYFOX23OVuFadPO2EW++SB5KZZT2R0SCmVojLGlVbLec6pGXtw=
x-amz-request-id: CA2DQ7A5WM2MGH3Y
last-modified: Mon, 11 May 2020 15:59:42 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
accept-ranges: bytes
server: AmazonS3
content-length: 0
cache-control: max-age=61937
date: Mon, 05 Sep 2022 11:39:17 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /ttj?id=15000574&size=1400x800&promo_sizes=300x600,300x250&psa=0 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://swancommunications.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         37.252.172.250
HTTP/1.1 307 Redirection
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.21.3
Date: Mon, 05 Sep 2022 11:39:17 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ib.adnxs.com/bounce?%2Fttj%3Fid%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%2C300x250%26psa%3D0
AN-X-Request-Uuid: 472b1ec7-4d60-4eeb-bf64-4f2472af343c
Set-Cookie: uuid2=7860938035688493442; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 04-Dec-2022 11:39:17 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 538.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6209
Expires: Mon, 05 Sep 2022 13:22:46 GMT
Date: Mon, 05 Sep 2022 11:39:17 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6209
Expires: Mon, 05 Sep 2022 13:22:46 GMT
Date: Mon, 05 Sep 2022 11:39:17 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6209
Expires: Mon, 05 Sep 2022 13:22:46 GMT
Date: Mon, 05 Sep 2022 11:39:17 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6209
Expires: Mon, 05 Sep 2022 13:22:46 GMT
Date: Mon, 05 Sep 2022 11:39:17 GMT
Connection: keep-alive

                                        
                                            GET /bounce?%2Fttj%3Fid%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%2C300x250%26psa%3D0 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://swancommunications.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         37.252.172.250
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Server: nginx/1.21.3
Date: Mon, 05 Sep 2022 11:39:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: b28674ef-dd32-4d86-803e-2be84e63b50e
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 538.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (7400), with no line terminators
Size:   2930
Md5:    5b5f745cc7e501f012af7537f8de5f06
Sha1:   3fc57903526a1b936ad22c4099f016bb0afd3dc5
Sha256: 60fbb0a95687c2166de968c5626fc055d55d8e80b964125b6d499a5cabc05022
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8469
x-amzn-requestid: de0e8998-4a52-4651-bcd6-3068c50193b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X9Ey2Eq4oAMFZlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63151b45-15da44d87bf486cb1738fe18;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: GuATNx2xnWnEl0cr_2ZWZo_jOWbHlSBYksIeHFDoHAK9o5Tf0PPliQ==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 22:03:29 GMT
etag: "032acf1bfb0c8e2cbce8f2ff4d2964424b044951"
age: 48948
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8469
Md5:    30bf854fd3e27e2313a3d26fc43b9990
Sha1:   032acf1bfb0c8e2cbce8f2ff4d2964424b044951
Sha256: 7641be64dd25487edf4f845d1fbb0b07daa80fa8fb58863dd09081d9d169bd13
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ad09c5e-a115-4ff7-9742-809e93046365.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4426
x-amzn-requestid: b5b68557-e46d-41cd-9b11-d996aabc0de7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzfYTHHFIAMFjFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631145ce-1d3504367cf6ef724a345564;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 23:52:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XY2liZJvZjSSNT0u90GlCn3HGPxVaYO4xztkeALLJOTRRwruDELcvg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 21:48:06 GMT
age: 49871
etag: "fc766bca874a352a4acb569577d4cf6527f4f074"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4426
Md5:    c81f3df885bdee8cac46ea9495e6b63b
Sha1:   fc766bca874a352a4acb569577d4cf6527f4f074
Sha256: e21473f88c613ca33ba6bbe1e0cab338274a06744cdcb088f14873c972445b36
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5b72072c-e8d1-4d87-8b3d-88a344002b6a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9632
x-amzn-requestid: aee8c394-86b7-4b7e-8a1b-134b4de8454f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XnTxZF0rIAMFodg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630c666f-2f2a9e20556d8899447fc662;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 07:10:39 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 77bXbuBtQ1AUHqlplB8HwTfSd83WZTTsmHsN2hZiTk83XvP5Bdpfhg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 19:05:29 GMT
age: 59628
etag: "b470ee66546236df6932247b8de7982a081e3170"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9632
Md5:    3fa914e288ca54908967c65ae6000607
Sha1:   b470ee66546236df6932247b8de7982a081e3170
Sha256: 04dc2796377fdd129e03e1a1902207ba57f23933f4296908794097353f2de13f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1be72d8-944d-4a7e-9b1e-ad82d49d9cf3.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11654
x-amzn-requestid: 7dec27e0-0959-435b-b155-6afeb503dac9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XxJUJGf-oAMFZNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631055b3-15838b603291931a4d236ff2;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 06:48:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wWaGFAA7vsAS2zhpSM0Cy5CueNSI8s-cS8sTOWUZGdy-AW2vhbNrBA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 19:05:28 GMT
age: 59629
etag: "a32ddb91fce6c75ee39530117afcf31d6c6eea94"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11654
Md5:    236f57d73839def5d9ddd1b993394bac
Sha1:   a32ddb91fce6c75ee39530117afcf31d6c6eea94
Sha256: 5c4eab322f6c6a7462a4350dde8d32fc321e6d026e72c0bdb282a56da72c9664
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69b1e092-41e6-4f1e-b330-193f7dd11afc.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7830
x-amzn-requestid: c56af3b5-2c48-4243-b220-d56a9be47990
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X9Ey3H4JoAMFiMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63151b45-23ec24d867e3e5906fffa1a6;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: VgP7BDBmd5A5bAmRgO88geep419uZ0TQop4jEmRkx-q9rX4PUJZOCQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 22:16:55 GMT
age: 48142
etag: "3633391a8dd87ef10fcb0d04d7b309738affc4a7"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7830
Md5:    290f6551c5ac539ea60810b135750f17
Sha1:   3633391a8dd87ef10fcb0d04d7b309738affc4a7
Sha256: d94d133faaf232cf15b5c3f38f5b45d87d70bce0668d607b5c66a8d3f836540f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bd909ca-6c46-4b8b-a2f5-4d5470335397.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7358
x-amzn-requestid: d925ec69-0baa-4dc0-912c-ab4d0e86ffac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X9Ey3GRfIAMFmyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63151b45-041f82c20184278e2bfaad12;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: FjgrWe3PbQeEjqtBdrv4qZYxS-dsxh3ia9K5cxPxLq8pImfznoXFpQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 22:13:34 GMT
age: 48343
etag: "9c00f2f5c3677908c2bdd8c1272d50d113672a88"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7358
Md5:    e4d6973685c96423469bad0cdf87aef3
Sha1:   9c00f2f5c3677908c2bdd8c1272d50d113672a88
Sha256: f0fccb7a9c7bd00777e74b67ef248b1d9596ccaeb40b24c3451f4a65d0079968
                                        
