t.sidekickopen77.com/s1t/c/5/f18dQhb0S7lM8dDMPbW2n0x6l2B9nMJN7t5XWPdSD1CW4Y8ZcM2zGr7TTCPh91PWSrl103?te=W3R5hFj26QkHmW4mKDsV3ZSyGVW4cHDgd3K2B2XW4kCBqm43T4NSW3zh1jZ49KwhBF3K9dDWTPkF1&si=8000000000170322&pi=fe057518-0924-4578-a591-787474c8a003
301 Moved Permanently 0 B URL HTTP/1.1 t.sidekickopen77.com/s1t/c/5/f18dQhb0S7lM8dDMPbW2n0x6l2B9nMJN7t5XWPdSD1CW4Y8ZcM2zGr7TTCPh91PWSrl103?te=W3R5hFj26QkHmW4mKDsV3ZSyGVW4cHDgd3K2B2XW4kCBqm43T4NSW3zh1jZ49KwhBF3K9dDWTPkF1&si=8000000000170322&pi=fe057518-0924-4578-a591-787474c8a003
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s1t/c/5/f18dQhb0S7lM8dDMPbW2n0x6l2B9nMJN7t5XWPdSD1CW4Y8ZcM2zGr7TTCPh91PWSrl103?te=W3R5hFj26QkHmW4mKDsV3ZSyGVW4cHDgd3K2B2XW4kCBqm43T4NSW3zh1jZ49KwhBF3K9dDWTPkF1&si=8000000000170322&pi=fe057518-0924-4578-a591-787474c8a003 HTTP/1.1
Host: t.sidekickopen77.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 26 Jan 2023 18:56:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 26 Jan 2023 19:56:30 GMT
Location: https://t.sidekickopen77.com/s1t/c/5/f18dQhb0S7lM8dDMPbW2n0x6l2B9nMJN7t5XWPdSD1CW4Y8ZcM2zGr7TTCPh91PWSrl103?te=W3R5hFj26QkHmW4mKDsV3ZSyGVW4cHDgd3K2B2XW4kCBqm43T4NSW3zh1jZ49KwhBF3K9dDWTPkF1&si=8000000000170322&pi=fe057518-0924-4578-a591-787474c8a003
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fb780fff2ab523-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5fe582397f3003b225cb9058e02c2190
68174a54a8f6c4de9247ccea2dcae3c9b76bdb9f
238a2ef5b61d56353d0a5e97ec3092b8f2792cde7cecf40e1a858f8c129d3a9d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "238A2EF5B61D56353D0A5E97EC3092B8F2792CDE7CECF40E1A858F8C129D3A9D"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6838
Expires: Thu, 26 Jan 2023 20:50:28 GMT
Date: Thu, 26 Jan 2023 18:56:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 58ffdcb539c3b250fdf31ed761627fc1
5b55b1522ef84c39b5c42f9bbfbc62b806c1269f
eb783cfa8c8544b0574b345abc0bf3c150979d4efce1a013f17b6cd48076fc63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB783CFA8C8544B0574B345ABC0BF3C150979D4EFCE1A013F17B6CD48076FC63"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11787
Expires: Thu, 26 Jan 2023 22:12:57 GMT
Date: Thu, 26 Jan 2023 18:56:30 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 26 Jan 2023 18:35:16 GMT
content-type: application/json
age: 1274
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 69f73ac59327cd9ad7d99816ccfcc03e
c54844f82dbee0d5ee4c8ce344eb0139373e6c6b
e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6932
Expires: Thu, 26 Jan 2023 20:52:02 GMT
Date: Thu, 26 Jan 2023 18:56:30 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: N2LWNPwaKbyJJFl8B9u+KOlMIbkxpkZftCdiyfQyRxixkHsSsXBKn/HII+qkPbLGDMLY1ehKLcqv5v8ztjLPqA==
x-amz-request-id: QDCVTT8CDNXDA1QZ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 26 Jan 2023 18:20:13 GMT
age: 2178
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 18:56:31 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 438748354d45f7a40007102b83b26214
e773e599f85f88e76a94c7e265393bf1e0876eed
d0fc1a0cdf2976fc1d298cd70921f7168479547b3400afc5467cb6eda787e975
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:56:31 GMT
Etag: "63d15ed9-117"
Server: ECS (amb/6B9D)
Content-Length: 279
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 26 Jan 2023 18:41:40 GMT
age: 891
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1e2970e1480a4759282d63bb213051e4
ed5194d4d25dfc199821129be5d74be0ce49197d
18e19ea4c9c262cb9a94f89172eef2604222e779346589d470bf2e95ea295563
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18E19EA4C9C262CB9A94F89172EEF2604222E779346589D470BF2E95EA295563"
Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10628
Expires: Thu, 26 Jan 2023 21:53:39 GMT
Date: Thu, 26 Jan 2023 18:56:31 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: v4giDqjJSoqhLC4MH5Ou0g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: O3tLtIYgE1UF8pic6FQdHa6C2WY=
t.sidekickopen77.com/s1t/c/5/f18dQhb0S7lM8dDMPbW2n0x6l2B9nMJN7t5XWPdSD1CW4Y8ZcM2zGr7TTCPh91PWSrl103?te=W3R5hFj26QkHmW4mKDsV3ZSyGVW4cHDgd3K2B2XW4kCBqm43T4NSW3zh1jZ49KwhBF3K9dDWTPkF1&si=8000000000170322&pi=fe057518-0924-4578-a591-787474c8a003
307 Temporary Redirect 0 B URL HTTP/2 t.sidekickopen77.com/s1t/c/5/f18dQhb0S7lM8dDMPbW2n0x6l2B9nMJN7t5XWPdSD1CW4Y8ZcM2zGr7TTCPh91PWSrl103?te=W3R5hFj26QkHmW4mKDsV3ZSyGVW4cHDgd3K2B2XW4kCBqm43T4NSW3zh1jZ49KwhBF3K9dDWTPkF1&si=8000000000170322&pi=fe057518-0924-4578-a591-787474c8a003
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s1t/c/5/f18dQhb0S7lM8dDMPbW2n0x6l2B9nMJN7t5XWPdSD1CW4Y8ZcM2zGr7TTCPh91PWSrl103?te=W3R5hFj26QkHmW4mKDsV3ZSyGVW4cHDgd3K2B2XW4kCBqm43T4NSW3zh1jZ49KwhBF3K9dDWTPkF1&si=8000000000170322&pi=fe057518-0924-4578-a591-787474c8a003 HTTP/1.1
Host: t.sidekickopen77.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 307 Temporary Redirect
date: Thu, 26 Jan 2023 18:56:31 GMT
location: http://www.claimsdetective.com/case_request.php
set-cookie: _hetc=cadc6703-72be-47b3-af20-8ff516efa225|1674759391621|ACOD57cwLAIUTV4N9FjQPmeJBNkZsqP+vokRNGACFAMn4BeS7TvN/TBz0tgRHqnnAB3j;Version=1;Comment=;Domain=t.sidekickopen77.com;Path=/;Max-Age=31536000
x-robots-tag: none
link: <http://www.claimsdetective.com/case_request.php>; rel="canonical"
referrer-policy: no-referrer
x-hubspot-correlation-id: 9bb4cc97-0e7d-497d-929d-9d10454a8250
access-control-allow-credentials: false
vary: origin
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 78fb7812fd7a0b45-OSL
X-Firefox-Spdy: h2
www.claimsdetective.com/case_request.php
301 Moved Permanently 0 B URL HTTP/1.1 www.claimsdetective.com/case_request.php
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /case_request.php HTTP/1.1
Host: www.claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Date: Thu, 26 Jan 2023 18:56:32 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Location: https://claimsdetective.com/case_request.php
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6389
Expires: Thu, 26 Jan 2023 20:43:02 GMT
Date: Thu, 26 Jan 2023 18:56:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6389
Expires: Thu, 26 Jan 2023 20:43:02 GMT
Date: Thu, 26 Jan 2023 18:56:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6389
Expires: Thu, 26 Jan 2023 20:43:02 GMT
Date: Thu, 26 Jan 2023 18:56:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6389
Expires: Thu, 26 Jan 2023 20:43:02 GMT
Date: Thu, 26 Jan 2023 18:56:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6389
Expires: Thu, 26 Jan 2023 20:43:02 GMT
Date: Thu, 26 Jan 2023 18:56:33 GMT
Connection: keep-alive
claimsdetective.com/case_request.php
404 Not Found 132 kB URL HTTP/1.1 claimsdetective.com/case_request.php
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (50416)
Size 132 kB (131555 bytes)
Hash 367c9cd3b93d27fdb8b81de1ca979e90
9c4a14b1c44db3a4efde87155343590a769e225c
114ac0116a8e57e7a360530b84e4b98e15e3924625294d284c5a22d5d47d0b0e
GET /case_request.php HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 404 Not Found
Date: Thu, 26 Jan 2023 18:56:32 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://claimsdetective.com/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ba0a42dadf6a976df148f652e9cc1844
4d825b74865effa4a858ddcad1d0969671facc07
7276a38c9ba6b13a06f24ab8b802f210f98c5541df53fbcd8e879a14d2957d95
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5943
x-amzn-requestid: 6774f4a4-ed83-49df-868f-4517c2af914b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUXxNF2UIAMFlYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a007-75b1e8975c3f4b503e0a1c5b;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KY05WKpINERD5g9o2QLYdsNMSuuy_YKn2Tl7Qkn7YaAOaPTDfLteeA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:49:40 GMT
etag: "4d825b74865effa4a858ddcad1d0969671facc07"
content-type: image/jpeg
age: 76013
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd53f06d1-60cf-4ced-8bcd-877162b44d2d.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd53f06d1-60cf-4ced-8bcd-877162b44d2d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d59b0db3cc1f31f9154d32804a8e3940
498c310e0f4a84c1350bae55aec0d2a0192f8dda
14a2b4e9763a62478015d8f61bf9e44eb67dfe08a58cc94dc836dc8ff3f1b6cf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd53f06d1-60cf-4ced-8bcd-877162b44d2d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7014
x-amzn-requestid: 574c5f93-80ed-4d08-8b0e-d12895dbb211
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fRK8XEo0oAMFo0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d0584e-3a39f9dd1f4828dc747dbdac;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 22:14:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: wVGFnTkEZsdnGI0diX6-NZHtBfw7QQPc97XA0_oKfnZINhtuSLfpjg==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 18:06:25 GMT
etag: "498c310e0f4a84c1350bae55aec0d2a0192f8dda"
content-type: image/jpeg
age: 3008
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 17e1b6f3caa98b0e0972802408dd3f93
07e48bf3565e00d093d72dd4ada606f5d39a4838
7094ef64e04573bea7a81bbcc8ab59d721c5ef433e3fa9203e5861040ced549c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9285
x-amzn-requestid: 526bd945-31d8-490e-af9d-5e6fc6ea3561
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUYT2HzvoAMFYYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a0e5-6812fe4354bbdac4472e7e81;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QEH9CmjfV8QZFNxFz_tEk06i_ELUSNC2QjdTF4K3xc3vS651BZ3NlQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:52:28 GMT
age: 75845
etag: "07e48bf3565e00d093d72dd4ada606f5d39a4838"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3e6d9a5-dd7d-4337-a00f-a145350a1a29.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3e6d9a5-dd7d-4337-a00f-a145350a1a29.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 653bf5a34e9f99c9eef73a21d98d792f
c70d46aa2210c4f7c397fa20e1225b7d0734ac35
9f928ec6f194340e5543a4bf757aac31d545def67a56ae804a2039a3effd3fe0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3e6d9a5-dd7d-4337-a00f-a145350a1a29.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10379
x-amzn-requestid: 77d12b56-c121-4d0a-9831-9de4151b65de
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUY8_GVUIAMFmgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a1ec-523a2d8b1028a4496a211030;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:41:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: i_OHKx9OPaP8_2ydfgZwY4Dvbq208pXR2hwFTdUySwjsIwEIcv-M4g==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:49:18 GMT
age: 76035
etag: "c70d46aa2210c4f7c397fa20e1225b7d0734ac35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ffb1709-216c-4bf0-9b98-e3a355f000bb.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ffb1709-216c-4bf0-9b98-e3a355f000bb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 13cd008fb3e2739ec7caadadbd427655
c4802b06b87ab97f3ccd80d1c9bbdb4fab9886c1
a300a4fde1863c8b806d0557d9f0adaed19e1c612989d7e3f79a7bb45e6e74dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ffb1709-216c-4bf0-9b98-e3a355f000bb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8822
x-amzn-requestid: e16ae781-25f3-4b7d-b62b-85b35d6571c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUYRwF2KIAMFjDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a0d7-377f24bd18dea32564b148bd;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 3Q-kz6GkBHp82E__crWSeqbfxme8c9y1BAAq3TW8NlwJy4eSy7gy7Q==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:49:07 GMT
age: 76046
etag: "c4802b06b87ab97f3ccd80d1c9bbdb4fab9886c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F302c83f3-fc0d-4aa1-a74b-ca3da86a6193.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F302c83f3-fc0d-4aa1-a74b-ca3da86a6193.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6bb86eb4c771d04fbe14536002327ee2
2ce08b3000a62157a4c39b4857a818dc53841757
436ea54ad85871bafde614cbbbdd0b79fe7f583826935190258ff7c26b84e22d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F302c83f3-fc0d-4aa1-a74b-ca3da86a6193.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11443
