303 See Other 0 B URL User Request GET HTTP/2 IP
Certificate IssuerAmazon
Subjectelnk8.com
Fingerprint71:66:94:4A:AC:23:E1:25:3D:33:99:44:18:C8:21:55:07:0A:E1:C6
ValidityWed, 20 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: x5aew7.elnk8.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 303 See Other
server: awselb/2.0
date: Wed, 08 May 2024 18:31:37 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: https://www.bcpmtrk.com/2P9J9R/5Q9RM9/?sub1=BSPMdts050824
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
2.1 kB IP
Hash ea742f858e3f155f1f7697fa7476fed1
9986ee84232202c456ef61f7dbd47d3d4360bcd1
2749ec043d2babf8f3fd489e02558ba58f1d64c59cd8aa297c6d6cf454f5dd96
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 08 May 2024 18:31:38 GMT
Content-Type: application/ocsp-response
Content-Length: 2149
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 08 May 2024 05:44:57 GMT
Expires: Thu, 09 May 2024 05:44:57 GMT
ETag: "9986ee84232202c456ef61f7dbd47d3d4360bcd1"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.bcpmtrk.com/2P9J9R/5Q9RM9/?sub1=BSPMdts050824
302 Found 172 B URL User Request GET HTTP/2 www.bcpmtrk.com/2P9J9R/5Q9RM9/?sub1=BSPMdts050824
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerStarfield Technologies, Inc.
Subjectbh3ktrk.com
Fingerprint99:4C:14:99:E8:55:AF:7E:DF:FF:6F:7D:45:CD:2E:7C:3F:F2:EC:FF
ValidityThu, 29 Jun 2023 22:05:18 GMT - Fri, 05 Jul 2024 12:24:06 GMT
File type HTML document, ASCII text
Hash dcaaed4c5d1175cd00dce565201138b0
8605a27066010eedfe88cb2fd9147d63394300b3
9c103a7400663f472f4dacf7efcc8a3230431a445223d50db5ffb92275953f8a
GET /2P9J9R/5Q9RM9/?sub1=BSPMdts050824 HTTP/1.1
Host: www.bcpmtrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 18:31:38 GMT
content-type: text/html; charset=utf-8
content-length: 172
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
location: https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
set-cookie: uniqueClick_5Q9RM9=039703f9-789b-4317-a674-3f2090f75054:1715193098; Path=/; Expires=Thu, 09 May 2024 18:31:38 GMT; Secure; SameSite=None
transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0; Path=/; Expires=Tue, 06 Aug 2024 18:31:38 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: f54a3e60-364d-47cf-b73b-b26156d1dcde
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
200 OK 28 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 18:31:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 60220
expires: Mon, 28 Apr 2025 18:31:39 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o%2FtpRFEx4zERIXxozVJk3qaA9uebvoOFTJ%2FidB0H5CBuQXa17wNoFe2q3gEpUGTUtnWSz%2FkRUdc0YHbFH8sQUPtM5eqK%2BMAFfCQy5mAKWGMvO9QrajGbDvVtzXrGaNAJpmCEego6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 880b872a592c56ae-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js
200 OK 7.8 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type JavaScript source, ASCII text, with very long lines (21084)
Hash 84415b7368fd6fc764cbe86039ce0626
62f238e73348c77eb9e865426a7d1b7de23cbb2d
c776195ad46333c6c9a9fe3c74502ffea9a02faf122388ea3567922cc65a3060
GET /npm/popper.js@1.16.0/dist/umd/popper.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.16.0
x-jsd-version-type: version
etag: W/"5309-YvI45zNIx3656GVCan0bfeI8uy0"
content-encoding: br
accept-ranges: bytes
date: Wed, 08 May 2024 18:31:39 GMT
age: 29729993
x-served-by: cache-fra-eddf8230104-FRA, cache-hel1410027-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7835
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/closemodal.png?versionId=f3qGNa0uxkCE1vXUkxQ8ypw1lkbFYdV1
200 OK 672 B URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/closemodal.png?versionId=f3qGNa0uxkCE1vXUkxQ8ypw1lkbFYdV1
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 19754ed4d508cf576c80cf36e0db8c50
f459beac714e5be68aa75349fa806a5642af456a
5216f197f782f4bb872e02a677986af90a488015910f8d3864b796ad68dbd389
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/closemodal.png?versionId=f3qGNa0uxkCE1vXUkxQ8ypw1lkbFYdV1 HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 672
last-modified: Tue, 16 Apr 2024 14:40:56 GMT
x-amz-version-id: 8BKdhCJ5IScZaJ.oXGJdgU2TwOs8cXKB
server: AmazonS3
date: Wed, 08 May 2024 00:07:06 GMT
etag: "19754ed4d508cf576c80cf36e0db8c50"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lFROd1P4Q0K9SGerob3J_w4cJ_A2XKga21W_cLI8jump4jukKHnq9g==
age: 66275
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/styles/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/lander.css
200 OK 77 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/styles/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/lander.css
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type ASCII text, with very long lines (53211)
Hash 54a05b324dc9f1f1dbc6ecc1edb50c5c
a743a84e064dc45b83aa24c5f8325ea3799a33da
5020c399648d4ebcc143d0c1321335af5ff608bb905168bde13d646e6691a41a
GET /Funnel/assets/styles/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/lander.css HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Tue, 16 Apr 2024 14:40:54 GMT
x-amz-version-id: cdP._IwluNJJfH8uqpvG6xOv0hhUBp37
server: AmazonS3
content-encoding: br
date: Wed, 08 May 2024 05:28:57 GMT
etag: W/"54a05b324dc9f1f1dbc6ecc1edb50c5c"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: moSYnQ8hsODCkqLn2GLpxs-N_pyTSokiQN53wq-uFmc9eFbSfSm-Rg==
age: 46964
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
200 OK 95 kB URL User Request GET HTTP/2 secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
IP
Certificate IssuerAmazon
Subjectsecure.gdr-labs.com
FingerprintDB:95:14:34:1C:06:01:32:E2:1D:01:7B:24:11:34:77:CE:EF:50:68
ValidityThu, 01 Feb 2024 00:00:00 GMT - Sat, 01 Mar 2025 23:59:59 GMT
File type gzip compressed data, from Unix
Hash df61c98f8cf2383ece199e3a42b4aa26
c7b61c58621bc1b94dc834a4ac701d8382fbfabe
44f15244eb5f3a46efae08fee7d1095cb504ab8de017666e71c8b34aea7c9634
GET /lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0 HTTP/1.1
Host: secure.gdr-labs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
x-amz-id-2: MjG7klDOdPAwoePDTbnBuyveot6ckykinNId47MaJBOIPtB45jsJe/Dvaa91Z9okyUt/yTzouCA=
x-amz-request-id: 0Z8Z812RFDGQ1FK2
date: Wed, 08 May 2024 18:31:40 GMT
x-amz-meta-funnel: 550cd81d-bd07-4121-867d-7dfcf9219d60
x-amz-meta-pageview: 790460ed-958f-43e7-bbcb-7bbe881f6e35
x-amz-meta-source: Funnel
last-modified: Wed, 08 May 2024 10:47:18 GMT
server: AmazonS3
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
set-cookie: X-Source=550cd81d-bd07-4121-867d-7dfcf9219d60; Path=/
x-frame-options: SAMEORIGIN
cache-control: max-age=5, max-age=86400
content-encoding: gzip
etag: W/"f9d2146fca77f60193fbe4f1d975995a"
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: W-qXufzwCHgnL3RviRmjEDF7Nr055UGLpbWhfpKpC-wPukPxJnEhhQ==
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/styles/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/v4-shims.css
200 OK 36 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/styles/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/v4-shims.css
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type ASCII text, with very long lines (26440)
Hash e140a7d32f343530f016095df3cc2ae4
1a5f9ba089085f9e44292a6344b9364c489bcd49
0d1c5ba4b29db42dadf61f9e7304331fa835fe732bbb02822ada17a9a63c215f
GET /Funnel/assets/styles/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/v4-shims.css HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Tue, 16 Apr 2024 14:40:54 GMT
x-amz-version-id: BFWRcvbP79Pz9HV3LmdyDcFa8FJBTFpr
server: AmazonS3
content-encoding: br
date: Wed, 08 May 2024 01:16:49 GMT
etag: W/"e140a7d32f343530f016095df3cc2ae4"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NuZceofoWPh-u9PLijW9Bzl9byD2fCh6nZSNRQ1Ww2zsGP2furVaGA==
age: 62092
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_121481292.jpg?versionId=nM31SyHT7AeHlWuhfjE8cHXujDwv9NTX
200 OK 16 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_121481292.jpg?versionId=nM31SyHT7AeHlWuhfjE8cHXujDwv9NTX
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 545x408, components 3
Hash 14a3a310c337864c235e73f0de45da8e
ce54a87b2e8919ea1de3c42f8e6e2abace093ec1
8139a52bda0cc90cf2860980b18a158266863fd0108e1266966ff6e9714eb98f
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_121481292.jpg?versionId=nM31SyHT7AeHlWuhfjE8cHXujDwv9NTX HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 16431
date: Wed, 08 May 2024 01:51:03 GMT
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: nM31SyHT7AeHlWuhfjE8cHXujDwv9NTX
etag: "14a3a310c337864c235e73f0de45da8e"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5KW-esng92JLQtMW1dtbhHMVgaQ75hQUXLz9znZhZkEemCRfQ-K2YA==
age: 60038
vary: Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/blood-sugar.png?versionId=30tVU96V09SHH4HpwcAer7zyawsm5vRh
200 OK 19 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/blood-sugar.png?versionId=30tVU96V09SHH4HpwcAer7zyawsm5vRh
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 545 x 585, 8-bit colormap, non-interlaced
Hash b50b65151ab05803f455d1a1fe961df5
4ab32e9ed59920ad172726ea56cd3caa8a148d76
52988567ffd6cbec29fe77e463d824ad955ca21a16eb0a594d5ef16b3a0adc35
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/blood-sugar.png?versionId=30tVU96V09SHH4HpwcAer7zyawsm5vRh HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 19376
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: 30tVU96V09SHH4HpwcAer7zyawsm5vRh
server: AmazonS3
date: Wed, 08 May 2024 00:07:06 GMT
etag: "b50b65151ab05803f455d1a1fe961df5"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ELTVclX5ePvtB4WZLs01x0JW4UF0ZTY4Jw5R_jkYhFrcJau78gYzpQ==
age: 66275
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_276506785.jpg?versionId=CBNtVzvyKzkjija7h9EZ6GmRJvOF8frj
200 OK 27 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_276506785.jpg?versionId=CBNtVzvyKzkjija7h9EZ6GmRJvOF8frj
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 525x420, components 3
Hash 4df73c3c099b440d5ceed33817a060f6
b9c855d7492395f9711eb54880cd76a218c100e6
b68f230da8ac0bf2935a1c3c5ac1d6269e053d919296b2826c45db6fc089a1c3
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_276506785.jpg?versionId=CBNtVzvyKzkjija7h9EZ6GmRJvOF8frj HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 26659
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: EA_y.00smiOYN9TjKwLc0YYR3Zt0pv8R
server: AmazonS3
date: Wed, 08 May 2024 00:07:06 GMT
etag: "4df73c3c099b440d5ceed33817a060f6"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OoC1N7hJwapCVxixsDGWaQ9_IWqteBsDxvScp1SSH8KllxtaIIzv4g==
age: 66275
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_608041503.jpg?versionId=YqYm8uGC1UKDr4eIQMrbu7kvEf6EPThu
200 OK 16 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_608041503.jpg?versionId=YqYm8uGC1UKDr4eIQMrbu7kvEf6EPThu
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 525x295, components 3
Hash f898864c3008aa472ea8b59f89c6b90c
dd50fcb77cf318badf83277d5cd51872cfb74bba
eb5765a23ce6fa17acbc521c56e002bc24e9bf5f38cc86947b5d45dff58cd6da
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_608041503.jpg?versionId=YqYm8uGC1UKDr4eIQMrbu7kvEf6EPThu HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 16075
date: Wed, 08 May 2024 06:24:22 GMT
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: 1T3bhnLLZ_26ceGszjokZNFGq.tsBCNB
etag: "f898864c3008aa472ea8b59f89c6b90c"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: i7xHEIF7aZJPUFL488g-ptPcEGC4bYtK3qTNjCLjxN0BC087wjoMXQ==
age: 43639
vary: Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/Liponine-1-.png?versionId=hmtSz1mP4FmPl77OQwEzSWImIrwGktl0
200 OK 9.9 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/Liponine-1-.png?versionId=hmtSz1mP4FmPl77OQwEzSWImIrwGktl0
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 525 x 142, 8-bit colormap, non-interlaced
Hash cf4e802907daed037695e1e4be853d3b
9560117b2b4bdde11bd363a450ee1d54de305d09
ac13e716d6575159bc6ff540194992d0ab286696fa3de572d90197409da9e03a
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/Liponine-1-.png?versionId=hmtSz1mP4FmPl77OQwEzSWImIrwGktl0 HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 9927
date: Wed, 08 May 2024 01:29:58 GMT
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: hmtSz1mP4FmPl77OQwEzSWImIrwGktl0
etag: "cf4e802907daed037695e1e4be853d3b"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Dku-oL-kX7KgR1Y3vsFEdKDY6zsy4mJfTX0zofAnb83sTsD9bKg3pg==
age: 61303
vary: Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/styles/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/all.css
200 OK 43 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/styles/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/all.css
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type ASCII text, with very long lines (56490)
Hash 2031dcd554fa5f2715af32632fb40792
0e86f20186fe10b19724eb9f85ea9df4564fd55f
35ccee937a41c0058ee31e7ed9927a9e76a0219d80a1eb68bb446b070d3cc572
GET /Funnel/assets/styles/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/all.css HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Tue, 16 Apr 2024 14:40:54 GMT
x-amz-version-id: 3dRNHS36_WvPr1bY.P.NYy67QsGUr8Rp
server: AmazonS3
content-encoding: br
date: Wed, 08 May 2024 05:28:57 GMT
etag: W/"2031dcd554fa5f2715af32632fb40792"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2guL9TFFtdvHGr1zoN6tvD5noyr-2ZwimtZZf5FOaBKSVPtDaaqxAA==
age: 46964
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/styles/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/.css
200 OK 16 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/styles/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/.css
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type ASCII text, with very long lines (1572)
Hash cba68cf4a32313d6c0cfcaf23be3b691
b4b2e4da8e77afbd5fa0174ef730c97f4e96abb4
c5d16a22c31c4e9bb8876d4838796eb4e3af3b376b88cdff796462fb43ad066f
GET /Funnel/assets/styles/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/.css HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
date: Wed, 08 May 2024 01:51:01 GMT
last-modified: Tue, 16 Apr 2024 14:40:54 GMT
x-amz-version-id: WQ5Wx.QXed70RXBDS4YfD5ir7b7O6A84
etag: W/"cba68cf4a32313d6c0cfcaf23be3b691"
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4bRTssMPkOoPxuK6CGcwiFW_aZuEHcSXdaNmzNtJLVbJ1f4CxfE2Cg==
age: 60040
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/Screenshot-2023-12-20-at-12.28.49-PM.png?versionId=cztJP62ryNNklkvFlIeJNub4mqAg7ol.
200 OK 45 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/Screenshot-2023-12-20-at-12.28.49-PM.png?versionId=cztJP62ryNNklkvFlIeJNub4mqAg7ol.