                                            GET /ttj?ttjb=1&bdc=1662377957&bdh=JnEYr171fCXGvzmmHzgV45IlDYQ.&&bdref=http%3A%2F%2Fswancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2F8e2027c8e77048cf2d80405ad36ed907%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26session%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&bdtop=true&bdifs=0&bstk=http%3A%2F%2Fswancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2F8e2027c8e77048cf2d80405ad36ed907%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26session%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&&id=15000574&size=1400x800&promo_sizes=300x600%2C300x250&psa=0 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://swancommunications.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         37.252.172.250
HTTP/1.1 307 Redirection
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.21.3
Date: Mon, 05 Sep 2022 11:39:17 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ib.adnxs.com/bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1662377957%26bdh%3DJnEYr171fCXGvzmmHzgV45IlDYQ.%26%26bdref%3Dhttp%253A%252F%252Fswancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252F8e2027c8e77048cf2d80405ad36ed907%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%2526session%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26bdtop%3Dtrue%26bdifs%3D0%26bstk%3Dhttp%253A%252F%252Fswancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252F8e2027c8e77048cf2d80405ad36ed907%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%2526session%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26%26id%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%252C300x250%26psa%3D0
AN-X-Request-Uuid: 3319365c-4e49-45b2-9fe7-17a5a58da474
Set-Cookie: uuid2=9129873212802286763; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 04-Dec-2022 11:39:17 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 538.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

                                        
                                            GET /bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1662377957%26bdh%3DJnEYr171fCXGvzmmHzgV45IlDYQ.%26%26bdref%3Dhttp%253A%252F%252Fswancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252F8e2027c8e77048cf2d80405ad36ed907%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%2526session%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26bdtop%3Dtrue%26bdifs%3D0%26bstk%3Dhttp%253A%252F%252Fswancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252F8e2027c8e77048cf2d80405ad36ed907%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%2526session%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26%26id%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%252C300x250%26psa%3D0 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://swancommunications.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         37.252.172.250
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.21.3
Date: Mon, 05 Sep 2022 11:39:18 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: e39eec7e-0d58-4f9d-ab4d-b6b03a69ff17
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 538.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