x-amzn-requestid: 305a8be0-f495-4c5c-a09e-1129ce9022fd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fH9BfF3ZoAMFXKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cca86f-542ef19e000475b61a066bf9;Sampled=0
x-amzn-remapped-date: Sun, 22 Jan 2023 03:07:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9TK6paKJzZLkss5Sl6FaTPOImIjU_j_GfMkcwZrIlQKhs0xQ7achfw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 07:50:26 GMT
age: 39967
etag: "2ce08b3000a62157a4c39b4857a818dc53841757"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
claimsdetective.com/wp-content/themes/astra/assets/css/minified/frontend.min.css?ver=3.9.4
200 OK 46 kB URL HTTP/1.1 claimsdetective.com/wp-content/themes/astra/assets/css/minified/frontend.min.css?ver=3.9.4
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (44191)
Hash 248bbc2e5bd83a655178669c1b040ffe
1e3c968b4fa4ea558a81c85e289c521d6d24518e
d09920b83eea7880392f28587ec5d5caaa9e182bbd146ee4f7f5632f09eb38bf
GET /wp-content/themes/astra/assets/css/minified/frontend.min.css?ver=3.9.4 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 04:43:29 GMT
Accept-Ranges: bytes
Content-Length: 46373
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
claimsdetective.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
200 OK 19 kB URL HTTP/1.1 claimsdetective.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (15660)
Hash 32beb68a374e3aeac00abdf9e12b84ea
b5d18aa625e8696dd9d07cd0869337717b211ae0
5aad5fbd4238981a9ff5e2772ff1353dfe1a801fb49542fe157418c1438f7782
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Tue, 12 Apr 2022 10:26:24 GMT
Accept-Ranges: bytes
Content-Length: 18617
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
claimsdetective.com/wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=3.9.4
200 OK 3.4 kB URL HTTP/1.1 claimsdetective.com/wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=3.9.4
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (3412), with no line terminators
Hash 730e0907dfd019baf0c555a21f373670
6bef5d7aab1206ca5095e6f589c47c9912873ac7
b6e169ac07a49b2c9d2b726bb3c384097badcc093dc6322c9a2ba066ae8e06a8
GET /wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=3.9.4 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 04:43:29 GMT
Accept-Ranges: bytes
Content-Length: 3412
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
claimsdetective.com/wp-content/uploads/elementor/css/post-475.css?ver=1674195189
200 OK 1.2 kB URL HTTP/1.1 claimsdetective.com/wp-content/uploads/elementor/css/post-475.css?ver=1674195189
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1200), with no line terminators
Hash 462f6cbb2fbcda73fd52e0e9674db842
518c11fd5704b95c8bd333d7e32b5095b26bbf29
8c714a271332eef127cf73e2c43969385c8141fe918909e4fb05b387ac249eae
GET /wp-content/uploads/elementor/css/post-475.css?ver=1674195189 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Fri, 20 Jan 2023 06:13:09 GMT
Accept-Ranges: bytes
Content-Length: 1200
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
claimsdetective.com/wp-content/plugins/usahtmlmap/static/css/map.css?ver=6.1.1
200 OK 5.0 kB URL HTTP/1.1 claimsdetective.com/wp-content/plugins/usahtmlmap/static/css/map.css?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with CRLF line terminators
Hash 8951f8a291c251135e063cf586f0649e
a3e0cf13596d0d50db2a35dad60ce635dea390d1
ebd40c82ea70ac7163abf8f714a7fda419ac6f8afc36cda6c4ba732ed390aa45
GET /wp-content/plugins/usahtmlmap/static/css/map.css?ver=6.1.1 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Fri, 20 Jan 2023 06:49:13 GMT
Accept-Ranges: bytes
Content-Length: 5034
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
claimsdetective.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.13
200 OK 776 B URL HTTP/1.1 claimsdetective.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.13
IP
ASN #24940 Hetzner Online GmbH
Hash a5bf64d5859ee94a3e8e93d592d6d2a0
049eb63b42dbb820b06870a430f523bf06880721
25825611ade7ceaed7df3862ec56dc91ad1d2be539966ef7bbe84306e51cfb08
GET /wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.13 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 05:27:27 GMT
Accept-Ranges: bytes
Content-Length: 776
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
claimsdetective.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.10.1
200 OK 59 kB URL HTTP/1.1 claimsdetective.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.10.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (59158)
Hash 74bab4578692993514e7f882cc15c218
b6293bcfd851f963edbe859498570c4c0c7eaae4
d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.10.1 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Wed, 18 Jan 2023 03:49:05 GMT
Accept-Ranges: bytes
Content-Length: 59344
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
claimsdetective.com/wp-content/plugins/sticky-header-effects-for-elementor/assets/css/she-header-style.css?ver=1.5.5
200 OK 4.9 kB URL HTTP/1.1 claimsdetective.com/wp-content/plugins/sticky-header-effects-for-elementor/assets/css/she-header-style.css?ver=1.5.5
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with CRLF line terminators
Hash 91884b1b311e2d40a477f288a278c457
401b973331789f996b379ba72028901c54d99f2c
2eeb790627046aeb1bd7912485f97476366d3ee29ef37d1ff7d3e8195ebfcfe9
GET /wp-content/plugins/sticky-header-effects-for-elementor/assets/css/she-header-style.css?ver=1.5.5 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Thu, 05 Jan 2023 14:02:27 GMT
Accept-Ranges: bytes
Content-Length: 4921
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
claimsdetective.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.17.0
200 OK 19 kB URL HTTP/1.1 claimsdetective.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.17.0
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (19277)
Hash 9ef46264d70f8d2f683a02d7884d414d
f6cef797fba728b7bbd150b8c9f18227f518e2d1
d47e448996afd78f0dee27f6ad7ce7de8d00cdafd57b78071267649f35fc46dd
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.17.0 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Wed, 18 Jan 2023 03:49:05 GMT
Accept-Ranges: bytes
Content-Length: 19323
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
claimsdetective.com/wp-content/uploads/elementor/css/post-515.css?ver=1674200358
200 OK 20 kB URL HTTP/1.1 claimsdetective.com/wp-content/uploads/elementor/css/post-515.css?ver=1674200358
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (6296)
Hash 2f039abd4dc3e8e64a94d48848a4c5e3
8cb5f845f5f86a15070cb650c6443f0bf618d228
28c944d44307878dd500872c4bb1f3b240c18abe3ceda57cf958ad2ff496a149
GET /wp-content/uploads/elementor/css/post-515.css?ver=1674200358 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Fri, 20 Jan 2023 07:39:18 GMT
Accept-Ranges: bytes
Content-Length: 20241
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/css
claimsdetective.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.10.1
200 OK 27 kB URL HTTP/1.1 claimsdetective.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.10.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (26516)
Hash c55205bce667f5d812354fd1353e7389
f22de0af271eba636a022c873c94fbcd81b4c89a
c55902832fb84522d02ea1a60a30747403a140d8651fa748f13ba398b0c0df3a
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.10.1 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Wed, 18 Jan 2023 03:49:05 GMT
Accept-Ranges: bytes
Content-Length: 26702
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
claimsdetective.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
200 OK 95 kB URL HTTP/1.1 claimsdetective.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (47826)
Hash 71d925864153f0edf91037f3d31048e8
cc16a0524ac63b5ce29f703a66412224f0dd771a
c324ef26b20264369e4568dc9ef1c5cb1f325f6bc4e8b7c01f7fe93fa353276a
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Wed, 16 Nov 2022 02:06:21 GMT
Accept-Ranges: bytes
Content-Length: 94889
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
claimsdetective.com/wp-content/themes/astra/style.css?ver=6.1.1
200 OK 4.6 kB URL HTTP/1.1 claimsdetective.com/wp-content/themes/astra/style.css?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (901), with CRLF line terminators
Hash d3b21fccabdea73d2b7211d4ed0958b2
610529bd8209241810c49fa17d4c9165ea81fb6d
584c93df2e550f0dd36ddd596c8c6d0fe42cda555971effd8e13378824ac3390
GET /wp-content/themes/astra/style.css?ver=6.1.1 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 04:43:43 GMT
Accept-Ranges: bytes
Content-Length: 4562
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/css
claimsdetective.com/wp-content/themes/claimsdetective/style.css?ver=6.1.1
200 OK 1.1 kB URL HTTP/1.1 claimsdetective.com/wp-content/themes/claimsdetective/style.css?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (919)
Hash 7adda4144197a7a0ee4676ec019a97a6
331778bf61120e7cd76b1873e94483b45a97e211
1e6deffb5022905f0d738c9186d020bc34f34c5c67901e6d53771546934b209f
GET /wp-content/themes/claimsdetective/style.css?ver=6.1.1 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 04:46:55 GMT
Accept-Ranges: bytes
Content-Length: 1050
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
claimsdetective.com/wp-content/uploads/elementor/css/post-598.css?ver=1674199357
200 OK 5.4 kB URL HTTP/1.1 claimsdetective.com/wp-content/uploads/elementor/css/post-598.css?ver=1674199357
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (2312)
Hash a7434cddc5978a8d9d4693435d222969
38c90df8278ae51413d062c3d1250cc4306a5d40
a3c31b5baae0aa99307f38ee3c81243a9a1243c6d7a4c71f4c098e1df4ba4edb
GET /wp-content/uploads/elementor/css/post-598.css?ver=1674199357 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Wed, 25 Jan 2023 12:19:41 GMT
Accept-Ranges: bytes
Content-Length: 5380
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
claimsdetective.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.10.1
200 OK 96 kB URL HTTP/1.1 claimsdetective.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.10.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (65496)
Hash 82fc4899077bc8756f82006f10eb2f83
4968a76436fa84acac82a957e61c6f3770927834
b402cad14172db0d123d6dfcbe1841c52c929f16645d19d267dd522da83b7f24
GET /wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.10.1 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Wed, 18 Jan 2023 03:48:53 GMT
Accept-Ranges: bytes
Content-Length: 96215
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 715f2a2c57230b2e1aedef83c76e0cbc
df5a219b8564a6c8fbe802e574ba625be7f204ca
ca239808557d30d1df2527ae94987866734b640bfd631282414a39eac87b872c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:56:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
claimsdetective.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
200 OK 58 kB URL HTTP/1.1 claimsdetective.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (57726)
Hash eeb705d0bdccfd645d3bbd46dd1fbab3
066def290f42ed8c00860e573cc880bd46e9ced4
d01a2ba2805c78957e15a2958135de0f3cb88e95159dd0f6c0a032bd76b1b0e9
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Wed, 18 Jan 2023 03:49:05 GMT
Accept-Ranges: bytes
Content-Length: 57912
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
claimsdetective.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
200 OK 669 B URL HTTP/1.1 claimsdetective.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (483)
Hash 9eb2d3c87feb6bb2ffa63b70532b1477
38f226335a05ab0e30497bc7419eb5e243a9e26c
37bab6cd583982e8eff58501a99d7c5c4d63664c1ca34f9e3b7cf526c5b73ae2
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Wed, 18 Jan 2023 03:49:05 GMT
Accept-Ranges: bytes
Content-Length: 669
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/css
claimsdetective.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3
200 OK 677 B URL HTTP/1.1 claimsdetective.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (491)
Hash 3eef8c9e589a6fd58292e79bbac4ba5d
d3ebdb629b8d9c92380b14b1676b123398f0841b
eea3d6ccda7f6503078cce9dc41176c1357af1c93a5b3625131ef7cf21c9d7c4
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Wed, 18 Jan 2023 03:49:05 GMT
Accept-Ranges: bytes
Content-Length: 677
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
