lawsikho.com/?utm_source=1stlink&utm_medium=ebook&utm_campaign=eshebook
188.114.96.1301 Moved Permanently 0 B URL HTTP/1.1 lawsikho.com/?utm_source=1stlink&utm_medium=ebook&utm_campaign=eshebook
IP 188.114.96.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?utm_source=1stlink&utm_medium=ebook&utm_campaign=eshebook HTTP/1.1
Host: lawsikho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 01 Feb 2023 00:12:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 01 Feb 2023 01:12:52 GMT
Location: https://lawsikho.com/?utm_source=1stlink&utm_medium=ebook&utm_campaign=eshebook
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rezBB8jSP0%2BXRfxfP99klPUFgEtcp%2FamnUC3voiS2bhnuyTrGb7fzgNPiNrh%2B7UHSOxCkO5FT3Cf2oG0cLpPTaW6O%2B8hjip2Y1HmOW2Wnks7ZwIHeYwwIzH3HfN1hXg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79267a5affd10b45-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 62de35a6c8e4efd7633fc5236b5b086f
6a92912a86dfcd0330d040cef06bef36889c76ab
ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7521
Expires: Wed, 01 Feb 2023 02:18:13 GMT
Date: Wed, 01 Feb 2023 00:12:52 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7e05c8461bd2dc5a149f71e2c465ea29
705983959c887e243cb55a8a1796757b579ee977
4d9ea085d5dda9dabed11af9847c2b0aa6182358673b356a4e2bd631e22a9922
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4D9EA085D5DDA9DABED11AF9847C2B0AA6182358673B356A4E2BD631E22A9922"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8908
Expires: Wed, 01 Feb 2023 02:41:20 GMT
Date: Wed, 01 Feb 2023 00:12:52 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 31 Jan 2023 23:43:21 GMT
content-type: application/json
age: 1771
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash a8d45deaa7ebfcd996c2055dae592ab8
55befe074589fe7b39757c145968058162a8fc6b
50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3677
Expires: Wed, 01 Feb 2023 01:14:09 GMT
Date: Wed, 01 Feb 2023 00:12:52 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: qLnWz8xvjj0dl90L3xVdrhMB2vnw8j1GaLxnCi4i/QSqzmMUtqTDdcfJQ2cgymPcqWW9lWCISQUSUMRfxWKJyw==
x-amz-request-id: VQ5JBPTRRGHREKNZ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 31 Jan 2023 23:51:21 GMT
age: 1291
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 25ac923014fe3dc6c026bbee80cb0191
c592c42d521312d17c1fa5234bbf1905a17f0d95
b3ff780f4cb44cf673155dbe51e7c48d4260e10896168573228facb04b4d81f5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=164188
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:52 GMT
Etag: "63d98ce0-117"
Expires: Thu, 02 Feb 2023 21:49:20 GMT
Last-Modified: Tue, 31 Jan 2023 21:49:20 GMT
Server: nginx
Content-Length: 279
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 00:12:52 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, ETag, Last-Modified, Alert, Retry-After, Content-Length, Cache-Control, Pragma, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 31 Jan 2023 23:41:42 GMT
age: 1871
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6887
Expires: Wed, 01 Feb 2023 02:07:40 GMT
Date: Wed, 01 Feb 2023 00:12:53 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 25ac923014fe3dc6c026bbee80cb0191
c592c42d521312d17c1fa5234bbf1905a17f0d95
b3ff780f4cb44cf673155dbe51e7c48d4260e10896168573228facb04b4d81f5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1
Cache-Control: max-age=164188
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:53 GMT
Etag: "63d98ce0-117"
Expires: Thu, 02 Feb 2023 21:49:21 GMT
Last-Modified: Tue, 31 Jan 2023 21:49:20 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 279
push.services.mozilla.com/
52.10.3.114101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.10.3.114:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3U7Hk7QF8duzlw4CME1jTA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: E4weHAaUuJy59o5TWF93PzpxTAY=
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 0dea93a9adb1e26a6ebfaf2e12c22cd5
e286810b718e374858f11adf0aae18dc65f27d66
73dafa5cd629cdf850ca05894932507c209713024ef27ce7597cb25365f2150e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.6.0/js/bootstrap.bundle.min.js
104.17.25.14200 OK 19 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.6.0/js/bootstrap.bundle.min.js
IP 104.17.25.14:0
File type ASCII text, with very long lines (65299)
Hash 6eec994f904e4a6a49d27df23d27c3dd
46d7824728ceb9116a5a118c2d4fdec7f39f4924
c2c51310d9d0b5de9a9c29b150f8d9f93811f21e0df5f3c03792717c90edaef4
GET /ajax/libs/twitter-bootstrap/4.6.0/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 19173
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "60071661-1499a"
last-modified: Tue, 19 Jan 2021 17:26:57 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3433929
expires: Mon, 22 Jan 2024 00:12:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e6RzT822%2BLTnzeHkFZj%2BKKj2ybpH5tWsmNCubOYB7SnvZ5efWr%2FP7u2IFI3xORITo43SkXTaCfQdSbyrqI9Zt71bNfxYQSRskXEOshIse79ryOCo187KkJDTur9eoU4Klw8UrPGF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 79267a63dd74b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/select2/4.0.13/js/select2.min.js
104.17.25.14200 OK 16 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/select2/4.0.13/js/select2.min.js
IP 104.17.25.14:0
File type Unicode text, UTF-8 text, with very long lines (64131)
Hash e969f2fd683c8d12ccbfa6ec0487dadf
4efb5abd97f96f324fd3bd64902a02e4a8a3d3af
10375c0c9bd1d60f996e3b7eef19ada49ebc3790f78742204cef7026754d2ac2
GET /ajax/libs/select2/4.0.13/js/select2.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 16456
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5ecc8659-114c3"
last-modified: Tue, 26 May 2020 03:00:41 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2273448
expires: Mon, 22 Jan 2024 00:12:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RpG1WggtgN4XOhXCTWcbyqVrmnfuVKe%2Fy1Bmqrb0IL31gnmQZ62wbyDGMA%2BJL027jmo2mFMlTp%2Buh1DbGRqiVikUiXy%2Bk84RiBeMrxRfF8isHVevnWn6FNz4zBs92NHgrRk%2FjTvy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 79267a63dd7cb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.19.2/jquery.validate.min.js
104.17.25.14200 OK 7.0 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.19.2/jquery.validate.min.js
IP 104.17.25.14:0
File type Unicode text, UTF-8 text, with very long lines (24304)
Hash 4dff16256caf65b9530a221f15ed1661
e253fdfafb73d51e9d8c1632a521bf562c3d0975
1e51fbddb76b932b540fcd5e6ec3bfdf3196f0bb5e1f441a05d7d62208606e73
GET /ajax/libs/jquery-validate/1.19.2/jquery.validate.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 6970
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5ed13e63-5f7b"
last-modified: Fri, 29 May 2020 16:54:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 4780099
expires: Mon, 22 Jan 2024 00:12:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dSpBZTmnGwgTLxD8t56xsw%2BuoZGAO0AfUnds12m0XJZ6CI%2FxwZPCtDGcpuD7XNkMhhTd8Kg9%2BrYivovZuOUcZMbrHgu5zNIfsOReTloZnFC0VievMpEZrFdRwKhk0FdEefSbMSO1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 79267a63ed87b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.19.2/additional-methods.min.js
104.17.25.14200 OK 5.7 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.19.2/additional-methods.min.js
IP 104.17.25.14:0
File type Unicode text, UTF-8 text, with very long lines (22514)
Hash 46b9833beaa871746b84841e3ad81979
a46209396fc118ee13c6e1ac6bd53996dbf81cf2
14049cf510d67674b041fabba82322a54126733e193f21ed9e3ff51d9cb8996a
GET /ajax/libs/jquery-validate/1.19.2/additional-methods.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 5693
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5ed13e63-5884"
last-modified: Fri, 29 May 2020 16:54:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1019946
expires: Mon, 22 Jan 2024 00:12:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WjUx7rKm8MkaF5zE5f41IrA7v64HNwFsi55iJ%2B3KmokaonIPHUSzOwS8llg8qH23j6GdqLsjduP3Z0lwd0tDaSnIcYk8Sp9j3oVdONDKc%2FEtmEDijnktwTCx8uqvjk7TTtR6%2B34G"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 79267a63ed8eb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
142.250.74.42200 OK 31 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP 142.250.74.42:0
File type ASCII text, with very long lines (65451)
Hash 903bc7a7e510f87aa5d0201eb59a0832
ac9aa4dd94cde1bcba9037e94087138b127e41fc
41a7ac8150cc9f38421451d5143c1ffec7a1f1fafbf7a7fc0f51b98ad699cf8f
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 23:28:56 GMT
expires: Wed, 31 Jan 2024 23:28:56 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Fri, 08 May 2020 07:05:03 GMT
content-type: text/javascript; charset=UTF-8
age: 2637
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash c004ef398fc2138876eac9e202e6e7c9
9b695108fe043113ee8dc3369be58234f1a73323
ab71d4c6d64f3c7a0114070414615b26843c22de34b0f04c9ad932ca112031c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 0dea93a9adb1e26a6ebfaf2e12c22cd5
e286810b718e374858f11adf0aae18dc65f27d66
73dafa5cd629cdf850ca05894932507c209713024ef27ce7597cb25365f2150e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-WQD3LPQ
142.250.74.168200 OK 86 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WQD3LPQ
IP 142.250.74.168:0
Hash 1452b1e7344a6753a5c3aadb27312b56
9297767ae3a3ec963bf09e505b98f80f26e097b5
905a16eff5682756c3450c47dfa62808808f1d720f6460ae1ec760346321a8e1
GET /gtm.js?id=GTM-WQD3LPQ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 01 Feb 2023 00:12:53 GMT
expires: Wed, 01 Feb 2023 00:12:53 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 85502
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash c004ef398fc2138876eac9e202e6e7c9
9b695108fe043113ee8dc3369be58234f1a73323
ab71d4c6d64f3c7a0114070414615b26843c22de34b0f04c9ad932ca112031c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.redditstatic.com/ads/pixel.js
151.101.129.140200 OK 7.4 kB URL HTTP/2 www.redditstatic.com/ads/pixel.js
IP 151.101.129.140:0
File type ASCII text, with very long lines (23347)
Hash 03d5db9dfd00a5719bb4c9261e6fa1bb
be9899225f59b4d3ef6fefcf0e66b72568353a94
e90f19642062e4311b58ede732592e8f29b7799661086a0bbfc68e259fd81398
GET /ads/pixel.js HTTP/1.1
Host: www.redditstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Mon, 23 Jan 2023 21:56:14 GMT
etag: "03d5db9dfd00a5719bb4c9261e6fa1bb"
cache-control: public, max-age=60
content-encoding: gzip
content-type: application/javascript
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Feb 2023 00:12:54 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7356
X-Firefox-Spdy: h2
sc-static.net/scevent.min.js
54.230.82.240200 OK 13 kB URL HTTP/2 sc-static.net/scevent.min.js
IP 54.230.82.240:0
File type ASCII text, with very long lines (30923), with no line terminators
Hash 957d65dfa972893511879b4d2abce54b
a0106f59c171c72c527a88cc3b06263af186a5c4
24cae1a14856e2642826fe9d960b0e61ae60fa45a778ec61f2b7d862dc3af603
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 13270
server: CloudFront
date: Wed, 01 Feb 2023 00:12:54 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=0d6e407936704bd380072f5891d28b0e;max-age=86400;expires=Thu, 02 Feb 2023 00:05:31 GMT;Path=/scevent.min.js; Secure; SameSite=None
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: InMHLAFKBBf_u0Yb8n6LKh5kMvPY-1j1aa6aUAl271jnNzmt5CIn9Q==
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e4389bcfe13f85ed9a3a42866c80c9aa
f245c5d1b991dacd2e64120751d40bf915599d92
cd3b8a2c577a8adabf9d5586eebe8c45f85ae8fe6ad775ec10a86d34563e021e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CD3B8A2C577A8ADABF9D5586EEBE8C45F85AE8FE6AD775EC10A86D34563E021E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5166
Expires: Wed, 01 Feb 2023 01:39:00 GMT
Date: Wed, 01 Feb 2023 00:12:54 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash f8dc107aa2c674aa7b310cf12e9b20a1
0e1b15d7e4321859df732702c1a03b81f99abd0f
749c965c614af4de3378be97ee3ad5774dff15317db44279cf4e924421282398
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=148498
Date: Wed, 01 Feb 2023 00:12:54 GMT
Etag: "63d943c1-1d7"
Expires: Thu, 02 Feb 2023 17:27:52 GMT
Last-Modified: Tue, 31 Jan 2023 16:37:21 GMT
Server: ECS (dcb/7F37)
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: SZJ8MDu6jPkSVqt5M295bpeFfhUUtxTeIsdW6QM65oXPEcNYJyUxbg==
Age: 3031
q.quora.com/_/ad/5186b15ace3f459daa25f4a92868b78d/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook
34.200.29.239200 OK 43 B URL HTTP/1.1 q.quora.com/_/ad/5186b15ace3f459daa25f4a92868b78d/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook
IP 34.200.29.239:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /_/ad/5186b15ace3f459daa25f4a92868b78d/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook HTTP/1.1
Host: q.quora.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Wed, 01 Feb 2023 00:12:54 GMT
Server: nginx
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Q-Stat: ,c4e4eb00b90e0c4d20d8eb3a7be6ebf0,10.0.0.78,54912,91.90.42.154,,98017860097,1,1675210374.303,0.001,,.,0,0,0.004,0.004,-,0,0,197,121,60,10,35796,,,,,,-,
Content-Length: 43
Connection: keep-alive
web-in21.mxradon.com/t/Tracker.js
52.66.40.143200 OK 3.5 kB URL HTTP/2 web-in21.mxradon.com/t/Tracker.js
IP 52.66.40.143:0
File type C source, ASCII text, with very long lines (13273), with no line terminators
Hash eba79b6c0d40355bc6c57996855c9e99
40ea849638445bf1f7a623d45c678bf1aed79b25
acc84f2dcec37e698be5176ba1a293068ae631360e5f2b27ca74c5049873441d
GET /t/Tracker.js HTTP/1.1
Host: web-in21.mxradon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:54 GMT
content-type: application/javascript
content-length: 3505
cache-control: max-age=1800
content-encoding: gzip
last-modified: Tue, 06 Dec 2022 00:18:41 GMT
accept-ranges: bytes
etag: "8086304b89d91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3531
Expires: Wed, 01 Feb 2023 01:11:45 GMT
Date: Wed, 01 Feb 2023 00:12:54 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 950 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 935a5c54fd68397d4aae75bf078ed695
ebac5ae96f69c8633f6c2bc8cac6ce8c39ef8e45
f33cfc8bffeab8b97799178ae550f74a53ba0ace9c08ec13edf502364b8241d9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3531
Expires: Wed, 01 Feb 2023 01:11:45 GMT
Date: Wed, 01 Feb 2023 00:12:54 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 1.7 kB IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7231acde7e4de60fbe747dcf55c28519
db8f41148d49bef7ec91b169fb01c67917613108
47c8852e848fa543962ff4b9a1b43caf9f86a6c4a903aba8f0dfb8f3e43ca086
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3531
Expires: Wed, 01 Feb 2023 01:11:45 GMT
Date: Wed, 01 Feb 2023 00:12:54 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2c0a4094-de1e-41f3-9e75-80a725d23095.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2c0a4094-de1e-41f3-9e75-80a725d23095.jpeg
IP 34.120.237.76:0
Hash 29b67a8405b89ae292a1ba8301bc2602
ff9573a721e0a5268e9e787afd53e03c37a6ce08
a6355df94867fbd2c0dc62640fdf30ceb2a226b4dd511636c8e7b014fba123a9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2c0a4094-de1e-41f3-9e75-80a725d23095.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9841
x-amzn-requestid: 26093f6c-900b-425d-827c-4d70a2fa225a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPGMFHOeIAMF-4w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf83e6-29d957942dda79d0723d9e8f;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:08:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OI2VArVQbzyZaIRF8Dz2YOl0VHS49h56uVSaJ_2IC95xYOlWb4-vzQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 07:26:20 GMT
age: 60394
etag: "3cdf187d3923ec5084192adf2b0f73f8c9534a56"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbaa9536b-a4e6-42f5-99dd-75298eecbbb1.jpeg