                                        
                                            GET /ttj?ttjb=1&bdc=1567582558&bdh=19csEAsmUreP4t53ODdEMQs8zSk.&&bdref=http%3A%2F%2Fswancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2F8e2027c8e77048cf2d80405ad36ed907%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26session%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&bdtop=true&bdifs=0&bstk=http%3A%2F%2Fswancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2F8e2027c8e77048cf2d80405ad36ed907%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26session%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&&id=15000574&size=1400x800&promo_sizes=300x600,300x250&psa=0 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://swancommunications.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         37.252.172.250
HTTP/1.1 307 Redirection
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.21.3
Date: Mon, 05 Sep 2022 11:39:18 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ib.adnxs.com/bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1567582558%26bdh%3D19csEAsmUreP4t53ODdEMQs8zSk.%26%26bdref%3Dhttp%253A%252F%252Fswancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252F8e2027c8e77048cf2d80405ad36ed907%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%2526session%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26bdtop%3Dtrue%26bdifs%3D0%26bstk%3Dhttp%253A%252F%252Fswancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252F8e2027c8e77048cf2d80405ad36ed907%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%2526session%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26%26id%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%2C300x250%26psa%3D0
AN-X-Request-Uuid: e875b459-f04e-4e4d-ba2d-71f5b6aeff59
Set-Cookie: uuid2=7423725131526467846; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 04-Dec-2022 11:39:18 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 538.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

                                        
                                            GET /bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1567582558%26bdh%3D19csEAsmUreP4t53ODdEMQs8zSk.%26%26bdref%3Dhttp%253A%252F%252Fswancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252F8e2027c8e77048cf2d80405ad36ed907%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%2526session%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26bdtop%3Dtrue%26bdifs%3D0%26bstk%3Dhttp%253A%252F%252Fswancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252F8e2027c8e77048cf2d80405ad36ed907%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%2526session%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26%26id%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%2C300x250%26psa%3D0 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://swancommunications.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         37.252.172.250
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Server: nginx/1.21.3
Date: Mon, 05 Sep 2022 11:39:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 13ba2031-fd59-4cf4-9111-8e1ec3ac93b2
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 538.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (7760), with no line terminators
Size:   3110
Md5:    1a964897a87ade0f8ef90534057688ec
Sha1:   a7290ef3efaaf0663af2da7dc022515bf7ac0f99
Sha256: 53e13cec809c2f483c1d71233b46ae32e30f3dec75239156674da918c62a0a6b
                                        
                                            GET /ttj?ttjb=1&bdc=1662377958&bdh=FJcMQmltyIevosjHzIMPhgbiXmw.&bdl=1567582558&&bdref=http%3A%2F%2Fswancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2F8e2027c8e77048cf2d80405ad36ed907%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26session%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&bdtop=true&bdifs=0&bstk=http%3A%2F%2Fswancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2F8e2027c8e77048cf2d80405ad36ed907%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26session%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&&bstk=http%3A%2F%2Fswancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2F8e2027c8e77048cf2d80405ad36ed907%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26session%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918&id=15000574&size=1400x800&promo_sizes=300x600%2C300x250&psa=0 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://swancommunications.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         37.252.172.250
HTTP/1.1 307 Redirection
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.21.3
Date: Mon, 05 Sep 2022 11:39:18 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ib.adnxs.com/bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1662377958%26bdh%3DFJcMQmltyIevosjHzIMPhgbiXmw.%26bdl%3D1567582558%26%26bdref%3Dhttp%253A%252F%252Fswancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252F8e2027c8e77048cf2d80405ad36ed907%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%2526session%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26bdtop%3Dtrue%26bdifs%3D0%26bstk%3Dhttp%253A%252F%252Fswancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252F8e2027c8e77048cf2d80405ad36ed907%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%2526session%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26%26bstk%3Dhttp%253A%252F%252Fswancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252F8e2027c8e77048cf2d80405ad36ed907%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%2526session%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26id%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%252C300x250%26psa%3D0
AN-X-Request-Uuid: 36012983-988b-480b-9feb-0ad3c827607e
Set-Cookie: uuid2=7926188980841907015; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 04-Dec-2022 11:39:18 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 538.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

                                        
                                            GET /bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1662377958%26bdh%3DFJcMQmltyIevosjHzIMPhgbiXmw.%26bdl%3D1567582558%26%26bdref%3Dhttp%253A%252F%252Fswancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252F8e2027c8e77048cf2d80405ad36ed907%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%2526session%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26bdtop%3Dtrue%26bdifs%3D0%26bstk%3Dhttp%253A%252F%252Fswancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252F8e2027c8e77048cf2d80405ad36ed907%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%2526session%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26%26bstk%3Dhttp%253A%252F%252Fswancommunications.com%252Fmenu-widge%252Fclass-wp%252Fplugins%252Fimages%252Fwp-sample%252F8e2027c8e77048cf2d80405ad36ed907%252Findex.htm%253Fcmd%253Dlogin_submit%2526id%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%2526session%253D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26id%3D15000574%26size%3D1400x800%26promo_sizes%3D300x600%252C300x250%26psa%3D0 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://swancommunications.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         37.252.172.250
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.21.3
Date: Mon, 05 Sep 2022 11:39:18 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 258bd541-8390-4f7a-927b-207bf7a516cb
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 538.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

