Overview

URL0333fa5.netsolhost.com/comcast/xfinity.php?38ab677aecdc4937c5fa342efeb36a8c=&_rand=login.xfinity.com.aspx&email=&entity=1073444
IP 206.188.192.61 (United States)
ASN#19871 NETWORK-SOLUTIONS-HOSTING
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-12-07 02:40:13 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (22)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
comcastathena.demdex.net (2) 38236 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 993 4381 34.251.90.149
ocsp.pki.goog (6) 175 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2058 4198 142.250.74.131
z.moatads.com (1) 374 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 386 415 23.38.201.146
rtax.criteo.com (1) 24191 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 367 139 178.250.2.157
login.xfinity.com (2) 18995 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 845 3485 95.101.10.128
0333fa5.netsolhost.com (15) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 6486 133641 206.188.192.61
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 229 34.117.237.239
sdx.xfinity.com (3) 25278 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1537 82720 104.110.1.60
dpm.demdex.net (2) 204 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 978 2839 52.211.247.227
www.google.com (1) 7 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 463 885 216.58.207.228
www.google.no (1) 25607 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 468 757 142.250.74.163
img-getpocket.cdn.mozilla.net (6) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3246 58361 34.120.237.76
ocsp.digicert.com (3) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1023 2271 93.184.220.29
assets.adobedtm.com (5) 512 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1844 52680 23.38.200.237
fast.comcast.demdex.net (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 415 3240 23.36.76.163
googleads.g.doubleclick.net (1) 42 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 483 996 142.250.74.162
comcastcom.d1.sc.omtrdc.net (2) 47742 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1805 4979 13.36.218.177
dl.cws.xfinity.com (2) 25997 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 956 1097 184.86.58.27
r3.o.lencr.org (6) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2028 5317 23.36.76.226
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2374 34.102.187.140
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5844 34.160.144.191
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 44.242.41.15

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
Scan Date Severity Indicator Comment
2022-12-06 medium 0333fa5.netsolhost.com/comcast/xfinity.php?38ab677aecdc4937c5fa342efeb36a8c (...) Comcast Corporation

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 206.188.192.61
Date UQ / IDS / BL URL IP
2023-01-06 07:59:32 UTC 0 - 3 - 14 0333fa5.netsolhost.com/comcast/xfinity.php?38 (...) 206.188.192.61
2023-01-06 07:59:11 UTC 0 - 3 - 15 0333fa5.netsolhost.com/comcast/xfinity.html 206.188.192.61
2022-12-13 18:36:26 UTC 0 - 0 - 14 0333fa5.netsolhost.com/comcast/xfinity.html?e (...) 206.188.192.61
2022-12-07 02:40:13 UTC 0 - 0 - 1 0333fa5.netsolhost.com/comcast/xfinity.php?38 (...) 206.188.192.61
2022-12-07 02:39:53 UTC 0 - 0 - 1 0333fa5.netsolhost.com/comcast/xfinity.html 206.188.192.61


Last 5 reports on ASN: NETWORK-SOLUTIONS-HOSTING
Date UQ / IDS / BL URL IP
2023-06-01 23:23:15 UTC 25 - 0 - 13 041fcf0.netsolhost.com/secure01.chase/secure. (...) 206.188.192.140
2023-06-01 23:13:54 UTC 25 - 0 - 13 041fcf0.netsolhost.com/secure01.chase/secure. (...) 206.188.192.140
2023-06-01 18:02:16 UTC 0 - 1 - 0 mail.sblendingcenter.com/ox6/interfaces/sso/l (...) 207.204.50.12
2023-06-01 16:55:36 UTC 25 - 0 - 13 041fcf0.netsolhost.com/secure01.chase/secure. (...) 206.188.192.140
2023-06-01 10:55:35 UTC 25 - 0 - 13 041fcf0.netsolhost.com/secure01.chase/secure. (...) 206.188.192.140


Last 5 reports on domain: netsolhost.com
Date UQ / IDS / BL URL IP
2023-06-01 23:23:15 UTC 25 - 0 - 13 041fcf0.netsolhost.com/secure01.chase/secure. (...) 206.188.192.140
2023-06-01 23:13:54 UTC 25 - 0 - 13 041fcf0.netsolhost.com/secure01.chase/secure. (...) 206.188.192.140
2023-06-01 16:55:36 UTC 25 - 0 - 13 041fcf0.netsolhost.com/secure01.chase/secure. (...) 206.188.192.140
2023-06-01 10:55:35 UTC 25 - 0 - 13 041fcf0.netsolhost.com/secure01.chase/secure. (...) 206.188.192.140
2023-06-01 04:55:30 UTC 27 - 0 - 13 041fcf0.netsolhost.com/secure01.chase/secure. (...) 206.188.192.140


Last 1 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-01-06 07:59:32 UTC 0 - 3 - 14 0333fa5.netsolhost.com/comcast/xfinity.php?38 (...) 206.188.192.61

JavaScript

Executed Scripts (31)

Executed Evals (0)