34.120.237.76200 OK 18 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbaa9536b-a4e6-42f5-99dd-75298eecbbb1.jpeg
IP 34.120.237.76:0
Hash 13fdb19a4e0d21efed675fe0ce0d0f6a
d4ad9d0f0461edd6434c62ce8479a340acd60b51
99f0b4891cb9215b38bf1050063ac836f2b1ff42201aa54058b4b85f57aa4aee
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbaa9536b-a4e6-42f5-99dd-75298eecbbb1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15656
x-amzn-requestid: 6723d22f-8b16-4fb2-af92-9b3257fc2a1d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi3bIHpRoAMFRYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76c47-03b1c6646f63ba716a6298e1;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 07:05:43 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hI_26DHcHAlPCmTjye1fME6LZ-P77thSz8OXLtyxZS2613uv0SAH7Q==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 07:26:49 GMT
age: 60365
etag: "b89eebf2b8adac69487262100b07da8bc171ecf7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg
34.120.237.76200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4bb3a6fba496d54cdbbccaf2b9600386
8e30002699e9fbf2047f9ac11a36d2175fc9c591
927bf3a04b011b4e3bc8d8772a3d5813507f7f523312d43627767b64615562f3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15857
x-amzn-requestid: cfe36b9d-34f6-4f3f-896e-e70ec45c4a04
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmJ2JGGWoAMFSLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8bcf3-0dd68dd778b9aba268a129b0;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:02:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: pU_436f27nMZKPxZZWqZekERHFTvcG5NT5p_CYEXHRPtIWjDtSA-uA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 07:27:38 GMT
etag: "8e30002699e9fbf2047f9ac11a36d2175fc9c591"
content-type: image/jpeg
age: 60316
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg
34.120.237.76200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 27e95b7912edc909d6b031e36fe83534
eb27fae0bb17dbe0929a620002195233ef50c1d0
b32e7e1a2eee367c5bf9e99bcb38f4c74c4e9e7bdfe7fb0f8f2a657060c0624c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8597
x-amzn-requestid: e7bf4ac9-d86d-4ee9-9e10-8a42e5dfe2c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fcRaNEW4IAMFatA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d4c90d-7731312f630b00ba028836ca;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 07:04:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: z3ZJ7bq6LuJd-9I9D22VIs0avctNGVDKnYmt-fxevCheQibivmUomQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 13:15:35 GMT
age: 39439
etag: "eb27fae0bb17dbe0929a620002195233ef50c1d0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57810a89-c2fa-4da6-8c38-d7ab4682343c.jpeg
34.120.237.76200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57810a89-c2fa-4da6-8c38-d7ab4682343c.jpeg
IP 34.120.237.76:0
Hash f31ca407af83c1c8aec70d95c8d31e1b
6208ec553a2ddb48f3770d864e7de35caf88a3b4
96a31b31447fc8667dca4c126d7467f23f46920a9c7174ecd0e0b5449507c20e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57810a89-c2fa-4da6-8c38-d7ab4682343c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4588
x-amzn-requestid: 1d726cce-35c6-42d7-a592-8f22f1bd310a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmJr4GXvoAMFXvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8bcb2-71af755c24ba2e9a39f17451;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:01:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: DzgQlPECoiRf-pZjVVk-EsjIl0kVj0b-BfiWBgUEFamma1pYDUMP6A==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 07:12:08 GMT
age: 61246
etag: "21119ea71d26ab157ec491f9cf68918d63310fb4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49ea501c-c491-40c1-82ec-c750680af9df.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49ea501c-c491-40c1-82ec-c750680af9df.jpeg
IP 34.120.237.76:0
Hash 088fa27b62d0a855c42105a5198770ec
bd1018e5dce6f57002d363d8a25ceaff1fdf66bd
657333ab937288b77613eb1667a260fce1a962c69cb0f4e15f2c112fe2858456
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49ea501c-c491-40c1-82ec-c750680af9df.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9282
x-amzn-requestid: 8afcdb98-4749-463f-8af2-d2404d70bf97
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVresGwkoAMFhRQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d225f7-0b4bf98e33bea823344f85a2;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:04:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: uRR9A_I37XHaJigOWyjGnBEsYIclqmSQIcdlju4STHJJNZsaj7b0wA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 03:19:23 GMT
age: 75211
etag: "ba854dec74347525b20dbf3b4e5c13876d56aa1c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 3.5 kB IP 142.250.74.131:0
Hash c7daf123347c74aa603f3fee5cc19b46
693f70ca779127e76f465931ab09b929ec277efa
d9a2e1e62ebca6bed39959726bf63359d9644da3c5043342f75e6b94b738d485
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/muli/v28/7Auwp_0qiz-afTLGLQ.woff2
216.58.207.227200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/muli/v28/7Auwp_0qiz-afTLGLQ.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 31196, version 1.0\012- data
Hash ea2343c7dccad57360fb611d67204445
b603d9e68bb1ed5e4b33d5e31121160cb4d23452
2a04078f9550381b5148170ceaf5b378a1b31ed8274c6d0094aeba6f599462cc
GET /s/muli/v28/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31196
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 10:06:01 GMT
expires: Fri, 26 Jan 2024 10:06:01 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 20:43:05 GMT
content-type: font/woff2
age: 482814
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 789b41f1f8027d4275a66ac9cb2f124d
c5eff6750f9a50fc52a7a6ec6e30a7afaf28fc79
e053b0b29fc44721473ed39ddfe41064f09b56b3531c765228fa322d599e770f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
web-in21.mxradon.com/t/WebTracker.aspx?p1=55380&p2=Lawsikho&p3=-1&p4=&p5=1&p6=&p7=&p8=&p9=0&p10=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook
52.66.40.143200 OK 390 B URL HTTP/2 web-in21.mxradon.com/t/WebTracker.aspx?p1=55380&p2=Lawsikho&p3=-1&p4=&p5=1&p6=&p7=&p8=&p9=0&p10=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook
IP 52.66.40.143:0
File type ASCII text, with very long lines (575), with no line terminators
Hash d1173c0997ef3629659f1429fa37a1c8
7f5d6e813ad2952d3c0b7e26431d161ee026ef2e
09714cd45e057858244663dbd40cae08c2022c14d8b15493d61b192d319c0250
GET /t/WebTracker.aspx?p1=55380&p2=Lawsikho&p3=-1&p4=&p5=1&p6=&p7=&p8=&p9=0&p10=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook HTTP/1.1
Host: web-in21.mxradon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:55 GMT
content-type: text/html; charset=utf-8
content-length: 390
cache-control: private,private,max-age=0
content-encoding: gzip
vary: Accept-Encoding
access-control-allow-origin: *
set-cookie: ASP.NET_SessionId=2jlppgcozz1lztg555gl52un; path=/; HttpOnly; SameSite=Lax
ORG55380=7ff8909f-d8f8-4514-afe6-870dd248ebaf; expires=Fri, 31-Jan-2025 00:12:55 GMT; path=/
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 422555f3d65895a2cc669a80874c8c3f
3b4b47a66a4e7faff233927455e3c6882b946b78
b11de21783ba362903793472c124699f92ab2f595e7f724666158e040b69badd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2226
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:55 GMT
Last-Modified: Tue, 31 Jan 2023 23:35:49 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 278
web-in21.mxradon.com/t/WebTracker.aspx?p1=55380&p2=Lawsikho&p3=-1&p4=&p5=1&p6=7ff8909f-d8f8-4514-afe6-870dd248ebaf&p7=&p8=&p9=0&p10=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook
52.66.40.143200 OK 390 B URL HTTP/2 web-in21.mxradon.com/t/WebTracker.aspx?p1=55380&p2=Lawsikho&p3=-1&p4=&p5=1&p6=7ff8909f-d8f8-4514-afe6-870dd248ebaf&p7=&p8=&p9=0&p10=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook
IP 52.66.40.143:0
File type ASCII text, with very long lines (575), with no line terminators
Hash d1173c0997ef3629659f1429fa37a1c8
7f5d6e813ad2952d3c0b7e26431d161ee026ef2e
09714cd45e057858244663dbd40cae08c2022c14d8b15493d61b192d319c0250
GET /t/WebTracker.aspx?p1=55380&p2=Lawsikho&p3=-1&p4=&p5=1&p6=7ff8909f-d8f8-4514-afe6-870dd248ebaf&p7=&p8=&p9=0&p10=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook HTTP/1.1
Host: web-in21.mxradon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:55 GMT
content-type: text/html; charset=utf-8
content-length: 390
cache-control: private,private,max-age=0
content-encoding: gzip
vary: Accept-Encoding
access-control-allow-origin: *
set-cookie: ASP.NET_SessionId=zz15vynnu3ybxjn0e5flqa4p; path=/; HttpOnly; SameSite=Lax
ORG55380=7ff8909f-d8f8-4514-afe6-870dd248ebaf; expires=Fri, 31-Jan-2025 00:12:55 GMT; path=/
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
cdnt.netcoresmartech.com/smartechclient.js
2.21.240.102200 OK 990 B URL HTTP/2 cdnt.netcoresmartech.com/smartechclient.js
IP 2.21.240.102:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2712), with no line terminators
Hash 694f5dd3c5f59a4de36ca4fcb466da92
60c23f7e9d4f130bbe27154c4f650f16728882ba
a1ce168ea8c8e257b59f58f385ff058608b8094258503dbd70638ca34d0a35c8
GET /smartechclient.js HTTP/1.1
Host: cdnt.netcoresmartech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: QVKIootpbrYdLRZOeA7/K2qdTQsV+N+7wOlrMbBOB+eKvOjJNdnw96M7Ftn+8amgez5m2aLSyaw=
x-amz-request-id: B9GB74TKS2K97BHR
last-modified: Wed, 25 Jan 2023 16:31:56 GMT
etag: "04ad8e816f76434405b913fe1b6f1a9f"
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=58942
expires: Wed, 01 Feb 2023 16:35:17 GMT
date: Wed, 01 Feb 2023 00:12:55 GMT
content-length: 990
server-timing: cdn-cache; desc=HIT, edge; dur=1
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/jB4O2jkJQU0
142.250.74.131200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/jB4O2jkJQU0
IP 142.250.74.131:0
Hash f3d3839dc1d01bf31d73829a4239944c
cd50ab1589a23faa34cd61e29e5b435de93150de
70e531a5ba3bb507fd321924f6f3570c19f6c61cc0fce2e718450cc6d711750c
POST /s/gts1p5/jB4O2jkJQU0 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:55 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/jB4O2jkJQU0
142.250.74.131200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/jB4O2jkJQU0
IP 142.250.74.131:0
Hash f3d3839dc1d01bf31d73829a4239944c
cd50ab1589a23faa34cd61e29e5b435de93150de
70e531a5ba3bb507fd321924f6f3570c19f6c61cc0fce2e718450cc6d711750c
POST /s/gts1p5/jB4O2jkJQU0 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:56 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 422555f3d65895a2cc669a80874c8c3f
3b4b47a66a4e7faff233927455e3c6882b946b78
b11de21783ba362903793472c124699f92ab2f595e7f724666158e040b69badd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2227
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:56 GMT
Last-Modified: Tue, 31 Jan 2023 23:35:49 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 278
snap.licdn.com/li.lms-analytics/insight.min.js
23.36.76.210200 OK 4.8 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP 23.36.76.210:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13351)
Hash 74f72658f6efd10c4c286ab07cd5e452
9fa4dfc644b6e818914f2f2c4fe4bdf791fd6d39
6681619d5962f95b3fccfa34a7f035664edb66522d237ea0c28a05851f9d295c
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 10 Jan 2023 17:22:56 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=15164
date: Wed, 01 Feb 2023 00:12:56 GMT
content-length: 4777
x-content-type-options: nosniff
x-cdn: AKAM
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.110200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.110:0
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Tue, 31 Jan 2023 23:46:59 GMT
expires: Wed, 01 Feb 2023 01:46:59 GMT
cache-control: public, max-age=7200
age: 1557
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a72c84c41c5e0adf55862720ffab859c
671408b7eb5f09e4a2dac07a7ee2150ea7be1972
0aada318970f4e1d24d6411787b9f43b8ce0c1d64d76b61b5ac0589a1323f066
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5471
Cache-Control: max-age=102658
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:56 GMT
Etag: "63d8872b-1d7"
Expires: Thu, 02 Feb 2023 04:43:54 GMT
Last-Modified: Tue, 31 Jan 2023 03:12:43 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 46e2bec06a11406d5cdcec9c0e76911d
edc777878dca7029c70577edae741264a22ab010
21f7443ebf888a28fb0f0010d1c83ca833b42c06f7d2c755f83a4b418de96854
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
main.bothelp.io/w/widget-button.js
172.67.136.86200 OK 32 kB URL HTTP/2 main.bothelp.io/w/widget-button.js
IP 172.67.136.86:0
File type Unicode text, UTF-8 text, with very long lines (60977), with no line terminators
Hash 06728da55dd11fd1ff87c34ccfff4100
7bcb7299e7c95a6d9220fba072e4587c4a62827d
41418be96eac17380ef84b4a9c260f2ff0f69166a10eb85268fe55b8e6379138
GET /w/widget-button.js HTTP/1.1
Host: main.bothelp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:55 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 31 Jan 2023 06:03:14 GMT
etag: W/"63d8af22-ee3a"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1467
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pU06jzwagD526CWOFu2VnVKLTmaWhs%2FjH7QCbXaPqcuWgBmyhv8xcp9Upjdpxw%2FUzJWA3Sj6Dxhx6Dt5XESJeF1JWdZsuCqentcxCca8SlwTyUzwkWjG%2FnyXb4nu%2FTWalfc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79267a71188dfac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 312 B IP 93.184.220.29:0
Hash 5a3b8ee23f21740c11c01213a2a19819
9887d6fe0b1669d9f1905bb76d085ec7ded8e158
abbd84d6812e9a405ae14e563c4bb30f11186e0c782280b2aebed054921e4fb7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1444
Cache-Control: max-age=129985
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:56 GMT
Etag: "63d901a5-138"
Expires: Thu, 02 Feb 2023 12:19:21 GMT
Last-Modified: Tue, 31 Jan 2023 11:55:17 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 312
embed.tawk.to/596df67e6edc1c10b034684b/default
172.67.38.66200 OK 1.5 kB URL HTTP/2 embed.tawk.to/596df67e6edc1c10b034684b/default
IP 172.67.38.66:0
Hash 2c58a1405c3c0d6f1b8eef85a2b60383
c1b64e4cbc85428fd51ae5e0ff9ea27312d1bfb1
b896dfb3438298b08fe89691944cdf5b891a7f31a10e2a35bbc37cbd92dc5ed6
GET /596df67e6edc1c10b034684b/default HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:56 GMT
content-type: application/x-javascript
access-control-allow-origin: *
cache-control: public, max-age=7200, s-maxage=3600
etag: W/"stable-v4-63b77dcd282"
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 79267a6ed8fbb503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
157.240.205.11200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 157.240.205.11:0
File type ASCII text, with very long lines (64348)
Hash dd1f85cc598419df61e254e53f9ec1ef
f86c0ee563f5b7a01e1d40b566f2bc184a32380f
c06f52b233c835b03292f39cb847507a03bb971066bf91341b58a580244398c0
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: IODfmEmjDcrxo0TSKxeKbMHr7Ilu04xaS6U+bh64zPAAtYXY5jRBFAhvzn5DWL1xmgKZJaYIaArhat0L7ZO1WQ==
priority: u=3,i
content-length: 27843
x-fb-trip-id: 1679558926
date: Wed, 01 Feb 2023 00:12:56 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
104.18.21.226200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.21.226:0
Hash 16bf083404a54bad8769e7487347e9b2
abafb8c1eadecca622112ae5b35ef409cd1b9b5a
4f147f5b1fdbc6a6cc49f16c78e231076b2ecf2994506ddf24b7a5433911de9f
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 00:12:56 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sat, 04 Feb 2023 22:06:57 GMT
ETag: "abafb8c1eadecca622112ae5b35ef409cd1b9b5a"
Last-Modified: Tue, 31 Jan 2023 22:06:58 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 438
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79267a73cd33b4e8-OSL
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a72c84c41c5e0adf55862720ffab859c