claimsdetective.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
200 OK 675 B URL HTTP/1.1 claimsdetective.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (489)
Hash 144e43c3b3d8ea5b278c062c202c92f2
3c037057a419245849747b4762d09d88cab66fc1
9cd63b8cea25045c14623c538d26752518a58c0c682795ce6ad3078976c65a37
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Wed, 18 Jan 2023 03:49:05 GMT
Accept-Ranges: bytes
Content-Length: 675
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
claimsdetective.com/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.13
200 OK 76 kB URL HTTP/1.1 claimsdetective.com/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.13
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (1646)
Hash 2395c81e72a52f14588816b4f72a7f17
711357e8d49c28be7605fcfbf881b90567decee1
ea14d1b1233e6cbc9b1a156ac532f076f7adafc309726fca7bf8833f882ac872
GET /wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.13 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 05:27:27 GMT
Accept-Ranges: bytes
Content-Length: 75684
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
claimsdetective.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 90 kB URL HTTP/1.1 claimsdetective.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (65447)
Hash 17738318d61d394f1de8890d589afaec
f6d0c4dc1399cf02d53f5753ad46573a8bbc2ac3
cc7403bab52ed166e24ea9324241045af370be482f5b594468f4a6ac6e7e7981
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Mon, 19 Sep 2022 18:46:24 GMT
Accept-Ranges: bytes
Content-Length: 89684
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
claimsdetective.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.10.1
200 OK 15 kB URL HTTP/1.1 claimsdetective.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.10.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (14869)
Hash 7a5dea0a705cc2f4cd87dbaaa6666bc6
678bc6f750f13adb29bbc158eb0d9cd813b736fa
97cf1307c16a437b77b5f7f5c9bc0b985d0745a14be5a279019aca5a3432e264
GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.10.1 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Wed, 18 Jan 2023 03:49:09 GMT
Accept-Ranges: bytes
Content-Length: 15055
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
claimsdetective.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 11 kB URL HTTP/1.1 claimsdetective.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (11126)
Hash 79b4956b7ec478ec10244b5e2d33ac7d
a46025b9d05e3df30d610a8aef14f392c7058dc9
029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Wed, 18 Nov 2020 14:36:06 GMT
Accept-Ranges: bytes
Content-Length: 11224
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
claimsdetective.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.10.1
200 OK 18 kB URL HTTP/1.1 claimsdetective.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.10.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (10019)
Hash 4601ba55044413706c2022cb6c1c3d05
5103ec2fbb389568ebf5cfe4fd721f3df2ff7aec
fe513ef974b767510d0a2b9f1b4d3afa53185b89ab617c869e5e3d6db960192c
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.10.1 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Wed, 18 Jan 2023 03:49:05 GMT
Accept-Ranges: bytes
Content-Length: 18468
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
claimsdetective.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css
200 OK 9.8 kB URL HTTP/1.1 claimsdetective.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (9804)
Hash 5737705144c47c2fb27b7567c484ac4f
62e50e8d2939cfb61f4ef1250bdfed515e041e72
3aafa73cca43fdc6af25e68faea7c0a88eac789db1b739cf398f807b86220dda
GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Wed, 18 Jan 2023 03:48:53 GMT
Accept-Ranges: bytes
Content-Length: 9844
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
play.vidyard.com/embed/v4.js
200 OK 23 kB URL HTTP/2 play.vidyard.com/embed/v4.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 10b40ba9944da087bf39a6b96fd3bf8d
06ba867b3811c053dddc43930419ffde2d69697f
0ba886af45e9a4932612a3c8e14922ee9731ab6613c455ab6d5eaabe2f9c0056
GET /embed/v4.js HTTP/1.1
Host: play.vidyard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 02 Aug 2022 19:57:00 GMT
etag: "d979332125bf1325ea3e8da540c94eb4"
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-type: application/javascript
x-china: 0
content-encoding: gzip
accept-ranges: bytes
date: Thu, 26 Jan 2023 18:56:33 GMT
via: 1.1 varnish
age: 292886
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 8
vary: X-China, accept-language, Accept-Encoding
strict-transport-security: max-age=31557600
content-length: 22949
X-Firefox-Spdy: h2
claimsdetective.com/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=3.9.4
200 OK 17 kB URL HTTP/1.1 claimsdetective.com/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=3.9.4
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (16935), with no line terminators
Hash 423e4eab18767461cb68a11c5b2a0cb4
d5c17c5fbecfe815e7c27347155158e90e9fb709
d6a23f9c4dec2f455c8e2340a99ad4db01a1d538bb1f2537bab3991ec64e14c7
GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=3.9.4 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 04:43:29 GMT
Accept-Ranges: bytes
Content-Length: 16935
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
claimsdetective.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.10.1
200 OK 5.0 kB URL HTTP/1.1 claimsdetective.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.10.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (4974)
Hash e8e473a0e46b9fa8e575c1725d6be4ce
7f1f12c2b2ec9af0abc8bc886280dc3f8f0fb95e
6556831cebf7e72974ba6346bcb6f97d14dc2e1a8db779252e364abd543c2169
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.10.1 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Wed, 18 Jan 2023 03:49:05 GMT
Accept-Ranges: bytes
Content-Length: 5014
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
claimsdetective.com/wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=1.6.13
200 OK 27 kB URL HTTP/1.1 claimsdetective.com/wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=1.6.13
IP
ASN #24940 Hetzner Online GmbH
Hash 5c37c12bdbed9edeeade7e37f93e2554
e56804d2640d98379f4d24b938241ab24944ed99
8d13e5f190e4c0f968ed033233598e278d294737abc5a46c5e0505b1f88320cb
GET /wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=1.6.13 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 05:27:27 GMT
Accept-Ranges: bytes
Content-Length: 27307
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
claimsdetective.com/wp-content/plugins/usahtmlmap/static/js/raphael.min.js?ver=r3.2.9
200 OK 93 kB URL HTTP/1.1 claimsdetective.com/wp-content/plugins/usahtmlmap/static/js/raphael.min.js?ver=r3.2.9
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (64315), with CRLF line terminators
Hash d14f649e214f8723b38bcccffc2adaa8
890c7b40622160fa59aac1661b844140823c2c40
c6f2d26cc693f903f1c1dc5188016b023b7872506a1c3dcec7163d493093f421
GET /wp-content/plugins/usahtmlmap/static/js/raphael.min.js?ver=r3.2.9 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Fri, 20 Jan 2023 06:49:13 GMT
Accept-Ranges: bytes
Content-Length: 92660
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
claimsdetective.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.10.1
200 OK 36 kB URL HTTP/1.1 claimsdetective.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.10.1
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (35829)
Hash 1bd44eec7a35509172a02e4022d0b2cd
a24589a1154590119967d7291469b0326053f4b5
82b45dde76410ccdfe24c9b3acba3ea30ce30a9bddd94b0f1760b9506a28f27e
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.10.1 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Wed, 18 Jan 2023 03:49:01 GMT
Accept-Ranges: bytes
Content-Length: 35870
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
claimsdetective.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
200 OK 21 kB URL HTTP/1.1 claimsdetective.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash 034bd11ecaf6fb9240d905245e42e202
ff136c394ed95badfc0107fb98a890dcff642828
ca7154cdda62b535ceaba9ad2a2b2217ff49de94c069a2c4e89733f3f06b3651
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Sat, 24 Sep 2022 00:25:30 GMT
Accept-Ranges: bytes
Content-Length: 21440
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript
claimsdetective.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.10.1
200 OK 41 kB URL HTTP/1.1 claimsdetective.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.10.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (40802)
Hash bec8ebd15411d302242295b4b379dbca
1fa0b2e9063cf5f283d5775a45857632bbb293c9
2a19676beceb015e5a09f762982b4216d70b0d01144fea58eefb79935a5724f0
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.10.1 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Wed, 18 Jan 2023 03:49:01 GMT
Accept-Ranges: bytes
Content-Length: 40842
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
claimsdetective.com/wp-includes/js/underscore.min.js?ver=1.13.4
200 OK 19 kB URL HTTP/1.1 claimsdetective.com/wp-includes/js/underscore.min.js?ver=1.13.4
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (18798)
Hash f88d5720bb454ed5d204cbdb56901f6b
f1952292fde4b15936e9aac16b2b9896684db95b
726b820e44f6ab90ad991d30a4bf26d3a5d71493cbcd1fb1efd0d14e89b9df2a
GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Tue, 27 Sep 2022 19:48:26 GMT
Accept-Ranges: bytes
Content-Length: 18833
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
claimsdetective.com/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.9.1
200 OK 771 B URL HTTP/1.1 claimsdetective.com/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.9.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (771), with no line terminators
Hash 2399ef783701f73c399589ae95298b0f
3e1f2a7ac9dcb2b50b1f1cf768441e46fd9f62ee
2dea57483641f8762937dfd9b09126a9b21c88bd3d7486186003e0bbb9043145
GET /wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.9.1 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Wed, 18 Jan 2023 03:50:16 GMT
Accept-Ranges: bytes
Content-Length: 771
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 715f2a2c57230b2e1aedef83c76e0cbc
df5a219b8564a6c8fbe802e574ba625be7f204ca
ca239808557d30d1df2527ae94987866734b640bfd631282414a39eac87b872c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:56:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 715f2a2c57230b2e1aedef83c76e0cbc
df5a219b8564a6c8fbe802e574ba625be7f204ca
ca239808557d30d1df2527ae94987866734b640bfd631282414a39eac87b872c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:56:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
play.vidyard.com/JPwHHbPqZprmj2WFMK6AUV.jpg
302 Found 91 B URL HTTP/2 play.vidyard.com/JPwHHbPqZprmj2WFMK6AUV.jpg
IP
File type ASCII text, with no line terminators
Hash 2db9d1d96a4cff1a8206eab856612f4d
054bcc393ba175a4ce27135280a49c9ce5f474a2
9e699e08fc403fbd4ad1061134a5c81980fb82ab291f32700608f0e319a9d9bf
GET /JPwHHbPqZprmj2WFMK6AUV.jpg HTTP/1.1
Host: play.vidyard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
referrer-policy: no-referrer-when-downgrade
cache-control: no-store, no-cache, must-revalidate
location: https://cdn.vidyard.com/thumbnails/7180818/NybrcZu_ZxMWhoRwIp5oJw.jpg
x-china: 0
accept-ranges: bytes
date: Thu, 26 Jan 2023 18:56:33 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1678-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1674759394.709340,VS0,VE212
vary: Accept, X-China, accept-language
strict-transport-security: max-age=31557600
content-length: 91
X-Firefox-Spdy: h2
claimsdetective.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
200 OK 78 kB URL HTTP/1.1 claimsdetective.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
IP
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261\012- data
Hash e8a427e15cc502bef99cfd722b37ea98
a9922842a120a7f1eaced667480c5e185a106d69
d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://claimsdetective.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:34 GMT
Server: Apache
Last-Modified: Wed, 18 Jan 2023 03:49:13 GMT
Accept-Ranges: bytes
Content-Length: 78196