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 525 x 469, 8-bit colormap, non-interlaced
Hash c9c01e0714a257fc6e5295a0d79ed130
b45a866f6af13b1f1b95c0905430ae7b34c2253e
813df7fb1566c8ad93ce7034ded62c341690826ff3e9904a64d842d8bc69d256
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/Screenshot-2023-12-20-at-12.28.49-PM.png?versionId=cztJP62ryNNklkvFlIeJNub4mqAg7ol. HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 44906
date: Wed, 08 May 2024 06:24:22 GMT
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: cztJP62ryNNklkvFlIeJNub4mqAg7ol.
etag: "c9c01e0714a257fc6e5295a0d79ed130"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YqUxg8ASOfMDVP1_RbJtIRsSgavwDCtWCY5ABYxYYX36hV95GcSrAw==
age: 43639
vary: Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/330c2890-a040-11ee-b95e-4593f423b5b5/1714013153115_l_3gc_1.png
200 OK 806 kB URL GET HTTP/2 assets.checkoutchamp.com/330c2890-a040-11ee-b95e-4593f423b5b5/1714013153115_l_3gc_1.png
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 1920 x 1963, 8-bit/color RGBA, non-interlaced
Size 806 kB (805470 bytes)
Hash 7f13fbb202cec3982fcf7f389f0ad312
4e06059dc0619f67808ffca675784ca87ee7a0d7
81dd73fb169a2905762fe75b082fa70c25bdb64901aa47d0e9271f3d8245a308
GET /330c2890-a040-11ee-b95e-4593f423b5b5/1714013153115_l_3gc_1.png HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 805470
last-modified: Thu, 25 Apr 2024 02:45:54 GMT
x-amz-version-id: xGmE7aQ7cB4lNJM.zM8JxPIbH0XO05G.
server: AmazonS3
date: Wed, 08 May 2024 18:31:41 GMT
cache-control: max-age=5
etag: "7f13fbb202cec3982fcf7f389f0ad312"
x-cache: RefreshHit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TJ5XRVXbQeRkZiVZn_2WyTMk5hi5T6PnMNmjlas0_NXnwy_QfqsZ1w==
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/Sirtuin-1.png?versionId=vRRYo.Zx70o_U_OMJQFsW_tdhxTSpqIc
200 OK 20 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/Sirtuin-1.png?versionId=vRRYo.Zx70o_U_OMJQFsW_tdhxTSpqIc
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 545 x 428, 8-bit colormap, non-interlaced
Hash 190aeada58ca0011abc618fe5fbdfc96
344922e233f4a713ec95b10c5def55c09483f3c5
56fd8c039fe9e84ed9cda54c8727a8a0d0a0d5649e55245918b7948240dd2126
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/Sirtuin-1.png?versionId=vRRYo.Zx70o_U_OMJQFsW_tdhxTSpqIc HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 19747
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: k_csZBk16KKZ2bFFBjTH1hx.wp5mMSzS
server: AmazonS3
date: Wed, 08 May 2024 05:41:45 GMT
etag: "190aeada58ca0011abc618fe5fbdfc96"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: n5arCbpHF7L_BumlRMcVTP3DUruMPWT-0_xP3t62iX0p_PCA3mgYZQ==
age: 46196
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_190060107.jpg?versionId=U8cA5btMthas0VL8RCOqPSoXlfRMunui
200 OK 16 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_190060107.jpg?versionId=U8cA5btMthas0VL8RCOqPSoXlfRMunui
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 525x335, components 3
Hash 6da702541d88008aadaf76100a2a078f
0d64469dae42dd7b7eeb93ff3722ce53dc5d5609
b41cfa7f8490803ec69bf9bb19bc76b5af6126d4e882966bcc30ec4da63d1379
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_190060107.jpg?versionId=U8cA5btMthas0VL8RCOqPSoXlfRMunui HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 15830
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: U8cA5btMthas0VL8RCOqPSoXlfRMunui
server: AmazonS3
date: Wed, 08 May 2024 04:32:34 GMT
etag: "6da702541d88008aadaf76100a2a078f"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XxsyOrkHmENik68PoyNRWXbVUonDeD-lVANiKQfP2XGbvb3K_SuBpg==
age: 50347
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_477987384.jpg?versionId=KmNHRX7WYGA25FFJc6pq2o.eCO2rZrfi
200 OK 17 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_477987384.jpg?versionId=KmNHRX7WYGA25FFJc6pq2o.eCO2rZrfi
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 525x350, components 3
Hash e1406f9c116041e0391abfde5d81a7ea
5eba231fc0822eb86cd9185744b98a211fa93ff3
a6162d744b87012137911aab955e0a1d97cd90406911063df52f36e0a639de05
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_477987384.jpg?versionId=KmNHRX7WYGA25FFJc6pq2o.eCO2rZrfi HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 17256
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: uqjvwl_NI306BWnhTAqaWcbDAEaNUSlz
server: AmazonS3
date: Wed, 08 May 2024 00:07:06 GMT
etag: "e1406f9c116041e0391abfde5d81a7ea"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: e_p6g6dYpglOsQS6MtVac2PEJqVgM5OxZ-xnfytJLQzrhnqElxMlVA==
age: 66275
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_635487837.jpg?versionId=UD1hQ1Z1pPierEeOPmlvF.sPOriV31VP
200 OK 20 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_635487837.jpg?versionId=UD1hQ1Z1pPierEeOPmlvF.sPOriV31VP
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 545x272, components 3
Hash 015e31c6b28b1da2e37b614959bc0f53
c8a8fae27cff4144491575b99e18fa93c3ac139f
6659f614c1a0d78d319bb53c45fddebffb91e7441fa840266290aba145ae9f2f
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_635487837.jpg?versionId=UD1hQ1Z1pPierEeOPmlvF.sPOriV31VP HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 20175
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: bPQfK9GHpPcFoOZKJHtj4.djog0BSX3j
server: AmazonS3
date: Wed, 08 May 2024 04:32:34 GMT
etag: "015e31c6b28b1da2e37b614959bc0f53"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KHbyn8TMtBvwYz9VS_5H2jbKvJqgWWZI7hTTp5sqasPazp27YFOdEw==
age: 50347
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/image-2.png?versionId=dQmzKxXB8_cun6KY1M1DzV.PqOet_Qeb
200 OK 121 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/image-2.png?versionId=dQmzKxXB8_cun6KY1M1DzV.PqOet_Qeb
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 545 x 382, 8-bit colormap, non-interlaced
Size 121 kB (120756 bytes)
Hash ed3451b2ae0682d0c5b01f315a0e6fa8
a660b4e5343e566302e64cb6a1080bd0267ab4cc
aa974970b6dfbf039935fd3dc573ae1bfe5b9b62d7d2dde43c0dd4413c8abf50
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/image-2.png?versionId=dQmzKxXB8_cun6KY1M1DzV.PqOet_Qeb HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 120756
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: yyQ4lGcf5pFWY.vxtlRyuABUWucDdBE8
server: AmazonS3
date: Wed, 08 May 2024 05:28:57 GMT
etag: "ed3451b2ae0682d0c5b01f315a0e6fa8"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gIBN0WsktKsxxNylosrZFkOND8MlSasYFjXEih1ZsiLKU-S4aPtcLA==
age: 46964
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/ClintWinters_Mr.Scientist.jpg?versionId=aJ.nurlM.ouGA6OHD3nU5uz11DooIbub
200 OK 24 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/ClintWinters_Mr.Scientist.jpg?versionId=aJ.nurlM.ouGA6OHD3nU5uz11DooIbub
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, copyright=Megan Dougherty Photography], progressive, precision 8, 525x628, components 3
Hash 8edb777275aa3f2472ebef7f172509f9
9177d9d78f065f7622f7103b9212b603f702b297
c9d59cc922f8ce4c09325460b1592ef1625571910243ebea3d70594ef79a19ff
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/ClintWinters_Mr.Scientist.jpg?versionId=aJ.nurlM.ouGA6OHD3nU5uz11DooIbub HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 24454
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: baKhYo6XTlyx2guJtaof0r.Gr7huMbi.
server: AmazonS3
date: Wed, 08 May 2024 04:32:34 GMT
etag: "8edb777275aa3f2472ebef7f172509f9"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KQXXG9HlQU9fQ5CaOI5mfx_myOIqwvRkOrQxg46spys1F62UdpXubw==
age: 50347
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_147555160-1-.jpg?versionId=DQv8gSFXqIzzzNKD37Ib3qD5gv6hTXJa
200 OK 17 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_147555160-1-.jpg?versionId=DQv8gSFXqIzzzNKD37Ib3qD5gv6hTXJa
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 525x350, components 3
Hash 1f77bfdc33903eacc17afc6275b50be4
60b9178ddaaa4e4a947f492755d42148450a9c0c
e93bca0ab13a359091da59013cfa9e85daee72e54f32d11d785f0adee7d8a5d7
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_147555160-1-.jpg?versionId=DQv8gSFXqIzzzNKD37Ib3qD5gv6hTXJa HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 17082
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: DQv8gSFXqIzzzNKD37Ib3qD5gv6hTXJa
server: AmazonS3
date: Wed, 08 May 2024 00:07:06 GMT
etag: "1f77bfdc33903eacc17afc6275b50be4"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hXXzlDTIhGgdGJ3Sq1HfGpRnEwQOIWsU30R7Xl3jlZljz7OGETkgKQ==
age: 66275
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_288732351.jpg?versionId=EfxRFUjwfXhezihdlyToEM3VyyXOP.l0
200 OK 16 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_288732351.jpg?versionId=EfxRFUjwfXhezihdlyToEM3VyyXOP.l0
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 525x350, components 3
Hash 030dc8c83577ae74bd859cc3688f8664
8c015ba8e790a886625ad6a80832e5502749002a
ac382bec534aa5bc735f3bc8115f2efaf8b86a20f83a3e676f35e6aab385b854
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_288732351.jpg?versionId=EfxRFUjwfXhezihdlyToEM3VyyXOP.l0 HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 15679
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: EfxRFUjwfXhezihdlyToEM3VyyXOP.l0
server: AmazonS3
date: Wed, 08 May 2024 05:28:57 GMT
etag: "030dc8c83577ae74bd859cc3688f8664"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oe5_GEjlwERuD9TVtJB66GJHtwxUDI8GKtwSlSFbIGBr5_WjnlPOmw==
age: 46964
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/animate.css/3.7.2/animate.css
200 OK 3.8 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/animate.css/3.7.2/animate.css
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
Hash 91cc40989e5e96e8d6bddc0f19598441
77b5378a2b4bfc120e52782dd869aeab7efe2fd4
6b6b686ecaa56e02ec5aced95541a03f922f599b31f1b4cd429ceca824a6e669
GET /ajax/libs/animate.css/3.7.2/animate.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:31:40 GMT
content-type: text/css; charset=utf-8
content-length: 3792
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03d2a-13053"
last-modified: Mon, 04 May 2020 16:04:58 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 8416
expires: Mon, 28 Apr 2025 18:31:40 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nB1fg3EdBGKwQRWg1ggnVou7UkXJdevVKSvPk0D9mGoH7or9NPukjmBEsR4adS8xkxvsncKQxLcsoYyDzqKGk5DtRtyPv6nK46WJXnv55Bn7165x%2FgrCtTxsldwUQhaDIppZVM%2Fd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 880b87306f4e56ab-OSL
alt-svc: h3=":443"; ma=86400
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/Screen-Shot-2023-06-12-at-8.54.27-AM.png?versionId=h2XLYxZJzVJ2SK8HxE7YWGFMGZqeBqIE
200 OK 785 B URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/Screen-Shot-2023-06-12-at-8.54.27-AM.png?versionId=h2XLYxZJzVJ2SK8HxE7YWGFMGZqeBqIE
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 156 x 43, 4-bit colormap, non-interlaced
Hash 2e99ce4eb726fd89ff64f3cc5caf95a8
06a5b665fdd9fba6e8756b0fcb8d41b50e8e1c07
a192f09aec6b0defce9164734142791244dd39654833b161316789960a0cc21a
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/Screen-Shot-2023-06-12-at-8.54.27-AM.png?versionId=h2XLYxZJzVJ2SK8HxE7YWGFMGZqeBqIE HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 785
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: PK1fKSYGKk6UJldiL7fRvcGjk51a29HI
server: AmazonS3
date: Wed, 08 May 2024 04:32:34 GMT
etag: "2e99ce4eb726fd89ff64f3cc5caf95a8"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: U_YP5PyN25JXU_OLFolgLiPACy59MR02HmJxDpVuqawvrojwMxuR5g==
age: 50347
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/5.12.1/css/all.min.css
200 OK 10 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/font-awesome/5.12.1/css/all.min.css
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (57147)
Hash 2a0e11a7655cf7af50d9152727c134ef
136e6626dc83d228b50416249fe05864ab065e40
9a680b90260b5106d79f4075491ab31daafa7429eff686453c40b58357309649
GET /ajax/libs/font-awesome/5.12.1/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:31:40 GMT
content-type: text/css; charset=utf-8
content-length: 10134
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e60-dff5"
last-modified: Mon, 04 May 2020 16:10:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 595603
expires: Mon, 28 Apr 2025 18:31:40 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=75%2FdgHUaXySIgH1adV2K1g%2FJz9sJZ6%2BXlKzYQx3cmDwyfT5DxcrrHkH35RXd8pv4tPu%2F2jMRJKJjqTaSgq1n0eOrmiIn5JG%2BC5SSP2CNB7II8xqs1RGrr1l9Yk6YnXvgTP3PqZ2U"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 880b87306f5556ab-OSL
alt-svc: h3=":443"; ma=86400
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_587940476.jpg?versionId=FIqFlNtcmsuYZXPWJ9NT.Qtg4VmqYmV5
200 OK 15 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_587940476.jpg?versionId=FIqFlNtcmsuYZXPWJ9NT.Qtg4VmqYmV5
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 525x350, components 3
Hash b3a3a6646de9d1441e7c7ad73be131f0
0c989c488560efa3241f9129ca476a0764828df0
f0a798b7700f168ded33e33740775d8bb63d51f4615b0ca058673943b755568e
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_587940476.jpg?versionId=FIqFlNtcmsuYZXPWJ9NT.Qtg4VmqYmV5 HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 14622
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: FIqFlNtcmsuYZXPWJ9NT.Qtg4VmqYmV5
server: AmazonS3
date: Wed, 08 May 2024 01:16:49 GMT
etag: "b3a3a6646de9d1441e7c7ad73be131f0"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8sR9bRmdaq-mXyViBhUaWqsrS2o2889Fgad0vbdkm7H1IovGugt6Mg==
age: 62092
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_123882852.jpg?versionId=tn3eKfBsEr0ObuKwn0mYY6ImN6ZegwP1
200 OK 22 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_123882852.jpg?versionId=tn3eKfBsEr0ObuKwn0mYY6ImN6ZegwP1
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, copyright=© Rido], progressive, precision 8, 525x348, components 3
Hash 82a042374019aa4fc18352f1e921a12e
2513ba7f7393d760c683cdcd2fefa3e7a4bb1b93
75e1b92468febe637a46d740b15513993d5ea94c85f65a3aa6cbb5d4a5e89ce1
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_123882852.jpg?versionId=tn3eKfBsEr0ObuKwn0mYY6ImN6ZegwP1 HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 21795
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: tn3eKfBsEr0ObuKwn0mYY6ImN6ZegwP1
server: AmazonS3
date: Wed, 08 May 2024 04:32:34 GMT
etag: "82a042374019aa4fc18352f1e921a12e"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OYpga84Utjxdpb0eCnoELw4c-Q3dKxTv7oR1so11eEnYhDnZq52F9Q==
age: 50347
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_181242827.jpg?versionId=FvqBcDjIjgZ_LNc_.AU7yPoZC2T_gIUA
200 OK 17 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_181242827.jpg?versionId=FvqBcDjIjgZ_LNc_.AU7yPoZC2T_gIUA
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 525x355, components 3
Hash 95dd58e6284970c8b16f049cb5344eb9
c316f133a5af8e6a7b50eff31fc69b6f497b77da
0a84aa9a53b1c2f8ebce95cebc7d6c77abe3e7e97da249fe8fed624354d2f13a
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_181242827.jpg?versionId=FvqBcDjIjgZ_LNc_.AU7yPoZC2T_gIUA HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 17298
date: Wed, 08 May 2024 06:24:22 GMT
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: FvqBcDjIjgZ_LNc_.AU7yPoZC2T_gIUA
etag: "95dd58e6284970c8b16f049cb5344eb9"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mD0cajVgKdjyxwVsfqS-S8IVXJDKLOt65M1KsmfFjq9iE9WEfKzMqA==
age: 43639
vary: Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_466163429.jpg?versionId=g28goqqUOqEY9td_XclLS8RkAtgHSmTB
200 OK 29 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_466163429.jpg?versionId=g28goqqUOqEY9td_XclLS8RkAtgHSmTB
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 525x350, components 3
Hash fe128e7abf9de11b3daedcdc06440a13
d9319ade668f966b02b9ebd819705d89ee358b64
d5b92a558c2fc137f6f3cb1c79d0ce0fe18f81781601a1b207f088c6306761e5
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_466163429.jpg?versionId=g28goqqUOqEY9td_XclLS8RkAtgHSmTB HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 29118
date: Wed, 08 May 2024 01:29:58 GMT
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: g28goqqUOqEY9td_XclLS8RkAtgHSmTB
etag: "fe128e7abf9de11b3daedcdc06440a13"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VXhXaSmQrvzJsDfWhisvuk-SdOSxPuRBKx4SaR91pVqTWx-feO3L9Q==
age: 61303
vary: Origin
X-Firefox-Spdy: h2
polyfill.io/v3/polyfill.min.js?version=3.110.1&features=default%2Ces5%2Ces6%2Ces7%2CDOMTokenList%2CDOMTokenList.prototype.%40%40iterator%2CDOMTokenList.prototype.forEach%2CNodeList.prototype.forEach%2CNodeList.prototype.%40%40iterator%2Cscroll%2Cfetch%2CURLSearchParams%2CObject.values%2CObject.entries%2CMap%2CElement.prototype.scroll%2CElement.prototype.remove%2CElement.prototype.prepend%2Ces2022%2Ces2021%2Ces2020%2Ces2019%2CElement.prototype.placeholder%2Ces2017%2Ces2018%2Ces2016%2CSymbol.split%2CSymbol%2CSymbol.iterator%2CSymbol.match%2CSymbol.matchAll%2CSymbol.replace%2CSymbol.search
200 OK 7.6 kB URL GET HTTP/2 polyfill.io/v3/polyfill.min.js?version=3.110.1&features=default%2Ces5%2Ces6%2Ces7%2CDOMTokenList%2CDOMTokenList.prototype.%40%40iterator%2CDOMTokenList.prototype.forEach%2CNodeList.prototype.forEach%2CNodeList.prototype.%40%40iterator%2Cscroll%2Cfetch%2CURLSearchParams%2CObject.values%2CObject.entries%2CMap%2CElement.prototype.scroll%2CElement.prototype.remove%2CElement.prototype.prepend%2Ces2022%2Ces2021%2Ces2020%2Ces2019%2CElement.prototype.placeholder%2Ces2017%2Ces2018%2Ces2016%2CSymbol.split%2CSymbol%2CSymbol.iterator%2CSymbol.match%2CSymbol.matchAll%2CSymbol.replace%2CSymbol.search
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerSectigo Limited
Subject*.polyfill.io
Fingerprint19:AA:59:2F:D9:8A:C1:48:99:20:3C:64:45:4E:E5:A6:1D:E4:92:0C
ValidityTue, 20 Feb 2024 00:00:00 GMT - Wed, 19 Feb 2025 23:59:59 GMT
File type gzip compressed data, from Unix
Hash e04a684600a72927fee72414a1fa4169
81dd616db17e117bdb50c496af4389be30559604
a777cef361c4c75f8971e84ba24bd6e41a3b41b5b856249b0cd289401f433575
GET /v3/polyfill.min.js?version=3.110.1&features=default%2Ces5%2Ces6%2Ces7%2CDOMTokenList%2CDOMTokenList.prototype.%40%40iterator%2CDOMTokenList.prototype.forEach%2CNodeList.prototype.forEach%2CNodeList.prototype.%40%40iterator%2Cscroll%2Cfetch%2CURLSearchParams%2CObject.values%2CObject.entries%2CMap%2CElement.prototype.scroll%2CElement.prototype.remove%2CElement.prototype.prepend%2Ces2022%2Ces2021%2Ces2020%2Ces2019%2CElement.prototype.placeholder%2Ces2017%2Ces2018%2Ces2016%2CSymbol.split%2CSymbol%2CSymbol.iterator%2CSymbol.match%2CSymbol.matchAll%2CSymbol.replace%2CSymbol.search HTTP/1.1
Host: polyfill.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 18:31:40 GMT
content-type: text/javascript; charset=utf-8
cf-ray: 880b872c6f0f56b5-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 95837
cache-control: public, max-age=14400
content-encoding: gzip
expires: Wed, 08 May 2024 22:31:40 GMT
last-modified: Tue, 07 May 2024 15:54:23 GMT
vary: Accept-Encoding, User-Agent
access-control-allow-methods: GET,HEAD,OPTIONS
server: cloudflare
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_602789974.jpg?versionId=QJDEudC4zpw9FB66sclW5rERYIyJQ_g4
200 OK 23 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_602789974.jpg?versionId=QJDEudC4zpw9FB66sclW5rERYIyJQ_g4
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 632x421, components 3
Hash 35df93cbe45454321409fe860f8f120c
5dbf1ced7613a6ce301e1d331b24fac16d8e8635
9b433f2e542049b2134a75d60cc4fd0f5c3c3b56915a47be7eb1dfcae08a8642
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_602789974.jpg?versionId=QJDEudC4zpw9FB66sclW5rERYIyJQ_g4 HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 23150
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: QJDEudC4zpw9FB66sclW5rERYIyJQ_g4
server: AmazonS3
date: Wed, 08 May 2024 04:32:34 GMT
etag: "35df93cbe45454321409fe860f8f120c"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WxV5EuuuCxv6MSxx6fmenGz9IrkEo58GNTZAvsdyoP2_2gyu-px7WQ==
age: 50347
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_601679770.jpg?versionId=x2r82tIKF0962Wp788DXHDDbXMu2gFqK
200 OK 21 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_601679770.jpg?versionId=x2r82tIKF0962Wp788DXHDDbXMu2gFqK
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 545x363, components 3
Hash 3dca293db3cd0fa5d010158a0671c3cc
3e8209782cdddb24f0101662786df5353bc3fc76
3ac60449bb3148a4627f05cb73a20a157f0e755382c0746d9cf8c3567147d3ad
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_601679770.jpg?versionId=x2r82tIKF0962Wp788DXHDDbXMu2gFqK HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 21218
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: uMh8z2jrg39T96JBfgdadZtxVW.ykvX.