671408b7eb5f09e4a2dac07a7ee2150ea7be1972
0aada318970f4e1d24d6411787b9f43b8ce0c1d64d76b61b5ac0589a1323f066
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5471
Cache-Control: max-age=102658
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:56 GMT
Etag: "63d8872b-1d7"
Expires: Thu, 02 Feb 2023 04:43:54 GMT
Last-Modified: Tue, 31 Jan 2023 03:12:43 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 46e2bec06a11406d5cdcec9c0e76911d
edc777878dca7029c70577edae741264a22ab010
21f7443ebf888a28fb0f0010d1c83ca833b42c06f7d2c755f83a4b418de96854
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 312 B IP 93.184.220.29:0
Hash 77afb2fccc7a28d1684cc59890b5bb6d
5faadc812a246f792e988a43453ea92b12b81414
b1668b8b23868a365090dd5fadd8f085ca7df66dc0a58144bda226322cfb67b6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5458
Cache-Control: max-age=133969
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:56 GMT
Etag: "63d90187-138"
Expires: Thu, 02 Feb 2023 13:25:45 GMT
Last-Modified: Tue, 31 Jan 2023 11:54:47 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 312
mc.yandex.ru/metrika/tag.js
87.250.250.119200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP 87.250.250.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash de9c4346801ea3636fb506b54c394b32
f998f9464013582483778132d544fbd106c6d9a1
c9a9f4cbaaf63148dbafd70126d101548d61884ac369c0b35b0e4efa244a9670
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73853
date: Wed, 01 Feb 2023 00:12:56 GMT
access-control-allow-origin: *
etag: "63c93a4b-1207d"
expires: Wed, 01 Feb 2023 01:12:56 GMT
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
t.co/i/adsct?bci=3&eci=2&event_id=3095dba2-d654-44b9-9b9f-2eb6461c7e0e&events=%5B%5B%22completeregistration%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=957a15cb-6522-4b79-8e86-fc3ba44ebd7c&tw_document_href=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o6em4&type=javascript&version=2.3.29
104.244.42.133200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=3095dba2-d654-44b9-9b9f-2eb6461c7e0e&events=%5B%5B%22completeregistration%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=957a15cb-6522-4b79-8e86-fc3ba44ebd7c&tw_document_href=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o6em4&type=javascript&version=2.3.29
IP 104.244.42.133:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=3095dba2-d654-44b9-9b9f-2eb6461c7e0e&events=%5B%5B%22completeregistration%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=957a15cb-6522-4b79-8e86-fc3ba44ebd7c&tw_document_href=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o6em4&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:55 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=23485b00-741e-4f88-8f69-a441bcb99684; Max-Age=63072000; Expires=Fri, 31 Jan 2025 00:12:56 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 3392107a7ee828b9
strict-transport-security: max-age=0
x-response-time: 106
x-connection-hash: 819d60a6ea8427037a2af91fd018443836997310e80703d84c4d86a61b519300
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 314 B IP 93.184.220.29:0
Hash 77b9605ca59aef81d089753980d55552
a4a9e29e42ae2ed34f7fae5f5da98c78626c356a
fde0ba358cb7f2caedc1ae78245e575d03425e261e8d7bd921c61c6f7020bca0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6559
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:56 GMT
Last-Modified: Tue, 31 Jan 2023 22:23:37 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 314
alb.reddit.com/rp.gif?ts=1675210393040&id=t2_b92ola3e&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=29dfe13d-832d-4a73-a1ab-40ca3d611df9&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_65e23bc4
151.101.1.140200 OK 42 B URL HTTP/2 alb.reddit.com/rp.gif?ts=1675210393040&id=t2_b92ola3e&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=29dfe13d-832d-4a73-a1ab-40ca3d611df9&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_65e23bc4
IP 151.101.1.140:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /rp.gif?ts=1675210393040&id=t2_b92ola3e&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=29dfe13d-832d-4a73-a1ab-40ca3d611df9&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_65e23bc4 HTTP/1.1
Host: alb.reddit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
cross-origin-resource-policy: cross-origin
content-type: image/gif
accept-ranges: bytes
date: Wed, 01 Feb 2023 00:12:56 GMT
via: 1.1 varnish
content-length: 42
X-Firefox-Spdy: h2
dynamic.criteo.com/js/ld/ld.js?a=94125
178.250.2.140200 OK 15 kB URL HTTP/2 dynamic.criteo.com/js/ld/ld.js?a=94125
IP 178.250.2.140:0
File type ASCII text, with very long lines (43748)
Hash b17aeeca80979ade3660c58b20ef78a8
8367cc69fdc434da4e1d4873ef18aa1b318705e4
4455e0648e4c49c89d653ca6afcb20f81c0106f6ea0295d92402f22fb0c12620
GET /js/ld/ld.js?a=94125 HTTP/1.1
Host: dynamic.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:55 GMT
content-type: application/javascript; charset=utf-8
server: Kestrel
cache-control: public,max-age=10800
content-encoding: br
vary: Origin, Accept-Encoding
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash e24b648009bb4c419c3bf2c995832b00
457168a7a1f2cfff41ebcd7855410c08001eb5d4
c4f888188d5b4c7885cd16c39e5e4915a45bc91e8303a6e62fcd2e433a80aee1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6477
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:56 GMT
Last-Modified: Tue, 31 Jan 2023 22:24:59 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash e24b648009bb4c419c3bf2c995832b00
457168a7a1f2cfff41ebcd7855410c08001eb5d4
c4f888188d5b4c7885cd16c39e5e4915a45bc91e8303a6e62fcd2e433a80aee1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4626
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:56 GMT
Etag: "63d89832-139"
Last-Modified: Tue, 31 Jan 2023 22:55:50 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 313
mc.yandex.ru/metrika/advert.gif
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 01 Feb 2023 00:12:56 GMT
access-control-allow-origin: *
etag: "63c93a4b-2b"
expires: Wed, 01 Feb 2023 01:12:56 GMT
accept-ranges: bytes
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash a327176edf538c07784f9b0da660c22d
4a56cfcac291dfe1cc177bd3eff976f106731834
aae92a95f747be0bca6982ed7e3e58af8ac74ff69c799b55046ab38474e149dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mc.yandex.ru/watch/87027966/1?wmode=7&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0gggw3usgug1h33hqlj%3Afp%3A2848%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A702905486369%3Ahid%3A430457761%3Az%3A0%3Ai%3A20230201001315%3Aet%3A1675210396%3Ac%3A1%3Arn%3A673573242%3Arqn%3A1%3Au%3A16752103961034892902%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C105%2C791%2C0%2C238%2C0%2C%2C1531%2C1%2C%2C%2C%2C2840%3Aco%3A0%3Ans%3A1675210391233%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675210396%3At%3ALawsikho&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
87.250.250.119200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/87027966/1?wmode=7&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0gggw3usgug1h33hqlj%3Afp%3A2848%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A702905486369%3Ahid%3A430457761%3Az%3A0%3Ai%3A20230201001315%3Aet%3A1675210396%3Ac%3A1%3Arn%3A673573242%3Arqn%3A1%3Au%3A16752103961034892902%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C105%2C791%2C0%2C238%2C0%2C%2C1531%2C1%2C%2C%2C%2C2840%3Aco%3A0%3Ans%3A1675210391233%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675210396%3At%3ALawsikho&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP 87.250.250.119:0
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash a7e97c255530a989b70f89a7b17f5ed1
fac80521c69681d930f7e6cec1b05abfa20b18b1
0a94d980470e217211544a221e8c86eab062b73a0ebc99090201aa70e707070f
GET /watch/87027966/1?wmode=7&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0gggw3usgug1h33hqlj%3Afp%3A2848%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A702905486369%3Ahid%3A430457761%3Az%3A0%3Ai%3A20230201001315%3Aet%3A1675210396%3Ac%3A1%3Arn%3A673573242%3Arqn%3A1%3Au%3A16752103961034892902%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C105%2C791%2C0%2C238%2C0%2C%2C1531%2C1%2C%2C%2C%2C2840%3Aco%3A0%3Ans%3A1675210391233%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675210396%3At%3ALawsikho&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lawsikho.com
Referer: https://lawsikho.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Wed, 01 Feb 2023 00:12:56 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://lawsikho.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 01-Feb-2023 00:12:56 GMT
last-modified: Wed, 01-Feb-2023 00:12:56 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
dnacdn.net/dna
178.250.0.157200 OK 598 B IP 178.250.0.157:0
Hash d97ea499a4afa941870f086cb299f46d
0e1eb40f8c002297fd8253c3056a08877c078cda
caf6f9de2cb68d7fc98f8d74c5ad80361dbc66d47ec2b7493169f54ec0e19913
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=1FfY8l80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdHNnlWUjJ4eHpQRlNnNm5LTjRSWG1DZlEzRXJsbm1OZ3BrVk5UMWkzOHk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:56 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=WbkzqV80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdHNnlWUjJ4eHpQRlNnNm5LTjRSWGxBRUh4MW9RWFdMSjh2JTJCc3hzOEtxOA; expires=Mon, 26 Feb 2024 00:12:56 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 333031
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/466942124/?random=1675210392942&cv=11&fst=1675209600000&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&tiba=Lawsikho&fmt=3&is_vtc=1&random=2326005268&rmt_tld=0&ipr=y
216.58.211.4200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/466942124/?random=1675210392942&cv=11&fst=1675209600000&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&tiba=Lawsikho&fmt=3&is_vtc=1&random=2326005268&rmt_tld=0&ipr=y
IP 216.58.211.4:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/466942124/?random=1675210392942&cv=11&fst=1675209600000&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&tiba=Lawsikho&fmt=3&is_vtc=1&random=2326005268&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 01 Feb 2023 00:12:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash beba92ff0bc5737791ba6982e7b0dba5
712af102d8a29ef26a49a16f95e8e90e3d9067b6
a778a2a369102dfbf4c67d64ff337d136f1ae79b4c1f72d0d4d7c0cfb3704e37
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5356
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:56 GMT
Last-Modified: Tue, 31 Jan 2023 22:43:40 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 313
www.google.no/pagead/1p-user-list/466942124/?random=1675210392942&cv=11&fst=1675209600000&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&tiba=Lawsikho&fmt=3&is_vtc=1&random=2326005268&rmt_tld=1&ipr=y
142.250.74.163200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/466942124/?random=1675210392942&cv=11&fst=1675209600000&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&tiba=Lawsikho&fmt=3&is_vtc=1&random=2326005268&rmt_tld=1&ipr=y
IP 142.250.74.163:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/466942124/?random=1675210392942&cv=11&fst=1675209600000&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&tiba=Lawsikho&fmt=3&is_vtc=1&random=2326005268&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 01 Feb 2023 00:12:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e0bc98d03057dabba1334b62bea0975b
b358a8123908fe4b1c94a1273cac45c4e23b212e
10ef320ba825ca0e17d039b66fd2f321f4d2c687a8734d226fa25e9b45e109d9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash b4c9a8ce96aa57d27a6bd55df00f08ac
180302ed4863fb5b22b45ab0cc7c770a12a8c63d
3707163ad693f536f95ed3331f045060ad51b12e95d55690d341a4a93e7f1d12
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-118568091-2&cid=535897801.1675210395&jid=1252453560&gjid=1426582261&_gid=1101865330.1675210395&_u=YEBAAEAAAAAAACAAI~&z=1849853466
64.233.162.157200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-118568091-2&cid=535897801.1675210395&jid=1252453560&gjid=1426582261&_gid=1101865330.1675210395&_u=YEBAAEAAAAAAACAAI~&z=1849853466
IP 64.233.162.157:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-118568091-2&cid=535897801.1675210395&jid=1252453560&gjid=1426582261&_gid=1101865330.1675210395&_u=YEBAAEAAAAAAACAAI~&z=1849853466 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://lawsikho.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 01 Feb 2023 00:12:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=3095dba2-d654-44b9-9b9f-2eb6461c7e0e&events=%5B%5B%22completeregistration%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=957a15cb-6522-4b79-8e86-fc3ba44ebd7c&tw_document_href=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o6em4&type=javascript&version=2.3.29
104.244.42.195200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=3095dba2-d654-44b9-9b9f-2eb6461c7e0e&events=%5B%5B%22completeregistration%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=957a15cb-6522-4b79-8e86-fc3ba44ebd7c&tw_document_href=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o6em4&type=javascript&version=2.3.29
IP 104.244.42.195:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=3095dba2-d654-44b9-9b9f-2eb6461c7e0e&events=%5B%5B%22completeregistration%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=957a15cb-6522-4b79-8e86-fc3ba44ebd7c&tw_document_href=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o6em4&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:56 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_bf3NdHceJOeaECiDuL2rrg=="; Max-Age=63072000; Expires=Fri, 31 Jan 2025 00:12:56 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 537843a4f96c1de9
strict-transport-security: max-age=631138519
x-response-time: 116
x-connection-hash: e1526351f680a2bed67e67d0d6bc6c0e3d337830bf22858d0c8389580f904f31
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2115626%26time%3D1675210395231%26url%3Dhttps%253A%252F%252Flawsikho.com%252F%253Futm_source%253D1stlink%2526utm_medium%253Debook%2526utm_campaign%253Deshebook%26liSync%3Dtrue
13.107.42.14302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2115626%26time%3D1675210395231%26url%3Dhttps%253A%252F%252Flawsikho.com%252F%253Futm_source%253D1stlink%2526utm_medium%253Debook%2526utm_campaign%253Deshebook%26liSync%3Dtrue
IP 13.107.42.14:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2115626%26time%3D1675210395231%26url%3Dhttps%253A%252F%252Flawsikho.com%252F%253Futm_source%253D1stlink%2526utm_medium%253Debook%2526utm_campaign%253Deshebook%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lawsikho.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=2115626&time=1675210395231&url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&4cb4dd75-1a36-4d7c-8a2e-fcdc2225230e"; Domain=.linkedin.com; Expires=Thu, 01-Feb-2024 00:12:56 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&202302010012567f4aee5c-3ffa-4aa2-84ab-5e095ec14f17AQEmjRGTsxBlz8mYyYbxrHdn1Uz4vSvZ"; Domain=.www.linkedin.com; Expires=Thu, 01-Feb-2024 00:12:56 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzUyMTAzNzY7MjswMjEDm0FxbqKRF/SQPRlL9JlyZfqRO4ifa0N50lnKeEPu9g==; Domain=.linkedin.com; Expires=Mon, 31 Jul 2023 00:12:56 GMT; Path=/; Secure; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2480:u=1:x=1:i=1675210376:t=1675296776:v=2:sig=AQFdJsoq8Pkxd-4YvXhEPBykZOnKUJKr"; Expires=Thu, 02 Feb 2023 00:12:56 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXzmE9wqXAB2/MT6h++xw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: F07146A2DE2E4FC49419FC88FD69F2FB Ref B: OSL30EDGE0307 Ref C: 2023-02-01T00:12:56Z
date: Wed, 01 Feb 2023 00:12:56 GMT