                                        
                                            GET /fonts/latest/Xfinity_Standard/XfinityStandard-Light.woff2 HTTP/1.1 
Host: sdx.xfinity.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://swancommunications.com
Connection: keep-alive
Referer: http://swancommunications.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.110.1.60
HTTP/2 200 OK
content-type: font/woff2
                                        
content-length: 27420
last-modified: Fri, 24 Jan 2020 21:23:01 GMT
etag: "f05d3ebe80809d82ab14d62a79da544e"
x-amz-version-id: wnCwOacXycelzt78IMkr55wWB9WkMd2W
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _vpkqBlLETw4T6oH2cSnkktI4BxeLxas20IZvW788el8Nomx3bJ5ug==
cache-control: max-age=2430434
date: Mon, 05 Sep 2022 11:39:18 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 27420, version 0.0\012- data
Size:   27420
Md5:    f05d3ebe80809d82ab14d62a79da544e
Sha1:   bf08410286fbadd57335dc63dbdd8169cd4e6d1e
Sha256: fc6cd95261064c28600405c9c8dd51813abf8367e85b6e00f0f3031a8338988a
                                        
                                            GET /fonts/latest/Xfinity_Standard/XfinityStandard-Medium.woff2 HTTP/1.1 
Host: sdx.xfinity.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://swancommunications.com
Connection: keep-alive
Referer: http://swancommunications.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.110.1.60
HTTP/2 200 OK
content-type: font/woff2
                                        
content-length: 27152
last-modified: Fri, 24 Jan 2020 21:23:01 GMT
etag: "13709eac065721ba8cd0e2d1b6fa8026"
x-amz-version-id: 6t4RA2DS89tdf_2IK5vrc9JAOKCy9A40
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: IzOfbbv8gz8w_604kyRw0cTtS-ry2VNjzzr5bNN0H7WL2BOGYFlCng==
cache-control: max-age=799896
date: Mon, 05 Sep 2022 11:39:18 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 27152, version 0.0\012- data
Size:   27152
Md5:    13709eac065721ba8cd0e2d1b6fa8026
Sha1:   2fa86f3c0fbc94711d6c0ed32e3e03add756ba18
Sha256: 2a031939885bb7efba89d423c9ee7c0fe2bab465f18db63f40a9ae2bd7bc0228
                                        
                                            GET /43896e740dcedef854392e0be6ea80deb8eb2ba5/s-code-contents-4a9ebf08bffa74f717ff121b2c55a295112122b4.js HTTP/1.1 
Host: assets.adobedtm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/

search
                                         23.38.200.237
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Accept-Ranges: bytes
ETag: "7c44e613d67e21f6a1c3afd5985988da:1581368005.559228"
Last-Modified: Mon, 10 Feb 2020 20:53:25 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=3600
Expires: Mon, 05 Sep 2022 12:39:18 GMT
Date: Mon, 05 Sep 2022 11:39:18 GMT
Content-Length: 34525
Connection: keep-alive
Access-Control-Allow-Origin: http://swancommunications.com
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with very long lines (557)
Size:   34525
Md5:    953eadbd32b8680b37511cc683781aff
Sha1:   8ea7a5fb3bd5f727f3ec3366bc1d91b3a104043b
Sha256: 14dd417150683ce056827225bbf94a0f26e95a820b604f815021be49eb8c707b
                                        
                                            GET /43896e740dcedef854392e0be6ea80deb8eb2ba5/scripts/satellite-596fc62264746d0ba500dd83.js HTTP/1.1 
Host: assets.adobedtm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/

search
                                         23.38.200.237
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Accept-Ranges: bytes
ETag: "16dfb4bd56a82d8f8018ab2fa164856c:1581368006.307249"
Last-Modified: Mon, 10 Feb 2020 20:53:26 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 134
Cache-Control: max-age=3600
Expires: Mon, 05 Sep 2022 12:39:18 GMT
Date: Mon, 05 Sep 2022 11:39:18 GMT
Connection: keep-alive
Access-Control-Allow-Origin: http://swancommunications.com
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text
Size:   134
Md5:    26720501c4260c7cc5833d9e06f0af87
Sha1:   26ce9fe2fa65dcd91b1ff050a238892a70eaad6c
Sha256: e23487c8456f551b44229fd881dd8c524922e7c4c68682028c245bf706820e62
                                        
                                            GET /43896e740dcedef854392e0be6ea80deb8eb2ba5/scripts/satellite-596fa36064746d7e580013b4.js HTTP/1.1 
Host: assets.adobedtm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/

search
                                         23.38.200.237
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Accept-Ranges: bytes
ETag: "b5834499509b419a0926487143b3976d:1581368006.388159"
Last-Modified: Mon, 10 Feb 2020 20:53:26 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 187
Cache-Control: max-age=3600
Expires: Mon, 05 Sep 2022 12:39:18 GMT
Date: Mon, 05 Sep 2022 11:39:18 GMT
Connection: keep-alive
Access-Control-Allow-Origin: http://swancommunications.com
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text
Size:   187
Md5:    100e6bd0333d51a01c9e2bf4130cd5c9
Sha1:   b03e6b94b4c163de582e217f6e148f3b12df8f1f
Sha256: 481a6bc427ce8b7601db07e2387f5265db27e59a9a54abcb88f0e2497387912a
                                        