Executed Writes (34)
#1 JavaScript::Write (size: 4) - SHA256: 2c34e1e403f81048954f6118b0cb7e2e52d44c120fd2a264956d6947eff0c4d4
)
";
#2 JavaScript::Write (size: 37) - SHA256: 02a7bbf9b2e52e122393c351bf2b0074451e55243721aa13a22a9b8b95ec4e03
var root = document.documentElement;
#3 JavaScript::Write (size: 32) - SHA256: cb5f90f6b65c4baf737d4b996cccac55d903398a2d4f9ed0043f0477ed35e9c6
var loc = window.location.host;
#4 JavaScript::Write (size: 3) - SHA256: aa1d1a63390229c798347e83a0405441c9400035284ad168c1bf6cdf1d70a370
};
#5 JavaScript::Write (size: 14) - SHA256: 56c1ddaa98c95478372b5e76b5a5dac6ef8a1d7e68996d95e6eff66fb3495336
forpreview();
#6 JavaScript::Write (size: 31) - SHA256: d966f10cb403103f5c869e987dfead0ff4e1a12ba13ddc003b521f982d50282b
    background - color: #2b2225;
#7 JavaScript::Write (size: 101) - SHA256: 3edb5f0bc636a0c5e720e1b1c766914180ca0bd9e4293eff998f977cf384db14
var adtag_x32 = "camp_" + x32adtag + "_creativeId_na-comcast-chloe-1400x800-v6a-until2020_01202019";
#8 JavaScript::Write (size: 14) - SHA256: ec09cc7b962643e02ab8e5d303063f9069f5fad8b27b6c90bd88657f3d639cd2
# background {
#9 JavaScript::Write (size: 495) - SHA256: 55359c071971be326350b32223bd98ea0ce481c80e8145eed1e24d5e9d395f92
< a href = "https://oascentral.xfinity.com/RealMedia/ads/click_lx.ads/comcast.net/login_secure/notve/L30/2141780564/x32/Comcast/1599148-1_310882_NextAdvisor_201901b_SIG_1400_NATL_RB/na-comcast-chloe-1400x800-v6a-until2020_01202019.html/61494553355678454651634144485041;zip=US:78201"
target = "_blank" > < IMG SRC = "https://cdn.oas-c18.adnxs.com/RealMedia/ads/Creatives/Comcast/1599148-1_310882_NextAdvisor_201901b_SIG_1400_NATL_RB/LRECcta.gif/1547829332"
WIDTH = "300"
HEIGHT = "600"
ALT = ""
BORDER = "0" > < /a>
#10 JavaScript::Write (size: 261) - SHA256: 67c17948354f85d0c3756001dddfe74f482b6c1f797ffd6df79231a4fc2d9159
< script type = "text/javascript"
src = "//oascentral.xfinity.com/RealMedia/ads/adstream_jx.ads/comcast.net/login_secure/notve/1097612367@x32?target=normal&_OAS_GEO_OVERRIDE_=US:UNKNOWN&am=NONE&undefined&undefined&u=undefined&theme=light&max-size=fullpage" > < /script>
#11 JavaScript::Write (size: 1) - SHA256: 265fda17a34611b1533d8a281ff680dc5791b0ce0a11c25b35e11c8e75685509
'
#12 JavaScript::Write (size: 20) - SHA256: 28be0921a76d6e2ae8976d11947e5abad2d7b60ed7fae993f919cad410aeb656
) || document.body;
#13 JavaScript::Write (size: 2) - SHA256: 412ca345ccf75bf9c0806bce695be8de808b79984251a7a54d202cf6101dd451
}
#14 JavaScript::Write (size: 10) - SHA256: 2f358f0371a6e732c4340332235199dcd91ebc46239a5ddcfe6f9a63e6ebecfe
< /script>
#15 JavaScript::Write (size: 28) - SHA256: fb54bd3ca24026b5b9424d7eaeb5bf78f1d6dfa925630e6c4e1568ec70b8bd9c
< div id = "oaspreview" > < /div>
#16 JavaScript::Write (size: 344) - SHA256: a5905f8a9c75141b0a4f659f7de4804badf17587cadc99c8e1ee7e4cd4d3618c
       < noscript class = "MOAT-comcastapn56341864860?moatClientLevel1=NextAdvisor_-_NCC360_72699&amp;moatClientLevel2=Comcast/1599148-1_310882_NextAdvisor_201901b_SIG_1400_NATL_RB&amp;moatClientLevel3=na-comcast-chloe-1400x800-v6a-until2020_01202019&amp;moatClientSlicer1=x32&amp;moatClientSlicer2=comcast.net/login_secure/notve/L30" > < /noscript>
#17 JavaScript::Write (size: 5) - SHA256: 0dd4d955accc30fd912938e3f7bbb0325a19550e0b9f37348481204a78ae5b10
try {
#18 JavaScript::Write (size: 11) - SHA256: 742c800c05fd69a5f2237dea34dc68f8c7e67f737212bd98fdba8adc476c667a
catch (e) {}
#19 JavaScript::Write (size: 24) - SHA256: ee78225a758305bcc45054473598f32a25e45254ee1068931e8784aeec984a03
< style type = "text/css" >
#20 JavaScript::Write (size: 5) - SHA256: 7879981d4f226a8f0191d36730c07205d7a5ff1c780fca9b2f905f25264cf636
#21 JavaScript::Write (size: 9) - SHA256: cf14a32120c034eafc76d4138166beb8c7a968a3633a0008e74f406dd9d2126d
< script >
#22 JavaScript::Write (size: 10) - SHA256: 89b91df19d9d75d4cf36d9033d0789e7ecae0c233160c3be0d56e81027ab965a
background
#23 JavaScript::Write (size: 159) - SHA256: 01a58cfb1ee26eeab676c5e2fdbaf5329da4f56ee916f57fcf013f103adb3b3f
https: //cdn.oas-c18.adnxs.com/RealMedia/ads/Creatives/Comcast/1599148-1_310882_NextAdvisor_201901b_SIG_1400_NATL_RB/na-comcast-chloe-1400x800-v6a-until2020.jpg
#24 JavaScript::Write (size: 365) - SHA256: 498e08d6298709da64e110feaad0d2ff1316430b6c8434c10722ee2fb564f031
< script src = "https://z.moatads.com/comcastapn56341864860/moatad.js#moatClientLevel1=NextAdvisor_-_NCC360_72699&moatClientLevel2=Comcast/1599148-1_310882_NextAdvisor_201901b_SIG_1400_NATL_RB&moatClientLevel3=na-comcast-chloe-1400x800-v6a-until2020_01202019&moatClientSlicer1=x32&moatClientSlicer2=comcast.net/login_secure/notve/L30"
type = "text/javascript" > < /script>
#25 JavaScript::Write (size: 44) - SHA256: 726fac209118d5fda145f6a0c356ccc76e883246a0817088a969fad98e12e061
backgroundElem.style.backgroundImage = "url(
#26 JavaScript::Write (size: 36) - SHA256: 8a55d770a58a43d0fd220d8d90e1655a853ab187d38b79b302a763ecec50467c
root.className += " da-fullscreen";
#27 JavaScript::Write (size: 199) - SHA256: 585b6eb008f830f8ba43740f3a9411bda2194d7ade297fe04dea3600d1a1b927
    background - image: url(https: //cdn.oas-c18.adnxs.com/RealMedia/ads/Creatives/Comcast/1599148-1_310882_NextAdvisor_201901b_SIG_1400_NATL_RB/na-comcast-chloe-1400x800-v6a-until2020.jpg/1547829332);
#28 JavaScript::Write (size: 9) - SHA256: 4b9004514dd8bb5287b58e385ae3872bb9ee7c89e61c0c5fe1ab850fea565a57
< /style>
#29 JavaScript::Write (size: 94) - SHA256: 7ddb3b38af1beab1d277c0bdbb8b6c4298c229f72d6f5bc6ed09dfaa2d296fcd
var x32adtag = "Comcast/1599148-1_310882_NextAdvisor_201901b_SIG_1400_NATL_RB".split("/")[1];
#30 JavaScript::Write (size: 24) - SHA256: 32fe27f9eadd5078c321debab01769848310d9f08b9ba423f6915a79fa48d59d
function forpreview() {
#31 JavaScript::Write (size: 46) - SHA256: 4225170423b5978aa029412c9b308341f8d5c271da16b0c2c8d34901044d798d
if (loc == "openadstream18.247realmedia.com") {
#32 JavaScript::Write (size: 45) - SHA256: e3a02c745a890112ba89bf5972790f8c210dac828b60f1917f1f8d245baa43b8
var backgroundElem = document.getElementById(
#33 JavaScript::Write (size: 51) - SHA256: 71660591c3329c7683e63fe2873e90b9276493a06f3138ac78646c4e2136d996
backgroundElem.style.backgroundRepeat = "no-repeat";
#34 JavaScript::Write (size: 2) - SHA256: e16f1596201850fd4a63680b27f603cb64e67176159be3d8ed78a4403fdb1700


HTTP Transactions (65)