content-length: 0
X-Firefox-Spdy: h2
mc.yandex.ru/watch/87027966?wmode=7&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0gggw3usgug1h33hqlj%3Afp%3A2848%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A702905486369%3Ahid%3A430457761%3Az%3A0%3Ai%3A20230201001315%3Aet%3A1675210396%3Ac%3A1%3Arn%3A673573242%3Arqn%3A1%3Au%3A16752103961034892902%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C105%2C791%2C0%2C238%2C0%2C%2C1531%2C1%2C%2C%2C%2C2840%3Aco%3A0%3Ans%3A1675210391233%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675210396%3At%3ALawsikho&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
87.250.250.119302 Found 42 B URL HTTP/2 mc.yandex.ru/watch/87027966?wmode=7&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0gggw3usgug1h33hqlj%3Afp%3A2848%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A702905486369%3Ahid%3A430457761%3Az%3A0%3Ai%3A20230201001315%3Aet%3A1675210396%3Ac%3A1%3Arn%3A673573242%3Arqn%3A1%3Au%3A16752103961034892902%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C105%2C791%2C0%2C238%2C0%2C%2C1531%2C1%2C%2C%2C%2C2840%3Aco%3A0%3Ans%3A1675210391233%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675210396%3At%3ALawsikho&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /watch/87027966?wmode=7&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0gggw3usgug1h33hqlj%3Afp%3A2848%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A702905486369%3Ahid%3A430457761%3Az%3A0%3Ai%3A20230201001315%3Aet%3A1675210396%3Ac%3A1%3Arn%3A673573242%3Arqn%3A1%3Au%3A16752103961034892902%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C105%2C791%2C0%2C238%2C0%2C%2C1531%2C1%2C%2C%2C%2C2840%3Aco%3A0%3Ans%3A1675210391233%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675210396%3At%3ALawsikho&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/87027966/1?wmode=7&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0gggw3usgug1h33hqlj%3Afp%3A2848%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A702905486369%3Ahid%3A430457761%3Az%3A0%3Ai%3A20230201001315%3Aet%3A1675210396%3Ac%3A1%3Arn%3A673573242%3Arqn%3A1%3Au%3A16752103961034892902%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C105%2C791%2C0%2C238%2C0%2C%2C1531%2C1%2C%2C%2C%2C2840%3Aco%3A0%3Ans%3A1675210391233%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675210396%3At%3ALawsikho&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Wed, 01 Feb 2023 00:12:56 GMT
access-control-allow-origin: https://lawsikho.com
set-cookie: yabs-sid=233874511675210376; Path=/; SameSite=None; Secure
i=Ob5ncEnIZOTYEfk1GzoK+ehAoB6BBhN8BlSZoORwwDFSx0RU/vsYskBvFZKeh7X5iNyRuFEjnfN/qvNfNHjlIDo9tFE=; Expires=Sat, 29-Jan-2033 00:12:32 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=1605202941675210376; Expires=Thu, 01-Feb-2024 00:12:56 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=1605202941675210376; Expires=Thu, 01-Feb-2024 00:12:56 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1706746376.yc.1675210376#1706746376.yrts.1675210376#1706746376.yrtsi.1675210376; Expires=Thu, 01-Feb-2024 00:12:56 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 01-Feb-2023 00:12:56 GMT
last-modified: Wed, 01-Feb-2023 00:12:56 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=584246698832842&ev=PageView&dl=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&rl=&if=false&ts=1675210395947&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&fbp=fb.1.1675210395946.1043919770&it=1675210395340&coo=false&rqm=GET
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=584246698832842&ev=PageView&dl=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&rl=&if=false&ts=1675210395947&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&fbp=fb.1.1675210395946.1043919770&it=1675210395340&coo=false&rqm=GET
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=584246698832842&ev=PageView&dl=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&rl=&if=false&ts=1675210395947&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&fbp=fb.1.1675210395946.1043919770&it=1675210395340&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Wed, 01 Feb 2023 00:12:57 GMT
X-Firefox-Spdy: h2
sslwidget.criteo.com/event?a=94125&v=5.13.0&p0=e%3Dexd%26site_type%3Dd&p1=e%3Dvb%26p%3D%255Bi%25253D1%252526pr%25253D1%252526q%25253D1%255D&p2=e%3Dvb%26p%3D%255Bi%25253D1%252526pr%25253D1%252526q%25253D1%255D&p3=e%3Dvh&p4=e%3Dvb%26p%3D%255Bi%25253D1%252526pr%25253D1%252526q%25253D1%255D&p5=e%3Dvpg&p6=e%3Ddis&adce=1&bundle=DQRDy19GZHVDTVo2R1Rka3Nqak9Dbk1oJTJCMUs1YVpYU21odDFIYWNxWGpiNTEwaGVMRXBXc3hJWHg0VklQMUMxc0h1bll2QUNsV01Zd3pKd0Iya3FnZkxudmk3NGJBNkdKclBNZ3FMSlZKOXR3TVBkcFV2NVRYOHRmSFZORWp1N0gyRSUyRiUyQkJSQTl3Vm5LUHo5c3oxQjlmUTdqeEElM0QlM0Q&tld=lawsikho.com&dy=1&fu=https%253A%252F%252Flawsikho.com%252F%253Futm_source%253D1stlink%2526utm_medium%253Debook%2526utm_campaign%253Deshebook&dtycbr=50681
178.250.2.151302 Found 0 B URL HTTP/2 sslwidget.criteo.com/event?a=94125&v=5.13.0&p0=e%3Dexd%26site_type%3Dd&p1=e%3Dvb%26p%3D%255Bi%25253D1%252526pr%25253D1%252526q%25253D1%255D&p2=e%3Dvb%26p%3D%255Bi%25253D1%252526pr%25253D1%252526q%25253D1%255D&p3=e%3Dvh&p4=e%3Dvb%26p%3D%255Bi%25253D1%252526pr%25253D1%252526q%25253D1%255D&p5=e%3Dvpg&p6=e%3Ddis&adce=1&bundle=DQRDy19GZHVDTVo2R1Rka3Nqak9Dbk1oJTJCMUs1YVpYU21odDFIYWNxWGpiNTEwaGVMRXBXc3hJWHg0VklQMUMxc0h1bll2QUNsV01Zd3pKd0Iya3FnZkxudmk3NGJBNkdKclBNZ3FMSlZKOXR3TVBkcFV2NVRYOHRmSFZORWp1N0gyRSUyRiUyQkJSQTl3Vm5LUHo5c3oxQjlmUTdqeEElM0QlM0Q&tld=lawsikho.com&dy=1&fu=https%253A%252F%252Flawsikho.com%252F%253Futm_source%253D1stlink%2526utm_medium%253Debook%2526utm_campaign%253Deshebook&dtycbr=50681
IP 178.250.2.151:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /event?a=94125&v=5.13.0&p0=e%3Dexd%26site_type%3Dd&p1=e%3Dvb%26p%3D%255Bi%25253D1%252526pr%25253D1%252526q%25253D1%255D&p2=e%3Dvb%26p%3D%255Bi%25253D1%252526pr%25253D1%252526q%25253D1%255D&p3=e%3Dvh&p4=e%3Dvb%26p%3D%255Bi%25253D1%252526pr%25253D1%252526q%25253D1%255D&p5=e%3Dvpg&p6=e%3Ddis&adce=1&bundle=DQRDy19GZHVDTVo2R1Rka3Nqak9Dbk1oJTJCMUs1YVpYU21odDFIYWNxWGpiNTEwaGVMRXBXc3hJWHg0VklQMUMxc0h1bll2QUNsV01Zd3pKd0Iya3FnZkxudmk3NGJBNkdKclBNZ3FMSlZKOXR3TVBkcFV2NVRYOHRmSFZORWp1N0gyRSUyRiUyQkJSQTl3Vm5LUHo5c3oxQjlmUTdqeEElM0QlM0Q&tld=lawsikho.com&dy=1&fu=https%253A%252F%252Flawsikho.com%252F%253Futm_source%253D1stlink%2526utm_medium%253Debook%2526utm_campaign%253Deshebook&dtycbr=50681 HTTP/1.1
Host: sslwidget.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 01 Feb 2023 00:12:56 GMT
server: Kestrel
content-length: 0
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: 0
location: https://widget.as.criteo.com/event?a=94125&v=5.13.0&p0=e%3Dexd%26site_type%3Dd&p1=e%3Dvb%26p%3D%255Bi%25253D1%252526pr%25253D1%252526q%25253D1%255D&p2=e%3Dvb%26p%3D%255Bi%25253D1%252526pr%25253D1%252526q%25253D1%255D&p3=e%3Dvh&p4=e%3Dvb%26p%3D%255Bi%25253D1%252526pr%25253D1%252526q%25253D1%255D&p5=e%3Dvpg&p6=e%3Ddis&adce=1&bundle=DQRDy19GZHVDTVo2R1Rka3Nqak9Dbk1oJTJCMUs1YVpYU21odDFIYWNxWGpiNTEwaGVMRXBXc3hJWHg0VklQMUMxc0h1bll2QUNsV01Zd3pKd0Iya3FnZkxudmk3NGJBNkdKclBNZ3FMSlZKOXR3TVBkcFV2NVRYOHRmSFZORWp1N0gyRSUyRiUyQkJSQTl3Vm5LUHo5c3oxQjlmUTdqeEElM0QlM0Q&tld=lawsikho.com&dy=1&fu=https%253A%252F%252Flawsikho.com%252F%253Futm_source%253D1stlink%2526utm_medium%253Debook%2526utm_campaign%253Deshebook&dtycbr=50681
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
server-processing-duration-in-ticks: 6752450
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2115626&time=1675210395231&url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&liSync=true
13.107.42.14200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2115626&time=1675210395231&url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&liSync=true
IP 13.107.42.14:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2115626&time=1675210395231&url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lawsikho.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&916e5884-d3c3-4033-87d4-076728e50f01"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 01-Feb-2024 00:12:57 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2452:u=1:x=1:i=1675210377:t=1675296777:v=2:sig=AQGvc-Qlx6ch8f4j9MgW6ZfRvq5H20g7"; Expires=Thu, 02 Feb 2023 00:12:57 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXzmE90eC8FBQa3TVd9bw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: C39D1EDEA3BC4349A79957585E0E0012 Ref B: OSL30EDGE0307 Ref C: 2023-02-01T00:12:57Z
date: Wed, 01 Feb 2023 00:12:56 GMT
content-length: 0
X-Firefox-Spdy: h2
cdndc.netcoresmartech.com/webactivity/ADGMOT35CHFLVDHBJNIG50K96BCB6ERFCRTJ2IPEB9HT6EC5N980.js
2.21.240.102200 OK 306 B URL HTTP/2 cdndc.netcoresmartech.com/webactivity/ADGMOT35CHFLVDHBJNIG50K96BCB6ERFCRTJ2IPEB9HT6EC5N980.js
IP 2.21.240.102:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (306), with no line terminators
Hash bdff1be48a6be7ed9f9f7f224e7d6931
4b84029ddd268996fd817f9f5e2d2cbaa81b97b2
5fb96bcf9e3241e3481475b0d7a7b961af6249d7cd5e49571c84770a33aa9d99
GET /webactivity/ADGMOT35CHFLVDHBJNIG50K96BCB6ERFCRTJ2IPEB9HT6EC5N980.js HTTP/1.1
Host: cdndc.netcoresmartech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 5d/opSMwhuqyQ1sgC+ZFGOPutAM3siRWI0S/9AuLC4a6/syFRleIbL+3TVZ/xjuqy+4+Jk7bO8M=
x-amz-request-id: C3XGPR446WZTEBXC
last-modified: Wed, 11 Jan 2023 12:42:33 GMT
etag: "bdff1be48a6be7ed9f9f7f224e7d6931"
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
content-length: 306
cache-control: no-cache
expires: Wed, 01 Feb 2023 00:12:57 GMT
date: Wed, 01 Feb 2023 00:12:57 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=78
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
104.18.21.226200 OK 112 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.21.226:0
File type gzip compressed data, from Unix\012- data
Size 112 kB (111711 bytes)
Hash 7f93899296ded7786ac9d1089bb2e63b
c5ce8097707cab1d7d0b1cd872e9afc454183678
b377e35ff7d6ebd80871e832ab05a0d522d695f14329817d29b300280075ceac
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 00:12:57 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 04 Feb 2023 21:09:04 GMT
ETag: "12a728e913190735cbb3012b1c6f7d17ba55c94a"
Last-Modified: Tue, 31 Jan 2023 21:09:05 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2955
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79267a7bf99fb4e8-OSL
twa.netcoresmartech.com/df?user_key=ADGMOT35CHFLVDHBJNIG50K96BCB6ERFCRTJ2IPEB9HT6EC5N980
13.126.178.65200 OK 57 B URL HTTP/2 twa.netcoresmartech.com/df?user_key=ADGMOT35CHFLVDHBJNIG50K96BCB6ERFCRTJ2IPEB9HT6EC5N980
IP 13.126.178.65:0
File type JSON data\012- , ASCII text, with no line terminators
Hash cab701f0d86f50a91f12c57b8d240140
a8566d75c52eafa33a5d14e762b5d20ec17b5a74
9f878be7310ae8c9cb0334970d5a3ae14b0b4418374b8e73316756fc6abd1feb
GET /df?user_key=ADGMOT35CHFLVDHBJNIG50K96BCB6ERFCRTJ2IPEB9HT6EC5N980 HTTP/1.1
Host: twa.netcoresmartech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: awselb/2.0
date: Wed, 01 Feb 2023 00:12:57 GMT
content-type: application/json
content-length: 57
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash 64a570bd0fa7ac69f715f2703e6e8207
00c4e672f97ad6ffcde349b61e3df81caffe6d75
32bf78e39ab1ba44351e924d6f3a2988ed2daaf5640fe30560863d434e514e16
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1414
Cache-Control: max-age=143622
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:57 GMT
Etag: "63d93709-139"
Expires: Thu, 02 Feb 2023 16:06:39 GMT
Last-Modified: Tue, 31 Jan 2023 15:43:05 GMT
Server: ECS (amb/6BA8)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d8f5a2deecbc35371c7f82051f91bf17
17d43358be52c85429cf24eba91a88027b51baa6
83850f9227f0c75c116b2c642677b974012badd284362489b275f1472a54a192
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4924
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:58 GMT
Last-Modified: Tue, 31 Jan 2023 22:50:54 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d8f5a2deecbc35371c7f82051f91bf17
17d43358be52c85429cf24eba91a88027b51baa6
83850f9227f0c75c116b2c642677b974012badd284362489b275f1472a54a192
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4408
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:58 GMT
Last-Modified: Tue, 31 Jan 2023 22:59:30 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d8f5a2deecbc35371c7f82051f91bf17
17d43358be52c85429cf24eba91a88027b51baa6
83850f9227f0c75c116b2c642677b974012badd284362489b275f1472a54a192
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4924
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:58 GMT
Last-Modified: Tue, 31 Jan 2023 22:50:54 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
tr.snapchat.com/p?pid=77b7d5bf-df7a-4590-9a71-ca1cea79d8e8&ev=PAGE_VIEW&intg=gtm&pl=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&bt=1d53c387&if=false&m_dcl=0&m_pi=0&m_pl=0&m_pv=v2&m_rd=6040&m_sl=1838&rf=&trackId=abdae6da-fd2c-4aa9-97a3-f25dc07a241a&ts=1675210397274&u_c1=e3d1f4a1-0f3f-4594-9172-e9c6da86935b&u_sclid=59461654-9802-44ff-a74c-43ab6fa79cae&u_scsid=43875141-108f-436b-ac4a-aa4c857b9b3b&v=2.0.0
35.190.43.134200 OK 68 B URL HTTP/2 tr.snapchat.com/p?pid=77b7d5bf-df7a-4590-9a71-ca1cea79d8e8&ev=PAGE_VIEW&intg=gtm&pl=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&bt=1d53c387&if=false&m_dcl=0&m_pi=0&m_pl=0&m_pv=v2&m_rd=6040&m_sl=1838&rf=&trackId=abdae6da-fd2c-4aa9-97a3-f25dc07a241a&ts=1675210397274&u_c1=e3d1f4a1-0f3f-4594-9172-e9c6da86935b&u_sclid=59461654-9802-44ff-a74c-43ab6fa79cae&u_scsid=43875141-108f-436b-ac4a-aa4c857b9b3b&v=2.0.0
IP 35.190.43.134:0
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /p?pid=77b7d5bf-df7a-4590-9a71-ca1cea79d8e8&ev=PAGE_VIEW&intg=gtm&pl=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&bt=1d53c387&if=false&m_dcl=0&m_pi=0&m_pl=0&m_pv=v2&m_rd=6040&m_sl=1838&rf=&trackId=abdae6da-fd2c-4aa9-97a3-f25dc07a241a&ts=1675210397274&u_c1=e3d1f4a1-0f3f-4594-9172-e9c6da86935b&u_sclid=59461654-9802-44ff-a74c-43ab6fa79cae&u_scsid=43875141-108f-436b-ac4a-aa4c857b9b3b&v=2.0.0 HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:58 GMT
access-control-allow-origin: *
cache-control: no-cache, no-transform
set-cookie: sc_at=v2|H4sIAAAAAAAAAAXBgQ3AMAgDsIuQyEogO2ca7RUcX7ukwP6PgW9bbIZ9LVouqfMQ6ZxBFh/4Ko1f0fsLPzIAAAA=;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure
content-type: image/png
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
widget.as.criteo.com/event?a=94125&v=5.13.0&p0=e%3Dexd%26site_type%3Dd&p1=e%3Dvb%26p%3D%255Bi%25253D1%252526pr%25253D1%252526q%25253D1%255D&p2=e%3Dvb%26p%3D%255Bi%25253D1%252526pr%25253D1%252526q%25253D1%255D&p3=e%3Dvh&p4=e%3Dvb%26p%3D%255Bi%25253D1%252526pr%25253D1%252526q%25253D1%255D&p5=e%3Dvpg&p6=e%3Ddis&adce=1&bundle=DQRDy19GZHVDTVo2R1Rka3Nqak9Dbk1oJTJCMUs1YVpYU21odDFIYWNxWGpiNTEwaGVMRXBXc3hJWHg0VklQMUMxc0h1bll2QUNsV01Zd3pKd0Iya3FnZkxudmk3NGJBNkdKclBNZ3FMSlZKOXR3TVBkcFV2NVRYOHRmSFZORWp1N0gyRSUyRiUyQkJSQTl3Vm5LUHo5c3oxQjlmUTdqeEElM0QlM0Q&tld=lawsikho.com&dy=1&fu=https%253A%252F%252Flawsikho.com%252F%253Futm_source%253D1stlink%2526utm_medium%253Debook%2526utm_campaign%253Deshebook&dtycbr=50681
182.161.74.16200 OK 114 kB URL HTTP/2 widget.as.criteo.com/event?a=94125&v=5.13.0&p0=e%3Dexd%26site_type%3Dd&p1=e%3Dvb%26p%3D%255Bi%25253D1%252526pr%25253D1%252526q%25253D1%255D&p2=e%3Dvb%26p%3D%255Bi%25253D1%252526pr%25253D1%252526q%25253D1%255D&p3=e%3Dvh&p4=e%3Dvb%26p%3D%255Bi%25253D1%252526pr%25253D1%252526q%25253D1%255D&p5=e%3Dvpg&p6=e%3Ddis&adce=1&bundle=DQRDy19GZHVDTVo2R1Rka3Nqak9Dbk1oJTJCMUs1YVpYU21odDFIYWNxWGpiNTEwaGVMRXBXc3hJWHg0VklQMUMxc0h1bll2QUNsV01Zd3pKd0Iya3FnZkxudmk3NGJBNkdKclBNZ3FMSlZKOXR3TVBkcFV2NVRYOHRmSFZORWp1N0gyRSUyRiUyQkJSQTl3Vm5LUHo5c3oxQjlmUTdqeEElM0QlM0Q&tld=lawsikho.com&dy=1&fu=https%253A%252F%252Flawsikho.com%252F%253Futm_source%253D1stlink%2526utm_medium%253Debook%2526utm_campaign%253Deshebook&dtycbr=50681