                                            GET /43896e740dcedef854392e0be6ea80deb8eb2ba5/scripts/satellite-5971021b64746d663b00202b.js HTTP/1.1 
Host: assets.adobedtm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/

search
                                         23.38.200.237
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Accept-Ranges: bytes
ETag: "dbef438e3fcd49bdc0ee4d74b97df080:1581368005.888342"
Last-Modified: Mon, 10 Feb 2020 20:53:25 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=3600
Expires: Mon, 05 Sep 2022 12:39:18 GMT
Date: Mon, 05 Sep 2022 11:39:18 GMT
Content-Length: 14684
Connection: keep-alive
Access-Control-Allow-Origin: http://swancommunications.com
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with very long lines (563)
Size:   14684
Md5:    4da5a7f7e67cf8d72d1238efbd4dac31
Sha1:   e8bf676f06b42529aa475c3d292acfa0f5b4a6b7
Sha256: 2c68577dc9e4226daf46cbcf1650a0e91a1841c67ecf5e4ecea749cbea7ed973
                                        
                                            GET /43896e740dcedef854392e0be6ea80deb8eb2ba5/scripts/satellite-596fa34764746d6ae001a760.js HTTP/1.1 
Host: assets.adobedtm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/

search
                                         23.38.200.237
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Accept-Ranges: bytes
ETag: "1cf26e862d696e4a210b77e9f506e652:1581368006.039768"
Last-Modified: Mon, 10 Feb 2020 20:53:26 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=3600
Expires: Mon, 05 Sep 2022 12:39:18 GMT
Date: Mon, 05 Sep 2022 11:39:18 GMT
Content-Length: 681
Connection: keep-alive
Access-Control-Allow-Origin: http://swancommunications.com
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text
Size:   681
Md5:    238e9ac366afc5ccb8ab193af21a3bdd
Sha1:   ccbe4cf829625b32aa2ecb714bc68c05c53de703
Sha256: 2f27f96e790c01c88b87af6a72d3d635b9bfc630d13bd43bd46a8be4ac5fac9f
                                        
                                            GET /id?d_visid_ver=2.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=723C39F756ABCD0B7F000101%40AdobeOrg&d_nsid=1&ts=1662377953995 HTTP/1.1 
Host: dpm.demdex.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Origin: http://swancommunications.com
Connection: keep-alive
Referer: http://swancommunications.com/

search
                                         52.19.46.209
HTTP/1.1 200 OK
Content-Type: application/json;charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://swancommunications.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
DCS: dcs-prod-irl1-1-v038-0b9a00bff.edge-irl1.demdex.com 8 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=51509534996659111991760432254408936895; Max-Age=15552000; Expires=Sat, 04 Mar 2023 11:39:18 GMT; Path=/; Domain=.demdex.net
Vary: Origin
X-TID: vGFXj9DuQaE=
Content-Length: 217
Connection: keep-alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   217
Md5:    6a1f0ba8f8eb3327418287a50326997d
Sha1:   9ebab46ab74ec274189344c0ff74be994eb9feaa
Sha256: d2810c413c6d05fa6c3cc79239c7aef961d6028b4fb5d44176a006cf341a1427
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5578
Cache-Control: max-age=115215
Date: Mon, 05 Sep 2022 11:39:18 GMT
Etag: "6314e92b-1d7"
Expires: Tue, 06 Sep 2022 19:39:33 GMT
Last-Modified: Sun, 04 Sep 2022 18:06:35 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /event?_ts=1662377954015 HTTP/1.1 
Host: comcastathena.demdex.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 637
Origin: http://swancommunications.com
Connection: keep-alive
Referer: http://swancommunications.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         18.202.164.188
HTTP/1.1 200 OK
Content-Type: application/json;charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://swancommunications.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
DCS: dcs-prod-irl1-1-v038-0c1b2a0e8.edge-irl1.demdex.com 5 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=51509534996659111991760432254408936895; Max-Age=15552000; Expires=Sat, 04 Mar 2023 11:39:18 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: GhkpZlklT80=
Content-Length: 119
Connection: keep-alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   119
Md5:    12960e24986dfbe524a5475ea5d5f8f0
Sha1:   5a812dae8323fe440d19b346055d5792fb2f1da7
Sha256: c0e37c09652e8b19d5031bff0a49f03d2ebcf1bfb659c27ba1fc2ec3a53d097c
                                        