Request Response
                                        
                                            GET /comcast/xfinity.php?38ab677aecdc4937c5fa342efeb36a8c=&_rand=login.xfinity.com.aspx&email=&entity=1073444 HTTP/1.1 
Host: 0333fa5.netsolhost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             206.188.192.61
HTTP/1.1 200 OK
Content-Type: text/html
                                            
Server: openresty/1.19.9.1
Date: Wed, 07 Dec 2022 02:40:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.29-pl0-gentoo
X-Webcom-Cache-Status: BYPASS
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Non-ISO extended-ASCII text, with very long lines (526)
Size:   4719
Md5:    aceb22f17b05df8d5cfb09dd2403e019
Sha1:   bf46580ad7c54750fbc00946ab6cb030788d67f6
Sha256: 1beacd31c49145983ee459142b366d828c2d2957dea70ec9b80b555b869c33b0

Blocklists:
  - openphish: Comcast Corporation
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5459
Expires: Wed, 07 Dec 2022 04:11:01 GMT
Date: Wed, 07 Dec 2022 02:40:02 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4679
Cache-Control: 'max-age=158059'
Date: Wed, 07 Dec 2022 02:40:02 GMT
Last-Modified: Wed, 07 Dec 2022 01:22:04 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 07 Dec 2022 02:20:26 GMT
cache-control: public,max-age=3600
age: 1176
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "B85D98F8DF05431777D96C767CE4C152302EC3F653CDF6E61C8C3FA9574F3255"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12149
Expires: Wed, 07 Dec 2022 06:02:31 GMT
Date: Wed, 07 Dec 2022 02:40:02 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: xHmJNAaOMuSgStqAprDm0ZegbV/O2AOiiIDM8JQk66nDWoOHsafkrjlBL5+wTq76na65teJ4RWM=
x-amz-request-id: SRQWDRVSHX483DFN
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 07 Dec 2022 01:47:19 GMT
age: 3163
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    53341dea33f4f3d9b4966f80589f429a
Sha1:   20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Wed, 07 Dec 2022 02:40:02 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /comcast/xfinity/tracking-aws.min.js.download HTTP/1.1 
Host: 0333fa5.netsolhost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/comcast/xfinity.php?38ab677aecdc4937c5fa342efeb36a8c=&_rand=login.xfinity.com.aspx&email=&entity=1073444

                                        
                                             206.188.192.61
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: openresty/1.19.9.1
Date: Wed, 07 Dec 2022 02:40:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 27 Oct 2021 18:53:54 GMT
ETag: W/"9f2-5cf5a1da31cd3"
X-Webcom-Cache-Status: BYPASS
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (2546), with no line terminators
Size:   1184
Md5:    e7d18ba751b096708427fc91fe669c4f
Sha1:   857444565ee8868b1fbefa5fedc3b3b72168c4e4
Sha256: fc98e33c6079e17aa301e3a6c05004d3cb1d48118e27d810add4f4246d3cf3c4
                                        
                                            GET /comcast/xfinity/lodash-slim.min.js.download HTTP/1.1 
Host: 0333fa5.netsolhost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/comcast/xfinity.php?38ab677aecdc4937c5fa342efeb36a8c=&_rand=login.xfinity.com.aspx&email=&entity=1073444

                                        
                                             206.188.192.61
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: openresty/1.19.9.1
Date: Wed, 07 Dec 2022 02:40:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 27 Oct 2021 18:53:53 GMT
ETag: W/"5b32-5cf5a1d91235a"
X-Webcom-Cache-Status: BYPASS
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (1486)
Size:   9288
Md5:    8d433140a8ca4d4d6fc660747617e9c8
Sha1:   11eee1f2223bc3549a9fb4213727c691d6625b20
Sha256: 12f0e647d1fd82fb11b5f82efb49058c54d94efac982e5d94d72347c48233d4c
                                        
                                            GET /comcast/xfinity/tracking-DTM.min.js.download HTTP/1.1 
Host: 0333fa5.netsolhost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/comcast/xfinity.php?38ab677aecdc4937c5fa342efeb36a8c=&_rand=login.xfinity.com.aspx&email=&entity=1073444

                                        
                                             206.188.192.61
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: openresty/1.19.9.1
Date: Wed, 07 Dec 2022 02:40:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 27 Oct 2021 18:53:54 GMT
ETag: W/"658-5cf5a1da48bec"
X-Webcom-Cache-Status: BYPASS
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (1624), with no line terminators
Size:   794
Md5:    6b73ae55481637575e9fa4523acc303c
Sha1:   b161bd03375ccebbdc95a9aa930bc07706ab1eee
Sha256: 48053b70f84bd8e7247499b0fe2f18477671a77aee268c77344dc7d765fcc824
                                        
                                            GET /comcast/xfinity/tracking.min.js.download HTTP/1.1 
Host: 0333fa5.netsolhost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/comcast/xfinity.php?38ab677aecdc4937c5fa342efeb36a8c=&_rand=login.xfinity.com.aspx&email=&entity=1073444

                                        
                                             206.188.192.61
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: openresty/1.19.9.1
Date: Wed, 07 Dec 2022 02:40:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 27 Oct 2021 18:53:54 GMT
ETag: W/"3a74-5cf5a1da07187"
X-Webcom-Cache-Status: BYPASS
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (14942)
Size:   4971
Md5:    00a8df546e31b60cf8cca6f6a8f1f7a1
Sha1:   9f0cda873da4da412094c1f58b88c12520fea2b8
Sha256: 4b6db954de6a19986e7358cdc82724393df5ad1f4fd81c7c656886c4bac166e2
                                        
                                            GET /comcast/xfinity/rta.js.download HTTP/1.1 
Host: 0333fa5.netsolhost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/comcast/xfinity.php?38ab677aecdc4937c5fa342efeb36a8c=&_rand=login.xfinity.com.aspx&email=&entity=1073444

                                        
                                             206.188.192.61
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: openresty/1.19.9.1
Date: Wed, 07 Dec 2022 02:40:02 GMT
Content-Length: 148
Connection: keep-alive
Last-Modified: Wed, 27 Oct 2021 18:53:53 GMT
ETag: "94-5cf5a1d92928e"
X-Webcom-Cache-Status: BYPASS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with no line terminators
Size:   148
Md5:    a1b4979eb4932517c03ea980c76ffca0
Sha1:   c82d70ba634321337efdf25863d5782aab53cd46
Sha256: 98c306af0ffa6c8b80d5aa02df5cb876b09fcc6ccf4fb073f221c1084da41186
                                        
                                            GET /comcast/xfinity/vm-login-form-ad.js.download HTTP/1.1 
Host: 0333fa5.netsolhost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/comcast/xfinity.php?38ab677aecdc4937c5fa342efeb36a8c=&_rand=login.xfinity.com.aspx&email=&entity=1073444

                                        
                                             206.188.192.61
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: openresty/1.19.9.1
Date: Wed, 07 Dec 2022 02:40:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 27 Oct 2021 18:53:55 GMT
ETag: W/"2247-5cf5a1da8dd85"
X-Webcom-Cache-Status: BYPASS
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text
Size:   2717
Md5:    7a0a2bea25f80b8a9f71844a8408cb1a
Sha1:   b2c6ff4c3944740955f32dbb020df414d8933a0e
Sha256: e5345b375152e28a4394c9ebeb723bb5d60e9aa02bf790880853d647bfc542fe
                                        