server: AmazonS3
date: Wed, 08 May 2024 00:07:06 GMT
etag: "3dca293db3cd0fa5d010158a0671c3cc"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Lrn9UZpeODa4JVac1qj9aGxQ5wQF2tHAHcKCqqjWW9vHqf1JbSobdQ==
age: 66275
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_379392742-1-.jpg?versionId=quEKaKXsND3Gf409676o6UoP1pR9_3N2
200 OK 13 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_379392742-1-.jpg?versionId=quEKaKXsND3Gf409676o6UoP1pR9_3N2
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, copyright=ronstik], progressive, precision 8, 525x350, components 3
Hash 5cf598c099f69da8d40b325f39baec44
a826721c09f994aba44aab02310656953ba87dfd
a5d9415a1821838c83360ea918c1e460cc8841548047d8acaf9e6a935f4bdae4
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_379392742-1-.jpg?versionId=quEKaKXsND3Gf409676o6UoP1pR9_3N2 HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 13345
last-modified: Thu, 11 Apr 2024 14:48:47 GMT
x-amz-version-id: GKi8ZRRsf6o82gI.6VNPVdpz6HiurS0v
server: AmazonS3
date: Wed, 08 May 2024 05:28:57 GMT
etag: "5cf598c099f69da8d40b325f39baec44"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VHzOkWRYri_uiCTDtXWS5FMTPqqgNMUJ6OR5krYkYE-ngmiK4wO10Q==
age: 46964
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/signal-2024-02-29-131323_003.jpg?versionId=LWU9CYlaSgbrQSjyjP8DA8tXUHWE9U9P
200 OK 9.2 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/signal-2024-02-29-131323_003.jpg?versionId=LWU9CYlaSgbrQSjyjP8DA8tXUHWE9U9P
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 525x292, components 3
Hash 0aaf07b0f440ce5c2434febe9d2f750b
423c1921549d8d55d9e05a37e742ced51d8252c8
a2a98fd25b6575a93fa821df42d8140786aebbaa84c2d42f613ec6ce33b7e40c
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/signal-2024-02-29-131323_003.jpg?versionId=LWU9CYlaSgbrQSjyjP8DA8tXUHWE9U9P HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 9219
date: Wed, 08 May 2024 06:24:22 GMT
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: LWU9CYlaSgbrQSjyjP8DA8tXUHWE9U9P
etag: "0aaf07b0f440ce5c2434febe9d2f750b"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6fLzq75F36A826QxIehp6mjpAoXk0dfOHt5mbsWByQPEFeFuZvlhPw==
age: 43639
vary: Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_209150585.jpg?versionId=E7XSoEUthtkfns7vepr6sSmw_O5fJ1Mh
200 OK 49 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_209150585.jpg?versionId=E7XSoEUthtkfns7vepr6sSmw_O5fJ1Mh
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, copyright=Baiba Opule], progressive, precision 8, 545x594, components 3
Hash 69dba9954a5d585f62a2ce315c59be01
7a7acf81b95d13de28d08a56da936cfd3973ec65
a4f86a062ba999a8a8d7a98f68914426f393c8a1471f27246ad87249e92f8837
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_209150585.jpg?versionId=E7XSoEUthtkfns7vepr6sSmw_O5fJ1Mh HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 48860
last-modified: Thu, 11 Apr 2024 14:48:47 GMT
x-amz-version-id: 1HlqHMq8dq.T3GXX.G8M8MNiR6f_geX8
server: AmazonS3
date: Wed, 08 May 2024 11:41:05 GMT
etag: "69dba9954a5d585f62a2ce315c59be01"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sVwTlN0jOkMI_ICy9UjOqyS-pbU1OLq7hbBvayP-BMNa2-Zrm3t41w==
age: 24636
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/news_logo-removebg-preview.png?versionId=QbfkJqR8mmzGfN0nAwSLMcDlxHIs7dEj
200 OK 15 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/news_logo-removebg-preview.png?versionId=QbfkJqR8mmzGfN0nAwSLMcDlxHIs7dEj
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 1100 x 95, 8-bit colormap, non-interlaced
Hash ff4cdddbefc8301ad17b59f52f743ca3
5f07fa91ec98f0611ce76b20a150752948d90de4
ff46d038cba567cbd6914fbc38af0b4e27940d0e2bfec96b5dde301c6288e431
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/news_logo-removebg-preview.png?versionId=QbfkJqR8mmzGfN0nAwSLMcDlxHIs7dEj HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 15362
date: Wed, 08 May 2024 06:24:22 GMT
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: QbfkJqR8mmzGfN0nAwSLMcDlxHIs7dEj
etag: "ff4cdddbefc8301ad17b59f52f743ca3"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rwj9M3CwB_hgNT_djE2aFnEpZBpPVz7ZNKTVdbbrUpm7DbFNiOKMzQ==
age: 43639
vary: Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/World-Exclusive.png?versionId=R7ZzMpsnqhqfjsEw0KTPicukqJ3xmLd_
200 OK 66 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/World-Exclusive.png?versionId=R7ZzMpsnqhqfjsEw0KTPicukqJ3xmLd_
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 525 x 325, 8-bit colormap, non-interlaced
Hash acb03ec46a5dab3255f0ad251beec633
afb66c9bbb73b9ea98280d15bce72bb18173803d
6afaa374887bcc1fd82f07b894f5cf4e333f69c5134b94b68deefdcba094ff58
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/World-Exclusive.png?versionId=R7ZzMpsnqhqfjsEw0KTPicukqJ3xmLd_ HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 65858
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: R7ZzMpsnqhqfjsEw0KTPicukqJ3xmLd_
server: AmazonS3
date: Wed, 08 May 2024 04:32:34 GMT
etag: "acb03ec46a5dab3255f0ad251beec633"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: InD2XPqJOk-D7FR2QXczHrgiZ3x8-7ZAg28AB3ZbQ6ESAsVUtkMf7A==
age: 50347
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_93447917.jpg?versionId=H7sHn0taSF1sDCamailGGBwFgvFKol_c
200 OK 6.5 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_93447917.jpg?versionId=H7sHn0taSF1sDCamailGGBwFgvFKol_c
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 545x362, components 3
Hash 5540536359a41284071b5b317de1286e
d38b8c442503908d526cac0e06544088e8194bda
6fc5e263bb5fd961375505d3a284bf44f02f2beab755fcb2f888fee6b120d418
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_93447917.jpg?versionId=H7sHn0taSF1sDCamailGGBwFgvFKol_c HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 6514
date: Wed, 08 May 2024 01:29:58 GMT
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: ns7jj0xolvPcaVIweMELIWg1bG8pq1Oj
etag: "5540536359a41284071b5b317de1286e"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KIq5kup8T2xB-hKEi8cW_sQ8aVRM2Fe99jBvn6aWRn6h-XK47oSZmg==
age: 61303
vary: Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/6-Bottles-Liponine.png?versionId=ynWPZZ8olldkh_dUmDjTpZuXe_I0UQRj
200 OK 23 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/6-Bottles-Liponine.png?versionId=ynWPZZ8olldkh_dUmDjTpZuXe_I0UQRj
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 307 x 290, 8-bit colormap, non-interlaced
Hash b1732965b44e331581132c1d4d2a92f8
c53b99e119b946aa4f5eb9ef3b4ca5633421cd4b
13e9015c08ae8fcfb900fcb048e85444ffab5abc471e6d5ae044afd634fce335
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/6-Bottles-Liponine.png?versionId=ynWPZZ8olldkh_dUmDjTpZuXe_I0UQRj HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 23436
date: Wed, 08 May 2024 01:51:02 GMT
last-modified: Thu, 11 Apr 2024 14:48:47 GMT
x-amz-version-id: DpIhw7qBc5sE7EWxdBilLK5X0tBykRUV
etag: "b1732965b44e331581132c1d4d2a92f8"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wleuOrDF6Z_2HYZwM0q2_y_Qw5akzuvH9wBARyjHthTWL_scxC4SFQ==
age: 60038
vary: Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/3-Bottles-Liponine.png?versionId=3Hkt_K69ll5SfCL.dbgIRJWoGk5xMFVR
200 OK 20 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/3-Bottles-Liponine.png?versionId=3Hkt_K69ll5SfCL.dbgIRJWoGk5xMFVR
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 313 x 296, 8-bit colormap, non-interlaced
Hash 9b1255f894996bb974dbaf2be92770d4
ef3c9898209484e9038da55d421d69b91e2f9c27
8aebce1a5d88f4de817a6a8ccb0013c6a0ffe5908da63ec6045f34c9219a4e9a
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/3-Bottles-Liponine.png?versionId=3Hkt_K69ll5SfCL.dbgIRJWoGk5xMFVR HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 20180
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: Zt0iaT3L0cSfNWzwyJ7_E9TipXzLx0nP
server: AmazonS3
date: Wed, 08 May 2024 04:32:34 GMT
etag: "9b1255f894996bb974dbaf2be92770d4"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7qWPhK5ubowYu0xpSX2Z2iKK3DArBrYey2YGbB8SvRcY0c2pKWWjPg==
age: 50347
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/1-Bottle-Liponine.png?versionId=hOwG_6acnReisJR8sLsYsug7Sq89RJ8B
200 OK 11 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/1-Bottle-Liponine.png?versionId=hOwG_6acnReisJR8sLsYsug7Sq89RJ8B
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 353 x 360, 8-bit colormap, non-interlaced
Hash 977955a09b9346c5b83182a97b9fa4f5
35199764bdd53c0d836338aa581083bf922b22b6
4397dd02a9f265128cb07387ac1fbc1c0f27734a3ab71613c1b225268e997341
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/1-Bottle-Liponine.png?versionId=hOwG_6acnReisJR8sLsYsug7Sq89RJ8B HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 10853
last-modified: Thu, 11 Apr 2024 14:48:47 GMT
x-amz-version-id: XsyH5ohq_84AWSIPGTWAdhaBfvdVJcrE
server: AmazonS3
date: Wed, 08 May 2024 04:32:34 GMT
etag: "977955a09b9346c5b83182a97b9fa4f5"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1lndNjkq90jM-gf6npVoahpRVnDmTWiDUiWMt1H9UlNKsIBemdNXHw==
age: 50347
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/Proudly-American-Made.png?versionId=EGtQUjhCfWOo7RT2jCaHrSsaST3IOjNp
200 OK 1.9 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/Proudly-American-Made.png?versionId=EGtQUjhCfWOo7RT2jCaHrSsaST3IOjNp
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 527 x 59, 8-bit colormap, non-interlaced
Hash dbef0ad43a655ca7050e5eb0db441364
87c39e84d833af700d2aedd7719f2bcfafa71661
831105e2cc8f6d9426f08437d85c555b4cedb3932b703c5217f5e205a17e1c25
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/Proudly-American-Made.png?versionId=EGtQUjhCfWOo7RT2jCaHrSsaST3IOjNp HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1912
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: EGtQUjhCfWOo7RT2jCaHrSsaST3IOjNp
server: AmazonS3
date: Wed, 08 May 2024 05:28:57 GMT
etag: "dbef0ad43a655ca7050e5eb0db441364"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZTDF57kGGsvnqbTNhi5hO6-OYNtIdkM3iFU3xzvgXJOFAEMxvM1o6Q==
age: 46964
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
config.checkoutchamp.com/assets/arrow-flash-small.webp
200 OK 462 B URL GET HTTP/2 config.checkoutchamp.com/assets/arrow-flash-small.webp
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash d9b258f2651f58e247dd9368546d59d2
486fec5228c29d5fae84ce6a75953db0388c31fc
6cc7bfdbba308e85ca54aca41caa38c41373199e4d8c3309394c5bf32ef0f119
GET /assets/arrow-flash-small.webp HTTP/1.1
Host: config.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
content-length: 462
last-modified: Wed, 02 Sep 2020 16:37:22 GMT
accept-ranges: bytes
server: AmazonS3
date: Wed, 08 May 2024 18:31:41 GMT
etag: "d9b258f2651f58e247dd9368546d59d2"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1HoSNgf6KEtPeUyHzGtyImDWOGscsUvGIH2rZfesbaTZyvOHq8ajgQ==
age: 51241
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/Gift-Card-copy.png?versionId=tdVPfCZfrA7XXX8leYAsq3xjEACsOUZj
200 OK 27 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/Gift-Card-copy.png?versionId=tdVPfCZfrA7XXX8leYAsq3xjEACsOUZj
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 525 x 331, 8-bit colormap, non-interlaced
Hash 8a4015e34ffc5d58841a6752898ef203
8f9f4e1b9bd339db8f66d731f98efe7ee3f33ef8
20423ccd33ad45424c550485f33b2c8b9ce07d18e6011c20943cda91cbf31e3b
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/Gift-Card-copy.png?versionId=tdVPfCZfrA7XXX8leYAsq3xjEACsOUZj HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 27014
date: Wed, 08 May 2024 01:29:58 GMT
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: GMEWzKfKvXjf7ywd_A8.A1yqcqluaheN
etag: "8a4015e34ffc5d58841a6752898ef203"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TVhgpVVsBy7wCML5ir6ae4OSTwMj066EjMTc4i2hKc41p5s37H6zcw==
age: 61303
vary: Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/SubNano.png?versionId=ndl3HVRDCUlgqJSOKVG9yEYdXGTdAqfG
200 OK 10 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/SubNano.png?versionId=ndl3HVRDCUlgqJSOKVG9yEYdXGTdAqfG
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 545 x 216, 8-bit colormap, non-interlaced
Hash f8e5285c26d3d322d495e7fd1eaa887b
2aacac641f92948c0d4544042660b18b04c7fbbc
2540db378f956b9cb743744a409d4b12947e301e56531dd6e6d11ba3c4e60579
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/SubNano.png?versionId=ndl3HVRDCUlgqJSOKVG9yEYdXGTdAqfG HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 10043
last-modified: Thu, 11 Apr 2024 14:48:47 GMT
x-amz-version-id: V10zgxu4QNOb2IFk9jROupwyH0DVNlVV
server: AmazonS3
date: Wed, 08 May 2024 00:07:06 GMT
etag: "f8e5285c26d3d322d495e7fd1eaa887b"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oMJLxiZBZjPCZ6tI6XWnTH7DOWw4i8iTiricHSFcBREXzTzBy6kE7g==
age: 66275
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/100-_money-backnn.png?versionId=cVggF4wilOgvQO1cvA40BqwH8AMkN3ZH
200 OK 45 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/100-_money-backnn.png?versionId=cVggF4wilOgvQO1cvA40BqwH8AMkN3ZH
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 525 x 462, 8-bit colormap, non-interlaced
Hash b389d4493f47660ed4f2dc214b1c7952
f6ff0dddecc4a0fb6878507bd49a5add37c2a82c
f5d43115f7e97d98e0d92d15e1944a020419f50a1a4bfa1685645cc0ff17111d
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/100-_money-backnn.png?versionId=cVggF4wilOgvQO1cvA40BqwH8AMkN3ZH HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 44714
date: Wed, 08 May 2024 01:29:58 GMT
last-modified: Thu, 11 Apr 2024 14:48:47 GMT
x-amz-version-id: eExJS4zGEGHte8fF3pP8E18UloUlozgY
etag: "b389d4493f47660ed4f2dc214b1c7952"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ymQcsMlRB66-FOl4BZc1wYWEXzJOQy6YHqAjdgHayx877XjjF0_u9g==
age: 61303
vary: Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/1.png?versionId=ki_IY4SLAQAF3jjJtw1iU8UtubODwMMf
200 OK 15 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/1.png?versionId=ki_IY4SLAQAF3jjJtw1iU8UtubODwMMf
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 272 x 372, 8-bit colormap, non-interlaced
Hash cd9eb46171d6d27dbf64b2ea4ade5a6a
9c26a407e51ace922fed6c764c54ff6024254037
07f828b8d9db8384d69ec5f3bd99e71408c53433a3b5efcdf1d5293a7bbdf07d
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/1.png?versionId=ki_IY4SLAQAF3jjJtw1iU8UtubODwMMf HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 15322
last-modified: Thu, 11 Apr 2024 14:48:47 GMT
x-amz-version-id: 3xuWyyOMhXwjdhqiPiJqtBBF0eyfJ3ZY
server: AmazonS3
date: Wed, 08 May 2024 00:07:06 GMT
etag: "cd9eb46171d6d27dbf64b2ea4ade5a6a"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: v6WPGQeTpCTcKDxC05JseYjU1IG4BptgWP6Elh4WBmQ0VrUHYTgIzw==
age: 66275
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/100--ORDER_FORM_seals.png?versionId=icYwb4h_UjgI4Cm.y_HKnWLQ_BUvtocr
200 OK 15 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/100--ORDER_FORM_seals.png?versionId=icYwb4h_UjgI4Cm.y_HKnWLQ_BUvtocr
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 560 x 85, 8-bit colormap, non-interlaced
Hash f92c031aff4828ec4de6f48f1559058d
d036704ecbf0e7558789dbbccf09fa70f7e05318
af2ee0b1e8ce1fab544b7c86e550accc31b8d1de646c9700d83293e4a6edfdc8
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/100--ORDER_FORM_seals.png?versionId=icYwb4h_UjgI4Cm.y_HKnWLQ_BUvtocr HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 15190
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: icYwb4h_UjgI4Cm.y_HKnWLQ_BUvtocr
server: AmazonS3
date: Wed, 08 May 2024 05:28:57 GMT
etag: "f92c031aff4828ec4de6f48f1559058d"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: z__hvYOBvVjiLuevOtYF_a33w5_qQ7wI8W4nTaYXWjvgIUsjqcOxLA==
age: 46964
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/Only-29-Liponine.png?versionId=ywepPJT522dVdNGz4BkEd6VwPsXBgDcO
200 OK 273 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/Only-29-Liponine.png?versionId=ywepPJT522dVdNGz4BkEd6VwPsXBgDcO
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 1920 x 1963, 8-bit colormap, non-interlaced
Size 273 kB (272985 bytes)
Hash f9a1c7979fc137e33b16ce94be821196
f1e46c3f233e28cc78260de16e3651ced08bd566
c73bcd463a7f75daa35f24e815b87b83a62d491555aa7902ca98d25fd0ce6509
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/Only-29-Liponine.png?versionId=ywepPJT522dVdNGz4BkEd6VwPsXBgDcO HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 272985
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: Pf4vmab10Jr3VFiCmq3MWYqpNbcEnQUd
server: AmazonS3
date: Wed, 08 May 2024 05:28:57 GMT
etag: "f9a1c7979fc137e33b16ce94be821196"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: u4A2-tGktxdow8DzRHEGcx9Ji41a0ufpXI2B9zxOVFTiPSFHhZxVVg==
age: 46964
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/330c2890-a040-11ee-b95e-4593f423b5b5/1707434639884_seals.jpg
200 OK 34 kB URL GET HTTP/2 assets.checkoutchamp.com/330c2890-a040-11ee-b95e-4593f423b5b5/1707434639884_seals.jpg
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 922x141, components 3
Hash 1dd02941497a9b715b31103487e62859
c0fb807ab0df6091f7e5ace0b6e9ba2f8d25c6e5
48a4ce22d2f2ea2338a5126464f68c90c37fd39afb87eb45d7eccfceed7b193a
GET /330c2890-a040-11ee-b95e-4593f423b5b5/1707434639884_seals.jpg HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 33754
last-modified: Thu, 08 Feb 2024 23:24:01 GMT
x-amz-version-id: HhHD0J3h4ey2u13Cm3nzs9ZkshXE1Ny1
server: AmazonS3
date: Wed, 08 May 2024 18:31:37 GMT
cache-control: max-age=5
etag: "1dd02941497a9b715b31103487e62859"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bpwZv1u_j_XbxuCv55Kz_LGohUF6Oqt5Cup_lYGdkemjJt4PJije2g==
age: 4
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/BBB_cards_icon_set-copy.png?versionId=pllv5S1ad.jdNkOLnwii97RkAxlTt8I2
200 OK 8.7 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/BBB_cards_icon_set-copy.png?versionId=pllv5S1ad.jdNkOLnwii97RkAxlTt8I2
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 560 x 116, 8-bit colormap, non-interlaced
Hash 1bb016e7ddc3b83f9cbd14b807705dd6
8cfb439371b3fa91f5f2c288a97c33a616f5a8cb
51557111b630f805a007eab9c9ffce3ab1064057100e3ed1e0baec35fa837a71
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/BBB_cards_icon_set-copy.png?versionId=pllv5S1ad.jdNkOLnwii97RkAxlTt8I2 HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 8690
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: pllv5S1ad.jdNkOLnwii97RkAxlTt8I2
server: AmazonS3
date: Wed, 08 May 2024 11:28:52 GMT
etag: "1bb016e7ddc3b83f9cbd14b807705dd6"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IyaWgIX82jQYVWm6jxyuKhXquP7qYrNhsq_6iZ7lHmAWc0eZ9xRv3w==
age: 25369
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/guaranty-new.png?versionId=rcadJ.0yphGH8Vr1TWqZDnkx375lCRC6
200 OK 9.9 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/guaranty-new.png?versionId=rcadJ.0yphGH8Vr1TWqZDnkx375lCRC6
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 162 x 132, 8-bit colormap, non-interlaced
Hash c312a126aa0c17481bb764364f69cebd
a29e4eca64fbac7d9c302be0d6ae63b381e4cfa8
3a711223f5fd2a4769117f49f4806c74df3be2344a775564d9bcae77ae1297c3
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/guaranty-new.png?versionId=rcadJ.0yphGH8Vr1TWqZDnkx375lCRC6 HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 9931
date: Wed, 08 May 2024 01:29:58 GMT
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: Z_YJONvE43VsAAlOLIeo4oOFqz7up7kv
etag: "c312a126aa0c17481bb764364f69cebd"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YrNm9NyMf38Xjc-Q6_sEKqirCpMRpTv3s2wJKxh993Aoi_cYqv8znw==
age: 61303
vary: Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/330c2890-a040-11ee-b95e-4593f423b5b5/1714013109215_l_3gc.png
200 OK 742 kB URL GET HTTP/2 assets.checkoutchamp.com/330c2890-a040-11ee-b95e-4593f423b5b5/1714013109215_l_3gc.png
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 1500 x 1392, 8-bit/color RGBA, non-interlaced
Size 742 kB (742250 bytes)
Hash 05209c13301a9ba9234d636a90b19417
d40f784b5b2ffb8fafea7826c1c2a46d516c57e4
720fcba3ca610c83d00dc5389d83cac1948e033a52e6719ee5bf56ad4560b173
GET /330c2890-a040-11ee-b95e-4593f423b5b5/1714013109215_l_3gc.png HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 742250
last-modified: Thu, 25 Apr 2024 02:45:11 GMT
x-amz-version-id: 7dO6f4fKyOeTkjY9o1KrluEDf08CnXZh
server: AmazonS3
date: Wed, 08 May 2024 18:31:37 GMT
cache-control: max-age=5
etag: "05209c13301a9ba9234d636a90b19417"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: U4V4utl4VNX-yz8jKA4I8FoO3funDo75RX05fLSlvcHEsygyFIZezw==
age: 4
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
images.clickfunnels.com/cdn-cgi/image/fit=scale-down,width=525,quality=75/https://images.clickfunnels.com/9e/d7f6c158d94817b2b2b88aace985e1/Liponine.png
200 OK 31 kB URL GET HTTP/2 images.clickfunnels.com/cdn-cgi/image/fit=scale-down,width=525,quality=75/https://images.clickfunnels.com/9e/d7f6c158d94817b2b2b88aace985e1/Liponine.png
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerCloudflare, Inc.
Subjectclickfunnels.com
Fingerprint09:41:B7:BA:5B:D4:AE:AE:A5:DE:13:0C:87:96:D0:9D:67:C8:4D:4E
ValidityMon, 29 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type PNG image data, 525 x 525, 8-bit colormap, non-interlaced
Hash 097023d2e92d3e2abd93b8170a7eec83
9101e5bc2416a909db1e98751792fbc64ae45cfa
9830eb88588b4ab3c3eb8d2c0ba75ba6a99946a273cf1b630adece1020966553
GET /cdn-cgi/image/fit=scale-down,width=525,quality=75/https://images.clickfunnels.com/9e/d7f6c158d94817b2b2b88aace985e1/Liponine.png HTTP/1.1
Host: images.clickfunnels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 18:31:41 GMT
content-type: image/png
content-length: 30777
cf-ray: 880b87316e055697-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=2073600
etag: "cf32fVvSG811guJW5JKIU4p2m3aVCHp4lle0D_wzXqDQ:6042f495c3c7377ad4a0685b8702de86"
last-modified: Thu, 25 Apr 2024 13:22:05 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:93,h2pri
cf-resized: internal=ok/h q=0 n=30+0 c=47+169 v=2024.4.0 l=30777
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
priority: u=4;i=?0,cf-chb=(37;u=2;i=?0 915;u=5;i=?0)
x-content-type-options: nosniff
set-cookie: __cf_bm=_HyJd5QrHw19PMFVq5JARUTS3G6jxz.YZd.logLtHck-1715193101-1.0.1.1-Kb4tti1jVL.82LIDyERPvmzfQxIlLUxo7IVabbNd0HoiYZV0QxDqv6gMQjLOD_wAkfNgQsGyj6CgnvWiNwLPNyP6qU4DLoZyLqqirYGRR3s; path=/; expires=Wed, 08-May-24 19:01:41 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
_cfuvid=VbuQd56U_Uhbrt01Ai1qjs5K7Ej5TTmBdAN4xgZ4zO4-1715193101148-0.0.1.1-604800000; path=/; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
images.clickfunnels.com/cdn-cgi/image/fit=scale-down,width=525,quality=75/https://images.clickfunnels.com/11/8773f34d854c8da94c83d9d302aa2f/Only-29-Liponine.png
200 OK 31 kB URL GET HTTP/2 images.clickfunnels.com/cdn-cgi/image/fit=scale-down,width=525,quality=75/https://images.clickfunnels.com/11/8773f34d854c8da94c83d9d302aa2f/Only-29-Liponine.png
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerCloudflare, Inc.