IP 182.161.74.16:0
File type ASCII text, with very long lines (64471)
Size 114 kB (114037 bytes)
Hash 5596128a35ebc80a98df3fc866d412aa
af18c53319b98353b6bbb93429e899a7fb638b96
70d0a77055d170e5fb28f87ebf593193974bc880f7bcc857afdfe4693610f105
GET /event?a=94125&v=5.13.0&p0=e%3Dexd%26site_type%3Dd&p1=e%3Dvb%26p%3D%255Bi%25253D1%252526pr%25253D1%252526q%25253D1%255D&p2=e%3Dvb%26p%3D%255Bi%25253D1%252526pr%25253D1%252526q%25253D1%255D&p3=e%3Dvh&p4=e%3Dvb%26p%3D%255Bi%25253D1%252526pr%25253D1%252526q%25253D1%255D&p5=e%3Dvpg&p6=e%3Ddis&adce=1&bundle=DQRDy19GZHVDTVo2R1Rka3Nqak9Dbk1oJTJCMUs1YVpYU21odDFIYWNxWGpiNTEwaGVMRXBXc3hJWHg0VklQMUMxc0h1bll2QUNsV01Zd3pKd0Iya3FnZkxudmk3NGJBNkdKclBNZ3FMSlZKOXR3TVBkcFV2NVRYOHRmSFZORWp1N0gyRSUyRiUyQkJSQTl3Vm5LUHo5c3oxQjlmUTdqeEElM0QlM0Q&tld=lawsikho.com&dy=1&fu=https%253A%252F%252Flawsikho.com%252F%253Futm_source%253D1stlink%2526utm_medium%253Debook%2526utm_campaign%253Deshebook&dtycbr=50681 HTTP/1.1
Host: widget.as.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lawsikho.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:57 GMT
content-type: application/x-javascript
server: Kestrel
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
p3p: NON DSP COR CURa PSA PSD OUR BUS NAV STA
timing-allow-origin: *
server-processing-duration-in-ticks: 25121054
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d8f5a2deecbc35371c7f82051f91bf17
17d43358be52c85429cf24eba91a88027b51baa6
83850f9227f0c75c116b2c642677b974012badd284362489b275f1472a54a192
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4408
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:58 GMT
Last-Modified: Tue, 31 Jan 2023 22:59:30 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c4181fcd16301236376120a768141454
bef35e09ea833ed4e81c23eafe93e94f2b517fc0
19db31d19bd5a046ce06ead05ec67211bd8bdb39f67935b38635b0f9af586deb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "19DB31D19BD5A046CE06EAD05EC67211BD8BDB39F67935B38635B0F9AF586DEB"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2945
Expires: Wed, 01 Feb 2023 01:02:03 GMT
Date: Wed, 01 Feb 2023 00:12:58 GMT
Connection: keep-alive
matching.ivitrack.com/sync?realm=criteo&uid=k-RzVAj3o62faPX7gDDdZ5ZduLa-VC12rr7yq2Lw
34.117.157.22200 OK 42 B URL HTTP/2 matching.ivitrack.com/sync?realm=criteo&uid=k-RzVAj3o62faPX7gDDdZ5ZduLa-VC12rr7yq2Lw
IP 34.117.157.22:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /sync?realm=criteo&uid=k-RzVAj3o62faPX7gDDdZ5ZduLa-VC12rr7yq2Lw HTTP/1.1
Host: matching.ivitrack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: istio-envoy
date: Wed, 01 Feb 2023 00:12:58 GMT
content-type: image/gif
content-length: 42
cache-control: public, max-age=86400
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: tag-manager.programmatic.svc.cluster.local:3000/*
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c4181fcd16301236376120a768141454
bef35e09ea833ed4e81c23eafe93e94f2b517fc0
19db31d19bd5a046ce06ead05ec67211bd8bdb39f67935b38635b0f9af586deb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "19DB31D19BD5A046CE06EAD05EC67211BD8BDB39F67935B38635B0F9AF586DEB"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2945
Expires: Wed, 01 Feb 2023 01:02:03 GMT
Date: Wed, 01 Feb 2023 00:12:58 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash 5bb2f16667c8d87dd0602626cd1140c6
d4dbe0a256125551db1ca0d2e149584d5a7d9da8
6f18118e9cf77f0f588e75d30755088647a5e330d64ee8ca6d7f65d071603ff0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 01 Feb 2023 00:12:58 GMT
Last-Modified: Tue, 31 Jan 2023 22:35:29 GMT
Server: ECS (bsa/EB1A)
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 8haWe1TGaQ0-MEFCEFryIpe5UweK_T1XNQOPDIAXX7nwpssGesbZYw==
Age: 5849
gum.criteo.com/sync?c=8&r=1&a=1&u=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D28645%26dpuuid%3D%40USERID%40
178.250.2.146302 Found 0 B URL HTTP/2 gum.criteo.com/sync?c=8&r=1&a=1&u=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D28645%26dpuuid%3D%40USERID%40
IP 178.250.2.146:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?c=8&r=1&a=1&u=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D28645%26dpuuid%3D%40USERID%40 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Wed, 01 Feb 2023 00:12:58 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=0, no-cache, no-store, must-revalidate
location: https://dpm.demdex.net/ibs:dpid=28645&dpuuid=
server-processing-duration-in-ticks: 815394
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
contextual.media.net/cksync.php?cs=3&type=crt&ovsid=k-TSa6WHo62faPX7gDDdZ5ZduLa-UAI8QbPMuyWQ
23.38.200.22200 OK 237 B URL HTTP/2 contextual.media.net/cksync.php?cs=3&type=crt&ovsid=k-TSa6WHo62faPX7gDDdZ5ZduLa-UAI8QbPMuyWQ
IP 23.38.200.22:0
File type GIF image data, version 87a, 1 x 1\012- data
Hash 74378edf31ef26cd97c236ad08d05fa3
fdd52cdbf193d1dfd1031978667689f3414b49ed
11cb2c0e70f91c6a0326cf4a4f9fa1b177c14efba6b56bf7535624b9c7bce990
GET /cksync.php?cs=3&type=crt&ovsid=k-TSa6WHo62faPX7gDDdZ5ZduLa-UAI8QbPMuyWQ HTTP/1.1
Host: contextual.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
content-length: 237
content-type: image/gif
set-cookie: visitor-id=3182119783580237000V10; Expires=Thu, 01 Feb 2024 00:12:58 GMT; domain=.media.net; Path=/;
data-c-ts=1675210378;Expires=Fri, 03 Mar 2023 00:12:58 GMT;path=/;domain=.media.net;
data-c=k-TSa6WHo62faPX7gDDdZ5ZduLa-UAI8QbPMuyWQ~~3;Expires=Fri, 03 Mar 2023 00:12:58 GMT;path=/;domain=.media.net;
p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA", CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA, CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA, CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
strict-transport-security: max-age=31536000
x-mnet-hl2: E
expires: Wed, 01 Feb 2023 00:12:58 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 01 Feb 2023 00:12:58 GMT
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-vendor.js
172.67.38.66200 OK 28 kB URL HTTP/2 embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-vendor.js
IP 172.67.38.66:0
File type ASCII text, with very long lines (65472)
Hash e6eeafaee8744cafc355e78368de175d
61ce6bf08460851f3aaee0d25932313fc10e02bd
1e7f88b6e033922a3cf4766cb55f7fce02666f3b307de39b0b12f9a6d82abc04
GET /_s/v4/app/63b77dcd282/js/twk-vendor.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:58 GMT
content-type: application/javascript
vary: X-Goog-Allowed-Resources, Accept-Encoding
last-modified: Fri, 06 Jan 2023 01:49:34 GMT
etag: W/"7dcb496e4882926f93f2e73fa87062c0"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 79267a807b93b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=cjp&google_sc&google_ula=913071&CriteoUserId=k-oJ9jQXo62faPX7gDDdZ5ZduLa-XMz68zJ6P8uA&google_cm&google_hm=ay1vSjlqUVhvNjJmYVBYN2dERGRaNVpkdUxhLVhNejY4eko2UDh1QQ
142.250.74.66302 Found 440 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=cjp&google_sc&google_ula=913071&CriteoUserId=k-oJ9jQXo62faPX7gDDdZ5ZduLa-XMz68zJ6P8uA&google_cm&google_hm=ay1vSjlqUVhvNjJmYVBYN2dERGRaNVpkdUxhLVhNejY4eko2UDh1QQ
IP 142.250.74.66:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 20c639edb4c577cf7b385ad9d95418ce
20d830552b0caf9eb05ed983eefcb54ce6ee0dd1
b8dcc779f7f8b1a520d8b1010fbf2d0b4297de44d8685a53bd06039578cf732a
GET /pixel?google_nid=cjp&google_sc&google_ula=913071&CriteoUserId=k-oJ9jQXo62faPX7gDDdZ5ZduLa-XMz68zJ6P8uA&google_cm&google_hm=ay1vSjlqUVhvNjJmYVBYN2dERGRaNVpkdUxhLVhNejY4eko2UDh1QQ HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=cjp&google_sc=&google_ula=913071&CriteoUserId=k-oJ9jQXo62faPX7gDDdZ5ZduLa-XMz68zJ6P8uA&google_cm=&google_hm=ay1vSjlqUVhvNjJmYVBYN2dERGRaNVpkdUxhLVhNejY4eko2UDh1QQ&google_tc=
date: Wed, 01 Feb 2023 00:12:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 440
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 01-Feb-2023 00:27:58 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID
185.83.142.19307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID
IP 185.83.142.19:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Wed, 01 Feb 2023 00:12:58 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fdis.criteo.com%2Fdis%2Frtb%2Fappnexus%2Fcookiematch.aspx%3Fappnxsid%3D%24UID
AN-X-Request-Uuid: c7b5da36-e1d6-411e-8963-1e9094edbc1d
Set-Cookie: uuid2=8732623904419785104; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 02-May-2023 00:12:58 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 7a37d5f14346f4c2d32067a67ed9cbf2
9364052ccda00fe675fe8cc3f2f244161f2a2f69
c0f55cbfc7ce76856115b4557edefe0c45f2b2979ed89b39fd92d185fddb8682
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 00:12:58 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 31 Jan 2023 13:56:49 GMT
Expires: Tue, 07 Feb 2023 13:56:48 GMT
Etag: "9364052ccda00fe675fe8cc3f2f244161f2a2f69"
Cache-Control: max-age=567229,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79267a834826b51e-OSL
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash 239bcbe509e76cd1b7f3280de740283b
e571fe316abb3ceb22fd6a4b1d3a055bf7a0703f
a399105f22b465ad2b65bf92a56f40a8d3da62ad836f69e97d7af1dd5a96aa21
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=134868
Date: Wed, 01 Feb 2023 00:12:58 GMT
Etag: "63d9111f-1d7"
Expires: Thu, 02 Feb 2023 13:40:46 GMT
Last-Modified: Tue, 31 Jan 2023 13:01:19 GMT
Server: ECS (nyb/1D0F)
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -MaxPuTZ3cBl8RzCcBKvHCSezr99-kafzAQBaG0iua1ujr7mRKhRuQ==
Age: 2367
x.bidswitch.net/sync?dsp_id=46&user_id=k-7NKy7Ho62faPX7gDDdZ5ZduLa-ULlN8xDgqSyA&expires=30
52.28.17.51302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?dsp_id=46&user_id=k-7NKy7Ho62faPX7gDDdZ5ZduLa-ULlN8xDgqSyA&expires=30
IP 52.28.17.51:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=46&user_id=k-7NKy7Ho62faPX7gDDdZ5ZduLa-ULlN8xDgqSyA&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 01 Feb 2023 00:12:58 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?dsp_id=46&user_id=k-7NKy7Ho62faPX7gDDdZ5ZduLa-ULlN8xDgqSyA&expires=30
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=8b0448f3-1008-424e-af44-dc99485736c1; path=/; expires=Thu, 01-Feb-2024 00:12:58 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675210378; path=/; expires=Thu, 01-Feb-2024 00:12:58 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1675210378; path=/; expires=Thu, 01-Feb-2024 00:12:58 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675210378; path=/; expires=Thu, 01-Feb-2024 00:12:58 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=cjp&google_sc=&google_ula=913071&CriteoUserId=k-oJ9jQXo62faPX7gDDdZ5ZduLa-XMz68zJ6P8uA&google_cm=&google_hm=ay1vSjlqUVhvNjJmYVBYN2dERGRaNVpkdUxhLVhNejY4eko2UDh1QQ&google_tc=
142.250.74.66302 Found 332 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=cjp&google_sc=&google_ula=913071&CriteoUserId=k-oJ9jQXo62faPX7gDDdZ5ZduLa-XMz68zJ6P8uA&google_cm=&google_hm=ay1vSjlqUVhvNjJmYVBYN2dERGRaNVpkdUxhLVhNejY4eko2UDh1QQ&google_tc=
IP 142.250.74.66:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 6f19315a6899061301c79228f318fa26
622db69c8ddb7a87735f4346368abc34b3a37359
7c4615e1820a59b88b8e4640b59c4b09770149ef07c18ba8ea2bee9d6fd1bc70
GET /pixel?google_nid=cjp&google_sc=&google_ula=913071&CriteoUserId=k-oJ9jQXo62faPX7gDDdZ5ZduLa-XMz68zJ6P8uA&google_cm=&google_hm=ay1vSjlqUVhvNjJmYVBYN2dERGRaNVpkdUxhLVhNejY4eko2UDh1QQ&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://dis.criteo.com/dis/rtb/google/cookiematch.aspx?id=&CriteoUserId=k-oJ9jQXo62faPX7gDDdZ5ZduLa-XMz68zJ6P8uA&google_error=3
date: Wed, 01 Feb 2023 00:12:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 332
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 41a4a3693b6cf7e1a345afbe00934ca7
6f072cde84187c4124dd88fab10a1296bcba998c
9e426a348b95f52ca2e18f09932f0e48046abd55f30c8a884da00d8e89d45bc4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 11
Cache-Control: max-age=89647
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:58 GMT
Etag: "63d869ae-1d7"
Expires: Thu, 02 Feb 2023 01:07:05 GMT
Last-Modified: Tue, 31 Jan 2023 01:06:54 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fdis.criteo.com%2Fdis%2Frtb%2Fappnexus%2Fcookiematch.aspx%3Fappnxsid%3D%24UID
185.83.142.19302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fdis.criteo.com%2Fdis%2Frtb%2Fappnexus%2Fcookiematch.aspx%3Fappnxsid%3D%24UID
IP 185.83.142.19:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fdis.criteo.com%2Fdis%2Frtb%2Fappnexus%2Fcookiematch.aspx%3Fappnxsid%3D%24UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Wed, 01 Feb 2023 00:12:58 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=0
AN-X-Request-Uuid: bb4bd24a-1a3e-4224-91a8-7250509d12e4
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 7dc82ed1be206d67519133c6d3552ee7
27e1b8eaac92902c0ed7fbf464ec196336c86a50
f483e88493213faeb45a11efafeadbdc3a7d739c3e9ea05cf4c92712d11cc400
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4435
Cache-Control: max-age=165012
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:58 GMT
Etag: "63d97ecb-118"
Expires: Thu, 02 Feb 2023 22:03:10 GMT
Last-Modified: Tue, 31 Jan 2023 20:49:15 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 280
eb2.3lift.com/xuid?mid=2711&xuid=k-3mVvono62faPX7gDDdZ5ZduLa-WiwqXUPn70qg&dongle=013b
76.223.111.18200 OK 37 B URL HTTP/2 eb2.3lift.com/xuid?mid=2711&xuid=k-3mVvono62faPX7gDDdZ5ZduLa-WiwqXUPn70qg&dongle=013b
IP 76.223.111.18:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /xuid?mid=2711&xuid=k-3mVvono62faPX7gDDdZ5ZduLa-WiwqXUPn70qg&dongle=013b HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:58 GMT
content-type: image/gif
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash d57d293aa9cc6e10e609e6b70ddc253f
7ca236cfea4a885594667b24f94dcbdcdb7dfec8
b5d9e35a17136600230e2b56a8b650e13fd05c097ab726a9d2705deeede1ae09
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5278
Cache-Control: max-age=110392
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:58 GMT
Etag: "63d8a624-139"
Expires: Thu, 02 Feb 2023 06:52:50 GMT
Last-Modified: Tue, 31 Jan 2023 05:24:52 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 313
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash 7b79a7bc908595175fd9d671dd1a3728
2ea901d1bac5dbe8eb771db3908aae5a6d49799b
cadb9664626d379cdc046693a5bfc4d0e264cf86ba6d73332f98309f30615e38
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 01 Feb 2023 00:12:58 GMT
Last-Modified: Tue, 31 Jan 2023 23:31:45 GMT
Server: ECS (nyb/1D35)
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ee3PLf17_8K85o-DIAkMGDxPAQoOKOcugPyblzrNcgeiPsh-Angscw==
Age: 2473
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-main.js
172.67.38.66200 OK 94 B URL HTTP/2 embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-main.js
IP 172.67.38.66:0
File type ASCII text, with no line terminators
Hash 913b447ec871ab7eec8bec1005ff8e77
f95d547853ca5c389299636dfc202157042bb4c5
49aee71bb91db74830cb43c94ad5aeaf0d1e4e82de7006266707bca0ef046155
GET /_s/v4/app/63b77dcd282/js/twk-main.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:58 GMT
content-type: application/javascript
vary: X-Goog-Allowed-Resources, Accept-Encoding
last-modified: Fri, 06 Jan 2023 01:49:34 GMT
etag: W/"da5bb1dc647470204df0e49f5afac2de"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 79267a807b92b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 67b956f91e0ecbb41ce4a9833f4dd06b
3379c68321b2f4e7985817719ce7cfb002ddafab
6d3e66f038a2387ee32bd95dfa43fe43f9538f9c70b63dc9d7bf99776b2576ff
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1748
Cache-Control: max-age=141040
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:58 GMT
Etag: "63d92ba6-1d7"