                                            GET /comcast/xfinity/data.json HTTP/1.1 
Host: 0333fa5.netsolhost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/comcast/xfinity.php?38ab677aecdc4937c5fa342efeb36a8c=&_rand=login.xfinity.com.aspx&email=&entity=1073444

                                        
                                             206.188.192.61
HTTP/1.1 200 OK
Content-Type: application/json
                                            
Server: openresty/1.19.9.1
Date: Wed, 07 Dec 2022 02:40:03 GMT
Content-Length: 125
Connection: keep-alive
Last-Modified: Wed, 27 Oct 2021 18:53:53 GMT
ETag: "7d-5cf5a1d8ab6e2"
X-Webcom-Cache-Status: BYPASS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   125
Md5:    e9ef2ef448da8ad50d7bf5ae0e89674a
Sha1:   20dc402bbec5212aa57c0a30f05b3747375a87e5
Sha256: 493c1ae6f44b88724e3a769d16e5b15e316175da872c5dd5d9ccc02b857f64a0
                                        
                                            GET /comcast/xfinity/styles-light.min.css HTTP/1.1 
Host: 0333fa5.netsolhost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/comcast/xfinity.php?38ab677aecdc4937c5fa342efeb36a8c=&_rand=login.xfinity.com.aspx&email=&entity=1073444

                                        
                                             206.188.192.61
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: openresty/1.19.9.1
Date: Wed, 07 Dec 2022 02:40:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 27 Oct 2021 18:53:54 GMT
ETag: W/"bb42-5cf5a1d9d1608"
X-Webcom-Cache-Status: BYPASS
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (47938), with no line terminators
Size:   13181
Md5:    24faaa1fcc7e9bc12cf015c979f7cec1
Sha1:   872f66b70f065b31ace9a416156137dc5ba15f44
Sha256: 937fbff2942f23a7ff92cf4a6f074340d5fe96c5ffa3bda22e088eccf3d7764c
                                        
                                            GET /comcast/xfinity/1692168577@x32 HTTP/1.1 
Host: 0333fa5.netsolhost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/comcast/xfinity.php?38ab677aecdc4937c5fa342efeb36a8c=&_rand=login.xfinity.com.aspx&email=&entity=1073444

                                        
                                             206.188.192.61
HTTP/1.1 200 OK
                                            
Server: openresty/1.19.9.1
Date: Wed, 07 Dec 2022 02:40:03 GMT
Content-Length: 3234
Connection: keep-alive
Last-Modified: Wed, 27 Oct 2021 18:53:53 GMT
ETag: "ca2-5cf5a1d892c65"
X-Webcom-Cache-Status: BYPASS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (516)
Size:   3234
Md5:    0d5112f19c767d975558cc4c3f484265
Sha1:   18e1929741c23aefd62cb40639056421fd74b1aa
Sha256: 7f8fafa520211a0bd3e24b870e79938fb57fb72069f03f718ed075881cbfcc26
                                        
                                            GET /comcast/xfinity/scripts-responsive.min.js.download HTTP/1.1 
Host: 0333fa5.netsolhost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/comcast/xfinity.php?38ab677aecdc4937c5fa342efeb36a8c=&_rand=login.xfinity.com.aspx&email=&entity=1073444

                                        
                                             206.188.192.61
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: openresty/1.19.9.1
Date: Wed, 07 Dec 2022 02:40:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 27 Oct 2021 18:53:54 GMT
ETag: W/"1c8b-5cf5a1d9ad3ce"
X-Webcom-Cache-Status: BYPASS
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (7307), with no line terminators
Size:   3087
Md5:    976fbf204e491df8e5d712678f7f7fa4
Sha1:   c3b165640950c6ee40eb716bf2f8d4b0c9aeae67
Sha256: 92b0dba6f19289337814dd94545c69b8fdc0f3251fd9e0ae029f64289eaab409
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 07 Dec 2022 02:11:20 GMT
cache-control: public,max-age=3600
age: 1723
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /comcast/xfinity/jquery-1.12.4.min.js.download HTTP/1.1 
Host: 0333fa5.netsolhost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/comcast/xfinity.php?38ab677aecdc4937c5fa342efeb36a8c=&_rand=login.xfinity.com.aspx&email=&entity=1073444

                                        
                                             206.188.192.61
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: openresty/1.19.9.1
Date: Wed, 07 Dec 2022 02:40:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 27 Oct 2021 18:53:53 GMT
ETag: W/"17b8b-5cf5a1d8f7973"
X-Webcom-Cache-Status: BYPASS
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (32077)
Size:   39396
Md5:    6f8edd6cd29454f18b8cf0084b84fe1c
Sha1:   4ce1743bf7c59d503d913096f13af4469899f177
Sha256: 16f329777cb018c0ee3f7de8518b2d92de211ac425888441cc49c3916f9c307e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4668
Cache-Control: 'max-age=158059'
Date: Wed, 07 Dec 2022 02:40:03 GMT
Last-Modified: Wed, 07 Dec 2022 01:22:15 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /comcast/xfinity/satelliteLib-531bc4f46256650a84099973f0ed331f809ea5f4.js.download HTTP/1.1 
Host: 0333fa5.netsolhost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/comcast/xfinity.php?38ab677aecdc4937c5fa342efeb36a8c=&_rand=login.xfinity.com.aspx&email=&entity=1073444

                                        
                                             206.188.192.61
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: openresty/1.19.9.1
Date: Wed, 07 Dec 2022 02:40:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 27 Oct 2021 18:53:54 GMT
ETag: W/"1f820-5cf5a1d99493a"
X-Webcom-Cache-Status: BYPASS
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (32748)
Size:   46207
Md5:    b13bd6760bbd72ad67dfe00789bce87c
Sha1:   e15f7e268ad37f9deca0b26d370057661f258afc
Sha256: 2b0b823cf084b713d49b9545cde5bd279e2b5261397b6b3f1bdc05fd46e393f2
                                        
                                            GET /comcast/xfinity/u HTTP/1.1 
Host: 0333fa5.netsolhost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/comcast/xfinity.php?38ab677aecdc4937c5fa342efeb36a8c=&_rand=login.xfinity.com.aspx&email=&entity=1073444

                                        
                                             206.188.192.61
HTTP/1.1 200 OK
Content-Type: text/plain
                                            
Server: openresty/1.19.9.1
Date: Wed, 07 Dec 2022 02:40:03 GMT
Content-Length: 0
Connection: keep-alive
Last-Modified: Wed, 27 Oct 2021 18:53:54 GMT
ETag: "0-5cf5a1da56aa0"
X-Webcom-Cache-Status: BYPASS
Accept-Ranges: bytes

                                        
                                            GET /comcast/xfinity/event HTTP/1.1 
Host: 0333fa5.netsolhost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/comcast/xfinity.php?38ab677aecdc4937c5fa342efeb36a8c=&_rand=login.xfinity.com.aspx&email=&entity=1073444