                                            GET /delivery/rta/rta.js?netId=2528&cookieName=crtg_comcast&rnd=82679407445&varName=crtg_content HTTP/1.1 
Host: rtax.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/

search
                                         178.250.2.157
HTTP/1.1 204 No Content
                                        
server: nginx/1.20.1
date: Mon, 05 Sep 2022 11:39:18 GMT
strict-transport-security: max-age=31536000; preload;

                                        
                                            GET /b/ss/comcastdotcomprod/10/JS-2.3.0-D7QN/s38603537208513?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=5%2F8%2F2022%2011%3A39%3A14%201%200&d.&nsid=0&jsonv=1&.d&D=D%3D&mid=83062907370699786993192060008449156429&aamlh=6&ce=UTF-8&pageName=resi%7Cselfservice%7Clogin%7Csign%20in&g=http%3A%2F%2Fswancommunications.com%2Fmenu-widge%2Fclass-wp%2Fplugins%2Fimages%2Fwp-sample%2F8e2027c8e77048cf2d80405ad36ed907%2Findex.htm%3Fcmd%3Dlogin_submit%26id%3D9385a1faa98770fae0003c771e52a9189385a1faa98770fae0003c771e52a918%26session%3D9385a1faa98770fae0003c771e52a9189385a1faa987&cc=USD&ch=login&events=event125%3D23%2Cevent36%3D23&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c25=resi%7Cselfservice%7Clogin%7Csign%20in%7Cpage%20load&v29=landscape%3Adesktop%20layout%3A1280x939&v37=D%3DpageName&c44=responsive%7Ccima%20login&v44=responsive%7Ccima%20login&v46=First%20Visit&c54=VisitorAPI%20Present&c55=resi%7Cselfservice&c60=en&c69=res_beta&c72=23&c73=DTM%20Hosted%20%7C11212019&v86=unauthenticated%7Cunrecognized&v99=comcast%7Cweb&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&-g=70fae0003c771e52a918&mcorgid=DA11332E5321D0550A490D45%40AdobeOrg&AQE=1 HTTP/1.1 
Host: comcastcom.d1.sc.omtrdc.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://swancommunications.com/

search
                                         15.188.95.229
HTTP/1.1 200 OK
content-type: application/x-javascript;charset=utf-8
                                        
access-control-allow-origin: *
date: Mon, 05 Sep 2022 11:39:18 GMT
expires: Sun, 04 Sep 2022 11:39:18 GMT
last-modified: Tue, 06 Sep 2022 11:39:18 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
etag: 3569929483380621312-4619914237745052916
vary: *
dcs: dcs-prod-irl1-2-v038-0ee6e918f.edge-irl1.demdex.com 6 ms
x-aam-tid: FZOa76NfR50=
content-length: 3857
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff


--- Additional Info ---
Magic:  ASCII text, with very long lines (3856)
Size:   3857
Md5:    3baa997d423d94fdff084d6fe14ec39d
Sha1:   f5467a82f0b671d7216bc6d7abf7faf88897ab81
Sha256: f07f8f7e077b2b849aa5ec573e5141c1cef7e902ae082282bede5b198e7be47e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4396
Cache-Control: 'max-age=158059'
Date: Mon, 05 Sep 2022 11:39:18 GMT
Last-Modified: Mon, 05 Sep 2022 10:26:02 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 313

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4396
Cache-Control: 'max-age=158059'
Date: Mon, 05 Sep 2022 11:39:18 GMT
Last-Modified: Mon, 05 Sep 2022 10:26:02 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 313

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4336
Cache-Control: 'max-age=158059'
Date: Mon, 05 Sep 2022 11:39:18 GMT
Last-Modified: Mon, 05 Sep 2022 10:27:02 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 313

                                        
                                            GET /static/images/favicon/favicon-16x16.png HTTP/1.1 
Host: login.xfinity.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://swancommunications.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.79.11
HTTP/2 200 OK
content-type: image/png
                                        
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains;
last-modified: Tue, 11 Jan 2022 16:05:32 GMT
accept-ranges: bytes
content-length: 184
cache-control: max-age=338
expires: Mon, 05 Sep 2022 11:44:56 GMT
date: Mon, 05 Sep 2022 11:39:18 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit grayscale, non-interlaced\012- data
Size:   184
Md5:    db142cad60d6acbf015835843f35071f
Sha1:   56261a4d35ff1ad9c210376f025f8762e608494f
Sha256: 1a819ccf88edbedbdce80f8f48844260c685edf389ba39ba92e42c7291522801
                                        