Expires: Thu, 02 Feb 2023 15:23:38 GMT
Last-Modified: Tue, 31 Jan 2023 14:54:30 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-jBP8oHo62faPX7gDDdZ5ZduLa-Vchs6vAt5HcQ
104.18.33.19302 Found 0 B URL HTTP/2 r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-jBP8oHo62faPX7gDDdZ5ZduLa-Vchs6vAt5HcQ
IP 104.18.33.19:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rum?cm_dsp_id=20&external_user_id=k-jBP8oHo62faPX7gDDdZ5ZduLa-Vchs6vAt5HcQ HTTP/1.1
Host: r.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 01 Feb 2023 00:12:58 GMT
content-length: 0
location: /rum?cm_dsp_id=20&external_user_id=k-jBP8oHo62faPX7gDDdZ5ZduLa-Vchs6vAt5HcQ&C=1
cf-ray: 79267a841c891c16-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=Y9muioT21wGX6GkAomEE8QAA; Path=/; Domain=casalemedia.com; Expires=Thu, 01 Feb 2024 00:12:58 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=703; Path=/; Domain=casalemedia.com; Expires=Tue, 02 May 2023 00:12:58 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=703; Path=/; Domain=casalemedia.com; Expires=Tue, 02 May 2023 00:12:58 GMT; Max-Age=7776000; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jyZCu0wu%2FQv6VnavMk%2Fx5YosHSKtKgCdQbLA1cLV2WospStFF7sKhK5LY99ebiFbHzu6kUQJkrStENhFiFdhjUILOqRV3E5rP1R58NSLD%2FFw8FtRvsvkxh%2FuVv6FWThjXxYv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
x.bidswitch.net/ul_cb/sync?dsp_id=46&user_id=k-7NKy7Ho62faPX7gDDdZ5ZduLa-ULlN8xDgqSyA&expires=30
52.28.17.51200 OK 43 B URL HTTP/2 x.bidswitch.net/ul_cb/sync?dsp_id=46&user_id=k-7NKy7Ho62faPX7gDDdZ5ZduLa-ULlN8xDgqSyA&expires=30
IP 52.28.17.51:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/sync?dsp_id=46&user_id=k-7NKy7Ho62faPX7gDDdZ5ZduLa-ULlN8xDgqSyA&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:58 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash 8b4033ce2ad139c7c70f653fb347c945
02b5407f5c73d65294ce35e21fc2a274505c3af3
14b3fca4421b42bc6c05ebc6fdb9b12cb443fb0c8799264620e8f138e40b47c6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=91930
Date: Wed, 01 Feb 2023 00:12:58 GMT
Etag: "63d862b7-1d7"
Expires: Thu, 02 Feb 2023 01:45:08 GMT
Last-Modified: Tue, 31 Jan 2023 00:37:11 GMT
Server: ECS (bsa/EB24)
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: RXvqUacwDy5MELSmkPTh50Ds3WFnrvm3VR-_iJBQhs8IcEFEcK0_CA==
Age: 4077
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 6dca001902790a696797268697c11e63
8b4712b998ef301650ac58ef455fa6f6f72974ee
c61856dd63dd38f59c0b6ae17032ebd48a9a341d77862b85db793e0e67d228be
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3644
Cache-Control: max-age=144012
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:58 GMT
Etag: "63d92fda-1d7"
Expires: Thu, 02 Feb 2023 16:13:10 GMT
Last-Modified: Tue, 31 Jan 2023 15:12:26 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash f05280f3b6585309cc122d7e1273bbe6
900fd9ca57f4c0c173be4eabd61b7b596c26c29a
82efaee85dab4763ddaa8f4c6cb2ef3ff7ff94662be09f305b99a09a2f7f8825
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5850
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:58 GMT
Last-Modified: Tue, 31 Jan 2023 22:35:28 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
rtb-csync.smartadserver.com/redir/?partnerid=79&partneruserid=k-lUc1THo62faPX7gDDdZ5ZduLa-Vsfw9VIibzvg
185.86.137.131200 OK 43 B URL HTTP/1.1 rtb-csync.smartadserver.com/redir/?partnerid=79&partneruserid=k-lUc1THo62faPX7gDDdZ5ZduLa-Vsfw9VIibzvg
IP 185.86.137.131:0
ASN #201081 SmartAdServer SAS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /redir/?partnerid=79&partneruserid=k-lUc1THo62faPX7gDDdZ5ZduLa-Vsfw9VIibzvg HTTP/1.1
Host: rtb-csync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: image/gif
date: Wed, 01 Feb 2023 00:12:58 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: pid=4081624184785169458; expires=Sun, 03 Mar 2024 00:12:58 GMT; domain=smartadserver.com; path=/
TestIfCookieP=ok; expires=Sun, 03 Mar 2024 00:12:58 GMT; domain=smartadserver.com; path=/
csync=79:k-lUc1THo62faPX7gDDdZ5ZduLa-Vsfw9VIibzvg; expires=Thu, 01 Feb 2024 00:12:58 GMT; domain=smartadserver.com; path=/
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-app.js
172.67.38.66200 OK 118 B URL HTTP/2 embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-app.js
IP 172.67.38.66:0
File type ASCII text, with no line terminators
Hash 642cc7fe433730863a2a4aa42c7d6f3f
c05acfe8ca7107d5e8af44f17f607d5c30a58e79
5faae667f7933f5079f0655f81bed6c70f19b4beb872e07fea3e28f17f2efeab
GET /_s/v4/app/63b77dcd282/js/twk-app.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:58 GMT
content-type: application/javascript
vary: X-Goog-Allowed-Resources, Accept-Encoding
last-modified: Fri, 06 Jan 2023 01:49:34 GMT
etag: W/"e736e189edb5d0d9d5b8e7f23dd9114a"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 79267a809ba7b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cm.adform.net/pixel?adform_pid=15&adform_pc=k-zxZgxXo62faPX7gDDdZ5ZduLa-UUP1HY-JCCDA
37.157.6.254200 OK 43 B URL HTTP/2 cm.adform.net/pixel?adform_pid=15&adform_pc=k-zxZgxXo62faPX7gDDdZ5ZduLa-UUP1HY-JCCDA
IP 37.157.6.254:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /pixel?adform_pid=15&adform_pc=k-zxZgxXo62faPX7gDDdZ5ZduLa-UUP1HY-JCCDA HTTP/1.1
Host: cm.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 00:12:58 GMT
content-type: image/gif
content-length: 43
last-modified: Fri, 18 Nov 2022 14:39:11 GMT
etag: "6377990f-2b"
accept-ranges: bytes
X-Firefox-Spdy: h2
ad.yieldlab.net/m?dt_id=8664&ext_id=k-tP9byno62faPX7gDDdZ5ZduLa-XtNbsfMif4xg
23.13.245.180204 No Content 0 B URL HTTP/1.1 ad.yieldlab.net/m?dt_id=8664&ext_id=k-tP9byno62faPX7gDDdZ5ZduLa-XtNbsfMif4xg
IP 23.13.245.180:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /m?dt_id=8664&ext_id=k-tP9byno62faPX7gDDdZ5ZduLa-XtNbsfMif4xg HTTP/1.1
Host: ad.yieldlab.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
x-application-context: application
Cache-Control: no-store,no-cache,max-age=-3600,must-revalidate,post-check=0,pre-check=0
Pragma: no-cache
Expires: Tue, 31 Jan 2023 00:12:58 GMT
Date: Wed, 01 Feb 2023 00:12:58 GMT
Connection: keep-alive
Set-Cookie: id=127bba99-f2e5-4542-b836-42ff1944bbc0; Path=/; Domain=prod.svc.y6b.de; Expires=Thu, 01-Feb-2024 00:12:58 GMT; Max-Age=31536000; Secure; SameSite=None
r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-jBP8oHo62faPX7gDDdZ5ZduLa-Vchs6vAt5HcQ&C=1
104.18.33.19200 OK 43 B URL HTTP/2 r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-jBP8oHo62faPX7gDDdZ5ZduLa-Vchs6vAt5HcQ&C=1
IP 104.18.33.19:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /rum?cm_dsp_id=20&external_user_id=k-jBP8oHo62faPX7gDDdZ5ZduLa-Vchs6vAt5HcQ&C=1 HTTP/1.1
Host: r.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:58 GMT
content-type: image/gif
content-length: 43
cf-ray: 79267a846cb11c16-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XvXxfKrwnbuRVBrPjoW5zOsVV7YORopUyjmA19Sa2nUyJwBA1fWo%2FIoW4y68irJm6zhZUruLH6vD5RH%2Fcwin0Jq8hk9cN1enwDcBkHH2h4lhovN29lY8%2BuZc9lVj2zRkhcZ1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ad.360yield.com/match?publisher_dsp_id=38&external_user_id=k-bflFU3o62faPX7gDDdZ5ZduLa-XP3UtRC33xVw
18.185.128.114302 Found 0 B URL HTTP/2 ad.360yield.com/match?publisher_dsp_id=38&external_user_id=k-bflFU3o62faPX7gDDdZ5ZduLa-XP3UtRC33xVw
IP 18.185.128.114:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?publisher_dsp_id=38&external_user_id=k-bflFU3o62faPX7gDDdZ5ZduLa-XP3UtRC33xVw HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 01 Feb 2023 00:12:58 GMT
content-type: text/plain
content-length: 0
location: https://ad.360yield.com/ul_cb/match?publisher_dsp_id=38&external_user_id=k-bflFU3o62faPX7gDDdZ5ZduLa-XP3UtRC33xVw
set-cookie: tuuid=9c085406-e364-4fd9-9469-9c9fa13874ff; Expires=Tue, 02 May 2023 00:12:58 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
tuuid_lu=1675210378; Expires=Tue, 02 May 2023 00:12:58 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-XYHIbXo62faPX7gDDdZ5ZduLa-UNfJecgAC9HQ
18.156.0.31302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-XYHIbXo62faPX7gDDdZ5ZduLa-UNfJecgAC9HQ
IP 18.156.0.31:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58301/sync?_origin=1&uid=k-XYHIbXo62faPX7gDDdZ5ZduLa-UNfJecgAC9HQ HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 01 Feb 2023 00:12:58 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-XYHIbXo62faPX7gDDdZ5ZduLa-UNfJecgAC9HQ&verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBIqu2WMCEJeY1rKOhrpbtKg0ABmHUSwFEgEBAQEA22PjYwAAAAAA_eMAAA&S=AQAAApet8ooacmfhYlCF9ldWC1Q; Expires=Thu, 1 Feb 2024 06:12:58 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash ba0a5a019f68de808d546b25f5f1afd9
33c3d1972b2d517029bab1e749ee1374300491d9
edfd8175f0da704eb77840543eb2913a223a94107e3c4adb2bf30b8bda9fe991
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3493
Cache-Control: max-age=111136
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:59 GMT
Etag: "63d8b006-1d7"
Expires: Thu, 02 Feb 2023 07:05:15 GMT
Last-Modified: Tue, 31 Jan 2023 06:07:02 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
tr.snapchat.com/config/com/77b7d5bf-df7a-4590-9a71-ca1cea79d8e8.js
35.190.43.134200 OK 191 B URL HTTP/2 tr.snapchat.com/config/com/77b7d5bf-df7a-4590-9a71-ca1cea79d8e8.js
IP 35.190.43.134:0
Hash 3a80f425f492307d3511bfe8b1ecd6ff
04d73c1572b5d7866d63c0670e2948dd7d346129
b453782e872e9a4e1180f8903b15f8af73b95f0682e6a8ee30ae868667f6c6ea
GET /config/com/77b7d5bf-df7a-4590-9a71-ca1cea79d8e8.js HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:58 GMT
access-control-allow-origin: https://lawsikho.com
content-type: application/javascript
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ad.360yield.com/ul_cb/match?publisher_dsp_id=38&external_user_id=k-bflFU3o62faPX7gDDdZ5ZduLa-XP3UtRC33xVw
18.185.128.114200 OK 43 B URL HTTP/2 ad.360yield.com/ul_cb/match?publisher_dsp_id=38&external_user_id=k-bflFU3o62faPX7gDDdZ5ZduLa-XP3UtRC33xVw
IP 18.185.128.114:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/match?publisher_dsp_id=38&external_user_id=k-bflFU3o62faPX7gDDdZ5ZduLa-XP3UtRC33xVw HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:59 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 7dc82ed1be206d67519133c6d3552ee7
27e1b8eaac92902c0ed7fbf464ec196336c86a50
f483e88493213faeb45a11efafeadbdc3a7d739c3e9ea05cf4c92712d11cc400
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4436
Cache-Control: max-age=165012
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:59 GMT
Etag: "63d97ecb-118"
Expires: Thu, 02 Feb 2023 22:03:11 GMT
Last-Modified: Tue, 31 Jan 2023 20:49:15 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 280
exchange.mediavine.com/usersync/push?partner=criteo&partnerId=k-N4mlZ3o62faPX7gDDdZ5ZduLa-UDRFAHzcc0RztLmnZIN8gu
18.197.252.47200 OK 20 B URL HTTP/2 exchange.mediavine.com/usersync/push?partner=criteo&partnerId=k-N4mlZ3o62faPX7gDDdZ5ZduLa-UDRFAHzcc0RztLmnZIN8gu
IP 18.197.252.47:0
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /usersync/push?partner=criteo&partnerId=k-N4mlZ3o62faPX7gDDdZ5ZduLa-UDRFAHzcc0RztLmnZIN8gu HTTP/1.1
Host: exchange.mediavine.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:58 GMT
content-type: text/html; charset=utf-8
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
cache-control: private, no-cache
set-cookie: mv_tokens=%7B%22mv_uuid%22%3A%222ef12be0-a1c5-11ed-b43c-db237ab55835%22%2C%22version%22%3A%22eu-v1%22%7D; Path=/; Expires=Wed, 15 Feb 2023 00:12:58 GMT; Secure; SameSite=None
mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%222ef12be0-a1c5-11ed-b43c-db237ab55835%22%2C%22version%22%3A%22eu-v1%22%7D; Path=/; Expires=Wed, 15 Feb 2023 00:12:58 GMT; Secure; SameSite=None
am_tokens=%7B%22mv_uuid%22%3A%222ef12be0-a1c5-11ed-b43c-db237ab55835%22%2C%22version%22%3A%22eu-v1%22%7D; Path=/; Expires=Wed, 15 Feb 2023 00:12:58 GMT; Secure; SameSite=None
am_tokens_eu-v1=%7B%22mv_uuid%22%3A%222ef12be0-a1c5-11ed-b43c-db237ab55835%22%2C%22version%22%3A%22eu-v1%22%7D; Path=/; Expires=Wed, 15 Feb 2023 00:12:58 GMT; Secure; SameSite=None
criteo=%7B%22id%22%3A%22k-N4mlZ3o62faPX7gDDdZ5ZduLa-UDRFAHzcc0RztLmnZIN8gu%22%2C%22version%22%3A%22criteo%22%7D; Path=/; Expires=Wed, 15 Feb 2023 00:12:58 GMT; Secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-XYHIbXo62faPX7gDDdZ5ZduLa-UNfJecgAC9HQ&verify=true
18.156.0.31204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-XYHIbXo62faPX7gDDdZ5ZduLa-UNfJecgAC9HQ&verify=true
IP 18.156.0.31:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58301/sync?_origin=1&uid=k-XYHIbXo62faPX7gDDdZ5ZduLa-UNfJecgAC9HQ&verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 01 Feb 2023 00:12:59 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBIuu2WMCEJOvhVwkw7ddbwWquKhGy4YFEgEBAQEA22PjYwAAAAAA_eMAAA&S=AQAAAlaWhIp0P12kPPrRxmVJQXU; Expires=Thu, 1 Feb 2024 06:12:59 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=28645&dpuuid=
34.250.119.25200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=28645&dpuuid=
IP 34.250.119.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=28645&dpuuid= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-1-v045-0078884aa.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: Ki8l2yAIQOY=
Content-Length: 59
Connection: keep-alive
sync.outbrain.com/cookie-sync?p=criteo&uid=k-ki3SJXo62faPX7gDDdZ5ZduLa-UO8_pRPsm8VA
70.42.32.191200 OK 408 B URL HTTP/1.1 sync.outbrain.com/cookie-sync?p=criteo&uid=k-ki3SJXo62faPX7gDDdZ5ZduLa-UO8_pRPsm8VA
IP 70.42.32.191:0
File type JSON data\012- , ASCII text, with very long lines (408), with no line terminators
Hash 57de7889684b7342664382aae05316c4
44d54401eeb29a21e7d6b18413bc4970882a740f
b18923e52113e8f3bc192baf1eb97dcf63c19a97b9405334b2c03974c48aec0c
GET /cookie-sync?p=criteo&uid=k-ki3SJXo62faPX7gDDdZ5ZduLa-UO8_pRPsm8VA HTTP/1.1
Host: sync.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 00:12:59 GMT
Content-Type: application/json
Content-Length: 408
Cache-Control: no-cache
X-TraceId: 7a1ab8a477428ff078657cb12fb189fa
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash f95e6378a219589583139355cc36a843
6e36a793d76636e30b6fd01e9a80afd45bda8d74
e4a1ad91126f1386a75a39cadf584a8cdc99478ba9ca27651e9ed3218569b8ad
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=133861
Date: Wed, 01 Feb 2023 00:12:59 GMT
Etag: "63d90302-1d7"
Expires: Thu, 02 Feb 2023 13:24:00 GMT
Last-Modified: Tue, 31 Jan 2023 12:01:06 GMT
Server: ECS (nyb/1D10)
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 65aB63MIxZhw_-dM6xisLtBTzB0MAitY7JkdgmCDabkHYb4rzZ58EA==
Age: 4974
cdnt.netcoresmartech.com/swv4.js
2.21.240.102200 OK 36 kB URL HTTP/2 cdnt.netcoresmartech.com/swv4.js
IP 2.21.240.102:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (592)
Hash 2c232f1816f7bd044571f98990485b17
d83825a879347a2f06f931c86ade5b522d5b9f20
3f535d2c7f69338e5b1db8742abfd0885a0b013cd3204db2b4af547650b77d74
GET /swv4.js HTTP/1.1
Host: cdnt.netcoresmartech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-amz-id-2: QA7afFH6hz0ZEWEVG2T4srdIRa1GqflglCOAW9qjAj7OtxfhinQMtFjDHSeouH2mxAfmcJUurew=
x-amz-request-id: 712E6VJ9DSWKE6NA
last-modified: Wed, 16 Feb 2022 11:26:32 GMT
etag: "7e2a27f61f7ce61f1313ff98c19a315c"
x-amz-meta-cache-control: max-age=2592000
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=395984
expires: Sun, 05 Feb 2023 14:12:43 GMT
date: Wed, 01 Feb 2023 00:12:59 GMT
content-length: 35963
server-timing: cdn-cache; desc=HIT, edge; dur=1
access-control-allow-origin: *
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=83&r=1&a=1&u=https%3A%2F%2Fbeacon.krxd.net%2Fusermatch.gif%3Fpartner%3Dcriteo%26partner_uid%3D%40USERID%40
178.250.2.146302 Found 0 B URL HTTP/2 gum.criteo.com/sync?c=83&r=1&a=1&u=https%3A%2F%2Fbeacon.krxd.net%2Fusermatch.gif%3Fpartner%3Dcriteo%26partner_uid%3D%40USERID%40