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: font/woff2
claimsdetective.com/wp-content/uploads/2022/11/logo.png
200 OK 52 kB URL HTTP/1.1 claimsdetective.com/wp-content/uploads/2022/11/logo.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 500 x 165, 8-bit/color RGBA, non-interlaced\012- data
Hash 811a5c61deecb4c3ef479d30ed48cc77
858c1063a834ce2b3a996d5ee77f90c8193f84c8
ebc569a4e96471374d65424eec7b417f8e5b648b37fe26e5e0b40179d2cec766
GET /wp-content/uploads/2022/11/logo.png HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:34 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 05:30:54 GMT
Accept-Ranges: bytes
Content-Length: 52224
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: image/png
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d9bf2793558044193d7e5d27708a9144
5a8f73462cfda6544cc3efe488854c3cd80bb0a7
e1db5ce5f130aa6d6a1bf18da60fee5c6bb76625a26aef0fee67702e7209ef7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:56:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 1.0 kB IP
File type gzip compressed data, max compression\012- data
Hash 9130ece3f4ef5bfd327243ca2491b00c
b16f03a97a40af572ddf40d630120c1d4b36550c
d1f6abdc1a094be17d1fa134f3a1aa7b6fd6f8f3efd03053b058a986c57ab980
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:56:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 47093f1f755d646b6b515442f2774a06
d4fce677d5333f651fce079334529340fb5cca6f
242e08503fc153a63a9806b6212692b97174fb2a4948e17c47b39ff5c3f7ee43
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5611
Cache-Control: max-age=165707
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:56:34 GMT
Etag: "63d29b42-117"
Expires: Sat, 28 Jan 2023 16:58:21 GMT
Last-Modified: Thu, 26 Jan 2023 15:24:50 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 279
claimsdetective.com/wp-content/uploads/2023/01/arrw.png
200 OK 1.1 kB URL HTTP/1.1 claimsdetective.com/wp-content/uploads/2023/01/arrw.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 5 x 8, 8-bit/color RGBA, non-interlaced\012- data
Hash fd69b941812f7a51e325f6c76e99494e
530d150a23c9ec9e41ec5a14497467bebdb06e3d
53d031477e0bc12fe4ebbdb23609ba6529b7e615fe60eae1aa147ff9b6f262d9
GET /wp-content/uploads/2023/01/arrw.png HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:34 GMT
Server: Apache
Last-Modified: Fri, 20 Jan 2023 06:07:18 GMT
Accept-Ranges: bytes
Content-Length: 1080
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
claimsdetective.com/wp-content/themes/astra/assets/fonts/astra.woff
200 OK 3.3 kB URL HTTP/1.1 claimsdetective.com/wp-content/themes/astra/assets/fonts/astra.woff
IP
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format, TrueType, length 3304, version 1.0\012- data
Hash bfe0ed8503c926d68f58ed0408dfe0d0
0346d02d96ff7d2a0278bc10f4dfdf365c80eac3
ec7ef7aa5fd1e019f1c26193e95e46d481d4983673936a9dda086705ada6e3d5
GET /wp-content/themes/astra/assets/fonts/astra.woff HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:34 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 04:43:29 GMT
Accept-Ranges: bytes
Content-Length: 3304
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: font/woff
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://claimsdetective.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 20 Jan 2023 07:08:09 GMT
expires: Sat, 20 Jan 2024 07:08:09 GMT
cache-control: public, max-age=31536000
age: 560905
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://claimsdetective.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 24 Jan 2023 04:29:08 GMT
expires: Wed, 24 Jan 2024 04:29:08 GMT
cache-control: public, max-age=31536000
age: 224846
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
claimsdetective.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
200 OK 77 kB URL HTTP/1.1 claimsdetective.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
IP
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format (Version 2), TrueType, length 76764, version 331.-31261\012- data
Hash f7307680c7fe85959f3ecf122493ea7d
fce0da592a3e536d6d5df5b50cb513398d8c5161
43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://claimsdetective.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:34 GMT
Server: Apache
Last-Modified: Wed, 18 Jan 2023 03:49:09 GMT
Accept-Ranges: bytes
Content-Length: 76764
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: font/woff2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash afeb3476c3b5b8e10f11db443b8528af
f419163f1e43fece9e428e088c49c65e145846ed
8f9bbf884ae3cddaf2f3eff5d31abf823004207b33bc925651516c60af1f37a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:56:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 47093f1f755d646b6b515442f2774a06
d4fce677d5333f651fce079334529340fb5cca6f
242e08503fc153a63a9806b6212692b97174fb2a4948e17c47b39ff5c3f7ee43
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5611
Cache-Control: max-age=165707
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:56:34 GMT
Etag: "63d29b42-117"
Expires: Sat, 28 Jan 2023 16:58:21 GMT
Last-Modified: Thu, 26 Jan 2023 15:24:50 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 279
cdn.vidyard.com/thumbnails/7180818/NybrcZu_ZxMWhoRwIp5oJw.jpg
200 OK 264 kB URL HTTP/2 cdn.vidyard.com/thumbnails/7180818/NybrcZu_ZxMWhoRwIp5oJw.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=16, height=5158, bps=206, compression=LZW, PhotometricIntepretation=RGB, manufacturer=NIKON CORPORATION, model=NIKON D800, orientation=upper-left, width=7360], baseline, precision 8, 1900x960, components 3\012- data
Size 264 kB (263986 bytes)
Hash b6015c8baf69e2c92e456769b20b3d57
b7a5714b715f0095990ec83c8f66f34066934380
6265744ac2539517bec89432e9951d1e4785bf64e1c9ab0339396d12ad376d2d
GET /thumbnails/7180818/NybrcZu_ZxMWhoRwIp5oJw.jpg HTTP/1.1
Host: cdn.vidyard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 263986
date: Thu, 26 Jan 2023 18:56:35 GMT
last-modified: Wed, 19 Feb 2020 17:58:20 GMT
etag: "b6015c8baf69e2c92e456769b20b3d57"
x-amz-storage-class: STANDARD_IA
x-amz-server-side-encryption: AES256
x-amz-version-id: AcTF_5ZANHu4MCu2d3XL0vpjtUV_i7ev
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LSlLK5li2uzxETkEoIY16RIHcm866ZFUvJ9tGzXWBqOR-2YxSUbz-g==
x-cdn: cloudfront
vary: Origin
X-Firefox-Spdy: h2
claimsdetective.com/index.php?usahtml5map_js_data=true&map_id=1&r=69279&ver=6.1.1
200 OK 152 kB URL HTTP/1.1 claimsdetective.com/index.php?usahtml5map_js_data=true&map_id=1&r=69279&ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (17369), with CRLF, LF line terminators
Size 152 kB (151500 bytes)
Hash 839ffd9337e37d4952634247965e3bb3
0144bd6115609f10475e93acbe9fe66fcd505caa
a2a30a44cb2c9880b6dea2ba38b6ad86f3260afaab64653845cc2722d9625322
GET /index.php?usahtml5map_js_data=true&map_id=1&r=69279&ver=6.1.1 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
claimsdetective.com/wp-content/uploads/2020/02/favicon.ico.png
200 OK 870 B URL HTTP/1.1 claimsdetective.com/wp-content/uploads/2020/02/favicon.ico.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 78665f0694c59648c25e76ea8c57f6dd
d0e8dd6a5d2228003090dd4d84e7715dafedb5e7
6b9541dba13b116df9c4e4fbda7153813723e2983aff1da6a49274c6cb0fe15d
GET /wp-content/uploads/2020/02/favicon.ico.png HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:34 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 09:32:16 GMT
Accept-Ranges: bytes
Content-Length: 870
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 78bf3f67da957e3bb5eb446ed0a68dd4
0a4d155e6d4249c960586861e2175347d9099a85
0ecc6511d1459e40d9cd29d05c3cf18ea35f28fdd5d72050ec3eecbdcd4a96a4
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:34 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Mon, 30 Jan 2023 17:17:25 GMT
ETag: "0a4d155e6d4249c960586861e2175347d9099a85"
Last-Modified: Thu, 26 Jan 2023 17:17:26 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 326
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fb7827fff5b4f3-OSL
claimsdetective.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js
200 OK 1.4 kB URL HTTP/1.1 claimsdetective.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1320)
Hash 2b53efa536a2ad47262d34fd2f7bd2c8
049122c296371caf2c6a2f5c2904bc00955d9610
e4cb709013e7082e102d1018d3885c0932dfe3b93bcada40c8e646db2a29e5ee
GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:35 GMT
Server: Apache
Last-Modified: Wed, 18 Jan 2023 03:49:01 GMT
Accept-Ranges: bytes
Content-Length: 1360
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
feed.mikle.com/widget/?rssmikle_url=http%3A%2F%2Fwww.claimsjournal.com%2Frss%2Fnews&rssmikle_frame_width=100%25&rssmikle_frame_height=283&frame_height_by_article=0&rssmikle_target=_blank&rssmikle_font=Arial%2C%20Helvetica%2C%20sans-serif&rssmikle_font_size=12&rssmikle_border=off&responsive=off&rssmikle_css_url=https%3A%2F%2Fwww.claimsdetective.com%2Fcss%2Fstyle_new.css&text_align=left&text_align2=left&corner=off&scrollbar=off&autoscroll=off&scrolldirection=up&scrollstep=3&mcspeed=20&sort=New&rssmikle_title=on&rssmikle_title_sentence=%20Claims%20Journal%20News%20&rssmikle_title_bgcolor=%232A2A2A&rssmikle_title_color=%23FFFFFF&rssmikle_item_bgcolor=%232A2A2A&rssmikle_item_title_length=55&rssmikle_item_title_color=%238A8A8A&rssmikle_item_border_bottom=off&rssmikle_item_description=title_only&item_link=off&rssmikle_item_description_length=150&rssmikle_item_description_color=%23666666&rssmikle_item_date=off&rssmikle_timezone=Etc%2FGMT&datetime_format=%25b%20%25e%2C%20%25Y%20%25l%3A%25M%20%25p&item_description_style=text&item_thumbnail=full&item_thumbnail_selection=auto&article_num=7&rssmikle_item_podcast=off&
200 OK 4.4 kB URL HTTP/2 feed.mikle.com/widget/?rssmikle_url=http%3A%2F%2Fwww.claimsjournal.com%2Frss%2Fnews&rssmikle_frame_width=100%25&rssmikle_frame_height=283&frame_height_by_article=0&rssmikle_target=_blank&rssmikle_font=Arial%2C%20Helvetica%2C%20sans-serif&rssmikle_font_size=12&rssmikle_border=off&responsive=off&rssmikle_css_url=https%3A%2F%2Fwww.claimsdetective.com%2Fcss%2Fstyle_new.css&text_align=left&text_align2=left&corner=off&scrollbar=off&autoscroll=off&scrolldirection=up&scrollstep=3&mcspeed=20&sort=New&rssmikle_title=on&rssmikle_title_sentence=%20Claims%20Journal%20News%20&rssmikle_title_bgcolor=%232A2A2A&rssmikle_title_color=%23FFFFFF&rssmikle_item_bgcolor=%232A2A2A&rssmikle_item_title_length=55&rssmikle_item_title_color=%238A8A8A&rssmikle_item_border_bottom=off&rssmikle_item_description=title_only&item_link=off&rssmikle_item_description_length=150&rssmikle_item_description_color=%23666666&rssmikle_item_date=off&rssmikle_timezone=Etc%2FGMT&datetime_format=%25b%20%25e%2C%20%25Y%20%25l%3A%25M%20%25p&item_description_style=text&item_thumbnail=full&item_thumbnail_selection=auto&article_num=7&rssmikle_item_podcast=off&
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1801)
Hash 15d0c74da0910b778d228b10ad841aed
6650a7607b0dd6686e1693926cf5ab77ca60beb9
c8c86f60d963422130dd76a3a6f71f0e93fc8561b942849fec80dd467994fa16
GET /widget/?rssmikle_url=http%3A%2F%2Fwww.claimsjournal.com%2Frss%2Fnews&rssmikle_frame_width=100%25&rssmikle_frame_height=283&frame_height_by_article=0&rssmikle_target=_blank&rssmikle_font=Arial%2C%20Helvetica%2C%20sans-serif&rssmikle_font_size=12&rssmikle_border=off&responsive=off&rssmikle_css_url=https%3A%2F%2Fwww.claimsdetective.com%2Fcss%2Fstyle_new.css&text_align=left&text_align2=left&corner=off&scrollbar=off&autoscroll=off&scrolldirection=up&scrollstep=3&mcspeed=20&sort=New&rssmikle_title=on&rssmikle_title_sentence=%20Claims%20Journal%20News%20&rssmikle_title_bgcolor=%232A2A2A&rssmikle_title_color=%23FFFFFF&rssmikle_item_bgcolor=%232A2A2A&rssmikle_item_title_length=55&rssmikle_item_title_color=%238A8A8A&rssmikle_item_border_bottom=off&rssmikle_item_description=title_only&item_link=off&rssmikle_item_description_length=150&rssmikle_item_description_color=%23666666&rssmikle_item_date=off&rssmikle_timezone=Etc%2FGMT&datetime_format=%25b%20%25e%2C%20%25Y%20%25l%3A%25M%20%25p&item_description_style=text&item_thumbnail=full&item_thumbnail_selection=auto&article_num=7&rssmikle_item_podcast=off& HTTP/1.1