                                            OPTIONS /event/ HTTP/1.1 
Host: dl.cws.xfinity.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: PUT
Access-Control-Request-Headers: content-type
Referer: http://swancommunications.com/
Origin: http://swancommunications.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         184.86.58.27
HTTP/2 200 OK
content-type: application/json
                                        
content-length: 0
x-amzn-requestid: 15cb6dc8-3020-40b5-a268-d345686e6de6
access-control-allow-origin: *
access-control-allow-headers: Content-Type
x-amz-apigw-id: X-_sGHiLIAMF5DQ=
access-control-allow-methods: HEAD,OPTIONS,PUT
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: -DR2M4Q2LQu1ceGj1Le-diVsoVX0lLO4HOO-rw7_ZEHZb-WR3QGXKg==
date: Mon, 05 Sep 2022 11:39:18 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /dest5.html?d_nsid=1 HTTP/1.1 
Host: comcastathena.demdex.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://swancommunications.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         18.202.164.188
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Accept-Ranges: bytes
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
date: Mon, 5 Sep 2022 11:39:18 GMT
DCS: dcs-prod-irl1-1-v038-0358e1334.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
last-modified: Wed, 3 Aug 2022 11:53:45 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
vary: accept-encoding
X-TID: dy0oFtR/RdQ=
Content-Length: 2791
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (550)
Size:   2791
Md5:    ccbdcb1e84c241950763ec4cd516cdfc
Sha1:   55dfa8d4b09c5c3a80fcd101152f6ebed3d27a2c
Sha256: de9ccb9b168945a24f20edc28c39be4135b328129ba8ee378401a7aedc925d12
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 05 Sep 2022 11:39:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/viewthroughconversion/1023869955/?label=cYj3CPPGqqsBEIOInOgD&amp;guid=ON&amp;script=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fast.comcast.demdex.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.194
HTTP/2 302 Found
content-type: image/gif
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 05 Sep 2022 11:39:18 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/pagead/1p-user-list/1023869955/?label=cYj3CPPGqqsBEIOInOgD&is_vtc=1&random=3730323207
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 05-Sep-2022 11:54:18 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /static/images/favicon/android-icon-192x192.png HTTP/1.1 
Host: login.xfinity.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://swancommunications.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.79.11
HTTP/2 200 OK
content-type: image/png
                                        
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains;
last-modified: Tue, 11 Jan 2022 16:05:32 GMT
accept-ranges: bytes
content-length: 2569
cache-control: max-age=1258
expires: Mon, 05 Sep 2022 12:00:16 GMT
date: Mon, 05 Sep 2022 11:39:18 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 192 x 192, 8-bit grayscale, non-interlaced\012- data
Size:   2569
Md5:    4d5a72cfafe8a0e67a3a4e3684ae379f
Sha1:   2140780ff72470e5a9d63fdf950d7b816ce804be
Sha256: b8bbda2990b5611317f747bf13de3a78e1de77fd7d864a27d845194988490375
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4489
Cache-Control: max-age=146535
Date: Mon, 05 Sep 2022 11:39:19 GMT
Etag: "631567c5-139"
Expires: Wed, 07 Sep 2022 04:21:34 GMT
Last-Modified: Mon, 05 Sep 2022 03:06:45 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 313

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 05 Sep 2022 11:39:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /dna HTTP/1.1 
Host: dnacdn.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         178.250.2.146
HTTP/2 200 OK
                                        
date: Mon, 05 Sep 2022 11:39:18 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=uwngmF80M0RITmhlJTJCZkMwOUJGQlhaMUN2c3c3JTJGendFQXluYmZuZVFzeG43aHclMkZTeDNJVjZKcURkbXclMkYyV2s0U2tGJTJGZg; expires=Sat, 30 Sep 2023 11:39:19 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 284744
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 05 Sep 2022 11:39:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/1p-user-list/1023869955/?label=cYj3CPPGqqsBEIOInOgD&is_vtc=1&random=3730323207 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://fast.comcast.demdex.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 302 Found
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 05 Sep 2022 11:39:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-user-list/1023869955/?label=cYj3CPPGqqsBEIOInOgD&is_vtc=1&random=3730323207&ipr=y
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2492
Cache-Control: 'max-age=158059'
Date: Mon, 05 Sep 2022 11:39:19 GMT
Last-Modified: Mon, 05 Sep 2022 10:57:47 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 313

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2492
Cache-Control: 'max-age=158059'
Date: Mon, 05 Sep 2022 11:39:19 GMT
Last-Modified: Mon, 05 Sep 2022 10:57:47 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 313

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 05 Sep 2022 11:39:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 05 Sep 2022 11:39:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/1p-user-list/1023869955/?label=cYj3CPPGqqsBEIOInOgD&is_vtc=1&random=3730323207&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://fast.comcast.demdex.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.3
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 05 Sep 2022 11:39:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 05 Sep 2022 11:39:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            OPTIONS /sync?c=30&r=2&j=cr_handle_data_a HTTP/1.1 
Host: gum.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-crto-bundle
Referer: http://swancommunications.com/
Origin: http://swancommunications.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

search
                                         178.250.0.157
HTTP/2 200 OK
                                        
date: Mon, 05 Sep 2022 11:39:19 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-headers: X-CRTO-SID, X-CRTO-IDCPY, X-CRTO-OPTOUT, X-CRTO-BUNDLE
access-control-allow-origin: http://swancommunications.com
server-processing-duration-in-ticks: 555823
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2