IP 178.250.2.146:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?c=83&r=1&a=1&u=https%3A%2F%2Fbeacon.krxd.net%2Fusermatch.gif%3Fpartner%3Dcriteo%26partner_uid%3D%40USERID%40 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Wed, 01 Feb 2023 00:12:58 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=0, no-cache, no-store, must-revalidate
location: https://beacon.krxd.net/usermatch.gif?partner=criteo&partner_uid=
server-processing-duration-in-ticks: 888388
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash 61dea6157a05806089a1de6794c639a5
9c693faa2a6c2ab612ad4f94d8376985dd960202
de2603c5c56d0b5d342947f06890c93bbf3ac28bb18cab30974ce812624c03cf
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 01 Feb 2023 00:12:58 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 30 Jan 2023 21:27:39 GMT
Expires: Wed, 01 Feb 2023 00:12:59 GMT
ETag: "9c693faa2a6c2ab612ad4f94d8376985dd960202"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash 59c813ae81fc5a456cc4880093d6cb1e
e3ea64de05741b68f4da4f1a7217fe82d695ea26
02c6c5c7b79807f525d9d9cc9f0d8c0170a4bf53b54ab740a2b935859bbd7018
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 01 Feb 2023 00:12:59 GMT
Last-Modified: Tue, 31 Jan 2023 23:30:57 GMT
Server: ECS (nyb/1D2A)
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: v1X8MUnFNiIf_-xbNyqrpZXXJ3WbfiLgbI3s5yGNDD4xjKTBbC3Dlw==
Age: 2522
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 571578fe8105fb9db1d98412455228cd
06ffedbca8683a0bb6fb9ba9c034d390fe7badfe
76470b9660bda8693c9180aefc7168be548dfc6f392dc9f03e0dcedc64621ba7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 00:12:59 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 15:11:55 GMT
Expires: Sat, 04 Feb 2023 15:11:54 GMT
Etag: "06ffedbca8683a0bb6fb9ba9c034d390fe7badfe"
Cache-Control: max-age=312534,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79267a8468feb51e-OSL
sync-criteo.ads.yieldmo.com/sync?id=k-lIdgKXo62faPX7gDDdZ5ZduLa-X8wDD1g8EMFg&pn_id=criteo&ext=1
52.209.250.172200 OK 43 B URL HTTP/2 sync-criteo.ads.yieldmo.com/sync?id=k-lIdgKXo62faPX7gDDdZ5ZduLa-X8wDD1g8EMFg&pn_id=criteo&ext=1
IP 52.209.250.172:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /sync?id=k-lIdgKXo62faPX7gDDdZ5ZduLa-X8wDD1g8EMFg&pn_id=criteo&ext=1 HTTP/1.1
Host: sync-criteo.ads.yieldmo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:59 GMT
content-type: image/gif
content-length: 43
set-cookie: yieldmo_id=gffb8de31b826b728a2e%7C1675210379133%7C0%7C; Domain=.yieldmo.com; Expires=Thu, 01-Feb-2024 00:12:59 GMT; Path=/; Secure; SameSite=None; Secure
ptrcriteo=k-lIdgKXo62faPX7gDDdZ5ZduLa-X8wDD1g8EMFg; Domain=ads.yieldmo.com; Expires=Thu, 01-Feb-2024 00:12:59 GMT; Path=/; Secure; SameSite=None; Secure
access-control-allow-origin: *
access-control-request-headers: Cache-Control, Pragma
access-control-allow-methods: GET, OPTIONS
pragma: no-cache
X-Firefox-Spdy: h2
e1.emxdgt.com/put?d=d53&uid=k-jql0wno62faPX7gDDdZ5ZduLa-X43NA0hWrJW_P1meDHCWzf
18.158.8.202204 No Content 0 B URL HTTP/2 e1.emxdgt.com/put?d=d53&uid=k-jql0wno62faPX7gDDdZ5ZduLa-X43NA0hWrJW_P1meDHCWzf
IP 18.158.8.202:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /put?d=d53&uid=k-jql0wno62faPX7gDDdZ5ZduLa-X43NA0hWrJW_P1meDHCWzf HTTP/1.1
Host: e1.emxdgt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
content-type: text/html
date: Wed, 01 Feb 2023 00:12:59 GMT
content-length: 0
X-Firefox-Spdy: h2
visitor.omnitagjs.com/visitor/sync?uid=732efe97317e6352de4c1caf24b5064b&name=CRITEO&visitor=k-cPHWsHo62faPX7gDDdZ5ZduLa-UJlcPCEpSnKQ
185.255.84.152200 OK 49 B URL HTTP/2 visitor.omnitagjs.com/visitor/sync?uid=732efe97317e6352de4c1caf24b5064b&name=CRITEO&visitor=k-cPHWsHo62faPX7gDDdZ5ZduLa-UJlcPCEpSnKQ
IP 185.255.84.152:0
ASN #200271 Iguane Solutions SAS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 4408efc0174f07ad685c456f1de521ca
e3bc3250f8f32bd98dc7b05fd8940b74617eb8d1
d1371feb0512d700cf724b05a588ce79f8d8dfbb0991ae5f45ecd3ab08983a38
GET /visitor/sync?uid=732efe97317e6352de4c1caf24b5064b&name=CRITEO&visitor=k-cPHWsHo62faPX7gDDdZ5ZduLa-UJlcPCEpSnKQ HTTP/1.1
Host: visitor.omnitagjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=3c2f6a9429e02c0d8b4aeea8225d6b9e; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Wed, 01 Feb 2023 00:12:58 GMT
content-length: 49
x-envoy-upstream-service-time: 3
server: ayl-lb-fra02
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b108f85f518789e4407173de7290f564
37a4c72b8cafa2d2b0d38340338ec38e82e06534
6c3aab441a49813af851356e31b86fc0646c20dec6d4e218e3ac1cdb6c2a61b9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2469
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 00:12:59 GMT
Last-Modified: Tue, 31 Jan 2023 23:31:50 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
twa.netcoresmartech.com/dispatch_webpushact?user_key=ADGMOT35CHFLVDHBJNIG50K96BCB6ERFCRTJ2IPEB9HT6EC5N980&customer_key=&uuid=eaf7009b-53d8-47ab-9604-68fb955c0fd9&siteid=9a470f4d16c27634e13d78f1bc5266ba&browser=firefox&sid=1675210396223&visit=new&pts=0&sts=1&url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&tx=1675210396223&npv=1&title=Lawsikho&usertimings=1675210398174&web_activity=11
13.126.178.65200 OK 4.1 kB URL HTTP/2 twa.netcoresmartech.com/dispatch_webpushact?user_key=ADGMOT35CHFLVDHBJNIG50K96BCB6ERFCRTJ2IPEB9HT6EC5N980&customer_key=&uuid=eaf7009b-53d8-47ab-9604-68fb955c0fd9&siteid=9a470f4d16c27634e13d78f1bc5266ba&browser=firefox&sid=1675210396223&visit=new&pts=0&sts=1&url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&tx=1675210396223&npv=1&title=Lawsikho&usertimings=1675210398174&web_activity=11
IP 13.126.178.65:0
Hash cad7dc8eedacec93fce1b248a6634b1b
fbe4ba052acdfdf7ec1d83576bcfd201a1b0155e
3e71f79b7df15b1b3a657c9bf4ee175fb846c6df9096e6ea257935d68587e1d4
GET /dispatch_webpushact?user_key=ADGMOT35CHFLVDHBJNIG50K96BCB6ERFCRTJ2IPEB9HT6EC5N980&customer_key=&uuid=eaf7009b-53d8-47ab-9604-68fb955c0fd9&siteid=9a470f4d16c27634e13d78f1bc5266ba&browser=firefox&sid=1675210396223&visit=new&pts=0&sts=1&url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&tx=1675210396223&npv=1&title=Lawsikho&usertimings=1675210398174&web_activity=11 HTTP/1.1
Host: twa.netcoresmartech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: awselb/2.0
date: Wed, 01 Feb 2023 00:12:59 GMT
content-type: text/plain
content-length: 7
access-control-allow-origin: *
X-Firefox-Spdy: h2
beacon.krxd.net/usermatch.gif?partner=criteo&partner_uid=
52.208.71.104204 No Content 0 B URL HTTP/2 beacon.krxd.net/usermatch.gif?partner=criteo&partner_uid=
IP 52.208.71.104:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch.gif?partner=criteo&partner_uid= HTTP/1.1
Host: beacon.krxd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 01 Feb 2023 00:12:59 GMT
set-cookie: _kuid_=PWj3ex1R; Expires=Mon, 31-Jul-23 00:12:59 GMT; Max-Age=15552000; Domain=.krxd.net; Path=/
cache-control: private, no-cache, no-store
p3p: policyref="https://cdn.krxd.net/kruxcontent/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC"
x-served-by: beacon-n022-dub-prod.krxd.net
x-request-time: D=29 t=1675210379
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=10&r=1&u=https%3A%2F%2Fs.thebrighttag.com%2Fcs%3Fbtt%3D0%26tp%3Dcr%26uid%3D%40USERID%40
178.250.2.146302 Found 0 B URL HTTP/2 gum.criteo.com/sync?c=10&r=1&u=https%3A%2F%2Fs.thebrighttag.com%2Fcs%3Fbtt%3D0%26tp%3Dcr%26uid%3D%40USERID%40
IP 178.250.2.146:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?c=10&r=1&u=https%3A%2F%2Fs.thebrighttag.com%2Fcs%3Fbtt%3D0%26tp%3Dcr%26uid%3D%40USERID%40 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Wed, 01 Feb 2023 00:12:59 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=0, no-cache, no-store, must-revalidate
location: https://s.thebrighttag.com/cs?btt=0&tp=cr&uid=
server-processing-duration-in-ticks: 515762
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js
151.101.65.229200 OK 68 kB URL HTTP/2 cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js
IP 151.101.65.229:0
Hash 1737dd7d53c9950f2abaa789585e3268
e6fb2c7733cb49dc97c57c2db171d4e028472cd1
29aaf501d6900a3384f2633c922f7c0f31026f5215006733077d7c85425aada1
GET /emojione/2.2.7/lib/js/emojione.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
etag: W/"49dda-cp9vjKV4fYl0Ow7X6yf9dkBr+YU"
content-encoding: gzip
accept-ranges: bytes
date: Wed, 01 Feb 2023 00:12:59 GMT
age: 27356735
x-served-by: cache-fra19156-FRA, cache-bma1677-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 53889
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
104.18.21.226200 OK 23 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP 104.18.21.226:0
Hash e1952fd63693e8f79e072c41f7a89088
29bcca5f2ed1011694a6078c61a16049d4f313dd
e371b74e2f087cd907cd5e660ef5b608ebaa97b7229ba2f462ef11ddbaa2b344
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 00:12:59 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "5FE4EEF9189A2FD1FD7075AA17DBD8DF1F8D0BAD"
Expires: Wed, 01 Feb 2023 11:00:00 GMT
Last-Modified: Tue, 31 Jan 2023 23:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1176
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79267a88e98ab4e8-OSL
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash e68f86f88e2366c8d48bf8e06c0c1b5f
2e18aaa764a9407103b2231a74f260bbb1313526
33c1861218d49922a2475b6a342f78eb107df477c6b5b591dbf5ef53f21d2067
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "33C1861218D49922A2475B6A342F78EB107DF477C6B5B591DBF5EF53F21D2067"
Last-Modified: Tue, 31 Jan 2023 20:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3490
Expires: Wed, 01 Feb 2023 01:11:09 GMT
Date: Wed, 01 Feb 2023 00:12:59 GMT
Connection: keep-alive
s.thebrighttag.com/cs?btt=0&tp=cr&uid=
18.116.57.128200 OK 35 B URL HTTP/2 s.thebrighttag.com/cs?btt=0&tp=cr&uid=
IP 18.116.57.128:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /cs?btt=0&tp=cr&uid= HTTP/1.1
Host: s.thebrighttag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:59 GMT
content-type: image/gif
content-length: 35
x-bt-requestid: 2fa3b301-a1c5-11ed-9fc6-0000ac1702fb
cache-control: private, must-revalidate
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin:
server: nginx
p3p: CP=NOI DSP COR NID
X-Firefox-Spdy: h2
vsb58.tawk.to/s/?k=63d9ae8bef55153d259c558a&cver=0&pop=false&asver=103881&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI1OTZkZjY3ZTZlZGMxYzEwYjAzNDY4NGIiLCJ2aWQiOiI1OTZkZjY3ZTZlZGMxYzEwYjAzNDY4NGItWW5VdXdPcUFDOGxkdFFYZG5OazVkIiwic2lkIjoiNjNkOWFlOGJlZjU1MTUzZDI1OWM1NThhIiwiaWF0IjoxNjc1MjEwMzc5LCJleHAiOjE2NzUyMTIxNzksImp0aSI6IkFYNW1lR2NsOWVKTEJJSUItTFlqaiJ9.EdfLfr0jyqQD6JqJ44IEzxApmfanDIMVbt_87-CJgmlC6Ny33aPMoqBArIeYegskK35FiekdZPcB-vfQWdjn8w&EIO=3&transport=websocket&__t=OOAKXhD
104.22.25.131101 Switching Protocols 4.8 kB URL HTTP/1.1 vsb58.tawk.to/s/?k=63d9ae8bef55153d259c558a&cver=0&pop=false&asver=103881&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI1OTZkZjY3ZTZlZGMxYzEwYjAzNDY4NGIiLCJ2aWQiOiI1OTZkZjY3ZTZlZGMxYzEwYjAzNDY4NGItWW5VdXdPcUFDOGxkdFFYZG5OazVkIiwic2lkIjoiNjNkOWFlOGJlZjU1MTUzZDI1OWM1NThhIiwiaWF0IjoxNjc1MjEwMzc5LCJleHAiOjE2NzUyMTIxNzksImp0aSI6IkFYNW1lR2NsOWVKTEJJSUItTFlqaiJ9.EdfLfr0jyqQD6JqJ44IEzxApmfanDIMVbt_87-CJgmlC6Ny33aPMoqBArIeYegskK35FiekdZPcB-vfQWdjn8w&EIO=3&transport=websocket&__t=OOAKXhD
IP 104.22.25.131:0
Hash 62cb9f7b38c2200150cbc1abf1167d67
5f54a4eaa0f0748a4a593be180e8d5724d89c88a
3bb68a5f9e96745a70cd8155442f8ca39faf364b0b0025cd42ce4a8a31ac851b
GET /s/?k=63d9ae8bef55153d259c558a&cver=0&pop=false&asver=103881&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI1OTZkZjY3ZTZlZGMxYzEwYjAzNDY4NGIiLCJ2aWQiOiI1OTZkZjY3ZTZlZGMxYzEwYjAzNDY4NGItWW5VdXdPcUFDOGxkdFFYZG5OazVkIiwic2lkIjoiNjNkOWFlOGJlZjU1MTUzZDI1OWM1NThhIiwiaWF0IjoxNjc1MjEwMzc5LCJleHAiOjE2NzUyMTIxNzksImp0aSI6IkFYNW1lR2NsOWVKTEJJSUItTFlqaiJ9.EdfLfr0jyqQD6JqJ44IEzxApmfanDIMVbt_87-CJgmlC6Ny33aPMoqBArIeYegskK35FiekdZPcB-vfQWdjn8w&EIO=3&transport=websocket&__t=OOAKXhD HTTP/1.1
Host: vsb58.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://lawsikho.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0bqa2QwUVdJtvhsTXsKttA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Wed, 01 Feb 2023 00:13:00 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: 2bwiPNF6xlwrmeP3YBffi1T7A4I=
sec-websocket-extensions: permessage-deflate
strict-transport-security: max-age=0; includeSubDomains; preload
CF-Cache-Status: DYNAMIC
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 79267a87eedfb521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cdnt.netcoresmartech.com/swv4.js
2.21.240.102200 OK 36 kB URL HTTP/2 cdnt.netcoresmartech.com/swv4.js
IP 2.21.240.102:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (592)
Hash 2c232f1816f7bd044571f98990485b17
d83825a879347a2f06f931c86ade5b522d5b9f20
3f535d2c7f69338e5b1db8742abfd0885a0b013cd3204db2b4af547650b77d74
GET /swv4.js HTTP/1.1
Host: cdnt.netcoresmartech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: QA7afFH6hz0ZEWEVG2T4srdIRa1GqflglCOAW9qjAj7OtxfhinQMtFjDHSeouH2mxAfmcJUurew=
x-amz-request-id: 712E6VJ9DSWKE6NA
last-modified: Wed, 16 Feb 2022 11:26:32 GMT
etag: "7e2a27f61f7ce61f1313ff98c19a315c"
x-amz-meta-cache-control: max-age=2592000
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=395983
expires: Sun, 05 Feb 2023 14:12:43 GMT
date: Wed, 01 Feb 2023 00:13:00 GMT
content-length: 35963
server-timing: cdn-cache; desc=HIT, edge; dur=1
access-control-allow-origin: *
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/87027966?wmode=0&wv-part=1&wv-hit=430457761&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&rn=86374718&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1675210399%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230201001319%3Au%3A16752103961034892902%3Avf%3Asm0gggw3usgug1h33hqlj%3Ast%3A1675210399&t=gdpr(14)ti(2)
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/87027966?wmode=0&wv-part=1&wv-hit=430457761&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&rn=86374718&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1675210399%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230201001319%3Au%3A16752103961034892902%3Avf%3Asm0gggw3usgug1h33hqlj%3Ast%3A1675210399&t=gdpr(14)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/87027966?wmode=0&wv-part=1&wv-hit=430457761&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&rn=86374718&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1675210399%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230201001319%3Au%3A16752103961034892902%3Avf%3Asm0gggw3usgug1h33hqlj%3Ast%3A1675210399&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 185625
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 01 Feb 2023 00:13:00 GMT
access-control-allow-origin: https://lawsikho.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 01-Feb-2023 00:13:00 GMT
last-modified: Wed, 01-Feb-2023 00:13:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/87027966?wmode=0&wv-part=1&wv-hit=430457761&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&rn=96968794&wv-type=3&browser-info=we%3A1%3Aet%3A1675210400%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230201001319%3Au%3A16752103961034892902%3Avf%3Asm0gggw3usgug1h33hqlj%3Ast%3A1675210400&t=gdpr(14)ti(2)
87.250.250.119200 OK 52 B URL HTTP/2 mc.yandex.ru/webvisor/87027966?wmode=0&wv-part=1&wv-hit=430457761&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&rn=96968794&wv-type=3&browser-info=we%3A1%3Aet%3A1675210400%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230201001319%3Au%3A16752103961034892902%3Avf%3Asm0gggw3usgug1h33hqlj%3Ast%3A1675210400&t=gdpr(14)ti(2)
IP 87.250.250.119:0
Hash b41c31fbc5079d59cad1905c75584422
654de51639736494a41e8be82ce4dca299d4a7b9