                                        
                                             206.188.192.61
HTTP/1.1 200 OK
                                            
Server: openresty/1.19.9.1
Date: Wed, 07 Dec 2022 02:40:03 GMT
Content-Length: 42
Connection: keep-alive
Last-Modified: Wed, 27 Oct 2021 18:53:53 GMT
ETag: "2a-5cf5a1d8d434f"
X-Webcom-Cache-Status: BYPASS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /fonts/latest/Xfinity_Standard/XfinityStandard-Regular.woff2 HTTP/1.1 
Host: sdx.xfinity.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://0333fa5.netsolhost.com
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             104.110.1.60
HTTP/2 200 OK
content-type: font/woff2
                                            
content-length: 26768
last-modified: Fri, 24 Jan 2020 21:23:01 GMT
etag: "e3e79cd377b28c1e7ffea64b194136cf"
x-amz-version-id: kLBQWhXkUwwuS0hOSKJ2GQ_XrNE.oQFF
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XTk1ZXdpqisLN4abManV2eERXXfdVDr6nw7IuuvYX00Zl-QVHJqL0A==
cache-control: max-age=1807086
date: Wed, 07 Dec 2022 02:40:03 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 26768, version 0.0\012- data
Size:   26768
Md5:    e3e79cd377b28c1e7ffea64b194136cf
Sha1:   e67fb661f5d630ecc811e93d526065a680bf58d7
Sha256: 138c0ead0fbcd09dd455df9870920e8725b367fbf02ac0cef0c62874000ab176
                                        
                                            GET /id?d_visid_ver=2.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=DA11332E5321D0550A490D45%40AdobeOrg&d_nsid=0&ts=1670380803195 HTTP/1.1 
Host: dpm.demdex.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Origin: http://0333fa5.netsolhost.com
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/

                                        
                                             52.211.247.227
HTTP/1.1 200 OK
Content-Type: application/json;charset=utf-8
                                            
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://0333fa5.netsolhost.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
DCS: dcs-prod-irl1-2-v045-001bf2e72.edge-irl1.demdex.com 2 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=18217732618185130304281750861137913665; Max-Age=15552000; Expires=Mon, 05 Jun 2023 02:40:03 GMT; Path=/; Domain=.demdex.net
Vary: Origin
X-TID: VPWkSPCiTgw=
Content-Length: 1165
Connection: keep-alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (3450), with no line terminators
Size:   1165
Md5:    66662c52ff75ef21d18c495142ea9bd6
Sha1:   19e39de56c90a78adf0f5b5b74e420a5ea5a48a6
Sha256: d1d9b482abe20852786b75bc3d4f9acd2ab6a6987127425f8f8a4e3ac095f034
                                        
                                            GET /comcastapn56341864860/moatad.js HTTP/1.1 
Host: z.moatads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             23.38.201.146
HTTP/2 200 OK
content-type: application/x-javascript
                                            
x-amz-id-2: DgrV/yUP0cYZJ24pT7Z5LVkFATYFOX23OVuFadPO2EW++SB5KZZT2R0SCmVojLGlVbLec6pGXtw=
x-amz-request-id: CA2DQ7A5WM2MGH3Y
last-modified: Mon, 11 May 2020 15:59:42 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
accept-ranges: bytes
server: AmazonS3
content-length: 0
cache-control: max-age=31234
date: Wed, 07 Dec 2022 02:40:03 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /fonts/latest/Xfinity_Standard/XfinityStandard-Light.woff2 HTTP/1.1 
Host: sdx.xfinity.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://0333fa5.netsolhost.com
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.110.1.60
HTTP/2 200 OK
content-type: font/woff2
                                            
content-length: 27420
last-modified: Fri, 24 Jan 2020 21:23:01 GMT
etag: "f05d3ebe80809d82ab14d62a79da544e"
x-amz-version-id: wnCwOacXycelzt78IMkr55wWB9WkMd2W
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _vpkqBlLETw4T6oH2cSnkktI4BxeLxas20IZvW788el8Nomx3bJ5ug==
cache-control: max-age=1423469
date: Wed, 07 Dec 2022 02:40:03 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 27420, version 0.0\012- data
Size:   27420
Md5:    f05d3ebe80809d82ab14d62a79da544e
Sha1:   bf08410286fbadd57335dc63dbdd8169cd4e6d1e
Sha256: fc6cd95261064c28600405c9c8dd51813abf8367e85b6e00f0f3031a8338988a
                                        
                                            GET /fonts/latest/Xfinity_Standard/XfinityStandard-Medium.woff2 HTTP/1.1 
Host: sdx.xfinity.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://0333fa5.netsolhost.com
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.110.1.60
HTTP/2 200 OK
content-type: font/woff2
                                            
content-length: 27152
last-modified: Fri, 24 Jan 2020 21:23:01 GMT
etag: "13709eac065721ba8cd0e2d1b6fa8026"
x-amz-version-id: 6t4RA2DS89tdf_2IK5vrc9JAOKCy9A40
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: IzOfbbv8gz8w_604kyRw0cTtS-ry2VNjzzr5bNN0H7WL2BOGYFlCng==
cache-control: max-age=2272420
date: Wed, 07 Dec 2022 02:40:03 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 27152, version 0.0\012- data
Size:   27152
Md5:    13709eac065721ba8cd0e2d1b6fa8026
Sha1:   2fa86f3c0fbc94711d6c0ed32e3e03add756ba18
Sha256: 2a031939885bb7efba89d423c9ee7c0fe2bab465f18db63f40a9ae2bd7bc0228
                                        
                                            GET /43896e740dcedef854392e0be6ea80deb8eb2ba5/s-code-contents-4a9ebf08bffa74f717ff121b2c55a295112122b4.js HTTP/1.1 
Host: assets.adobedtm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/

                                        
                                             23.38.200.237
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                            
Accept-Ranges: bytes
ETag: "7c44e613d67e21f6a1c3afd5985988da:1581368005.559228"
Last-Modified: Mon, 10 Feb 2020 20:53:25 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=3600
Expires: Wed, 07 Dec 2022 03:40:03 GMT
Date: Wed, 07 Dec 2022 02:40:03 GMT
Content-Length: 34525
Connection: keep-alive
Access-Control-Allow-Origin: http://0333fa5.netsolhost.com
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with very long lines (557)
Size:   34525
Md5:    953eadbd32b8680b37511cc683781aff
Sha1:   8ea7a5fb3bd5f727f3ec3366bc1d91b3a104043b
Sha256: 14dd417150683ce056827225bbf94a0f26e95a820b604f815021be49eb8c707b
                                        
                                            GET /43896e740dcedef854392e0be6ea80deb8eb2ba5/scripts/satellite-596fc62264746d0ba500dd83.js HTTP/1.1 
Host: assets.adobedtm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/