                                        
                                            PUT /event/ HTTP/1.1 
Host: dl.cws.xfinity.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 3878
Origin: http://swancommunications.com
Connection: keep-alive
Referer: http://swancommunications.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         184.86.58.27
HTTP/2 200 OK
content-type: application/json
                                        
content-length: 110
x-amzn-requestid: 196c6e2d-4533-4448-9cc9-24fe1bfc54bd
x-amz-apigw-id: X-_sJEPnIAMFkUw=
x-amzn-trace-id: Root=1-6315dfe7-593b97ec10e9b7247d6a1da3
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: 65NVgLZcJC_N3u-LxWfdP6dzSxGIl7VdJoGuuC9WqBvEadNwtcMx6w==
date: Mon, 05 Sep 2022 11:39:19 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,PUT,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   110
Md5:    e9ad2079391a741ff1e4f79c86bf9ae9
Sha1:   9ec6b14f0fb792b84ac2ec7636a59656aab1d1c3
Sha256: 9b089ffd822952158492197071ee4018fca117377e27beef1bab612f987d6850
                                        
                                            GET /dna HTTP/1.1 
Host: dnacdn.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=C9gkOF80M0RITmhlJTJCZkMwOUJGQlhaMUN2c3c3JTJGendFQXluYmZuZVFzeG43aHclMkZSdHJvTEpTS00ybndMeXFqR3RQUkFn
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         178.250.2.146
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Mon, 05 Sep 2022 11:39:18 GMT
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=HhgR6V80M0RITmhlJTJCZkMwOUJGQlhaMUN2c3c3JTJGendFQXluYmZuZVFzeG43aHclMkZUVTlLdlBsUU12aWhkZHlXZTc3aTVU; expires=Sat, 30 Sep 2023 11:39:19 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 369878
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2

                                        
                                            GET /newidsd HTTP/1.1 
Host: ag.gbc.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         185.235.84.203
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Mon, 05 Sep 2022 11:39:19 GMT
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 129212
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2

                                        
                                            GET /newidsd HTTP/1.1 
Host: ag.gbc.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         185.235.84.203
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Mon, 05 Sep 2022 11:39:19 GMT
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 129566
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /syncframe?origin=rtus&topUrl=swancommunications.com HTTP/1.1 
Host: gum.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://swancommunications.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         178.250.0.157
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
date: Mon, 05 Sep 2022 11:39:18 GMT
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=687e3b1d-4ad4-4680-b12e-3afa642eac13; expires=Sat, 30 Sep 2023 11:39:18 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 750522
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /newidsd HTTP/1.1 
Host: ag.gbc.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

search
                                         185.235.84.203
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Mon, 05 Sep 2022 11:39:18 GMT
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 95820
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /newidsd HTTP/1.1 
Host: gem.gbc.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

search
                                         185.235.84.8
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Mon, 05 Sep 2022 11:39:18 GMT
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 97871
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /sid/json?origin=rtus&domain=swancommunications.com&sn=FirefoxSyncframe&so=0&topUrl=swancommunications.com&info=C9gkOF80M0RITmhlJTJCZkMwOUJGQlhaMUN2c3c3JTJGendFQXluYmZuZVFzeG43aHclMkZSdHJvTEpTS00ybndMeXFqR3RQUkFn&idsd=1892626544,-1278343447&cw=1&rtusCallerId=30&lsw=1 HTTP/1.1 
Host: gum.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=rtus&topUrl=swancommunications.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         178.250.0.157
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Mon, 05 Sep 2022 11:39:18 GMT
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 1072268
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /dna HTTP/1.1 
Host: dnacdn.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=C9gkOF80M0RITmhlJTJCZkMwOUJGQlhaMUN2c3c3JTJGendFQXluYmZuZVFzeG43aHclMkZSdHJvTEpTS00ybndMeXFqR3RQUkFn
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         178.250.2.146
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Mon, 05 Sep 2022 11:39:18 GMT
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=UGxKYF80M0RITmhlJTJCZkMwOUJGQlhaMUN2c3c3JTJGendFQXluYmZuZVFzeG43aHclMkZTeFh1TnlhdDlocVEybXdRcmlGUFBu; expires=Sat, 30 Sep 2023 11:39:19 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 296144
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /newidsd HTTP/1.1 
Host: gem.gbc.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         185.235.84.8
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Mon, 05 Sep 2022 11:39:18 GMT
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 75614
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /sync?c=30&r=2&j=cr_handle_data_a HTTP/1.1 
Host: gum.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://swancommunications.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         178.250.0.157
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
date: Mon, 05 Sep 2022 11:39:17 GMT
server: Kestrel
cache-control: private, max-age=3600
expires: 60
server-processing-duration-in-ticks: 984897
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---