60d954dc1128cecd77e9558a33a89c98ae9ff734fa753dbb73873f83080a0ff7
POST /webvisor/87027966?wmode=0&wv-part=1&wv-hit=430457761&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&rn=96968794&wv-type=3&browser-info=we%3A1%3Aet%3A1675210400%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230201001319%3Au%3A16752103961034892902%3Avf%3Asm0gggw3usgug1h33hqlj%3Ast%3A1675210400&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 54
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 01 Feb 2023 00:13:00 GMT
access-control-allow-origin: https://lawsikho.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 01-Feb-2023 00:13:00 GMT
last-modified: Wed, 01-Feb-2023 00:13:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/87027966?wmode=0&wv-part=2&wv-hit=430457761&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&rn=139529179&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1675210400%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230201001320%3Au%3A16752103961034892902%3Avf%3Asm0gggw3usgug1h33hqlj%3Ast%3A1675210400&t=gdpr(14)ti(2)
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/87027966?wmode=0&wv-part=2&wv-hit=430457761&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&rn=139529179&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1675210400%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230201001320%3Au%3A16752103961034892902%3Avf%3Asm0gggw3usgug1h33hqlj%3Ast%3A1675210400&t=gdpr(14)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/87027966?wmode=0&wv-part=2&wv-hit=430457761&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&rn=139529179&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1675210400%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230201001320%3Au%3A16752103961034892902%3Avf%3Asm0gggw3usgug1h33hqlj%3Ast%3A1675210400&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 9980
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 01 Feb 2023 00:13:01 GMT
access-control-allow-origin: https://lawsikho.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 01-Feb-2023 00:13:01 GMT
last-modified: Wed, 01-Feb-2023 00:13:01 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/87027966?wv-check=54848&wv-type=0&wmode=0&wv-part=1&wv-hit=430457761&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&rn=974330548&browser-info=we%3A1%3Aet%3A1675210400%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230201001320%3Au%3A16752103961034892902%3Avf%3Asm0gggw3usgug1h33hqlj%3Ast%3A1675210400&t=gdpr(14)ti(2)
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/87027966?wv-check=54848&wv-type=0&wmode=0&wv-part=1&wv-hit=430457761&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&rn=974330548&browser-info=we%3A1%3Aet%3A1675210400%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230201001320%3Au%3A16752103961034892902%3Avf%3Asm0gggw3usgug1h33hqlj%3Ast%3A1675210400&t=gdpr(14)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/87027966?wv-check=54848&wv-type=0&wmode=0&wv-part=1&wv-hit=430457761&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&rn=974330548&browser-info=we%3A1%3Aet%3A1675210400%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230201001320%3Au%3A16752103961034892902%3Avf%3Asm0gggw3usgug1h33hqlj%3Ast%3A1675210400&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 44
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 01 Feb 2023 00:13:01 GMT
access-control-allow-origin: https://lawsikho.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 01-Feb-2023 00:13:01 GMT
last-modified: Wed, 01-Feb-2023 00:13:01 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/87027966?wmode=0&wv-part=2&wv-hit=430457761&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&rn=124002182&wv-type=3&browser-info=we%3A1%3Aet%3A1675210400%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230201001320%3Au%3A16752103961034892902%3Avf%3Asm0gggw3usgug1h33hqlj%3Ast%3A1675210400&t=gdpr(14)ti(2)
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/87027966?wmode=0&wv-part=2&wv-hit=430457761&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&rn=124002182&wv-type=3&browser-info=we%3A1%3Aet%3A1675210400%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230201001320%3Au%3A16752103961034892902%3Avf%3Asm0gggw3usgug1h33hqlj%3Ast%3A1675210400&t=gdpr(14)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/87027966?wmode=0&wv-part=2&wv-hit=430457761&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&rn=124002182&wv-type=3&browser-info=we%3A1%3Aet%3A1675210400%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230201001320%3Au%3A16752103961034892902%3Avf%3Asm0gggw3usgug1h33hqlj%3Ast%3A1675210400&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 21
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 01 Feb 2023 00:13:01 GMT
access-control-allow-origin: https://lawsikho.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 01-Feb-2023 00:13:01 GMT
last-modified: Wed, 01-Feb-2023 00:13:01 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/87027966?wmode=0&wv-part=3&wv-hit=430457761&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&rn=945577314&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1675210400%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230201001320%3Au%3A16752103961034892902%3Avf%3Asm0gggw3usgug1h33hqlj%3Ast%3A1675210400&t=gdpr(14)ti(2)
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/87027966?wmode=0&wv-part=3&wv-hit=430457761&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&rn=945577314&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1675210400%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230201001320%3Au%3A16752103961034892902%3Avf%3Asm0gggw3usgug1h33hqlj%3Ast%3A1675210400&t=gdpr(14)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/87027966?wmode=0&wv-part=3&wv-hit=430457761&page-url=https%3A%2F%2Flawsikho.com%2F%3Futm_source%3D1stlink%26utm_medium%3Debook%26utm_campaign%3Deshebook&rn=945577314&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1675210400%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230201001320%3Au%3A16752103961034892902%3Avf%3Asm0gggw3usgug1h33hqlj%3Ast%3A1675210400&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 15
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 01 Feb 2023 00:13:01 GMT
access-control-allow-origin: https://lawsikho.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 01-Feb-2023 00:13:01 GMT
last-modified: Wed, 01-Feb-2023 00:13:01 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
185.235.84.46200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP 185.235.84.46:0
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:56 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 91169
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-chunk-common.js
172.67.38.66200 OK 0 B URL HTTP/2 embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-chunk-common.js
IP 172.67.38.66:0
GET /_s/v4/app/63b77dcd282/js/twk-chunk-common.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:58 GMT
content-type: application/javascript
vary: X-Goog-Allowed-Resources, Accept-Encoding
last-modified: Fri, 06 Jan 2023 01:49:34 GMT
etag: W/"385105148a50079bafff97e9c9476109"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 79267a809ba1b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=0
178.250.0.163200 OK 0 B URL HTTP/2 dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=0
IP 178.250.0.163:0
GET /dis/rtb/appnexus/cookiematch.aspx?appnxsid=0 HTTP/1.1
Host: dis.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:58 GMT
content-type: image/gif
server: Kestrel
cache-control: no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
cross-origin-resource-policy: cross-origin
p3p: CP='NON DSP COR CURa PSA PSD OUR BUS NAV STA'
timing-allow-origin: *
server-processing-duration-in-ticks: 400596
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
sync-t1.taboola.com/sg/criteortb-network/1/rtb-h/?taboola_hm=k-wxLU73o62faPX7gDDdZ5ZduLa-VzINsNsr2j7Q
141.226.228.48200 OK 0 B URL HTTP/2 sync-t1.taboola.com/sg/criteortb-network/1/rtb-h/?taboola_hm=k-wxLU73o62faPX7gDDdZ5ZduLa-VzINsNsr2j7Q
IP 141.226.228.48:0
ASN #200478 Taboola.com ltd
GET /sg/criteortb-network/1/rtb-h/?taboola_hm=k-wxLU73o62faPX7gDDdZ5ZduLa-VzINsNsr2j7Q HTTP/1.1
Host: sync-t1.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 00:12:58 GMT
x-fastly-to-nlb-rtt: 21910
access-control-allow-credentials: true
X-Firefox-Spdy: h2
lawsikho.com/?utm_source=1stlink&utm_medium=ebook&utm_campaign=eshebook
188.114.97.1200 OK 0 B URL HTTP/2 lawsikho.com/?utm_source=1stlink&utm_medium=ebook&utm_campaign=eshebook
IP 188.114.97.1:0
GET /?utm_source=1stlink&utm_medium=ebook&utm_campaign=eshebook HTTP/1.1
Host: lawsikho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:53 GMT
content-type: text/html; charset=UTF-8
set-cookie: ls_session=td1nqag92f2jp5ldmiks2neqts204ptt; expires=Wed, 01-Feb-2023 02:12:53 GMT; Max-Age=7200; path=/; HttpOnly; SameSite=Lax
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, no-store, max-age=0, no-cache
pragma: no-cache
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mtLpBbTasAegu7siAhZAzNNaz3ap7rfJY6DzacO%2F3ln1GOFO9wqDHteAPNpzGYpJGz%2Bmm0swWsE9DG9SGmKnBoHkRjg7s%2FyOiz7E88AWAuUyJ7%2B3G74jawQ10gHagGw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79267a5d7ae8b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?topUrl=lawsikho.com&origin=onetag
178.250.2.146200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?topUrl=lawsikho.com&origin=onetag
IP 178.250.2.146:0
GET /syncframe?topUrl=lawsikho.com&origin=onetag HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:56 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=8e6ad78f-78c6-409b-96d7-87176bc12bc3; expires=Mon, 26 Feb 2024 00:12:56 GMT; domain=.criteo.com; path=/; secure; samesite=none
optout=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=.criteo.com; path=/
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 366902
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
criteo-partners.tremorhub.com/sync?UICR=k-s57xXXo62faPX7gDDdZ5ZduLa-WwhtBrFJCHgg
54.236.111.218200 OK 0 B URL HTTP/2 criteo-partners.tremorhub.com/sync?UICR=k-s57xXXo62faPX7gDDdZ5ZduLa-WwhtBrFJCHgg
IP 54.236.111.218:0
GET /sync?UICR=k-s57xXXo62faPX7gDDdZ5ZduLa-WwhtBrFJCHgg HTTP/1.1
Host: criteo-partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:59 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-runtime.js
172.67.38.66200 OK 0 B URL HTTP/2 embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-runtime.js
IP 172.67.38.66:0
GET /_s/v4/app/63b77dcd282/js/twk-runtime.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:58 GMT
content-type: application/javascript
vary: X-Goog-Allowed-Resources, Accept-Encoding
last-modified: Fri, 06 Jan 2023 01:49:34 GMT
etag: W/"de21d01e9f8b6cc35ea67267d0ba80ec"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 79267a809ba5b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=onetag&domain=lawsikho.com&sn=FirefoxSyncframe&so=0&topUrl=lawsikho.com&info=WbkzqV80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdHNnlWUjJ4eHpQRlNnNm5LTjRSWGxBRUh4MW9RWFdMSjh2JTJCc3hzOEtxOA&idsd=1244672628,-707904401&cw=1&lsw=1
178.250.2.146200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=onetag&domain=lawsikho.com&sn=FirefoxSyncframe&so=0&topUrl=lawsikho.com&info=WbkzqV80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdHNnlWUjJ4eHpQRlNnNm5LTjRSWGxBRUh4MW9RWFdMSjh2JTJCc3hzOEtxOA&idsd=1244672628,-707904401&cw=1&lsw=1
IP 178.250.2.146:0
GET /sid/json?origin=onetag&domain=lawsikho.com&sn=FirefoxSyncframe&so=0&topUrl=lawsikho.com&info=WbkzqV80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdHNnlWUjJ4eHpQRlNnNm5LTjRSWGxBRUh4MW9RWFdMSjh2JTJCc3hzOEtxOA&idsd=1244672628,-707904401&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?topUrl=lawsikho.com&origin=onetag
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:56 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 1427367
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-chunk-vendors.js
172.67.38.66200 OK 0 B URL HTTP/2 embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-chunk-vendors.js
IP 172.67.38.66:0
GET /_s/v4/app/63b77dcd282/js/twk-chunk-vendors.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:58 GMT
content-type: application/javascript
vary: X-Goog-Allowed-Resources, Accept-Encoding
last-modified: Fri, 06 Jan 2023 01:49:34 GMT
etag: W/"70dac54eca3bb2143032bc4db3237623"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 79267a808b97b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
178.250.6.157200 OK 0 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP 178.250.6.157:0
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:56 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 131982
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/2115626/domain/lawsikho.com/token
54.230.111.78200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/2115626/domain/lawsikho.com/token
IP 54.230.111.78:0
GET /partner/2115626/domain/lawsikho.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lawsikho.com
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
date: Tue, 31 Jan 2023 23:30:15 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cgdz1RnrONroT6RDfNhHcRdPAQ1Nv8xRG9N5y8mH_f5JtijeNrQwFA==
age: 2561
X-Firefox-Spdy: h2
dis.criteo.com/dis/rtb/google/cookiematch.aspx?id=&CriteoUserId=k-oJ9jQXo62faPX7gDDdZ5ZduLa-XMz68zJ6P8uA&google_error=3
178.250.0.163200 OK 0 B URL HTTP/2 dis.criteo.com/dis/rtb/google/cookiematch.aspx?id=&CriteoUserId=k-oJ9jQXo62faPX7gDDdZ5ZduLa-XMz68zJ6P8uA&google_error=3
IP 178.250.0.163:0
GET /dis/rtb/google/cookiematch.aspx?id=&CriteoUserId=k-oJ9jQXo62faPX7gDDdZ5ZduLa-XMz68zJ6P8uA&google_error=3 HTTP/1.1
Host: dis.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 00:12:58 GMT
content-type: image/gif
server: Kestrel
cache-control: no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
cross-origin-resource-policy: cross-origin
p3p: CP='NON DSP COR CURa PSA PSD OUR BUS NAV STA'
timing-allow-origin: *
server-processing-duration-in-ticks: 330502
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Muli:wght@400;600;700;800;900&display=swap
142.250.74.74200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Muli:wght@400;600;700;800;900&display=swap
IP 142.250.74.74:0
GET /css2?family=Muli:wght@400;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 01 Feb 2023 00:12:54 GMT
date: Wed, 01 Feb 2023 00:12:54 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
osjs.netcoresmartech.com/v1/js-versioning?clientkey=ADGMOT35CHFLVDHBJNIG50K96BCB6ERFCRTJ2IPEB9HT6EC5N980&siteid=9a470f4d16c27634e13d78f1bc5266ba&rc=l
23.36.76.248200 OK 0 B URL HTTP/2 osjs.netcoresmartech.com/v1/js-versioning?clientkey=ADGMOT35CHFLVDHBJNIG50K96BCB6ERFCRTJ2IPEB9HT6EC5N980&siteid=9a470f4d16c27634e13d78f1bc5266ba&rc=l
IP 23.36.76.248:0
ASN #20940 Akamai International B.V.
GET /v1/js-versioning?clientkey=ADGMOT35CHFLVDHBJNIG50K96BCB6ERFCRTJ2IPEB9HT6EC5N980&siteid=9a470f4d16c27634e13d78f1bc5266ba&rc=l HTTP/1.1
Host: osjs.netcoresmartech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lawsikho.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
x-amzn-requestid: ed28c522-c038-49c1-97c8-f494fd2930f6
last-modified: Tue, 31 Jan 2023 23:38:54 GMT
content-disposition: inline; filename=smartech-sdk.js
x-amz-apigw-id: fog1VGlwBcwFV7w=
x-amzn-trace-id: Root=1-63d9ae88-70ef63816bc94294176c27c3;Sampled=0
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=604800
date: Wed, 01 Feb 2023 00:12:56 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=311, origin; dur=833
access-control-allow-origin: *
X-Firefox-Spdy: h2