Subjectclickfunnels.com
Fingerprint09:41:B7:BA:5B:D4:AE:AE:A5:DE:13:0C:87:96:D0:9D:67:C8:4D:4E
ValidityMon, 29 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type PNG image data, 525 x 536, 8-bit colormap, non-interlaced
Hash 964067137d397463b313b55e58902f46
98a8be4aa7e9e3d8eae3d558f10b3ea32931ba92
7909980fbaa6f3f75867e90bbda3fc5777f0ae0b2b5424ec65ea44089f1d13a3
GET /cdn-cgi/image/fit=scale-down,width=525,quality=75/https://images.clickfunnels.com/11/8773f34d854c8da94c83d9d302aa2f/Only-29-Liponine.png HTTP/1.1
Host: images.clickfunnels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 18:31:41 GMT
content-type: image/png
content-length: 31342
cf-ray: 880b87317e1e5697-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=2073600
etag: "cfBiTA7C1fdmWHfMThcA5liKpxaVCHp4lle0D_wzXqDQ:3d746973cc3f8f04b4d5ba897be45c4a"
last-modified: Wed, 28 Feb 2024 16:40:01 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:94,h2pri
cf-resized: internal=ok/h q=0 n=23+0 c=57+170 v=2024.4.0 l=31342
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
priority: u=4;i=?0,cf-chb=(37;u=2;i=?0 905;u=5;i=?0)
x-content-type-options: nosniff
set-cookie: __cf_bm=BFT0dJKXfP7D96EQ1bss5IaV4et07Fk3YCKWFC6q4A4-1715193101-1.0.1.1-tjalunC8focLwOb1Yh8G0IULlaFNR_MAH6foLisZ0VEjwrDC.Bt6NsVvvJSIyqgzVzJDhYiou.VEEgNnpPknAOJwOMAvabUNQcdHEVMcFnM; path=/; expires=Wed, 08-May-24 19:01:41 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
_cfuvid=CbPW5fPblk61cd3b3V53BrEkYG6.6KsxK1gslOonaNg-1715193101212-0.0.1.1-604800000; path=/; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/fa-solid-900.eot
404 Not Found 446 B URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/fa-solid-900.eot
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type HTML document, ASCII text
Hash 3dad8aaac199bc5b2967e2902af296a6
da32f37b82372c4aebd86e0c4beb5d7730da6a33
9909f19198602e740d7dbf42088161ec969e953f04a537f17d007d5c4898883c
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/fa-solid-900.eot HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.gdr-labs.com
DNT: 1
Connection: keep-alive
Referer: https://assets.checkoutchamp.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=utf-8
content-length: 446
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, HEAD
access-control-expose-headers: x-amz-version-id
access-control-max-age: 0
date: Wed, 08 May 2024 18:31:41 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WEYxLDHgLC2vmHKCupKPl9158xxyKZWr6MOouoBJ_F9NGf8hOblXyQ==
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
200 OK 7.9 kB URL GET HTTP/2 fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.gdr-labs.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 19:57:12 GMT
expires: Fri, 02 May 2025 19:57:12 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:38 GMT
content-type: font/woff2
age: 513269
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
200 OK 11 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 11028, version 1.0
Hash 1f6d3cf6d38f25d83d95f5a800b8cac3
279f300ca2cbbdf9f5036ef2f438607fbf377daa
796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.gdr-labs.com
DNT: 1
Connection: keep-alive
Referer: https://assets.checkoutchamp.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 21:19:21 GMT
expires: Fri, 02 May 2025 21:19:21 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:50 GMT
content-type: font/woff2
age: 508340
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
200 OK 8.0 kB URL GET HTTP/2 fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 8000, version 1.0
Hash 72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.gdr-labs.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 15:13:04 GMT
expires: Fri, 02 May 2025 15:13:04 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:59 GMT
content-type: font/woff2
age: 530317
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/bebasneue/v14/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2
200 OK 14 kB URL GET HTTP/2 fonts.gstatic.com/s/bebasneue/v14/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 13820, version 1.0
Hash 2dd698f2699a5ef991625825011bff90
523ff9357131751e57dd78cb92b218a49a130d1d
02f5dfc0c21e92f3c724260f035833e627513a1b91230cc490a1ea756c95e5e5
GET /s/bebasneue/v14/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.gdr-labs.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13820
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:34:50 GMT
expires: Fri, 02 May 2025 02:34:50 GMT
cache-control: public, max-age=31536000
age: 575811
last-modified: Thu, 24 Aug 2023 21:28:06 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
d2saw6je89goi1.cloudfront.net/uploads/digital_asset/file/1169564/Bebas-Regular.woff2
200 OK 8.0 kB URL GET HTTP/2 d2saw6je89goi1.cloudfront.net/uploads/digital_asset/file/1169564/Bebas-Regular.woff2
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 8016, version 1.0
Hash 4bf3b0900dfc0f89acddcdfde70f133a
c0ee2ec1a30c88d1900d9ce3fb4a351321d90fc8
83dfc0cbd25f317f79e961ac4ff008ac1ce42ab9a8d1474e40576d5f70e54ea9
GET /uploads/digital_asset/file/1169564/Bebas-Regular.woff2 HTTP/1.1
Host: d2saw6je89goi1.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.gdr-labs.com
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 8016
date: Sat, 20 Jan 2024 23:24:12 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Fri, 22 Sep 2023 07:05:52 GMT
etag: "4bf3b0900dfc0f89acddcdfde70f133a"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EHge1svHbSpPMBr0cHK3FFFjwTAQSwFPkJAnlkzOmb03u8u9aaeasw==
age: 9400050
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
200 OK 7.8 kB URL GET HTTP/2 fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Hash 25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.gdr-labs.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:53:08 GMT
expires: Fri, 02 May 2025 01:53:08 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:32 GMT
content-type: font/woff2
age: 578313
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/caveat/v18/Wnz6HAc5bAfYB2Q7ZjYY.woff2
200 OK 74 kB URL GET HTTP/2 fonts.gstatic.com/s/caveat/v18/Wnz6HAc5bAfYB2Q7ZjYY.woff2
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 74484, version 1.0
Hash 780ab198837cad24bbb9c87a0cba1a09
0430a4c516efad07d864557a070dca057602966d
26294b6b2c91b3970aca8fbbcb3e6c553ecb1ebb355b7ffbd30fa2f5370fe733
GET /s/caveat/v18/Wnz6HAc5bAfYB2Q7ZjYY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.gdr-labs.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 74484
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 19:58:05 GMT
expires: Fri, 02 May 2025 19:58:05 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:55:43 GMT
content-type: font/woff2
age: 513216
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/caveat/v18/Wnz6HAc5bAfYB2Q7ZjYY.woff2
200 OK 74 kB URL GET HTTP/2 fonts.gstatic.com/s/caveat/v18/Wnz6HAc5bAfYB2Q7ZjYY.woff2
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 74484, version 1.0
Hash 780ab198837cad24bbb9c87a0cba1a09
0430a4c516efad07d864557a070dca057602966d
26294b6b2c91b3970aca8fbbcb3e6c553ecb1ebb355b7ffbd30fa2f5370fe733
GET /s/caveat/v18/Wnz6HAc5bAfYB2Q7ZjYY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.gdr-labs.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 74484
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 19:58:05 GMT
expires: Fri, 02 May 2025 19:58:05 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:55:43 GMT
content-type: font/woff2
age: 513216
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/patuaone/v20/ZXuke1cDvLCKLDcimxB44_lu.woff2
200 OK 13 kB URL GET HTTP/2 fonts.gstatic.com/s/patuaone/v20/ZXuke1cDvLCKLDcimxB44_lu.woff2
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 12876, version 1.0
Hash 876bac7b767e811b11e77b8c25ad3fe7
f6ab3eff1ff70e567efe03927142a3813e9a2794
74609e166867aa3888ef3085b0011dd5e5e61d347f578195c8d7e10ae315af02
GET /s/patuaone/v20/ZXuke1cDvLCKLDcimxB44_lu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.gdr-labs.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12876
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:49:49 GMT
expires: Fri, 02 May 2025 01:49:49 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 21:11:04 GMT
content-type: font/woff2
age: 578512
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
200 OK 7.7 kB URL GET HTTP/2 fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 7748, version 1.0
Hash a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.gdr-labs.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 03:25:26 GMT
expires: Wed, 07 May 2025 03:25:26 GMT
cache-control: public, max-age=31536000
age: 140776
last-modified: Fri, 22 Mar 2024 00:01:14 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/5.12.1/webfonts/fa-solid-900.woff2
200 OK 76 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/font-awesome/5.12.1/webfonts/fa-solid-900.woff2
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 76120, version 330.-16188
Hash 55eb2a60e8181f0e68b558c991973bf0
af776f52d579da211590e0691d554b88a69dfe61
2c3097237d60f42e800ebe4009c9af144bb19e5581e1c0501c7b259eee7e210c
GET /ajax/libs/font-awesome/5.12.1/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.gdr-labs.com
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:31:42 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 76120
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e60-12958"
last-modified: Mon, 04 May 2020 16:10:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 48039
expires: Mon, 28 Apr 2025 18:31:42 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yekz2ye7JrqtXZgyF%2FHA5pBdvsnrsTWXZkVR1GozZk92z24MVQ7tm9ohAp%2B5sNqQCCJOb5J%2Ffg4iaSFNIr3qCu0j%2B58dpMDl33gtEyZaBdB2iQ4%2Fsz19Q1ufTCUa6bT3dS8JGEPI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 880b87397fd156ab-OSL
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 16:31:04 GMT
expires: Sat, 03 May 2025 16:31:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 439238
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:50:52 GMT
expires: Fri, 02 May 2025 01:50:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 578450
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/178de1f2/player_ias.vflset/en_US/embed.js
200 OK 20 kB URL GET HTTP/3 www.youtube.com/s/player/178de1f2/player_ias.vflset/en_US/embed.js
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type JavaScript source, ASCII text, with very long lines (3391)
Hash 6b1e9f0504828607a4f59e3e04a43bd7
fcbb02f80b1d031640be70840dd0fd6f60c87a3c
0844cf3b7743e155d22eff4e535fa5290b077f189210f6fc26c1c72b19f6f1f0
GET /s/player/178de1f2/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 19841
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 07:26:22 GMT
expires: Wed, 07 May 2025 07:26:22 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 07 May 2024 04:18:47 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 126320
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/178de1f2/www-player.css
200 OK 48 kB URL GET HTTP/3 www.youtube.com/s/player/178de1f2/www-player.css
IP
Requested by https://www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 69c6c2a25cfac2a8ab7182b8a91325da
76d6c2b5a85fd1cedf7ab5022084cc982ef6f11c
e4ea3085c10ebdcee3f4b16dd370f467847e40aba7fcae77d60eed0024155864
GET /s/player/178de1f2/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 47612
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 07:22:01 GMT
expires: Wed, 07 May 2025 07:22:01 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 07 May 2024 04:18:47 GMT
content-type: text/css
vary: Accept-Encoding, Origin
age: 126581
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 16:31:04 GMT
expires: Sat, 03 May 2025 16:31:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 439238
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:50:52 GMT
expires: Fri, 02 May 2025 01:50:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 578450
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/178de1f2/player_ias.vflset/en_US/embed.js
200 OK 20 kB URL GET HTTP/3 www.youtube.com/s/player/178de1f2/player_ias.vflset/en_US/embed.js
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type JavaScript source, ASCII text, with very long lines (3391)
Hash 6b1e9f0504828607a4f59e3e04a43bd7
fcbb02f80b1d031640be70840dd0fd6f60c87a3c
0844cf3b7743e155d22eff4e535fa5290b077f189210f6fc26c1c72b19f6f1f0
GET /s/player/178de1f2/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 19841
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 07:26:22 GMT
expires: Wed, 07 May 2025 07:26:22 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 07 May 2024 04:18:47 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 126320
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 16:31:04 GMT
expires: Sat, 03 May 2025 16:31:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 439238
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:50:52 GMT
expires: Fri, 02 May 2025 01:50:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 578450
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 16:31:04 GMT
expires: Sat, 03 May 2025 16:31:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 439238
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:50:52 GMT
expires: Fri, 02 May 2025 01:50:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 578450
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 16:31:04 GMT
expires: Sat, 03 May 2025 16:31:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 439238
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:50:52 GMT
expires: Fri, 02 May 2025 01:50:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 578450
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/178de1f2/player_ias.vflset/en_US/embed.js
200 OK 20 kB URL GET HTTP/3 www.youtube.com/s/player/178de1f2/player_ias.vflset/en_US/embed.js
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type JavaScript source, ASCII text, with very long lines (3391)
Hash 6b1e9f0504828607a4f59e3e04a43bd7
fcbb02f80b1d031640be70840dd0fd6f60c87a3c
0844cf3b7743e155d22eff4e535fa5290b077f189210f6fc26c1c72b19f6f1f0
GET /s/player/178de1f2/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/bIM3i5YWaho?controls=0&showinfo=0&loop=1&playlist=bIM3i5YWaho&rel=0&modestbranding=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 19841
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 07:26:22 GMT
expires: Wed, 07 May 2025 07:26:22 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 07 May 2024 04:18:47 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 126320
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/178de1f2/player_ias.vflset/en_US/embed.js
200 OK 20 kB URL GET HTTP/3 www.youtube.com/s/player/178de1f2/player_ias.vflset/en_US/embed.js
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type JavaScript source, ASCII text, with very long lines (3391)
Hash 6b1e9f0504828607a4f59e3e04a43bd7
fcbb02f80b1d031640be70840dd0fd6f60c87a3c
0844cf3b7743e155d22eff4e535fa5290b077f189210f6fc26c1c72b19f6f1f0
GET /s/player/178de1f2/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 19841
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 07:26:22 GMT
expires: Wed, 07 May 2025 07:26:22 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 07 May 2024 04:18:47 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 126320
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
secure.gdr-labs.com/index.js?f=550cd8
200 OK 213 kB URL GET HTTP/2 secure.gdr-labs.com/index.js?f=550cd8
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subjectsecure.gdr-labs.com
FingerprintDB:95:14:34:1C:06:01:32:E2:1D:01:7B:24:11:34:77:CE:EF:50:68