Host: feed.mikle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 18:56:35 GMT
content-type: text/html;charset=UTF-8
server: nginx/1.14.0
x-xss-protection: 0
content-encoding: gzip
X-Firefox-Spdy: h2
feedads.feedblitz.com/i/69x15/374f7f1d4c3582bc2954e0218ab8998a/59919584/3a0af060175f0ca70216b057b2b2b114/oem/176040
301 Moved Permanently 1 B URL HTTP/1.1 feedads.feedblitz.com/i/69x15/374f7f1d4c3582bc2954e0218ab8998a/59919584/3a0af060175f0ca70216b057b2b2b114/oem/176040
IP
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /i/69x15/374f7f1d4c3582bc2954e0218ab8998a/59919584/3a0af060175f0ca70216b057b2b2b114/oem/176040 HTTP/1.1
Host: feedads.feedblitz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://feed.mikle.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Location: https://spsec.feedblitz.com/imp?s=176040&t=newsletter&sz=69x15&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114
Server: Microsoft-IIS/10.0
Set-Cookie: FbzRss="ec83f0bfd2523586f736a6db404d0a87"; expires=Fri, 26-Jan-2024 18:56:00 GMT; path=/; SameSite=None; Secure; domain=feedblitz.com
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
X-Frame-Options: sameorigin
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Date: Thu, 26 Jan 2023 18:56:35 GMT
Content-Length: 1
feedads.feedblitz.com/i/1x1/374f7f1d4c3582bc2954e0218ab8998a/59919584/3a0af060175f0ca70216b057b2b2b114/oem/176037
301 Moved Permanently 1 B URL HTTP/1.1 feedads.feedblitz.com/i/1x1/374f7f1d4c3582bc2954e0218ab8998a/59919584/3a0af060175f0ca70216b057b2b2b114/oem/176037
IP
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /i/1x1/374f7f1d4c3582bc2954e0218ab8998a/59919584/3a0af060175f0ca70216b057b2b2b114/oem/176037 HTTP/1.1
Host: feedads.feedblitz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://feed.mikle.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Location: https://spsec.feedblitz.com/imp?s=176037&t=newsletter&sz=1x1&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114
Server: Microsoft-IIS/10.0
Set-Cookie: FbzRss="ec83f0bfd2523586f736a6db404d0a87"; expires=Fri, 26-Jan-2024 18:56:00 GMT; path=/; SameSite=None; Secure; domain=feedblitz.com
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
X-Frame-Options: sameorigin
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Date: Thu, 26 Jan 2023 18:56:35 GMT
Content-Length: 1
feedads.feedblitz.com/i/marquee/374f7f1d4c3582bc2954e0218ab8998a/59919584/3a0af060175f0ca70216b057b2b2b114/oem/176036
301 Moved Permanently 1 B URL HTTP/1.1 feedads.feedblitz.com/i/marquee/374f7f1d4c3582bc2954e0218ab8998a/59919584/3a0af060175f0ca70216b057b2b2b114/oem/176036
IP
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /i/marquee/374f7f1d4c3582bc2954e0218ab8998a/59919584/3a0af060175f0ca70216b057b2b2b114/oem/176036 HTTP/1.1
Host: feedads.feedblitz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://feed.mikle.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Location: https://spsec.feedblitz.com/imp?s=176036&t=newsletter&layout=marquee&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114
Server: Microsoft-IIS/10.0
Set-Cookie: FbzRss="ec83f0bfd2523586f736a6db404d0a87"; expires=Fri, 26-Jan-2024 18:56:00 GMT; path=/; SameSite=None; Secure; domain=feedblitz.com
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
X-Frame-Options: sameorigin
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Date: Thu, 26 Jan 2023 18:56:35 GMT
Content-Length: 1
feedads.feedblitz.com/i/1x1/374f7f1d4c3582bc2954e0218ab8998a/59919584/3a0af060175f0ca70216b057b2b2b114/oem/176038
301 Moved Permanently 1 B URL HTTP/1.1 feedads.feedblitz.com/i/1x1/374f7f1d4c3582bc2954e0218ab8998a/59919584/3a0af060175f0ca70216b057b2b2b114/oem/176038
IP
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /i/1x1/374f7f1d4c3582bc2954e0218ab8998a/59919584/3a0af060175f0ca70216b057b2b2b114/oem/176038 HTTP/1.1
Host: feedads.feedblitz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://feed.mikle.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Location: https://spsec.feedblitz.com/imp?s=176038&t=newsletter&sz=1x1&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114
Server: Microsoft-IIS/10.0
Set-Cookie: FbzRss="ec83f0bfd2523586f736a6db404d0a87"; expires=Fri, 26-Jan-2024 18:56:00 GMT; path=/; SameSite=None; Secure; domain=feedblitz.com
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
X-Frame-Options: sameorigin
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Date: Thu, 26 Jan 2023 18:56:35 GMT
Content-Length: 1
claimsdetective.com/css/style_new.css
404 Not Found 132 kB URL HTTP/1.1 claimsdetective.com/css/style_new.css
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (50416)
Size 132 kB (131555 bytes)
Hash f0ae6fd2497efd30006ebb4ce6239588
8d9f318eabbbbc0a7da0ac57b9d4250ebe6107a3
bbae9c74a27bc042d1fd166e12a4bcd74e881d394ca46c70030cfdc5fbf7cc7e
GET /css/style_new.css HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://feed.mikle.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 404 Not Found
Date: Thu, 26 Jan 2023 18:56:36 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://claimsdetective.com/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
spsec.feedblitz.com/imp?s=176040&t=newsletter&sz=69x15&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114
301 Moved Permanently 0 B URL HTTP/1.1 spsec.feedblitz.com/imp?s=176040&t=newsletter&sz=69x15&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /imp?s=176040&t=newsletter&sz=69x15&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114 HTTP/1.1
Host: spsec.feedblitz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://feed.mikle.com/
Connection: keep-alive
Cookie: FbzRss="ec83f0bfd2523586f736a6db404d0a87"
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Location: https://p.liadm.com/imp?s=176040&t=newsletter&sz=69x15&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114&_lc2_fpi=fdbfc301baa5--01gqqq0qdmr9gt6hs3kcqtdmmp
Content-Type: text/html
Content-Length: 0
Expires: Thu, 26 Jan 2023 18:56:36 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 26 Jan 2023 18:56:36 GMT
Connection: keep-alive
Set-Cookie: _lc2_fpi=fdbfc301baa5--01gqqq0qdmr9gt6hs3kcqtdmmp; Max-Age=63072000; Domain=.feedblitz.com; SameSite=Lax
spsec.feedblitz.com/imp?s=176037&t=newsletter&sz=1x1&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114
301 Moved Permanently 0 B URL HTTP/1.1 spsec.feedblitz.com/imp?s=176037&t=newsletter&sz=1x1&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /imp?s=176037&t=newsletter&sz=1x1&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114 HTTP/1.1
Host: spsec.feedblitz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://feed.mikle.com/
Connection: keep-alive
Cookie: FbzRss="ec83f0bfd2523586f736a6db404d0a87"
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Location: https://p.liadm.com/imp?s=176037&t=newsletter&sz=1x1&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114&_lc2_fpi=fdbfc301baa5--01gqqq0qdn3jpkeybw16g5n58b
Content-Type: text/html
Content-Length: 0
Expires: Thu, 26 Jan 2023 18:56:36 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 26 Jan 2023 18:56:36 GMT
Connection: keep-alive
Set-Cookie: _lc2_fpi=fdbfc301baa5--01gqqq0qdn3jpkeybw16g5n58b; Max-Age=63072000; Domain=.feedblitz.com; SameSite=Lax
spsec.feedblitz.com/imp?s=176038&t=newsletter&sz=1x1&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114
301 Moved Permanently 0 B URL HTTP/1.1 spsec.feedblitz.com/imp?s=176038&t=newsletter&sz=1x1&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /imp?s=176038&t=newsletter&sz=1x1&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114 HTTP/1.1
Host: spsec.feedblitz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://feed.mikle.com/
Connection: keep-alive
Cookie: FbzRss="ec83f0bfd2523586f736a6db404d0a87"
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Location: https://p.liadm.com/imp?s=176038&t=newsletter&sz=1x1&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114&_lc2_fpi=fdbfc301baa5--01gqqq0qdp4697hw5p0z69kbp7
Content-Type: text/html
Content-Length: 0
Expires: Thu, 26 Jan 2023 18:56:36 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 26 Jan 2023 18:56:36 GMT
Connection: keep-alive
Set-Cookie: _lc2_fpi=fdbfc301baa5--01gqqq0qdp4697hw5p0z69kbp7; Max-Age=63072000; Domain=.feedblitz.com; SameSite=Lax
spsec.feedblitz.com/imp?s=176036&t=newsletter&layout=marquee&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114
301 Moved Permanently 0 B URL HTTP/1.1 spsec.feedblitz.com/imp?s=176036&t=newsletter&layout=marquee&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /imp?s=176036&t=newsletter&layout=marquee&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114 HTTP/1.1
Host: spsec.feedblitz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://feed.mikle.com/
Connection: keep-alive
Cookie: FbzRss="ec83f0bfd2523586f736a6db404d0a87"
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Location: https://p.liadm.com/imp?s=176036&t=newsletter&layout=marquee&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114&_lc2_fpi=fdbfc301baa5--01gqqq0qdrjxd39yn4bqw2wm25
Content-Type: text/html
Content-Length: 0
Expires: Thu, 26 Jan 2023 18:56:36 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 26 Jan 2023 18:56:36 GMT
Connection: keep-alive
Set-Cookie: _lc2_fpi=fdbfc301baa5--01gqqq0qdrjxd39yn4bqw2wm25; Max-Age=63072000; Domain=.feedblitz.com; SameSite=Lax
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0bf8fccb276521254634abcdcb4b3f0d
a5b7ffa58daf7d1ea3e312b68533d4d0271348f4
991b03387ddbe0b07a9aee23ea7a98863fa85035cb26e631e0d22a1b999ee487
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:56:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
feedads.feedblitz.com/i/116x15/374f7f1d4c3582bc2954e0218ab8998a/59919584/3a0af060175f0ca70216b057b2b2b114/oem/176039
301 Moved Permanently 1 B URL HTTP/1.1 feedads.feedblitz.com/i/116x15/374f7f1d4c3582bc2954e0218ab8998a/59919584/3a0af060175f0ca70216b057b2b2b114/oem/176039
IP
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /i/116x15/374f7f1d4c3582bc2954e0218ab8998a/59919584/3a0af060175f0ca70216b057b2b2b114/oem/176039 HTTP/1.1
Host: feedads.feedblitz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://feed.mikle.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Location: https://spsec.feedblitz.com/imp?s=176039&t=newsletter&sz=116x15&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114
Server: Microsoft-IIS/10.0
Set-Cookie: FbzRss="ec83f0bfd2523586f736a6db404d0a87"; expires=Fri, 26-Jan-2024 18:56:00 GMT; path=/; SameSite=None; Secure; domain=feedblitz.com
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
X-Frame-Options: sameorigin
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Date: Thu, 26 Jan 2023 18:56:36 GMT
Content-Length: 1
www.googletagmanager.com/gtm.js?id=GTM-PXZ4MVV
200 OK 39 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PXZ4MVV
IP
File type ASCII text, with very long lines (1759)
Hash fb582f1045b98eb5146167447359d7b4
0b268b5e9467b2d365660dd3c881d131f88166ea
a53972fc8708adfb94c38d035fc7148c6a863f18602216efe0ec5f641b32dbf1
GET /gtm.js?id=GTM-PXZ4MVV HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://feed.mikle.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 26 Jan 2023 18:56:36 GMT
expires: Thu, 26 Jan 2023 18:56:36 GMT
cache-control: private, max-age=900
last-modified: Thu, 26 Jan 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 38983
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0bf8fccb276521254634abcdcb4b3f0d
a5b7ffa58daf7d1ea3e312b68533d4d0271348f4
991b03387ddbe0b07a9aee23ea7a98863fa85035cb26e631e0d22a1b999ee487
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:56:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
spsec.feedblitz.com/imp?s=176039&t=newsletter&sz=116x15&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114
301 Moved Permanently 0 B URL HTTP/1.1 spsec.feedblitz.com/imp?s=176039&t=newsletter&sz=116x15&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /imp?s=176039&t=newsletter&sz=116x15&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114 HTTP/1.1