                                        
                                             23.38.200.237
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                            
Accept-Ranges: bytes
ETag: "16dfb4bd56a82d8f8018ab2fa164856c:1581368006.307249"
Last-Modified: Mon, 10 Feb 2020 20:53:26 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 134
Cache-Control: max-age=3600
Expires: Wed, 07 Dec 2022 03:40:03 GMT
Date: Wed, 07 Dec 2022 02:40:03 GMT
Connection: keep-alive
Access-Control-Allow-Origin: http://0333fa5.netsolhost.com
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text
Size:   134
Md5:    26720501c4260c7cc5833d9e06f0af87
Sha1:   26ce9fe2fa65dcd91b1ff050a238892a70eaad6c
Sha256: e23487c8456f551b44229fd881dd8c524922e7c4c68682028c245bf706820e62
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 6Fr9V/pckz61ONsV4tFqMg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             44.242.41.15
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: TFKqEl+rXXRycH/C6ONKuCcHurE=

                                        
                                            GET /43896e740dcedef854392e0be6ea80deb8eb2ba5/scripts/satellite-596fa36064746d7e580013b4.js HTTP/1.1 
Host: assets.adobedtm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/

                                        
                                             23.38.200.237
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                            
Accept-Ranges: bytes
ETag: "b5834499509b419a0926487143b3976d:1581368006.388159"
Last-Modified: Mon, 10 Feb 2020 20:53:26 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 187
Cache-Control: max-age=3600
Expires: Wed, 07 Dec 2022 03:40:03 GMT
Date: Wed, 07 Dec 2022 02:40:03 GMT
Connection: keep-alive
Access-Control-Allow-Origin: http://0333fa5.netsolhost.com
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text
Size:   187
Md5:    100e6bd0333d51a01c9e2bf4130cd5c9
Sha1:   b03e6b94b4c163de582e217f6e148f3b12df8f1f
Sha256: 481a6bc427ce8b7601db07e2387f5265db27e59a9a54abcb88f0e2497387912a
                                        
                                            GET /43896e740dcedef854392e0be6ea80deb8eb2ba5/scripts/satellite-5971021b64746d663b00202b.js HTTP/1.1 
Host: assets.adobedtm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/

                                        
                                             23.38.200.237
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                            
Accept-Ranges: bytes
ETag: "dbef438e3fcd49bdc0ee4d74b97df080:1581368005.888342"
Last-Modified: Mon, 10 Feb 2020 20:53:25 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=3600
Expires: Wed, 07 Dec 2022 03:40:03 GMT
Date: Wed, 07 Dec 2022 02:40:03 GMT
Content-Length: 14684
Connection: keep-alive
Access-Control-Allow-Origin: http://0333fa5.netsolhost.com
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with very long lines (563)
Size:   14684
Md5:    4da5a7f7e67cf8d72d1238efbd4dac31
Sha1:   e8bf676f06b42529aa475c3d292acfa0f5b4a6b7
Sha256: 2c68577dc9e4226daf46cbcf1650a0e91a1841c67ecf5e4ecea749cbea7ed973
                                        
                                            GET /43896e740dcedef854392e0be6ea80deb8eb2ba5/scripts/satellite-596fa34764746d6ae001a760.js HTTP/1.1 
Host: assets.adobedtm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/

                                        
                                             23.38.200.237
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                            
Accept-Ranges: bytes
ETag: "1cf26e862d696e4a210b77e9f506e652:1581368006.039768"
Last-Modified: Mon, 10 Feb 2020 20:53:26 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=3600
Expires: Wed, 07 Dec 2022 03:40:03 GMT
Date: Wed, 07 Dec 2022 02:40:03 GMT
Content-Length: 681
Connection: keep-alive
Access-Control-Allow-Origin: http://0333fa5.netsolhost.com
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text
Size:   681
Md5:    238e9ac366afc5ccb8ab193af21a3bdd
Sha1:   ccbe4cf829625b32aa2ecb714bc68c05c53de703
Sha256: 2f27f96e790c01c88b87af6a72d3d635b9bfc630d13bd43bd46a8be4ac5fac9f
                                        
                                            GET /id?d_visid_ver=2.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=723C39F756ABCD0B7F000101%40AdobeOrg&d_nsid=1&ts=1670380803500 HTTP/1.1 
Host: dpm.demdex.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Origin: http://0333fa5.netsolhost.com
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/

                                        
                                             52.211.247.227
HTTP/1.1 200 OK
Content-Type: application/json;charset=utf-8
                                            
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://0333fa5.netsolhost.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
DCS: dcs-prod-irl1-2-v045-00960800d.edge-irl1.demdex.com 1 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=27212229146780834632784815814479992818; Max-Age=15552000; Expires=Mon, 05 Jun 2023 02:40:03 GMT; Path=/; Domain=.demdex.net
Vary: Origin
X-TID: CkJv9qL1SxM=
Content-Length: 215
Connection: keep-alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   215
Md5:    5b227c639379461bc9762850a238ed3c
Sha1:   4ca7e73ec19e8464222ccde897d209eb8a0755e1
Sha256: b0e8d1edcda5394ff7def5173173c9b8f6f0dbc7a4cbfb307f6693367b93fa68
                                        
                                            GET /dest5.html?d_nsid=0 HTTP/1.1 
Host: fast.comcast.demdex.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/
Upgrade-Insecure-Requests: 1

                                        
                                             23.36.76.163
HTTP/1.1 200 OK
Content-Type: text/html
                                            
Accept-Ranges: bytes
ETag: "2c9c2ee145ee280b85a217ad7045fae5:1580750826.437238"
Last-Modified: Mon, 03 Feb 2020 17:27:06 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=21600
Date: Wed, 07 Dec 2022 02:40:03 GMT
Content-Length: 2785
Connection: keep-alive
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (550)
Size:   2785
Md5:    b8a1b21bd0651935d53a7bff0c2479d6
Sha1:   31527c952669b6d1d06c537eb50c9043f576e607
Sha256: 80888fb8b92d01d8dd990af664d273f6364b2917741b09911096099ce4eef1bd
                                        
                                            GET /id?d_visid_ver=2.5.0&d_fieldgroup=A&mcorgid=DA11332E5321D0550A490D45%40AdobeOrg&mid=18020780403082184014260876903071357926&ts=1670380803532 HTTP/1.1 
Host: comcastcom.d1.sc.omtrdc.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Origin: http://0333fa5.netsolhost.com
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/

                                        
                                             13.36.218.177
HTTP/1.1 200 OK
content-type: application/x-javascript;charset=utf-8
                                            
access-control-allow-origin: http://0333fa5.netsolhost.com
access-control-allow-credentials: true
date: Wed, 07 Dec 2022 02:40:03 GMT
p3p: CP="This is not a P3P policy"
server: jag
vary: Origin
content-length: 2
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   2
Md5:    99914b932bd37a50b983c5e7c90ae93b
Sha1:   bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
Sha256: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4325
Cache-Control: max-age=103136
Date: Wed, 07 Dec 2022 02:40:04 GMT
Etag: "638edbff-1d7"
Expires: Thu, 08 Dec 2022 07:19:00 GMT
Last-Modified: Tue, 06 Dec 2022 06:06:55 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471