ValidityThu, 01 Feb 2024 00:00:00 GMT - Sat, 01 Mar 2025 23:59:59 GMT
File type gzip compressed data, from Unix
Size 213 kB (213143 bytes)
Hash d0dd9ff9db7d2f1620fa18c939e41691
f75c2c42a235f63ca2cd1dfd9133541161dda607
5fe33adfbbc3799497a1acfdda6d66a221a6b13abef37862e72f106312876caf
GET /index.js?f=550cd8 HTTP/1.1
Host: secure.gdr-labs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Cookie: X-Source=550cd81d-bd07-4121-867d-7dfcf9219d60
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
x-amz-id-2: S2paawzPqBIrh70S/cjaTEzXzzFzIbo7bd2NfwYx52pu6xAj8QJvJVPxUSMRLRxklnW4EbFED7k=
x-amz-request-id: YVHPR4ZH6PDKRXNN
date: Wed, 08 May 2024 18:14:08 GMT
last-modified: Wed, 08 May 2024 10:47:18 GMT
etag: W/"83e2a6abae2ea9d8ca3498fa018c294d"
server: AmazonS3
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
set-cookie: X-Source=550cd81d-bd07-4121-867d-7dfcf9219d60; Path=/
cache-control: max-age=1800
x-frame-options: SAMEORIGIN
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: yQVzq3LMRsOrEbOxsvC2LoxVG8aSyIZNMsGjjjmGzUnOVsmZyTutcg==
age: 1053
X-Firefox-Spdy: h2
www.youtube.com/s/player/178de1f2/www-embed-player.vflset/www-embed-player.js
200 OK 97 kB URL GET HTTP/3 www.youtube.com/s/player/178de1f2/www-embed-player.vflset/www-embed-player.js
IP
Requested by https://www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type JavaScript source, ASCII text, with very long lines (829)
Hash 313f662ec66b3cb94106e411fba15e0d
39becc293c40b248ce60fafca7413f567d34fa03
d2d3f5afdcae3fd0b7ba628ff725ffc86cb50322d0f0900158ea19e2de701d5b
GET /s/player/178de1f2/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 97382
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 May 2024 15:31:56 GMT
expires: Thu, 08 May 2025 15:31:56 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 07 May 2024 04:18:47 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 10786
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
code.jquery.com/ui/1.12.0-rc.2/jquery-ui.min.js
200 OK 67 kB URL GET HTTP/2 code.jquery.com/ui/1.12.0-rc.2/jquery-ui.min.js
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (32199)
Hash 557e23757524046a1e0ee81d48f066e8
c00ecb8b8302c41e8fb437fa5af58464e524ba6a
e79273de904217ccfd8c13b5a90edc21fd0bfa77ae3d30f5bbb62dceba7676aa
GET /ui/1.12.0-rc.2/jquery-ui.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-3db5e"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 08 May 2024 18:31:42 GMT
age: 6596166
x-served-by: cache-lga21926-LGA, cache-hel1410022-HEL
x-cache: HIT, HIT
x-cache-hits: 4538, 36
x-timer: S1715193103.812438,VS0,VE0
vary: Accept-Encoding
content-length: 67408
X-Firefox-Spdy: h2
www.youtube.com/s/player/178de1f2/www-embed-player.vflset/www-embed-player.js
200 OK 97 kB URL GET HTTP/3 www.youtube.com/s/player/178de1f2/www-embed-player.vflset/www-embed-player.js
IP
Requested by https://www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type JavaScript source, ASCII text, with very long lines (829)
Hash 313f662ec66b3cb94106e411fba15e0d
39becc293c40b248ce60fafca7413f567d34fa03
d2d3f5afdcae3fd0b7ba628ff725ffc86cb50322d0f0900158ea19e2de701d5b
GET /s/player/178de1f2/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 97382
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 May 2024 15:31:56 GMT
expires: Thu, 08 May 2025 15:31:56 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 07 May 2024 04:18:47 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 10786
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
code.jquery.com/ui/1.12.0-rc.2/themes/smoothness/jquery-ui.css
200 OK 8.4 kB URL GET HTTP/2 code.jquery.com/ui/1.12.0-rc.2/themes/smoothness/jquery-ui.css
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (2363)
Hash e62b0db10b7c46bbbc1fe268e59d9b03
f4804b9052909011cc50af390f1301e1e53e4461
805a94b206c7746dc7634b425f62130a870b37fdc69d33ec638deb4f95100348
GET /ui/1.12.0-rc.2/themes/smoothness/jquery-ui.css HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-8e91"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
age: 1252541
date: Wed, 08 May 2024 18:31:42 GMT
x-served-by: cache-lga21955-LGA, cache-hel1410022-HEL
x-cache: HIT, HIT
x-cache-hits: 1457, 0
x-timer: S1715193103.824793,VS0,VE1
vary: Accept-Encoding
content-length: 8420
X-Firefox-Spdy: h2
www.youtube.com/s/player/178de1f2/www-embed-player.vflset/www-embed-player.js
200 OK 97 kB URL GET HTTP/3 www.youtube.com/s/player/178de1f2/www-embed-player.vflset/www-embed-player.js
IP
Requested by https://www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type JavaScript source, ASCII text, with very long lines (829)
Hash 313f662ec66b3cb94106e411fba15e0d
39becc293c40b248ce60fafca7413f567d34fa03
d2d3f5afdcae3fd0b7ba628ff725ffc86cb50322d0f0900158ea19e2de701d5b
GET /s/player/178de1f2/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/bIM3i5YWaho?controls=0&showinfo=0&loop=1&playlist=bIM3i5YWaho&rel=0&modestbranding=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 97382
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 May 2024 15:31:56 GMT
expires: Thu, 08 May 2025 15:31:56 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 07 May 2024 04:18:47 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 10786
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/178de1f2/www-embed-player.vflset/www-embed-player.js
200 OK 97 kB URL GET HTTP/3 www.youtube.com/s/player/178de1f2/www-embed-player.vflset/www-embed-player.js
IP
Requested by https://www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type JavaScript source, ASCII text, with very long lines (829)
Hash 313f662ec66b3cb94106e411fba15e0d
39becc293c40b248ce60fafca7413f567d34fa03
d2d3f5afdcae3fd0b7ba628ff725ffc86cb50322d0f0900158ea19e2de701d5b
GET /s/player/178de1f2/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 97382
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 May 2024 15:31:56 GMT
expires: Thu, 08 May 2025 15:31:56 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 07 May 2024 04:18:47 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 10786
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/178de1f2/www-embed-player.vflset/www-embed-player.js
200 OK 97 kB URL GET HTTP/3 www.youtube.com/s/player/178de1f2/www-embed-player.vflset/www-embed-player.js
IP
Requested by https://www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type JavaScript source, ASCII text, with very long lines (829)
Hash 313f662ec66b3cb94106e411fba15e0d
39becc293c40b248ce60fafca7413f567d34fa03
d2d3f5afdcae3fd0b7ba628ff725ffc86cb50322d0f0900158ea19e2de701d5b
GET /s/player/178de1f2/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 97382
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 May 2024 15:31:56 GMT
expires: Thu, 08 May 2025 15:31:56 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 07 May 2024 04:18:47 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 10786
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
200 OK 11 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 11028, version 1.0
Hash 1f6d3cf6d38f25d83d95f5a800b8cac3
279f300ca2cbbdf9f5036ef2f438607fbf377daa
796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.gdr-labs.com
DNT: 1
Connection: keep-alive
Referer: https://assets.checkoutchamp.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 21:19:21 GMT
expires: Fri, 02 May 2025 21:19:21 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:50 GMT
content-type: font/woff2
age: 508342
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
live-api.checkoutchamp.com/providersApi/V1/Import/CampaignQuery
204 No Content 0 B URL OPTIONS HTTP/2 live-api.checkoutchamp.com/providersApi/V1/Import/CampaignQuery
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerLet's Encrypt
Subjectcheckoutchamp.com
Fingerprint13:CD:3B:BF:2D:6D:AB:78:28:9B:95:C6:2D:8F:7B:4E:51:FD:53:5F
ValidityFri, 15 Mar 2024 15:39:17 GMT - Thu, 13 Jun 2024 15:39:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /providersApi/V1/Import/CampaignQuery HTTP/1.1
Host: live-api.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: access-control-allow-origin,cache-control,companytoken,content-type,funnelreferenceid
Referer: https://secure.gdr-labs.com/
Origin: https://secure.gdr-labs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 08 May 2024 18:31:43 GMT
access-control-allow-headers: access-control-allow-origin,cache-control,companytoken,content-type,funnelreferenceid
access-control-allow-methods: POST
access-control-allow-origin: *
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r79yij9xy7t9V%2B3rtowJSW4RWNtJIu6J%2B%2FeeV%2Flvh9Q%2BrSH4wGfA6q23eo2tiUMoz63nFBrhHcuifOj397AF1cIljDsThqbuez9k1I6YxkgkW9n8v1Z0c3YgD7JPnKwZJgtPDsUWOcZ2G%2BWrtw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880b873c8dc456a9-OSL
X-Firefox-Spdy: h2
live-api.checkoutchamp.com/providersApi/V1/ImportClick/CreateSession
204 No Content 0 B URL OPTIONS HTTP/2 live-api.checkoutchamp.com/providersApi/V1/ImportClick/CreateSession
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerLet's Encrypt
Subjectcheckoutchamp.com
Fingerprint13:CD:3B:BF:2D:6D:AB:78:28:9B:95:C6:2D:8F:7B:4E:51:FD:53:5F
ValidityFri, 15 Mar 2024 15:39:17 GMT - Thu, 13 Jun 2024 15:39:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /providersApi/V1/ImportClick/CreateSession HTTP/1.1
Host: live-api.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: access-control-allow-origin,cache-control,companytoken,content-type,funnelreferenceid
Referer: https://secure.gdr-labs.com/
Origin: https://secure.gdr-labs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 08 May 2024 18:31:43 GMT
access-control-allow-headers: access-control-allow-origin,cache-control,companytoken,content-type,funnelreferenceid
access-control-allow-methods: POST
access-control-allow-origin: *
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=prEdbEws1rcVcotPcxxi9VtzKf6PR9xco91DlFa87gzs1DEE8G7nvtks8GtnOH5N%2FrXedhN4TBG%2BG2vqkS%2BOr7AJwY6xH2q7zZsfAKzLi3allJCzgMhn1Gnt%2B0KFmV%2FbjrChNA08yF8sQSQ2Dw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880b873c9de756a9-OSL
X-Firefox-Spdy: h2
www.youtube.com/s/player/178de1f2/player_ias.vflset/en_US/base.js
200 OK 813 kB URL GET HTTP/3 www.youtube.com/s/player/178de1f2/player_ias.vflset/en_US/base.js
IP
Requested by https://www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type JavaScript source, ASCII text, with very long lines (555)
Size 813 kB (813434 bytes)
Hash 5ebe39f943e9d7346eaf44c56f463112
ad47f985f0bee2bc75b616d6bab087e8fee187aa
1ce835d53b199d552ef2e014c6b08754d901d4638eddf97ee2c58249de0fd863
GET /s/player/178de1f2/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 813434
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 07:26:22 GMT
expires: Wed, 07 May 2025 07:26:22 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 07 May 2024 04:18:47 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 126320
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/178de1f2/player_ias.vflset/en_US/base.js
200 OK 813 kB URL GET HTTP/3 www.youtube.com/s/player/178de1f2/player_ias.vflset/en_US/base.js
IP
Requested by https://www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type JavaScript source, ASCII text, with very long lines (555)
Size 813 kB (813434 bytes)
Hash 5ebe39f943e9d7346eaf44c56f463112
ad47f985f0bee2bc75b616d6bab087e8fee187aa
1ce835d53b199d552ef2e014c6b08754d901d4638eddf97ee2c58249de0fd863
GET /s/player/178de1f2/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 813434
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 07:26:22 GMT
expires: Wed, 07 May 2025 07:26:22 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 07 May 2024 04:18:47 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 126320
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/178de1f2/player_ias.vflset/en_US/base.js
200 OK 813 kB URL GET HTTP/3 www.youtube.com/s/player/178de1f2/player_ias.vflset/en_US/base.js
IP
Requested by https://www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type JavaScript source, ASCII text, with very long lines (555)
Size 813 kB (813434 bytes)
Hash 5ebe39f943e9d7346eaf44c56f463112
ad47f985f0bee2bc75b616d6bab087e8fee187aa
1ce835d53b199d552ef2e014c6b08754d901d4638eddf97ee2c58249de0fd863
GET /s/player/178de1f2/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/bIM3i5YWaho?controls=0&showinfo=0&loop=1&playlist=bIM3i5YWaho&rel=0&modestbranding=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 813434
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 07:26:22 GMT
expires: Wed, 07 May 2025 07:26:22 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 07 May 2024 04:18:47 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 126320
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.starfieldtech.com/
2.1 kB IP
Hash ea742f858e3f155f1f7697fa7476fed1
9986ee84232202c456ef61f7dbd47d3d4360bcd1
2749ec043d2babf8f3fd489e02558ba58f1d64c59cd8aa297c6d6cf454f5dd96
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 08 May 2024 18:31:44 GMT
Content-Type: application/ocsp-response
Content-Length: 2149
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 08 May 2024 05:44:57 GMT
Expires: Thu, 09 May 2024 05:44:57 GMT
ETag: "9986ee84232202c456ef61f7dbd47d3d4360bcd1"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
assets.checkoutchamp.com/Funnel/assets/favicons/550cd81d-bd07-4121-867d-7dfcf9219d60/favicon.ico?versionId=Ei9AGFU4ugXgCUNfCZ3lRR7CtSG4bTsY
200 OK 15 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/favicons/550cd81d-bd07-4121-867d-7dfcf9219d60/favicon.ico?versionId=Ei9AGFU4ugXgCUNfCZ3lRR7CtSG4bTsY
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Hash 0f9746bf8c0c05b6abc0632dad6f964f
9871dc1e5af5302c17a0bf03bd86f74081d30733
1adf277b6bcabd2c431bc33232c20b0ffd67d9d49552f6b753222b796cc9cf5c
GET /Funnel/assets/favicons/550cd81d-bd07-4121-867d-7dfcf9219d60/favicon.ico?versionId=Ei9AGFU4ugXgCUNfCZ3lRR7CtSG4bTsY HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 15086
last-modified: Thu, 14 Mar 2024 22:08:48 GMT
x-amz-version-id: Ei9AGFU4ugXgCUNfCZ3lRR7CtSG4bTsY
server: AmazonS3
date: Wed, 08 May 2024 18:31:44 GMT
cache-control: max-age=5
etag: "0f9746bf8c0c05b6abc0632dad6f964f"
x-cache: RefreshHit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kdgQlOrHoE2cYsKisDdIXAjzuPUPx6zZzfom1hdXqhKmKJv8WjxxbA==
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
www.youtube.com/s/player/178de1f2/player_ias.vflset/en_US/base.js
200 OK 813 kB URL GET HTTP/3 www.youtube.com/s/player/178de1f2/player_ias.vflset/en_US/base.js
IP
Requested by https://www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type JavaScript source, ASCII text, with very long lines (555)
Size 813 kB (813434 bytes)
Hash 5ebe39f943e9d7346eaf44c56f463112
ad47f985f0bee2bc75b616d6bab087e8fee187aa
1ce835d53b199d552ef2e014c6b08754d901d4638eddf97ee2c58249de0fd863
GET /s/player/178de1f2/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 813434
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 07:26:22 GMT
expires: Wed, 07 May 2025 07:26:22 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 07 May 2024 04:18:47 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 126320
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/178de1f2/player_ias.vflset/en_US/base.js
200 OK 813 kB URL GET HTTP/3 www.youtube.com/s/player/178de1f2/player_ias.vflset/en_US/base.js
IP
Requested by https://www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type JavaScript source, ASCII text, with very long lines (555)
Size 813 kB (813434 bytes)
Hash 5ebe39f943e9d7346eaf44c56f463112
ad47f985f0bee2bc75b616d6bab087e8fee187aa