Host: spsec.feedblitz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://feed.mikle.com/
Connection: keep-alive
Cookie: FbzRss="ec83f0bfd2523586f736a6db404d0a87"
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Location: https://p.liadm.com/imp?s=176039&t=newsletter&sz=116x15&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114&_lc2_fpi=fdbfc301baa5--01gqqq0qjb0z63b74yqxxd0pq5
Content-Type: text/html
Content-Length: 0
Expires: Thu, 26 Jan 2023 18:56:36 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 26 Jan 2023 18:56:36 GMT
Connection: keep-alive
Set-Cookie: _lc2_fpi=fdbfc301baa5--01gqqq0qjb0z63b74yqxxd0pq5; Max-Age=63072000; Domain=.feedblitz.com; SameSite=Lax
ocsp.sectigo.com/
200 OK 472 B IP
Hash c0a2dbafd2eed215ce33c591f0446a88
4ad4dd850f726e9a49daf36a1b44ab374f29fee1
20862959f5d638717be37355ba0bbc7bb1f653df8f501b5c5933ed53d8f2eae3
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:37 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 25 Jan 2023 12:11:26 GMT
Expires: Wed, 01 Feb 2023 12:11:25 GMT
Etag: "4ad4dd850f726e9a49daf36a1b44ab374f29fee1"
Cache-Control: max-age=493487,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78fb78384e99b512-OSL
embed.tawk.to/5d5ab64beb1a6b0be6083d16/default
200 OK 1.1 kB URL HTTP/2 embed.tawk.to/5d5ab64beb1a6b0be6083d16/default
IP
Hash 71ba1d0fd315ef8fe8001d89ccabfc29
4cf0e7fea7eb6b9765b730ead850995289872a07
f102af1bf9e8a83c6079b424a839bbe8abeafae475c66317394f7c97d31c7865
GET /5d5ab64beb1a6b0be6083d16/default HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://claimsdetective.com
Connection: keep-alive
Referer: https://claimsdetective.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 18:56:34 GMT
content-type: application/x-javascript
access-control-allow-origin: *
cache-control: public, max-age=7200, s-maxage=3600
etag: W/"stable-v4-63b77dcd282"
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78fb7824ef11b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash c0a2dbafd2eed215ce33c591f0446a88
4ad4dd850f726e9a49daf36a1b44ab374f29fee1
20862959f5d638717be37355ba0bbc7bb1f653df8f501b5c5933ed53d8f2eae3
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:37 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 25 Jan 2023 12:11:26 GMT
Expires: Wed, 01 Feb 2023 12:11:25 GMT
Etag: "4ad4dd850f726e9a49daf36a1b44ab374f29fee1"
Cache-Control: max-age=493487,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78fb78384b60b521-OSL
p.liadm.com/imp?s=176037&t=newsletter&sz=1x1&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114&_lc2_fpi=fdbfc301baa5--01gqqq0qdn3jpkeybw16g5n58b
302 Moved Temporarily 0 B URL HTTP/1.1 p.liadm.com/imp?s=176037&t=newsletter&sz=1x1&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114&_lc2_fpi=fdbfc301baa5--01gqqq0qdn3jpkeybw16g5n58b
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /imp?s=176037&t=newsletter&sz=1x1&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114&_lc2_fpi=fdbfc301baa5--01gqqq0qdn3jpkeybw16g5n58b HTTP/1.1
Host: p.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://feed.mikle.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 26 Jan 2023 18:56:37 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Location: https://i.liadm.com/s/section/176037?m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh1=368a62c451aefce7b5fb37434b9557e4c2bca681&sh2=&source=safe_rtb
p.liadm.com/imp?s=176038&t=newsletter&sz=1x1&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114&_lc2_fpi=fdbfc301baa5--01gqqq0qdp4697hw5p0z69kbp7
302 Moved Temporarily 0 B URL HTTP/1.1 p.liadm.com/imp?s=176038&t=newsletter&sz=1x1&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114&_lc2_fpi=fdbfc301baa5--01gqqq0qdp4697hw5p0z69kbp7
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /imp?s=176038&t=newsletter&sz=1x1&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114&_lc2_fpi=fdbfc301baa5--01gqqq0qdp4697hw5p0z69kbp7 HTTP/1.1
Host: p.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://feed.mikle.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 26 Jan 2023 18:56:37 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Location: https://i6.liadm.com/s/section/176038?m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh1=368a62c451aefce7b5fb37434b9557e4c2bca681&sh2=&source=safe_rtb
ocsp.sectigo.com/
200 OK 472 B IP
Hash c0a2dbafd2eed215ce33c591f0446a88
4ad4dd850f726e9a49daf36a1b44ab374f29fee1
20862959f5d638717be37355ba0bbc7bb1f653df8f501b5c5933ed53d8f2eae3
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:37 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 25 Jan 2023 12:11:26 GMT
Expires: Wed, 01 Feb 2023 12:11:25 GMT
Etag: "4ad4dd850f726e9a49daf36a1b44ab374f29fee1"
Cache-Control: max-age=493487,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78fb783848a4fab4-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash c0a2dbafd2eed215ce33c591f0446a88
4ad4dd850f726e9a49daf36a1b44ab374f29fee1
20862959f5d638717be37355ba0bbc7bb1f653df8f501b5c5933ed53d8f2eae3
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:37 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 25 Jan 2023 12:11:26 GMT
Expires: Wed, 01 Feb 2023 12:11:25 GMT
Etag: "4ad4dd850f726e9a49daf36a1b44ab374f29fee1"
Cache-Control: max-age=493487,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78fb78384e311c0a-OSL
p.liadm.com/imp?s=176040&t=newsletter&sz=69x15&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114&_lc2_fpi=fdbfc301baa5--01gqqq0qdmr9gt6hs3kcqtdmmp
302 Moved Temporarily 0 B URL HTTP/1.1 p.liadm.com/imp?s=176040&t=newsletter&sz=69x15&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114&_lc2_fpi=fdbfc301baa5--01gqqq0qdmr9gt6hs3kcqtdmmp
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /imp?s=176040&t=newsletter&sz=69x15&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114&_lc2_fpi=fdbfc301baa5--01gqqq0qdmr9gt6hs3kcqtdmmp HTTP/1.1
Host: p.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://feed.mikle.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 26 Jan 2023 18:56:37 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Location: https://c.licasd.com/ads/499280149b11102e9c99d9decb5d7225/610d3e8fea8a3752ada74ad0668f5b97.png
p.liadm.com/imp?s=176036&t=newsletter&layout=marquee&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114&_lc2_fpi=fdbfc301baa5--01gqqq0qdrjxd39yn4bqw2wm25
302 Moved Temporarily 0 B URL HTTP/1.1 p.liadm.com/imp?s=176036&t=newsletter&layout=marquee&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114&_lc2_fpi=fdbfc301baa5--01gqqq0qdrjxd39yn4bqw2wm25
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /imp?s=176036&t=newsletter&layout=marquee&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114&_lc2_fpi=fdbfc301baa5--01gqqq0qdrjxd39yn4bqw2wm25 HTTP/1.1
Host: p.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://feed.mikle.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 26 Jan 2023 18:56:37 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Location: https://c.licasd.com/ads/789b7fdcce7111e498e21231392ea33d/6e0fa66f4f88fab1eb041273e9bcc938.jpg
p.liadm.com/imp?s=176039&t=newsletter&sz=116x15&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114&_lc2_fpi=fdbfc301baa5--01gqqq0qjb0z63b74yqxxd0pq5
302 Moved Temporarily 0 B URL HTTP/1.1 p.liadm.com/imp?s=176039&t=newsletter&sz=116x15&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114&_lc2_fpi=fdbfc301baa5--01gqqq0qjb0z63b74yqxxd0pq5
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /imp?s=176039&t=newsletter&sz=116x15&li=59919584&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh=368a62c451aefce7b5fb37434b9557e4c2bca681&p=3a0af060175f0ca70216b057b2b2b114&_lc2_fpi=fdbfc301baa5--01gqqq0qjb0z63b74yqxxd0pq5 HTTP/1.1
Host: p.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://feed.mikle.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 26 Jan 2023 18:56:37 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Location: https://c.licasd.com/ads/499280149b11102e9c99d9decb5d7225/94c8cd36dc1428947beeb6283056d111.png
c.licasd.com/ads/789b7fdcce7111e498e21231392ea33d/6e0fa66f4f88fab1eb041273e9bcc938.jpg
200 OK 55 kB URL HTTP/2 c.licasd.com/ads/789b7fdcce7111e498e21231392ea33d/6e0fa66f4f88fab1eb041273e9bcc938.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 970x550, components 3\012- data
Hash 74e04577bb66df7baf6db660ac645199
d08734b213e5b594c4997b47f0d43a535653de14
58e725e59aacb06f3e1ae864739292e3fdb5ee76e179c5db525bf5be28173e11
GET /ads/789b7fdcce7111e498e21231392ea33d/6e0fa66f4f88fab1eb041273e9bcc938.jpg HTTP/1.1
Host: c.licasd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://feed.mikle.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 55153
last-modified: Tue, 17 Jan 2023 16:27:26 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Thu, 26 Jan 2023 17:43:41 GMT
etag: "74e04577bb66df7baf6db660ac645199"
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 4_60WRoSIPnoo7Z58Lh5AxWLVkPuh-pviYkHVEelmtQbwFQl6pdXDQ==
age: 4409
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
c.licasd.com/ads/499280149b11102e9c99d9decb5d7225/610d3e8fea8a3752ada74ad0668f5b97.png
200 OK 1.7 kB URL HTTP/2 c.licasd.com/ads/499280149b11102e9c99d9decb5d7225/610d3e8fea8a3752ada74ad0668f5b97.png
IP
File type PNG image data, 69 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash dc4dc461c71bf6ee5ab2e57ad7b87651
e4591289e2acf4ce0af3135426394ee08ee7bd58
6582ac9001c322e1d97de3bec72bd7f8af1a8f80b98e4d6db1ac07f52ee78e1a
GET /ads/499280149b11102e9c99d9decb5d7225/610d3e8fea8a3752ada74ad0668f5b97.png HTTP/1.1
Host: c.licasd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://feed.mikle.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 1733
last-modified: Wed, 17 Feb 2016 22:44:11 GMT
accept-ranges: bytes
server: AmazonS3
date: Thu, 26 Jan 2023 01:42:55 GMT
etag: "dc4dc461c71bf6ee5ab2e57ad7b87651"
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 7ymvSI20T2D37Uqbi42nK5sMQFymMdMABFx3woPXoayCeN2S6mzuOA==
age: 62023
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
c.licasd.com/ads/499280149b11102e9c99d9decb5d7225/94c8cd36dc1428947beeb6283056d111.png
200 OK 1.3 kB URL HTTP/2 c.licasd.com/ads/499280149b11102e9c99d9decb5d7225/94c8cd36dc1428947beeb6283056d111.png
IP
File type PNG image data, 116 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash 6956da20f9d008ec379926ee358e5594
0da7db8c4e5be2391ba73dd0958b93ce4110cf7f
7df42999b17c3dd8039a37c41774eaa804db05245669e742e2e686b8da507bff
GET /ads/499280149b11102e9c99d9decb5d7225/94c8cd36dc1428947beeb6283056d111.png HTTP/1.1
Host: c.licasd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://feed.mikle.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 1255
last-modified: Tue, 06 Aug 2019 20:24:36 GMT
accept-ranges: bytes
server: AmazonS3
date: Wed, 25 Jan 2023 22:39:15 GMT
etag: "6956da20f9d008ec379926ee358e5594"
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Klgk-GS0dVROh-5SxujCXikw7JVq4PZ2NcpgzjhYe_FIP9-RXJtKkw==
age: 73199
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0a125304543490651581b741e2223397
0daeb79781a2c456cb5f128cf908675da158d772
40b74bf34c1796139dc7290b250adb5463a0e704022639a4730ad24b79fdff02
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=144891
Date: Thu, 26 Jan 2023 18:56:37 GMT
Etag: "63d24c96-1d7"
Expires: Sat, 28 Jan 2023 11:11:28 GMT
Last-Modified: Thu, 26 Jan 2023 09:49:10 GMT
Server: ECS (nyb/1D04)
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: AsKmHzT4KGdtgjMFh1t0N1ENkmALhrW-ZPRfyXBUoGlFKZ1CmI_3Vw==
Age: 4938
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash a9cfb39c5a018f0269004cd9446d607a
d4db3e3d1ecd1420bfce05bec2c60d04ac8d2c8b
4066c71b8e4088e4918f4f9ead730d443bb96a5eda02a14b5d259cb7fad08f0f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=108689
Date: Thu, 26 Jan 2023 18:56:37 GMT
Etag: "63d1bba1-1d7"
Expires: Sat, 28 Jan 2023 01:08:06 GMT
Last-Modified: Wed, 25 Jan 2023 23:30:41 GMT
Server: ECS (nyb/1D04)
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: fAe7uTHRN9NGiPxIrN3rsB7FYyJpelS_ksWgf6p1u5uW6EpdmnogXg==
Age: 5845
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash a9cfb39c5a018f0269004cd9446d607a