                                        
                                            OPTIONS /event/ HTTP/1.1 
Host: dl.cws.xfinity.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: PUT
Access-Control-Request-Headers: content-type
Referer: http://0333fa5.netsolhost.com/
Origin: http://0333fa5.netsolhost.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             184.86.58.27
HTTP/2 200 OK
content-type: application/json
                                            
content-length: 0
x-amzn-requestid: 651b634a-8be3-4fb2-a11e-b52c7d36fe47
access-control-allow-origin: *
access-control-allow-headers: Content-Type
x-amz-apigw-id: cwR4qGEuiYcF9xQ=
access-control-allow-methods: HEAD,OPTIONS,PUT
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: IKvN8y1a7kBXgnRvu7rDj0_04WrIBTy4NdYMB8QcGT9MhU74wNU9hQ==
date: Wed, 07 Dec 2022 02:40:04 GMT
X-Firefox-Spdy: h2

                                        
                                            POST /event?_ts=1670380803703 HTTP/1.1 
Host: comcastathena.demdex.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 634
Origin: http://0333fa5.netsolhost.com
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.251.90.149
HTTP/1.1 200 OK
Content-Type: application/json;charset=utf-8
                                            
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://0333fa5.netsolhost.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
DCS: dcs-prod-irl1-2-v045-0687cfe76.edge-irl1.demdex.com 3 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=27212229146780834632784815814479992818; Max-Age=15552000; Expires=Mon, 05 Jun 2023 02:40:04 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: F993G2OETqc=
Content-Length: 119
Connection: keep-alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   119
Md5:    67c5a9889bf3695f28acbd03a104e414
Sha1:   9903c81d96231eab8978aab9871e77eba6f1b132
Sha256: db5b3689e9abaa72c0f89054b719354c3fc6d968c9702843e2917aa800644890
                                        
                                            GET /delivery/rta/rta.js?netId=2528&cookieName=crtg_comcast&rnd=18476472184&varName=crtg_content HTTP/1.1 
Host: rtax.criteo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/

                                        
                                             178.250.2.157
HTTP/1.1 204 No Content
                                            
server: nginx/1.20.1
date: Wed, 07 Dec 2022 02:40:04 GMT
strict-transport-security: max-age=31536000; preload;

                                        
                                            GET /b/ss/comcastdotcomprod/10/JS-2.3.0-D7QN/s47017511519177?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=7%2F11%2F2022%202%3A40%3A3%203%200&d.&nsid=0&jsonv=1&.d&D=D%3D&mid=18020780403082184014260876903071357926&aamlh=6&ce=UTF-8&pageName=resi%7Cselfservice%7Clogin%7Csign%20in&g=http%3A%2F%2F0333fa5.netsolhost.com%2Fcomcast%2Fxfinity.php%3F38ab677aecdc4937c5fa342efeb36a8c%3D%26_rand%3Dlogin.xfinity.com.aspx%26email%3D%26entity%3D1073444&cc=USD&ch=login&events=event125%3D14%2Cevent36%3D17&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c25=resi%7Cselfservice%7Clogin%7Csign%20in%7Cpage%20load&v29=landscape%3Adesktop%20layout%3A1280x939&v37=D%3DpageName&c44=responsive%7Ccima%20login&v44=responsive%7Ccima%20login&v46=First%20Visit&c54=VisitorAPI%20Present&c55=resi%7Cselfservice&c60=en&c69=wnamp&c72=17&c73=DTM%20Hosted%20%7C11212019&v86=unauthenticated%7Cunrecognized&v99=comcast%7Cweb&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=DA11332E5321D0550A490D45%40AdobeOrg&AQE=1 HTTP/1.1 
Host: comcastcom.d1.sc.omtrdc.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/

                                        
                                             13.36.218.177
HTTP/1.1 200 OK
content-type: application/x-javascript;charset=utf-8
                                            
access-control-allow-origin: *
date: Wed, 07 Dec 2022 02:40:04 GMT
expires: Tue, 06 Dec 2022 02:40:04 GMT
last-modified: Thu, 08 Dec 2022 02:40:04 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
etag: 3587115462980993024-4619821082407205073
vary: *
dcs: dcs-prod-irl1-2-v045-0314701ba.edge-irl1.demdex.com 4 ms
x-aam-tid: NCmFUXOcTXU=
content-length: 3958
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff


--- Additional Info ---
Magic:  ASCII text, with very long lines (3957)
Size:   3958
Md5:    25994965a619c9e9fde3bc05fbbd55f1
Sha1:   1c7424562c86ef0c880ef9867adc5e5781f44e33
Sha256: a5f9a71a8c3621d053c241ce13f45fe8efa44c9e4c6a114136d28829b37d2a5f
                                        
                                            GET /dest5.html?d_nsid=1 HTTP/1.1 
Host: comcastathena.demdex.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             34.251.90.149
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                            
Accept-Ranges: bytes
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
date: Wed, 7 Dec 2022 02:40:04 GMT
DCS: dcs-prod-irl1-2-v045-000256d3c.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
last-modified: Wed, 9 Nov 2022 04:30:17 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
vary: accept-encoding
X-TID: qClJ/+TDS1M=
Content-Length: 2791
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (550)
Size:   2791
Md5:    ccbdcb1e84c241950763ec4cd516cdfc
Sha1:   55dfa8d4b09c5c3a80fcd101152f6ebed3d27a2c
Sha256: de9ccb9b168945a24f20edc28c39be4135b328129ba8ee378401a7aedc925d12
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:40:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/viewthroughconversion/1023869955/?label=cYj3CPPGqqsBEIOInOgD&amp;guid=ON&amp;script=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fast.comcast.demdex.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.162
HTTP/2 302 Found
content-type: image/gif
                                            
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:40:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/pagead/1p-user-list/1023869955/?label=cYj3CPPGqqsBEIOInOgD&is_vtc=1&random=2676173094
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 07-Dec-2022 02:55:04 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:40:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            PUT /event/ HTTP/1.1 
Host: dl.cws.xfinity.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 3052
Origin: http://0333fa5.netsolhost.com
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             184.86.58.27
HTTP/2 200 OK
content-type: application/json
                                            
content-length: 110
x-amzn-requestid: 74f8e321-45e5-43b4-9a6f-0bfbcbe67ac8
x-amz-apigw-id: cwR4tHNyiYcFS1g=
x-amzn-trace-id: Root=1-638ffd04-514cae1c473e478116c1d81c
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: F-bboMNxYt_xjWCcJ8RYwtr1WWtELyAaWX2TyO1XX-GyJqEsjd2wJw==
date: Wed, 07 Dec 2022 02:40:04 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,PUT,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   110
Md5:    a71f753ae3dd06067830d58ca571d8da
Sha1:   28d3ca8a8bee90c7d8c379d9d23e91f8131fa5de
Sha256: 59a54c875111c676ef44e7825d9ffe1519e297c7a37c87cd18573728ba3d071b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:40:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/1p-user-list/1023869955/?label=cYj3CPPGqqsBEIOInOgD&is_vtc=1&random=2676173094 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://fast.comcast.demdex.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.228
HTTP/2 302 Found
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:40:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-user-list/1023869955/?label=cYj3CPPGqqsBEIOInOgD&is_vtc=1&random=2676173094&ipr=y
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /static/images/favicon/android-icon-192x192.png HTTP/1.1 
Host: login.xfinity.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             95.101.10.128
HTTP/2 200 OK
content-type: image/png
                                            