1ce835d53b199d552ef2e014c6b08754d901d4638eddf97ee2c58249de0fd863
GET /s/player/178de1f2/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 813434
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 07:26:22 GMT
expires: Wed, 07 May 2025 07:26:22 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 07 May 2024 04:18:47 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 126320
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 08 May 2024 18:31:46 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 08 May 2024 18:31:46 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 08 May 2024 18:31:46 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/js/th/LvMrC3vzHFP8SzxjvqNWRksbkOPiJTf11ILX4Pq8Ybc.js
200 OK 20 kB URL GET HTTP/2 www.google.com/js/th/LvMrC3vzHFP8SzxjvqNWRksbkOPiJTf11ILX4Pq8Ybc.js
IP
Requested by https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99
ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
File type JavaScript source, ASCII text, with very long lines (51583)
Hash 8168176decd4ee149cd33fb0db48f5f5
b541726598ee936f690683f68551bb4e8fb01439
2ef32b0b7bf31c53fc4b3c63bea356464b1b90e3e22537f5d482d7e0fabc61b7
GET /js/th/LvMrC3vzHFP8SzxjvqNWRksbkOPiJTf11ILX4Pq8Ybc.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 20283
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 01:06:51 GMT
expires: Sat, 03 May 2025 01:06:51 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 29 Apr 2024 11:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 494695
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/js/th/LvMrC3vzHFP8SzxjvqNWRksbkOPiJTf11ILX4Pq8Ybc.js
200 OK 20 kB URL GET HTTP/2 www.google.com/js/th/LvMrC3vzHFP8SzxjvqNWRksbkOPiJTf11ILX4Pq8Ybc.js
IP
Requested by https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99
ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
File type JavaScript source, ASCII text, with very long lines (51583)
Hash 8168176decd4ee149cd33fb0db48f5f5
b541726598ee936f690683f68551bb4e8fb01439
2ef32b0b7bf31c53fc4b3c63bea356464b1b90e3e22537f5d482d7e0fabc61b7
GET /js/th/LvMrC3vzHFP8SzxjvqNWRksbkOPiJTf11ILX4Pq8Ybc.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 20283
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 01:06:51 GMT
expires: Sat, 03 May 2025 01:06:51 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 29 Apr 2024 11:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 494695
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.ytimg.com/vi/bIM3i5YWaho/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGHIgUChDMA8=&rs=AOn4CLBwSnwxDB3R0p3I2PXPggflYd6IcQ
200 OK 26 kB URL GET HTTP/2 i.ytimg.com/vi/bIM3i5YWaho/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGHIgUChDMA8=&rs=AOn4CLBwSnwxDB3R0p3I2PXPggflYd6IcQ
IP
Requested by https://www.youtube.com/embed/bIM3i5YWaho?controls=0&showinfo=0&loop=1&playlist=bIM3i5YWaho&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintD2:2C:3D:05:38:12:27:20:C9:64:22:58:3A:99:D5:43:6E:BD:3B:D2
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3
Hash a93d73b1c1a6ea1132407bd84bed00ef
8c803d2dbb233eec3cef89acc48a2efdd34b7123
28ca58dc03de6c973943f32654c82813c46d7fe21f8287c07fa20731389e912a
GET /vi/bIM3i5YWaho/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGHIgUChDMA8=&rs=AOn4CLBwSnwxDB3R0p3I2PXPggflYd6IcQ HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 26425
date: Wed, 08 May 2024 18:31:46 GMT
expires: Wed, 08 May 2024 20:31:46 GMT
cache-control: public, max-age=7200
etag: "1713639391"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 42 kB URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash 4350e72d5c66b81550bbb507f3f10dd9
e89aa110ef958c4a404e9ab4188b96372d3edda5
97799f4c2da7b76c23e9486f28565f4d3121c6bdbf374c39559bbc80479d8328
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 08 May 2024 18:31:46 GMT
server: ESF
cache-control: private
content-length: 41605
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 41 kB URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash 508c044f0168cb9ff0aefb68ee796304
89bc95dd63da33519390c34de3ce7879707905b3
5038ec15db4cb033ac2e187fc0ac1f0db8f82016ef93f55832ac994eeb59a7af
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 08 May 2024 18:31:46 GMT
server: ESF
cache-control: private
content-length: 41358
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/js/th/LvMrC3vzHFP8SzxjvqNWRksbkOPiJTf11ILX4Pq8Ybc.js
200 OK 20 kB URL GET HTTP/2 www.google.com/js/th/LvMrC3vzHFP8SzxjvqNWRksbkOPiJTf11ILX4Pq8Ybc.js
IP
Requested by https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99
ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
File type JavaScript source, ASCII text, with very long lines (51583)
Hash 8168176decd4ee149cd33fb0db48f5f5
b541726598ee936f690683f68551bb4e8fb01439
2ef32b0b7bf31c53fc4b3c63bea356464b1b90e3e22537f5d482d7e0fabc61b7
GET /js/th/LvMrC3vzHFP8SzxjvqNWRksbkOPiJTf11ILX4Pq8Ybc.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 20283
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 01:06:51 GMT
expires: Sat, 03 May 2025 01:06:51 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 29 Apr 2024 11:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 494695
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/js/th/LvMrC3vzHFP8SzxjvqNWRksbkOPiJTf11ILX4Pq8Ybc.js
200 OK 20 kB URL GET HTTP/2 www.google.com/js/th/LvMrC3vzHFP8SzxjvqNWRksbkOPiJTf11ILX4Pq8Ybc.js
IP
Requested by https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99
ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
File type JavaScript source, ASCII text, with very long lines (51583)
Hash 8168176decd4ee149cd33fb0db48f5f5
b541726598ee936f690683f68551bb4e8fb01439
2ef32b0b7bf31c53fc4b3c63bea356464b1b90e3e22537f5d482d7e0fabc61b7
GET /js/th/LvMrC3vzHFP8SzxjvqNWRksbkOPiJTf11ILX4Pq8Ybc.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 20283
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 01:06:51 GMT
expires: Sat, 03 May 2025 01:06:51 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 29 Apr 2024 11:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 494695
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.ytimg.com/vi/JjLNkEEhErw/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGB4gJCh_MA8=&rs=AOn4CLCpj7yMD8w96cjuHuNpLwxwxN58ow
200 OK 20 kB URL GET HTTP/2 i.ytimg.com/vi/JjLNkEEhErw/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGB4gJCh_MA8=&rs=AOn4CLCpj7yMD8w96cjuHuNpLwxwxN58ow
IP
Requested by https://www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintD2:2C:3D:05:38:12:27:20:C9:64:22:58:3A:99:D5:43:6E:BD:3B:D2
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3
Hash abab8e9afcf12aa3788f1ecdda5c3571
521106d7b2b6004169fe42435423ab329964eccc
7de8e2a366ab71848d37ea13b72eb2d7e9ce02e42715eb7b236072f6902220ba
GET /vi/JjLNkEEhErw/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGB4gJCh_MA8=&rs=AOn4CLCpj7yMD8w96cjuHuNpLwxwxN58ow HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 20099
date: Wed, 08 May 2024 18:31:46 GMT
expires: Wed, 08 May 2024 20:31:46 GMT
cache-control: public, max-age=7200
etag: "1713639343"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/embed/bIM3i5YWaho?controls=0&showinfo=0&loop=1&playlist=bIM3i5YWaho&rel=0&modestbranding=1
200 OK 39 kB URL GET HTTP/2 www.youtube.com/embed/bIM3i5YWaho?controls=0&showinfo=0&loop=1&playlist=bIM3i5YWaho&rel=0&modestbranding=1
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type HTML document, ASCII text, with very long lines (58052)
Hash 67a200de58eb9bd5fa4c024a4ea56a20
07dff960ea39eb157d8d5d0d70abbf6f25b2d7a0
eb462933f0b2477f9d504822fb7f464c5f8cc87a41fb57e3b0fede65ddfa7ce2
GET /embed/bIM3i5YWaho?controls=0&showinfo=0&loop=1&playlist=bIM3i5YWaho&rel=0&modestbranding=1 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 08 May 2024 18:31:41 GMT
strict-transport-security: max-age=31536000
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
origin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=kdJMLuLEjp4; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=giQRy2J_OEk; Domain=.youtube.com; Expires=Mon, 04-Nov-2024 18:31:41 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxIIEgQSAgsMIEA%3D; Domain=.youtube.com; Expires=Mon, 04-Nov-2024 18:31:41 GMT; Path=/; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.ytimg.com/vi/aPPrRAJEmMQ/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgXihaMA8=&rs=AOn4CLAT0T34FLUKQETfOMi8-fCI6uktGA
200 OK 18 kB URL GET HTTP/2 i.ytimg.com/vi/aPPrRAJEmMQ/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgXihaMA8=&rs=AOn4CLAT0T34FLUKQETfOMi8-fCI6uktGA
IP
Requested by https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintD2:2C:3D:05:38:12:27:20:C9:64:22:58:3A:99:D5:43:6E:BD:3B:D2
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3
Hash 85b49c6b61e9c126c2d060394ffe01b9
2bbb22e0a5644584d335261cc4b5f5c8110919b6
0a8070a75e4721961dc54c58f594caf88a956f8a0c2ff30f735fda6011d35a6b
GET /vi/aPPrRAJEmMQ/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgXihaMA8=&rs=AOn4CLAT0T34FLUKQETfOMi8-fCI6uktGA HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 18448
date: Wed, 08 May 2024 18:31:46 GMT
expires: Wed, 08 May 2024 20:31:46 GMT
cache-control: public, max-age=7200
etag: "1713639585"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 08 May 2024 18:31:46 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
live-api.checkoutchamp.com/api/V1/SplitTest/clicks/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/0
204 No Content 0 B URL OPTIONS HTTP/2 live-api.checkoutchamp.com/api/V1/SplitTest/clicks/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/0
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerLet's Encrypt
Subjectcheckoutchamp.com
Fingerprint13:CD:3B:BF:2D:6D:AB:78:28:9B:95:C6:2D:8F:7B:4E:51:FD:53:5F
ValidityFri, 15 Mar 2024 15:39:17 GMT - Thu, 13 Jun 2024 15:39:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/V1/SplitTest/clicks/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/0 HTTP/1.1
Host: live-api.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: access-control-allow-origin,cache-control,companytoken,content-type,funnelreferenceid
Referer: https://secure.gdr-labs.com/
Origin: https://secure.gdr-labs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 08 May 2024 18:31:46 GMT
access-control-allow-headers: access-control-allow-origin,cache-control,companytoken,content-type,funnelreferenceid
access-control-allow-methods: POST
access-control-allow-origin: *
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DUsX%2Be7mLg7qpjkbctx3K4hkEFnVjDE3hfba%2BGZ0Itv5WKxuFy7901e42CwTaCsgxr%2FDieQ5ANaaF3VKnrF7ykA7cIa%2F%2F8Z%2Fl%2Baa4HhQ9DncI0%2FTWifXWMFGJJVSzY7lOkqtV%2BQrHjH5szPFXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880b875419dd56a9-OSL
X-Firefox-Spdy: h2
i.ytimg.com/vi_webp/Adq6bemJNFE/sddefault.webp
200 OK 9.2 kB URL GET HTTP/2 i.ytimg.com/vi_webp/Adq6bemJNFE/sddefault.webp
IP
Requested by https://www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintD2:2C:3D:05:38:12:27:20:C9:64:22:58:3A:99:D5:43:6E:BD:3B:D2
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp
Hash d0a6d9fc113d7ce0d000e0742e038614
5de14a47783539bc482d77eb0bcd64ab5eb7cecb
82e549314bce8e38331b6a7a3c2cb70ffbebb62d100c146491def98040179820
GET /vi_webp/Adq6bemJNFE/sddefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 9206
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 May 2024 18:31:46 GMT
expires: Wed, 08 May 2024 20:31:46 GMT
cache-control: public, max-age=7200
etag: "1651160870"
content-type: image/webp
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 42 kB URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash 91e9ffd3e6ca2e5e518582be283dd904
503283debe1eef2fffa273fe437dec535c9bc5e5
e35b2c547ed7dc6c235bd084cc72949cd04da275b1440a4a3ec9769b837cd854
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 08 May 2024 18:31:46 GMT
server: ESF
cache-control: private
content-length: 41484
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/generate_204?TKZKYg
204 No Content 0 B URL GET HTTP/3 www.youtube.com/generate_204?TKZKYg
IP
Requested by https://www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?TKZKYg HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Wed, 08 May 2024 18:31:46 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
live-api.checkoutchamp.com/api/V1/SplitTest/clicks/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/0
204 No Content 21 B URL OPTIONS HTTP/2 live-api.checkoutchamp.com/api/V1/SplitTest/clicks/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/0
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerLet's Encrypt
Subjectcheckoutchamp.com
Fingerprint13:CD:3B:BF:2D:6D:AB:78:28:9B:95:C6:2D:8F:7B:4E:51:FD:53:5F
ValidityFri, 15 Mar 2024 15:39:17 GMT - Thu, 13 Jun 2024 15:39:16 GMT
Hash 1a2f74b460cffedf92c98ac426a35e5e
b851630abd126db6c56ff0ac0b4336b05fbeb30a
0ec14c19bec9cdd6d6863682b6a23b4e9d816546eef9a0b2d48949bbd36bac16
POST /api/V1/SplitTest/clicks/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/0 HTTP/1.1
Host: live-api.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.gdr-labs.com/
Content-Type: application/json; charset=utf-8
Cache-Control: no-cache
Access-Control-Allow-Origin: *
companyToken: 327e8e90-a040-11ee-b95e-4593f423b5b5
funnelReferenceId: 550cd81d-bd07-4121-867d-7dfcf9219d60
Content-Length: 517
Origin: https://secure.gdr-labs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 18:31:47 GMT
content-type: application/json; charset=utf-8
content-length: 21
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4EUCPUaHdAmVVyqcffFPTPkh5MHc1aMFbckmcrPlvhvtOujtm1rJIVjlyVGMpVNqm5VntQJepPCJs4IukoTm6j3hCHOgXe7ouaYeTNoZ2bsLZ4WuXJBSnsKZIxT43%2FQbf2nrA%2Bmr5hL3nRNDNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880b87553bef56a9-OSL
X-Firefox-Spdy: h2
api.bigdatacloud.net/data/reverse-geocode-client?latitude=&longitude=&localityLanguage=en
200 OK 3.9 kB URL GET HTTP/2 api.bigdatacloud.net/data/reverse-geocode-client?latitude=&longitude=&localityLanguage=en
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.bigdatacloud.net
FingerprintCC:4B:85:95:A2:50:98:D4:22:87:A0:39:E7:CC:17:6B:F5:8A:C1:7A
ValidityMon, 01 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT
File type gzip compressed data, max speed, from Unix
Hash f71566caec2976e2e04be5eb70f449fd
bfca716f3e132710422e36fed4bf858dea0a424c
fdd885102d5b0b0a10516d6f48e7b010045f50353267c84e258cc6e6abac9dbe
GET /data/reverse-geocode-client?latitude=&longitude=&localityLanguage=en HTTP/1.1
Host: api.bigdatacloud.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.gdr-labs.com/
Origin: https://secure.gdr-labs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 18:31:43 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-lookup-source: ip geolocation
x-response-time-ms: 0.53
X-Firefox-Spdy: h2
assets.checkoutchamp.com/countries.json
200 OK 46 kB URL GET HTTP/2 assets.checkoutchamp.com/countries.json
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
Hash 8ad99cd20674af2b064abc8e81a12ff0
b818d0a11e41d2b3b40bdff926b688dc9adcbaef
ce841c0718f4aa6244c556c87102e4f54b049a202f11e62af27628af5496673c
GET /countries.json HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.gdr-labs.com
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, HEAD
access-control-expose-headers: x-amz-version-id
access-control-max-age: 0
last-modified: Tue, 26 Dec 2023 20:28:58 GMT
x-amz-version-id: qtuyc_ZaD31McmnkMGbjqEPLIRceBYm.
server: AmazonS3
content-encoding: br
date: Wed, 08 May 2024 04:36:38 GMT
etag: W/"8ad99cd20674af2b064abc8e81a12ff0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vqm9Z2c9nCjCz_hjCAMK2mISqX5ByHys4RQFQqeRFqqaa1zgotoiGQ==