d4db3e3d1ecd1420bfce05bec2c60d04ac8d2c8b
4066c71b8e4088e4918f4f9ead730d443bb96a5eda02a14b5d259cb7fad08f0f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=108633
Date: Thu, 26 Jan 2023 18:56:37 GMT
Etag: "63d1bba1-1d7"
Expires: Sat, 28 Jan 2023 01:07:10 GMT
Last-Modified: Wed, 25 Jan 2023 23:30:41 GMT
Server: ECS (nyb/1D27)
X-Cache: Miss from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: MK1Yh27n8spZS1YSQMIuH0j0T3V8v8riWHlOReJZPE2bRuCAHoYJ-w==
Age: 5789
i.liadm.com/s/section/176037?m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh1=368a62c451aefce7b5fb37434b9557e4c2bca681&sh2=&source=safe_rtb
303 See Other 0 B URL HTTP/1.1 i.liadm.com/s/section/176037?m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh1=368a62c451aefce7b5fb37434b9557e4c2bca681&sh2=&source=safe_rtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/section/176037?m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh1=368a62c451aefce7b5fb37434b9557e4c2bca681&sh2=&source=safe_rtb HTTP/1.1
Host: i.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://feed.mikle.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Thu, 26 Jan 2023 18:56:37 GMT
Content-Length: 0
Connection: keep-alive
Location: /s/section/176037?sh2=&source=safe_rtb&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&_li_chk=true&sh1=368a62c451aefce7b5fb37434b9557e4c2bca681&previous_uuid=4ea20712b9d3444b9abed6bade469f40
Set-Cookie: lidid=4ea20712-b9d3-444b-9abe-d6bade469f40; Max-Age=63072000; Expires=Sat, 25 Jan 2025 18:56:37 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure
Request-Time: 0
Strict-Transport-Security: max-age=31536000; includeSubDomains
i6.liadm.com/s/section/176038?m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh1=368a62c451aefce7b5fb37434b9557e4c2bca681&sh2=&source=safe_rtb
200 OK 43 B URL HTTP/1.1 i6.liadm.com/s/section/176038?m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh1=368a62c451aefce7b5fb37434b9557e4c2bca681&sh2=&source=safe_rtb
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb02f374b8f73825415db1bccd4bd76d
b103aa629cacdd90b39538a7561da7f8e49ad73f
caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
GET /s/section/176038?m=ec587cc9e53ca67e3d0bb5aeffaffbdf&sh1=368a62c451aefce7b5fb37434b9557e4c2bca681&sh2=&source=safe_rtb HTTP/1.1
Host: i6.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://feed.mikle.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:37 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Request-Time: 0
Cache-Control: no-store
Strict-Transport-Security: max-age=31536000; includeSubDomains
i.liadm.com/s/section/176037?sh2=&source=safe_rtb&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&_li_chk=true&sh1=368a62c451aefce7b5fb37434b9557e4c2bca681&previous_uuid=4ea20712b9d3444b9abed6bade469f40
303 See Other 0 B URL HTTP/1.1 i.liadm.com/s/section/176037?sh2=&source=safe_rtb&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&_li_chk=true&sh1=368a62c451aefce7b5fb37434b9557e4c2bca681&previous_uuid=4ea20712b9d3444b9abed6bade469f40
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/section/176037?sh2=&source=safe_rtb&m=ec587cc9e53ca67e3d0bb5aeffaffbdf&_li_chk=true&sh1=368a62c451aefce7b5fb37434b9557e4c2bca681&previous_uuid=4ea20712b9d3444b9abed6bade469f40 HTTP/1.1
Host: i.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://feed.mikle.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Thu, 26 Jan 2023 18:56:37 GMT
Content-Length: 0
Connection: keep-alive
Location: https://e.dlx.addthis.com/e/a-3491/s-7601.xgi?ret=img&na_em=ec587cc9e53ca67e3d0bb5aeffaffbdf
Set-Cookie: _li_ss=CgASDw1jfhpdEggKBgirARCbFA; Max-Age=2592000; Expires=Sat, 25 Feb 2023 18:56:37 GMT; SameSite=None; Path=/s; Secure
lidid=64a662b2-06b3-4017-b5da-3b7305bc3545; Max-Age=63072000; Expires=Sat, 25 Jan 2025 18:56:37 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure
Request-Time: 1
Strict-Transport-Security: max-age=31536000; includeSubDomains
e.dlx.addthis.com/e/a-3491/s-7601.xgi?ret=img&na_em=ec587cc9e53ca67e3d0bb5aeffaffbdf
302 Found 0 B URL HTTP/2 e.dlx.addthis.com/e/a-3491/s-7601.xgi?ret=img&na_em=ec587cc9e53ca67e3d0bb5aeffaffbdf
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /e/a-3491/s-7601.xgi?ret=img&na_em=ec587cc9e53ca67e3d0bb5aeffaffbdf HTTP/1.1
Host: e.dlx.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://feed.mikle.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-length: 0
location: https://e.dlx.addthis.com/e/a-3491/s-7601.xgi?ret=img&na_em=ec587cc9e53ca67e3d0bb5aeffaffbdf&rd=Y
expires: Thu, 26 Jan 2023 18:56:38 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 26 Jan 2023 18:56:38 GMT
set-cookie: na_tc=Y;Path=/;Version=1;Comment=;Domain=e.dlx.addthis.com;Max-Age=34214400;Secure;SameSite=None
strict-transport-security: max-age=2628000
X-Firefox-Spdy: h2
e.dlx.addthis.com/e/a-3491/s-7601.xgi?ret=img&na_em=ec587cc9e53ca67e3d0bb5aeffaffbdf&rd=Y
200 OK 43 B URL HTTP/2 e.dlx.addthis.com/e/a-3491/s-7601.xgi?ret=img&na_em=ec587cc9e53ca67e3d0bb5aeffaffbdf&rd=Y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /e/a-3491/s-7601.xgi?ret=img&na_em=ec587cc9e53ca67e3d0bb5aeffaffbdf&rd=Y HTTP/1.1
Host: e.dlx.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://feed.mikle.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 43
expires: Thu, 26 Jan 2023 18:56:38 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 26 Jan 2023 18:56:38 GMT
strict-transport-security: max-age=2628000
X-Firefox-Spdy: h2
play.vidyard.com/v4/JPwHHbPqZprmj2WFMK6AUV/style.js?callback=window.VidyardV4.jsonp.style_JPwHHbPqZprmj2WFMK6AUV.done
200 OK 136 B URL HTTP/2 play.vidyard.com/v4/JPwHHbPqZprmj2WFMK6AUV/style.js?callback=window.VidyardV4.jsonp.style_JPwHHbPqZprmj2WFMK6AUV.done
IP
File type ASCII text, with no line terminators
Hash 1c1deba940467d0906d7422261ca79f4
9975eaa6ec7d68679fc3808ff6bb980d060d71fb
2a837e3007b066d979c1b5292a398e965db1af2618752cd0d1c735ed219bba99
GET /v4/JPwHHbPqZprmj2WFMK6AUV/style.js?callback=window.VidyardV4.jsonp.style_JPwHHbPqZprmj2WFMK6AUV.done HTTP/1.1
Host: play.vidyard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
referrer-policy: no-referrer-when-downgrade
cache-control: no-store, no-cache, must-revalidate
x-content-type-options: nosniff
etag: W/"b0-500JGje/bNhWcWD2GJXKErPiozQ"
x-china: 0
content-encoding: gzip
accept-ranges: bytes
date: Thu, 26 Jan 2023 18:56:38 GMT
via: 1.1 varnish
age: 159592
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674759398.490068,VS0,VE1
vary: X-China, accept-language, Accept-Encoding
strict-transport-security: max-age=31557600
content-length: 136
X-Firefox-Spdy: h2
play.vidyard.com/v4/JPwHHbPqZprmj2WFMK6AUV/details.js?callback=window.VidyardV4.jsonp.details_JPwHHbPqZprmj2WFMK6AUV.done
200 OK 115 B URL HTTP/2 play.vidyard.com/v4/JPwHHbPqZprmj2WFMK6AUV/details.js?callback=window.VidyardV4.jsonp.details_JPwHHbPqZprmj2WFMK6AUV.done
IP
File type ASCII text, with no line terminators
Hash dabf0db07838364b1b59951204476f44
0718a3db0e9bde51801916d429973bbb40182abc
8bac233b9f16194c9fdb178fbd99ea7d2b7366c226117de30a0dd8f103f9e27c
GET /v4/JPwHHbPqZprmj2WFMK6AUV/details.js?callback=window.VidyardV4.jsonp.details_JPwHHbPqZprmj2WFMK6AUV.done HTTP/1.1
Host: play.vidyard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
referrer-policy: no-referrer-when-downgrade
cache-control: no-store, no-cache, must-revalidate
x-content-type-options: nosniff
etag: W/"98-ocHpVDLjkqtwVpcU5GqlIDVdveA"
x-china: 0
content-encoding: gzip
accept-ranges: bytes
date: Thu, 26 Jan 2023 18:56:38 GMT
via: 1.1 varnish
age: 159591
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674759398.498875,VS0,VE6
vary: X-China, accept-language, Accept-Encoding
strict-transport-security: max-age=31557600
content-length: 115
X-Firefox-Spdy: h2
play.vidyard.com/JPwHHbPqZprmj2WFMK6AUV?disable_popouts=1&v=4.3.10&type=inline
200 OK 1.5 kB URL HTTP/2 play.vidyard.com/JPwHHbPqZprmj2WFMK6AUV?disable_popouts=1&v=4.3.10&type=inline
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash efe32b84573649a5eb4d0ea6e4776d7f
e7d28e877d8fe81a3305c6d73c14986db0f284c8
b42503f3982e7976b92b60202f0e9693347a80ab23035c4eb37941cdbd6da55a
GET /JPwHHbPqZprmj2WFMK6AUV?disable_popouts=1&v=4.3.10&type=inline HTTP/1.1
Host: play.vidyard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
access-control-allow-origin: *
referrer-policy: no-referrer-when-downgrade
cache-control: no-store, no-cache, must-revalidate
etag: W/"dd7-zkEi+ih8o5WWwOCKgfPB60CzBX4"
x-china: 0
content-encoding: gzip
accept-ranges: bytes
date: Thu, 26 Jan 2023 18:56:38 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1678-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1674759398.490096,VS0,VE192
vary: X-China, accept-language, Accept-Encoding
strict-transport-security: max-age=31557600
content-length: 1467
X-Firefox-Spdy: h2
play.vidyard.com/v4/JPwHHbPqZprmj2WFMK6AUV/integrations.js?callback=window.VidyardV4.jsonp.integrations_JPwHHbPqZprmj2WFMK6AUV.done
200 OK 132 B URL HTTP/2 play.vidyard.com/v4/JPwHHbPqZprmj2WFMK6AUV/integrations.js?callback=window.VidyardV4.jsonp.integrations_JPwHHbPqZprmj2WFMK6AUV.done
IP
File type ASCII text, with no line terminators
Hash ea5fe4f98cac7d860bad88ebffd188dd
15b1c915613af2e3ba78d85a96b48e833de5c9c5
da805ff883e5f266c14fd6fa48663e7ff11bcb8240f66f7eb7c3bb5bb76a7f62
GET /v4/JPwHHbPqZprmj2WFMK6AUV/integrations.js?callback=window.VidyardV4.jsonp.integrations_JPwHHbPqZprmj2WFMK6AUV.done HTTP/1.1
Host: play.vidyard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
referrer-policy: no-referrer-when-downgrade
cache-control: no-store, no-cache, must-revalidate
x-content-type-options: nosniff
etag: W/"b0-0U6c1XazWYGrjk5SgiuFH8naUpc"
x-china: 0
content-encoding: gzip
accept-ranges: bytes
date: Thu, 26 Jan 2023 18:56:38 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1678-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1674759398.497296,VS0,VE294
vary: X-China, accept-language, Accept-Encoding
strict-transport-security: max-age=31557600
content-length: 132
X-Firefox-Spdy: h2
assets.vidyard.com/play/js/runtime~main-509d6e37d2988723f0e3b814b252a59b.js
200 OK 2.3 kB URL HTTP/2 assets.vidyard.com/play/js/runtime~main-509d6e37d2988723f0e3b814b252a59b.js
IP
File type ASCII text, with very long lines (7444), with no line terminators
Hash 47f296cfd7618dfaf300c402b7c09bf9
0cc6511ad72e30a7833d8928a01ca63f4a007d1d
82259cbaa6086675c449705a5ebad9111b867b2e425c33c13fc7d930b0db8ced
GET /play/js/runtime~main-509d6e37d2988723f0e3b814b252a59b.js HTTP/1.1
Host: assets.vidyard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://play.vidyard.com/JPwHHbPqZprmj2WFMK6AUV?disable_popouts=1&v=4.3.10&type=inline
Origin: https://play.vidyard.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 25 Jan 2023 23:12:59 GMT
etag: "47f296cfd7618dfaf300c402b7c09bf9"
cache-control: public, max-age=31536000
content-encoding: br
content-type: application/javascript
accept-ranges: bytes
date: Thu, 26 Jan 2023 18:56:38 GMT
via: 1.1 varnish
age: 70947
x-served-by: cache-bma1679-BMA
x-cache: HIT
x-cache-hits: 10
x-timer: S1674759399.791706,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 2271
X-Firefox-Spdy: h2
assets.vidyard.com/play/js/main-0848513ab96834b7b8adae23e7926ac3.js
200 OK 14 kB URL HTTP/2 assets.vidyard.com/play/js/main-0848513ab96834b7b8adae23e7926ac3.js
IP
File type Unicode text, UTF-8 text, with very long lines (3950)
Hash 2ce8f04d821e84645ad08091b9f7ea27
46fcc1aead546dcbccd3f1f2ae1d60fb7fced98c
c63dbbcd8fdb667eea5703e2da940b919e58fa88abf4b4460d1acdad17e170cc
GET /play/js/main-0848513ab96834b7b8adae23e7926ac3.js HTTP/1.1
Host: assets.vidyard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://play.vidyard.com/JPwHHbPqZprmj2WFMK6AUV?disable_popouts=1&v=4.3.10&type=inline
Origin: https://play.vidyard.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Thu, 08 Dec 2022 20:02:58 GMT
etag: "2ce8f04d821e84645ad08091b9f7ea27"
cache-control: public, max-age=31536000
content-encoding: br
content-type: application/javascript
accept-ranges: bytes
date: Thu, 26 Jan 2023 18:56:38 GMT
via: 1.1 varnish
age: 1439850