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains;
last-modified: Tue, 11 Jan 2022 16:05:32 GMT
accept-ranges: bytes
content-length: 2569
x-edgeconnect-cache-status: 1
cache-control: max-age=1749
expires: Wed, 07 Dec 2022 03:09:13 GMT
date: Wed, 07 Dec 2022 02:40:04 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 192 x 192, 8-bit grayscale, non-interlaced\012- data
Size:   2569
Md5:    4d5a72cfafe8a0e67a3a4e3684ae379f
Sha1:   2140780ff72470e5a9d63fdf950d7b816ce804be
Sha256: b8bbda2990b5611317f747bf13de3a78e1de77fd7d864a27d845194988490375
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:40:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /static/images/favicon/favicon-16x16.png HTTP/1.1 
Host: login.xfinity.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://0333fa5.netsolhost.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             95.101.10.128
HTTP/2 200 OK
content-type: image/png
                                            
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains;
last-modified: Tue, 11 Jan 2022 16:05:32 GMT
accept-ranges: bytes
content-length: 184
x-edgeconnect-cache-status: 1
cache-control: max-age=1
expires: Wed, 07 Dec 2022 02:40:05 GMT
date: Wed, 07 Dec 2022 02:40:04 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit grayscale, non-interlaced\012- data
Size:   184
Md5:    db142cad60d6acbf015835843f35071f
Sha1:   56261a4d35ff1ad9c210376f025f8762e608494f
Sha256: 1a819ccf88edbedbdce80f8f48844260c685edf389ba39ba92e42c7291522801
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:40:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/1p-user-list/1023869955/?label=cYj3CPPGqqsBEIOInOgD&is_vtc=1&random=2676173094&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://fast.comcast.demdex.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.163
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:40:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:40:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9388
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Wed, 07 Dec 2022 02:40:04 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9388
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Wed, 07 Dec 2022 02:40:04 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9388
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Wed, 07 Dec 2022 02:40:04 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9388
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Wed, 07 Dec 2022 02:40:04 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F849e6cc4-2b6a-4e78-ba2e-d46bfbadd6ba.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 12259
x-amzn-requestid: db1b424e-af8a-4a6f-92dc-27ccf3256d25
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: coKPCHc9oAMFygg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638cbd93-56c293d73368cab66819d31e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 15:32:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: VsWEwb3ynI-AP3uWwVHM6I7aY3f0TBLvge2Znt7hNIXlNtMbvpKmBQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 08:00:53 GMT
age: 67151
etag: "f01497a3eef693b70b18885156f63c9c7305ed7e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12259
Md5:    0a317faf49d8e057d1da40f9441b6c30
Sha1:   f01497a3eef693b70b18885156f63c9c7305ed7e
Sha256: 5687e273eefa9ba3733fabe234e52bc7db87b4ec6244d12077c5816ae7961576
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb602c981-caf1-4cfc-b19b-56f816dc7417.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9891
x-amzn-requestid: f15dc6ba-901b-4ef6-8589-d8918fe84173
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csU8lF3MoAMF47g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6850-496d269b228065a365a67eea;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:53:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PeQWrtcQx_ZzQ4WNPzeiPoHXbxVcdLo9ulplJSlL1GmEpuC0qGkElw==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 13:33:28 GMT
age: 47196
etag: "9ec84996b63362ad370ff67b0fd8136a343c1bbf"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9891
Md5:    c2ae931d0f14a81013f782d43b8c7b85
Sha1:   9ec84996b63362ad370ff67b0fd8136a343c1bbf
Sha256: 9b4a2b3e5e2d2b4fac094135fed10a3040598f1208f6b2ec52d95d10aca66ed5
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F084354d3-0d22-4203-844f-c2f6ab2af36d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8906
x-amzn-requestid: 453c8d4f-205d-46ac-8d24-1c9849d71419
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvmAyEMnoAMFZwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb6d1-7b5051335073a5d2339e02e1;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:40:33 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2LpJmaGp8UzaZHqa9WtCTvFq0oQYOVNAdKBdYHURf2d2v5fh7j44uQ==
via: 1.1 e124ba8d7ba1d81e2fdc59ac89f11b70.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:57:19 GMT
age: 16965
etag: "62ef59be034071e667e3476ea0740077c86778c1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8906
Md5:    b89a7fe1080499e4f7171f962b57fec4
Sha1:   62ef59be034071e667e3476ea0740077c86778c1
Sha256: e17432ce6af0006ba36fd43e13c56c1bd1dd9b1d1bc250309bc2731ac8f52abb
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f6b1394-57be-42ed-ad12-94fa7a0b4be7.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7609
x-amzn-requestid: 02299a39-6804-49ae-b415-313b6e06b2ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfj24G39oAMF25Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63894cf8-5f578e3f211063bd125b645a;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 00:55:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EmQGdW6eDQGTNSY5o0bGb7rS5i9FBeV29pEQMPui8P9XOpgZHW8leA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:56:16 GMT
age: 17028
etag: "b3d22d146c6094cb539de40a72b9c5a140802ee5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7609
Md5:    0d0219e6bee2a28f003f396f872eecf0
Sha1:   b3d22d146c6094cb539de40a72b9c5a140802ee5
Sha256: 41c1b037e8e654c19f36b74cceccd1fc841cc9fb7de39ac552ab5089dc3e82db
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc501a87-1b50-43f3-8031-2c93f724dc91.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9613
x-amzn-requestid: 31270e51-34df-4980-9221-e21a5521b3de
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clZQYHzvoAMFvdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638ba268-509300b867fcbfb71a7cf6ad;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 19:24:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Xk1sLSRBl1t872eGrnw1dVjQO7XvAM4NDFd5Y0wKjdvkKtaqDneEKg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 22:01:54 GMT
age: 16690
etag: "3628390c62642dcc375b28f58c9b48180c4abd73"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9613
Md5:    b92721cbe24623f1713a5248d6a7c1b2
Sha1:   3628390c62642dcc375b28f58c9b48180c4abd73
Sha256: 37d0451c03bc7cf0253aba6d3204cbf38502692a0fbc751a3ead01b07e9a65d6
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9367069b-64ab-4e4d-b8c9-fa115e0681a9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 3744
x-amzn-requestid: 73eab74b-e50c-46d1-adde-3ef85fb772f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlj7FDiIAMFmsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb618-70ffb1925e3a9ef6081d1cd1;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: F-LcglSz1NX1Q2t84r1dv0vQzONyYMhlGB6TdS6CeKf9I8Krk1mDUg==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:57:19 GMT
etag: "84d060f66accd412503d52c385ee47cb35795c07"
age: 16965
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3744
Md5:    bdf4703f3372054a7aadce1cb0e11bd0
Sha1:   84d060f66accd412503d52c385ee47cb35795c07
Sha256: c5853b653ee328e567e2456be12450e04c1704ed64fb6234f008532e4b6c8363