age: 50916
X-Firefox-Spdy: h2
www.youtube.com/generate_204?JTa5tA
204 No Content 0 B URL GET HTTP/3 www.youtube.com/generate_204?JTa5tA
IP
Requested by https://www.youtube.com/embed/bIM3i5YWaho?controls=0&showinfo=0&loop=1&playlist=bIM3i5YWaho&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?JTa5tA HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/bIM3i5YWaho?controls=0&showinfo=0&loop=1&playlist=bIM3i5YWaho&rel=0&modestbranding=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Wed, 08 May 2024 18:31:47 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 08 May 2024 18:31:47 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1715193107434
Content-Type: application/json
X-Goog-Visitor-Id: Cgs4UXZYbGoweUVPOCiNiu-xBjIOCgJOTxIIEgQSAgsMIGQ%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240506.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1715193102812&flash=0&frm=2&u_tz&u_his=3&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C525%2C295&vis=1&wgl=true&ca_type=image
Content-Length: 8686
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 08 May 2024 18:31:47 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 42 kB URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash ca9426f2458a6763f31c1fc4d0f4f6e6
b5bfa1bd987e18ab3f43d89cc45cd4ff867eef59
b0f811442db5daa7a37a6d8ddc2a1450a3da5a95fb1f40f7dd9317ecb8fac998
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 08 May 2024 18:31:47 GMT
server: ESF
cache-control: private
content-length: 41617
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.ytimg.com/vi/hH2dbN89lz8/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgYShaMA8=&rs=AOn4CLCBRiddTEEKVAkQhdvegyX70GwADw
200 OK 23 kB URL GET HTTP/3 i.ytimg.com/vi/hH2dbN89lz8/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgYShaMA8=&rs=AOn4CLCBRiddTEEKVAkQhdvegyX70GwADw
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintD2:2C:3D:05:38:12:27:20:C9:64:22:58:3A:99:D5:43:6E:BD:3B:D2
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3
Hash 97f50a8045cde38653121eed6e3018be
dd849ac03f8d07312922483359332957a99922ba
9f290caaa243af2affc7f9a4e350bea9fc3fd1a4b3f88aa33845078587d96f7c
GET /vi/hH2dbN89lz8/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgYShaMA8=&rs=AOn4CLCBRiddTEEKVAkQhdvegyX70GwADw HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 22916
date: Wed, 08 May 2024 18:31:47 GMT
expires: Wed, 08 May 2024 20:31:47 GMT
cache-control: public, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/js/th/LvMrC3vzHFP8SzxjvqNWRksbkOPiJTf11ILX4Pq8Ybc.js
200 OK 20 kB URL GET HTTP/2 www.google.com/js/th/LvMrC3vzHFP8SzxjvqNWRksbkOPiJTf11ILX4Pq8Ybc.js
IP
Requested by https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99
ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
File type JavaScript source, ASCII text, with very long lines (51583)
Hash 8168176decd4ee149cd33fb0db48f5f5
b541726598ee936f690683f68551bb4e8fb01439
2ef32b0b7bf31c53fc4b3c63bea356464b1b90e3e22537f5d482d7e0fabc61b7
GET /js/th/LvMrC3vzHFP8SzxjvqNWRksbkOPiJTf11ILX4Pq8Ybc.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 20283
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 01:06:51 GMT
expires: Sat, 03 May 2025 01:06:51 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 29 Apr 2024 11:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 494696
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 08 May 2024 18:31:46 GMT
server: ESF
cache-control: private
content-length: 41448
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash ba261657a4c6e755661ec8883c4a6947
cdb0172cd5780a9da224280503a9f9986c3a5d5e
eaf4fb92b722e5776ff89f381ae9d16e7f873b010b01106b4957d5184a6eb5ab
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1071
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 08 May 2024 18:31:47 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 08 May 2024 18:31:47 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 110 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash dd24e591826f24c40dfd6613b12725cf
e4308a538a61dc0e56a5f3dbaab05338e8b22ade
95a24be0f508abb42fb77e9a05711554ae5223ec2ec38969e33c9ec0d0605466
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1051
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 08 May 2024 18:31:48 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
live-api.checkoutchamp.com/providersApi/V1/Import/CampaignQuery
204 No Content 5.9 kB URL OPTIONS HTTP/2 live-api.checkoutchamp.com/providersApi/V1/Import/CampaignQuery
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerLet's Encrypt
Subjectcheckoutchamp.com
Fingerprint13:CD:3B:BF:2D:6D:AB:78:28:9B:95:C6:2D:8F:7B:4E:51:FD:53:5F
ValidityFri, 15 Mar 2024 15:39:17 GMT - Thu, 13 Jun 2024 15:39:16 GMT
Hash 0e048f28e582b4943f452677f51016d8
44b4acb5f1c9c31ef010e58fe5bc90e932ffce23
deda985d5fa119f88163aba6be98be9c6abf9bd34ff62068b7c40d9dd8690d20
POST /providersApi/V1/Import/CampaignQuery HTTP/1.1
Host: live-api.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.gdr-labs.com/
Content-Type: application/json; charset=utf-8
Cache-Control: no-cache
Access-Control-Allow-Origin: *
companyToken: 327e8e90-a040-11ee-b95e-4593f423b5b5
funnelReferenceId: 550cd81d-bd07-4121-867d-7dfcf9219d60
Content-Length: 54
Origin: https://secure.gdr-labs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 18:31:44 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: no-store,no-cache
pragma: no-cache
vary: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N2cNvnqfQSMgleXxQpNp%2F%2B5ZTXpYmN6agxLrpLbnIEWzUC9qg5bT1g98%2B1gSbIvDZ1mVilVdX%2FblU%2ByLRl4psV7Z9%2F5YDbhG09%2BBpl0oM3IWtKUcqTw8K8FNDLVolxz1lNty4xekCwPswbbr7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880b873f7bf056a9-OSL
content-encoding: br
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash cac66539848c01a02d00897daac29d0f
8288179774724f204161a6db551bcf61bc5b0739
1fe6a3309a6fcfd8ff1877fbcc143095a88c2b036a7c40eb1c3fb065063ea2da
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1280
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 08 May 2024 18:31:48 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 08 May 2024 18:31:48 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash 0074f5a737222033fc617f82b136e846
47a5b4adb5a102d62d2b562b8e756c477131a00f
4b3160c42656d15bcf26028ab735f6fb87e4944dc68e5a984b1555b876f9118c
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1311
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 08 May 2024 18:31:48 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 08 May 2024 18:31:48 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1715193108426
Content-Type: application/json
X-Goog-Visitor-Id: CgtnaVFSeTJKX09FayiNiu-xBjIOCgJOTxIIEgQSAgsMIEA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240506.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1715193103135&flash=0&frm=2&u_tz&u_his=7&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C542%2C287&vis=1&wgl=true&ca_type=image
Content-Length: 9072
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/bIM3i5YWaho?controls=0&showinfo=0&loop=1&playlist=bIM3i5YWaho&rel=0&modestbranding=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 08 May 2024 18:31:48 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 110 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash e9d2197e493a082f30da5466b2dd65e1
3d15edd44a82460cabb5c2925e81d34d730e1f5f
090d3499cd5fe2d0239b34b857dd0c2f30538d0b77b70c8905365bf37405a75d
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1275
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 08 May 2024 18:31:48 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
yt3.ggpht.com/LhhVm3qLcr9Y99i2LlY98kQk6TUfLlLUJBNFoFFxmGbMzp2sjznND_9rTozdzN94w4AUDXEn=s68-c-k-c0x00ffffff-no-rj
200 OK 3.0 kB URL GET HTTP/3 yt3.ggpht.com/LhhVm3qLcr9Y99i2LlY98kQk6TUfLlLUJBNFoFFxmGbMzp2sjznND_9rTozdzN94w4AUDXEn=s68-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint7B:64:D0:4F:29:87:0A:A8:90:15:F1:9F:B6:8F:FB:D6:AC:D2:76:56
ValidityTue, 16 Apr 2024 04:13:47 GMT - Tue, 09 Jul 2024 04:13:46 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Hash 4fb29523c3269914acc30fbb78ba43ec
3cd929ee8984f604f561f06cf4cfae386a9abec5
72b474a4be2589302b5341870f895a951ea7588f706ffb803d3f732f8fc4a539
GET /LhhVm3qLcr9Y99i2LlY98kQk6TUfLlLUJBNFoFFxmGbMzp2sjznND_9rTozdzN94w4AUDXEn=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="channels4_profile.jpg"
x-content-type-options: nosniff
server: fife
content-length: 2986
x-xss-protection: 0
date: Wed, 08 May 2024 16:16:27 GMT
expires: Thu, 09 May 2024 16:16:27 GMT
cache-control: public, max-age=86400, no-transform
age: 8121
etag: "v1"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/generate_204?_dhBqw
204 No Content 0 B URL GET HTTP/3 www.youtube.com/generate_204?_dhBqw
IP
Requested by https://www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?_dhBqw HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Wed, 08 May 2024 18:31:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/generate_204?VseVlg
204 No Content 0 B URL GET HTTP/3 www.youtube.com/generate_204?VseVlg
IP
Requested by https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?VseVlg HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Wed, 08 May 2024 18:31:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/generate_204?vxz-Mg
204 No Content 0 B URL GET HTTP/3 www.youtube.com/generate_204?vxz-Mg
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?vxz-Mg HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Wed, 08 May 2024 18:31:49 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL POST HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 08 May 2024 18:31:49 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1715193109044
Content-Type: application/json
X-Goog-Visitor-Id: CgtKcExQcjB3ekcxQSiNiu-xBjIOCgJOTxIIEgQSAgsMIFw%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240506.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1715193103284&flash=0&frm=2&u_tz&u_his=3&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C542%2C287&vis=1&wgl=true&ca_type=image
Content-Length: 9752
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 08 May 2024 18:31:49 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL POST HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 567
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 08 May 2024 18:31:49 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1715193109540
Content-Type: application/json
X-Goog-Visitor-Id: CgtQZ1puREVvc3p0QSiNiu-xBjIOCgJOTxIIEgQSAgsMIF8%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240506.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1715193103215&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C542%2C287&vis=1&wgl=true&ca_type=image
Content-Length: 9684
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 08 May 2024 18:31:49 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
live-api.checkoutchamp.com/providersApi/V1/ImportClick/CreateSession
204 No Content 9.8 kB URL OPTIONS HTTP/2 live-api.checkoutchamp.com/providersApi/V1/ImportClick/CreateSession
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerLet's Encrypt
Subjectcheckoutchamp.com
Fingerprint13:CD:3B:BF:2D:6D:AB:78:28:9B:95:C6:2D:8F:7B:4E:51:FD:53:5F
ValidityFri, 15 Mar 2024 15:39:17 GMT - Thu, 13 Jun 2024 15:39:16 GMT
Hash ae882c88b93cd9b37ea08aa844298993
4412f14578a4ae9f3cb1a564ae0d5fe92e7a186b
42579c910819748f01ffe4d14599550f663428a41e85c6ec7ef55d30d40054a4
POST /providersApi/V1/ImportClick/CreateSession HTTP/1.1
Host: live-api.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.gdr-labs.com/
Content-Type: application/json; charset=utf-8
Cache-Control: no-cache
Access-Control-Allow-Origin: *
companyToken: 327e8e90-a040-11ee-b95e-4593f423b5b5
funnelReferenceId: 550cd81d-bd07-4121-867d-7dfcf9219d60
Content-Length: 553
Origin: https://secure.gdr-labs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 18:31:44 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: no-store,no-cache
pragma: no-cache
vary: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZW0BLS9WgSSe22bC7JDXRHwc9EtL54C3%2F9reyiyVqbJrvUXI3B%2Felj6QFrLuvZPGklpY2rFidaGF7LMeQ8ROPG1h3XH2x%2F0uLKcp1kv%2BszkxLGTHl%2FU9H5IOWxhbHjLHlEY4DgCvih2u%2FDGebw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880b873fac8356a9-OSL
content-encoding: br
X-Firefox-Spdy: h2
yt3.ggpht.com/LhhVm3qLcr9Y99i2LlY98kQk6TUfLlLUJBNFoFFxmGbMzp2sjznND_9rTozdzN94w4AUDXEn=s68-c-k-c0x00ffffff-no-rj
200 OK 3.0 kB URL GET HTTP/3 yt3.ggpht.com/LhhVm3qLcr9Y99i2LlY98kQk6TUfLlLUJBNFoFFxmGbMzp2sjznND_9rTozdzN94w4AUDXEn=s68-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint7B:64:D0:4F:29:87:0A:A8:90:15:F1:9F:B6:8F:FB:D6:AC:D2:76:56
ValidityTue, 16 Apr 2024 04:13:47 GMT - Tue, 09 Jul 2024 04:13:46 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Hash 4fb29523c3269914acc30fbb78ba43ec
3cd929ee8984f604f561f06cf4cfae386a9abec5
72b474a4be2589302b5341870f895a951ea7588f706ffb803d3f732f8fc4a539
GET /LhhVm3qLcr9Y99i2LlY98kQk6TUfLlLUJBNFoFFxmGbMzp2sjznND_9rTozdzN94w4AUDXEn=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="channels4_profile.jpg"
x-content-type-options: nosniff
server: fife
content-length: 2986
x-xss-protection: 0
date: Wed, 08 May 2024 16:16:27 GMT
expires: Thu, 09 May 2024 16:16:27 GMT
cache-control: public, max-age=86400, no-transform
age: 8123
etag: "v1"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1715193110465
Content-Type: application/json
X-Goog-Visitor-Id: CgtnaVFSeTJKX09FayiNiu-xBjIOCgJOTxIIEgQSAgsMIEA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240506.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1715193105474&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C542%2C287&vis=1&wgl=true&ca_type=image
Content-Length: 1526
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/bIM3i5YWaho?controls=0&showinfo=0&loop=1&playlist=bIM3i5YWaho&rel=0&modestbranding=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 08 May 2024 18:31:50 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1715193110476
Content-Type: application/json
X-Goog-Visitor-Id: Cgs4UXZYbGoweUVPOCiNiu-xBjIOCgJOTxIIEgQSAgsMIGQ%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240506.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1715193105104&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C525%2C295&vis=1&wgl=true&ca_type=image
Content-Length: 1494
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 08 May 2024 18:31:50 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1715193110872
Content-Type: application/json
X-Goog-Visitor-Id: Cgs3UmFXODhvcThqOCiNiu-xBjIOCgJOTxIIEgQSAgsMIGo%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240506.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1715193104388&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C542%2C287&vis=1&wgl=true&ca_type=image
Content-Length: 2325
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 08 May 2024 18:31:50 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
assets.checkoutchamp.com/countries.json
200 OK 49 kB URL GET HTTP/2 assets.checkoutchamp.com/countries.json
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
Hash 8ad99cd20674af2b064abc8e81a12ff0
b818d0a11e41d2b3b40bdff926b688dc9adcbaef
ce841c0718f4aa6244c556c87102e4f54b049a202f11e62af27628af5496673c
GET /countries.json HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.gdr-labs.com
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, HEAD
access-control-expose-headers: x-amz-version-id
access-control-max-age: 0
last-modified: Tue, 26 Dec 2023 20:28:58 GMT
x-amz-version-id: qtuyc_ZaD31McmnkMGbjqEPLIRceBYm.