x-served-by: cache-bma1679-BMA
x-cache: HIT
x-cache-hits: 9
x-timer: S1674759399.803326,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 14298
X-Firefox-Spdy: h2
play.vidyard.com/player/JPwHHbPqZprmj2WFMK6AUV.json?disable_popouts=1&v=4.3.10&type=inline
200 OK 2.2 kB URL HTTP/2 play.vidyard.com/player/JPwHHbPqZprmj2WFMK6AUV.json?disable_popouts=1&v=4.3.10&type=inline
IP
File type JSON data\012- , ASCII text, with very long lines (5171), with no line terminators
Hash dd5f2f40723240898dc61325b7d908cb
1b094bf098b680fc616ac7683de2d66630d31491
ace8c5986cd436c8687aa8f3d7c8c7213d0ba281cec1d644e7df838166f14d05
GET /player/JPwHHbPqZprmj2WFMK6AUV.json?disable_popouts=1&v=4.3.10&type=inline HTTP/1.1
Host: play.vidyard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://play.vidyard.com/JPwHHbPqZprmj2WFMK6AUV?disable_popouts=1&v=4.3.10&type=inline
referrer: https://claimsdetective.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
access-control-allow-origin: *
referrer-policy: no-referrer-when-downgrade
cache-control: no-store, no-cache, must-revalidate
etag: W/"1433-QBBZg2gAGQavR1mRSQRLxQz2ej8"
x-china: 0
content-encoding: gzip
accept-ranges: bytes
date: Thu, 26 Jan 2023 18:56:38 GMT
via: 1.1 varnish
age: 159584
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674759399.868565,VS0,VE1
vary: X-China, accept-language, Accept-Encoding
strict-transport-security: max-age=31557600
content-length: 2222
X-Firefox-Spdy: h2
assets.vidyard.com/play/js/vendors~player~player-pomo~unreleased-8a13a06db3a658a9573f07a0bccb1eed.js
200 OK 42 kB URL HTTP/2 assets.vidyard.com/play/js/vendors~player~player-pomo~unreleased-8a13a06db3a658a9573f07a0bccb1eed.js
IP
File type Unicode text, UTF-8 text, with very long lines (10221)
Hash 9f1e8ef0c1ec0198999c7791ef9092c5
fb2788205d92731f5ee8cf3bb91376292045395d
8abdfe79313c87f8a9feabcef9374f67b3de82a5abc838a3e82971a8cfa108ce
GET /play/js/vendors~player~player-pomo~unreleased-8a13a06db3a658a9573f07a0bccb1eed.js HTTP/1.1
Host: assets.vidyard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://play.vidyard.com/JPwHHbPqZprmj2WFMK6AUV?disable_popouts=1&v=4.3.10&type=inline
Origin: https://play.vidyard.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 24 Jan 2023 22:32:31 GMT
etag: "9f1e8ef0c1ec0198999c7791ef9092c5"
cache-control: public, max-age=31536000
content-encoding: br
content-type: application/javascript
accept-ranges: bytes
date: Thu, 26 Jan 2023 18:56:38 GMT
via: 1.1 varnish
age: 146036
x-served-by: cache-bma1679-BMA
x-cache: HIT
x-cache-hits: 9
x-timer: S1674759399.906406,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 41543
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-vendor.js
200 OK 35 kB URL HTTP/2 embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-vendor.js
IP
File type ASCII text, with very long lines (65472)
Hash 7cd7acf8a0ed6cc178d8371b8a4ad2ae
deb65b148ca1d3b25d401c8ceaa29a1664bfd7cf
a0e7cf2765a8c25c94c22b3eaa90852fbd667360b4efb24d01bdf7dd92c9df04
GET /_s/v4/app/63b77dcd282/js/twk-vendor.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://claimsdetective.com
Connection: keep-alive
Referer: https://claimsdetective.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 18:56:38 GMT
content-type: application/javascript
last-modified: Fri, 06 Jan 2023 01:49:34 GMT
etag: W/"7dcb496e4882926f93f2e73fa87062c0"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78fb7840af8fb517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-main.js
200 OK 107 kB URL HTTP/2 embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-main.js
IP
File type ASCII text, with no line terminators
Size 107 kB (106584 bytes)
Hash 6c6a317d4500a442a0d9120bc9930701
8b7c5445a5f1d2e9bbc2b106be9fddcfcdfe722c
311069710f612d850b62536fa17c81c0eb6f3943c605cceea3fc0974266c9286
GET /_s/v4/app/63b77dcd282/js/twk-main.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://claimsdetective.com
Connection: keep-alive
Referer: https://claimsdetective.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 18:56:38 GMT
content-type: application/javascript
last-modified: Fri, 06 Jan 2023 01:49:34 GMT
etag: W/"da5bb1dc647470204df0e49f5afac2de"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78fb7840af8cb517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-runtime.js
200 OK 54 kB URL HTTP/2 embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-runtime.js
IP
File type ASCII text, with very long lines (2306), with no line terminators
Hash c69c43ac3e631aff9ce1152c537a2923
3a06d482e0890af9e4e5aaa7f1fcd3ff5d00e13b
a7acddc73211867b6e21400ea30579157e992ef59005e51cee3b6819bf3bab81
GET /_s/v4/app/63b77dcd282/js/twk-runtime.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://claimsdetective.com
Connection: keep-alive
Referer: https://claimsdetective.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 18:56:38 GMT
content-type: application/javascript
last-modified: Fri, 06 Jan 2023 01:49:34 GMT
etag: W/"de21d01e9f8b6cc35ea67267d0ba80ec"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78fb7840afb4b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.vidyard.com/JPwHHbPqZprmj2WFMK6AUV.jpg
302 Found 91 B URL HTTP/2 play.vidyard.com/JPwHHbPqZprmj2WFMK6AUV.jpg
IP
File type ASCII text, with no line terminators
Hash 2db9d1d96a4cff1a8206eab856612f4d
054bcc393ba175a4ce27135280a49c9ce5f474a2
9e699e08fc403fbd4ad1061134a5c81980fb82ab291f32700608f0e319a9d9bf
GET /JPwHHbPqZprmj2WFMK6AUV.jpg HTTP/1.1
Host: play.vidyard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://play.vidyard.com/JPwHHbPqZprmj2WFMK6AUV?disable_popouts=1&v=4.3.10&type=inline
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
referrer-policy: no-referrer-when-downgrade
cache-control: no-store, no-cache, must-revalidate
location: https://cdn.vidyard.com/thumbnails/7180818/NybrcZu_ZxMWhoRwIp5oJw.jpg
x-china: 0
accept-ranges: bytes
date: Thu, 26 Jan 2023 18:56:39 GMT
via: 1.1 varnish
age: 5
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674759399.255654,VS0,VE0
vary: Accept, X-China, accept-language
strict-transport-security: max-age=31557600
content-length: 91
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-app.js
200 OK 1.5 kB URL HTTP/2 embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-app.js
IP
File type ASCII text, with no line terminators
Hash b6d159ab8aa9c658f71fb2b3a1a68b1a
6351e078d77ce9e0b5abb895f206d6ee5345cdec
a9d6fa833f5a58394d8e569e208bebf70207c17ea25f241a3f3377f840df41f4
GET /_s/v4/app/63b77dcd282/js/twk-app.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://claimsdetective.com
Connection: keep-alive
Referer: https://claimsdetective.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 18:56:38 GMT
content-type: application/javascript
last-modified: Fri, 06 Jan 2023 01:49:34 GMT
etag: W/"e736e189edb5d0d9d5b8e7f23dd9114a"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78fb7840bfb6b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-chunk-vendors.js
200 OK 63 kB URL HTTP/2 embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-chunk-vendors.js
IP
File type Unicode text, UTF-8 text, with very long lines (65464)
Hash d23058e6520d4dcbd7802cd61d933cc0
47880e45695993b4210187a6b2e366f7259ebe97
5e92c0db986cbd97642fc52f815f0a4e87981078523c96983de4514e93edc927
GET /_s/v4/app/63b77dcd282/js/twk-chunk-vendors.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://claimsdetective.com
Connection: keep-alive
Referer: https://claimsdetective.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 18:56:38 GMT
content-type: application/javascript
last-modified: Fri, 06 Jan 2023 01:49:34 GMT
etag: W/"70dac54eca3bb2143032bc4db3237623"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78fb7840af90b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
assets.vidyard.com/play/js/7-264f8ea0dde8aed26f4c36cd5a46a5b9.js
200 OK 100 kB URL HTTP/2 assets.vidyard.com/play/js/7-264f8ea0dde8aed26f4c36cd5a46a5b9.js
IP
File type ASCII text, with very long lines (65261)
Hash f49707c09cf7ee4b05a5a3fbb208269f
5c3738dee1fb33dd42ba5f779ecd3ddcbabd72aa
ddc723d6e7ffd11e70dab6ae3bd25b682271cd54b6288ea43ea355ec8c8f10db
GET /play/js/7-264f8ea0dde8aed26f4c36cd5a46a5b9.js HTTP/1.1
Host: assets.vidyard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://play.vidyard.com/JPwHHbPqZprmj2WFMK6AUV?disable_popouts=1&v=4.3.10&type=inline
Origin: https://play.vidyard.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Thu, 08 Dec 2022 20:02:58 GMT
etag: "f49707c09cf7ee4b05a5a3fbb208269f"
cache-control: public, max-age=31536000
content-encoding: br
content-type: application/javascript
accept-ranges: bytes
date: Thu, 26 Jan 2023 18:56:39 GMT
via: 1.1 varnish
age: 1455875
x-served-by: cache-bma1679-BMA
x-cache: HIT
x-cache-hits: 179
x-timer: S1674759399.257472,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 99844
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-chunk-common.js
200 OK 44 kB URL HTTP/2 embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-chunk-common.js
IP
File type ASCII text, with very long lines (65466)
Hash 1643a75c8435b913c1d41e47a39b12dd
17f3c583e562fc98a3553ca86e7b499dec389cae
de3cda7fdd3e7617585806cae1a85ed9a37d3ec2d37a56f844d7df56e42648f3
GET /_s/v4/app/63b77dcd282/js/twk-chunk-common.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://claimsdetective.com
Connection: keep-alive
Referer: https://claimsdetective.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 18:56:38 GMT
content-type: application/javascript
last-modified: Fri, 06 Jan 2023 01:49:34 GMT
etag: W/"385105148a50079bafff97e9c9476109"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78fb7840afafb517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.vidyard.com/video/JPwHHbPqZprmj2WFMK6AUV?disable_popouts=1&v=4.3.10&type=inline
200 OK 165 B URL HTTP/2 play.vidyard.com/video/JPwHHbPqZprmj2WFMK6AUV?disable_popouts=1&v=4.3.10&type=inline
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c7335010c435d36332e40d9107fe40d4
754a40257fa2790873b8c2a98b798f88c407d24f
926a72454dddac4a689f602c5ca8601c2ff85bb3677161469643488e48301924
GET /video/JPwHHbPqZprmj2WFMK6AUV?disable_popouts=1&v=4.3.10&type=inline HTTP/1.1
Host: play.vidyard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://play.vidyard.com/JPwHHbPqZprmj2WFMK6AUV?disable_popouts=1&v=4.3.10&type=inline
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
access-control-allow-origin: *
referrer-policy: no-referrer-when-downgrade
cache-control: no-store, no-cache, must-revalidate
etag: W/"b5-TGRacE49t3TADvtSQmrEs078Kg8"
x-china: 0
content-encoding: gzip
accept-ranges: bytes
date: Thu, 26 Jan 2023 18:56:39 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1678-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1674759399.234945,VS0,VE147
vary: X-China, accept-language, Accept-Encoding
strict-transport-security: max-age=31557600
content-length: 165
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CLato%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=swap&ver=6.1.1
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CLato%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=swap&ver=6.1.1
IP
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CLato%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=swap&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 26 Jan 2023 18:56:33 GMT
date: Thu, 26 Jan 2023 18:56:33 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
claimsdetective.com/wp-content/plugins/usahtmlmap/static/js/map.js?ver=r3.2.9
200 OK 0 B URL HTTP/1.1 claimsdetective.com/wp-content/plugins/usahtmlmap/static/js/map.js?ver=r3.2.9
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/plugins/usahtmlmap/static/js/map.js?ver=r3.2.9 HTTP/1.1
Host: claimsdetective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://claimsdetective.com/case_request.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:56:33 GMT
Server: Apache
Last-Modified: Fri, 20 Jan 2023 06:49:13 GMT
Accept-Ranges: bytes
Content-Length: 135685
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
172.64.154.126
104.18.20.226
95.217.236.5
184.24.45.23
93.184.220.29
23.32.106.228