server: AmazonS3
content-encoding: br
date: Wed, 08 May 2024 04:36:38 GMT
etag: W/"8ad99cd20674af2b064abc8e81a12ff0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: x4OPa6Fv5hvD_MDXm0M22JMMdyGyptkaKLx7MP_rrATmDikQTjdeNg==
age: 50920
X-Firefox-Spdy: h2
yt3.ggpht.com/LhhVm3qLcr9Y99i2LlY98kQk6TUfLlLUJBNFoFFxmGbMzp2sjznND_9rTozdzN94w4AUDXEn=s68-c-k-c0x00ffffff-no-rj
200 OK 3.0 kB URL GET HTTP/3 yt3.ggpht.com/LhhVm3qLcr9Y99i2LlY98kQk6TUfLlLUJBNFoFFxmGbMzp2sjznND_9rTozdzN94w4AUDXEn=s68-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint7B:64:D0:4F:29:87:0A:A8:90:15:F1:9F:B6:8F:FB:D6:AC:D2:76:56
ValidityTue, 16 Apr 2024 04:13:47 GMT - Tue, 09 Jul 2024 04:13:46 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Hash 4fb29523c3269914acc30fbb78ba43ec
3cd929ee8984f604f561f06cf4cfae386a9abec5
72b474a4be2589302b5341870f895a951ea7588f706ffb803d3f732f8fc4a539
GET /LhhVm3qLcr9Y99i2LlY98kQk6TUfLlLUJBNFoFFxmGbMzp2sjznND_9rTozdzN94w4AUDXEn=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="channels4_profile.jpg"
x-content-type-options: nosniff
server: fife
content-length: 2986
x-xss-protection: 0
date: Wed, 08 May 2024 16:16:27 GMT
expires: Thu, 09 May 2024 16:16:27 GMT
cache-control: public, max-age=86400, no-transform
age: 8127
etag: "v1"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1715193114506
Content-Type: application/json
X-Goog-Visitor-Id: CgtQZ1puREVvc3p0QSiNiu-xBjIOCgJOTxIIEgQSAgsMIF8%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240506.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1715193107001&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C542%2C287&vis=1&wgl=true&ca_type=image
Content-Length: 1748
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 08 May 2024 18:31:54 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
444 B URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type XML 1.0 document, ASCII text, with very long lines (332)
Hash 3b324dec137a87ef7e24a30a65b13dd0
c0faa95b2f1018e264b3a14aaf50d1003e6c27b3
6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=cl4irm5SFAkWRe8kuO5EgBFWTtpu4bJg6aEFPV3tXlnlL0DF5aqjgiVGC-eZwtSdnehJTWZoHx-ZAP9v6-OnRjFH5w_MdS_leIjLoPHjjfBEJBoasFLZGVgLSa7Syvod
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Wed, 08 May 2024 18:31:27 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 28
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1715193118486
Content-Type: application/json
X-Goog-Visitor-Id: CgtKcExQcjB3ekcxQSiNiu-xBjIOCgJOTxIIEgQSAgsMIFw%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240506.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1715193106035&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C542%2C287&vis=1&wgl=true&ca_type=image
Content-Length: 1369
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 08 May 2024 18:31:58 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1715193120501
Content-Type: application/json
X-Goog-Visitor-Id: CgtnaVFSeTJKX09FayiNiu-xBjIOCgJOTxIIEgQSAgsMIEA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240506.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1715193103135&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C542%2C287&vis=1&wgl=true&ca_type=image
Content-Length: 1738
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/bIM3i5YWaho?controls=0&showinfo=0&loop=1&playlist=bIM3i5YWaho&rel=0&modestbranding=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 08 May 2024 18:32:00 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1715193124499
Content-Type: application/json
X-Goog-Visitor-Id: Cgs4UXZYbGoweUVPOCiNiu-xBjIOCgJOTxIIEgQSAgsMIGQ%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240506.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1715193102812&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C525%2C295&vis=1&wgl=true&ca_type=image
Content-Length: 1706
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 08 May 2024 18:32:04 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL POST HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 08 May 2024 18:32:14 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL POST HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 1100
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 08 May 2024 18:32:14 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1715193135009
Content-Type: application/json
X-Goog-Visitor-Id: CgtKcExQcjB3ekcxQSiNiu-xBjIOCgJOTxIIEgQSAgsMIFw%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240506.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1715193103284&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C542%2C287&vis=1&wgl=true&ca_type=image
Content-Length: 1039
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 08 May 2024 18:32:15 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1715193135017
Content-Type: application/json
X-Goog-Visitor-Id: CgtQZ1puREVvc3p0QSiNiu-xBjIOCgJOTxIIEgQSAgsMIF8%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240506.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1715193103215&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C542%2C287&vis=1&wgl=true&ca_type=image
Content-Length: 1049
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 08 May 2024 18:32:15 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1715193135027
Content-Type: application/json
X-Goog-Visitor-Id: CgtnaVFSeTJKX09FayiNiu-xBjIOCgJOTxIIEgQSAgsMIEA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240506.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1715193103135&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C542%2C287&vis=1&wgl=true&ca_type=image
Content-Length: 1039
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/bIM3i5YWaho?controls=0&showinfo=0&loop=1&playlist=bIM3i5YWaho&rel=0&modestbranding=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 08 May 2024 18:32:15 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js
200 OK 16 kB URL GET HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File type JavaScript source, ASCII text, with very long lines (59893)
Hash 6bea60c34c5db6797150610dacdc6bce
544afefd148715da7dd52d368a414703390ca0e0
38544024da1a0fc2f706be6582557b5722d17f48ad9a8073594a0cf928e2e3ff
GET /bootstrap/4.5.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 18:31:39 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 601, 718, 718
last-modified: Mon, 25 Jan 2021 22:04:10 GMT
cdn-cachedat: 2021-08-03 11:18:10
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: b390e598751bb8ef0fbad6c818f3ae72
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 690781
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 880b872a78ecb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1715193135055
Content-Type: application/json
X-Goog-Visitor-Id: Cgs4UXZYbGoweUVPOCiNiu-xBjIOCgJOTxIIEgQSAgsMIGQ%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240506.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1715193102812&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C525%2C295&vis=1&wgl=true&ca_type=image
Content-Length: 1007
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 08 May 2024 18:32:15 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.googleapis.com/css2?family=Patua+One&display=swap
200 OK 417 B URL GET HTTP/2 fonts.googleapis.com/css2?family=Patua+One&display=swap
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File type ASCII text, with very long lines (426), with no line terminators
Hash 9a93cfa03fa56ed26f7de2ae7d3958c2
023339fe318fcd191b8311f819b1708ca556783b
962341225fb751ac001e0c0b01caa7ab97cef0f7705ba88fa54a667202af6ca6
GET /css2?family=Patua+One&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 18:31:40 GMT
date: Wed, 08 May 2024 18:31:40 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
200 OK 95 kB URL GET HTTP/2 www.youtube.com/embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type HTML document, ASCII text, with very long lines (58052)
Hash 739a92c666b2cda5fb7ee7c129c3f9e5
1ff17c36c8a002bdbd9dce5a7841e3af36c55eb1
2736f5e54b3003b61231fc0504aae9b03bba76382ae5122196941d0d51ef2054
GET /embed/JjLNkEEhErw?controls=0&showinfo=0&loop=1&playlist=JjLNkEEhErw&rel=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 08 May 2024 18:31:41 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
origin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: base-uri 'self';default-src 'self' https: blob:;font-src https: data:;img-src https: data: android-webview-video-poster:;media-src blob: https:;object-src 'none';report-uri /cspreport/common;script-src 'nonce-3s7mKv7EHxO1vQPNiYO_vg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';style-src https: 'unsafe-inline'
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=XhUkv1pAiCQ; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=7RaW88oq8j8; Domain=.youtube.com; Expires=Mon, 04-Nov-2024 18:31:41 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxIIEgQSAgsMIGo%3D; Domain=.youtube.com; Expires=Mon, 04-Nov-2024 18:31:41 GMT; Path=/; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
secure.gdr-labs.com/favicon.ico
0 B URL GET secure.gdr-labs.com/favicon.ico
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subjectsecure.gdr-labs.com
FingerprintDB:95:14:34:1C:06:01:32:E2:1D:01:7B:24:11:34:77:CE:EF:50:68
ValidityThu, 01 Feb 2024 00:00:00 GMT - Sat, 01 Mar 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: secure.gdr-labs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Cookie: X-Source=550cd81d-bd07-4121-867d-7dfcf9219d60
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
200 OK 94 kB URL GET HTTP/2 www.youtube.com/embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type HTML document, ASCII text, with very long lines (58052)
Hash 559da61d547c09d3a4776affa36a771a
b4c7a657ed94747e4a8abdabcebe165e201717df
9a755b8a7452690d1331ded7d9d6f5df30e63b386cc8ac0ea3b06f7d9a01bb95
GET /embed/hH2dbN89lz8?controls=0&showinfo=0&loop=1&playlist=hH2dbN89lz8&rel=0&modestbranding=1 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 08 May 2024 18:31:41 GMT
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
origin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=v7pCWyXZvXI; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=PgZnDEosztA; Domain=.youtube.com; Expires=Mon, 04-Nov-2024 18:31:41 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxIIEgQSAgsMIF8%3D; Domain=.youtube.com; Expires=Mon, 04-Nov-2024 18:31:41 GMT; Path=/; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
200 OK 94 kB URL GET HTTP/2 www.youtube.com/embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File type HTML document, ASCII text, with very long lines (58052)
Hash f9f7554cc757455a3b1268ca9e3f4d47
6f262377cf05911c639027a618302ee204edce06
8901c5f2d3dc6ac70113418aec599be2452b24675104c521cb901915f33f4d5e
GET /embed/aPPrRAJEmMQ?controls=0&showinfo=0&loop=1&playlist=aPPrRAJEmMQ&rel=0&modestbranding=1 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 08 May 2024 18:31:41 GMT
strict-transport-security: max-age=31536000
origin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=brDydI4wYig; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=JpLPr0wzG1A; Domain=.youtube.com; Expires=Mon, 04-Nov-2024 18:31:41 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxIIEgQSAgsMIFw%3D; Domain=.youtube.com; Expires=Mon, 04-Nov-2024 18:31:41 GMT; Path=/; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/steve.jpg?versionId=at5Lq8RKaf6ZUFfGi5qLaW_nP8kyrL3f
200 OK 13 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/steve.jpg?versionId=at5Lq8RKaf6ZUFfGi5qLaW_nP8kyrL3f
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x360, components 3
Hash b90a8c563317020401a9d3585b43e987
56ec52b2ab9d7b5a9c3fc4a0701bc9f13f69192b
067a9205adfd36bce22999dae3d7abc81516436030a4af59d1774e8e1c381cbb
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/steve.jpg?versionId=at5Lq8RKaf6ZUFfGi5qLaW_nP8kyrL3f HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 12790
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: xmZIYhwNxbBMWB8MkfvMa.Vo3TTIKk3A
server: AmazonS3
date: Wed, 08 May 2024 05:28:57 GMT
etag: "b90a8c563317020401a9d3585b43e987"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uxSnffRtKqs8wxGt650fO1vhKfAFMPBw2qKR2oXvYbbsJNfJwycLeA==
age: 46964
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_117366582.jpg?versionId=gt483uUAb0jDDWJcSbi5V4oFVKrqbwxU
200 OK 32 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_117366582.jpg?versionId=gt483uUAb0jDDWJcSbi5V4oFVKrqbwxU
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, copyright=Nedim Bajramovic], progressive, precision 8, 525x350, components 3
Hash 31e30b312e7d10a041cccf298b012475
5d1b0cd608ca14f5c65641cb7ce9c09b4dba452c
7e3827d03105fab23e7d78edb640b25bc18beef9b390ca35c10a6e9fdab35cdc
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_117366582.jpg?versionId=gt483uUAb0jDDWJcSbi5V4oFVKrqbwxU HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 32156
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: bFzWOJmmD7yRbWSM2wQboJ6JULRcvD5t
server: AmazonS3
date: Wed, 08 May 2024 05:41:45 GMT
etag: "31e30b312e7d10a041cccf298b012475"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ANXN3j332Lq6nXvR6CMR88HpcFUlecFUJe1Q-YwZ37b7_dotkPYPpA==
age: 46196
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/DualPolar.png?versionId=M3MEXTxGaLRNOnmFFnPR0oA16hlLPgit
200 OK 7.5 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/DualPolar.png?versionId=M3MEXTxGaLRNOnmFFnPR0oA16hlLPgit
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type PNG image data, 525 x 149, 8-bit colormap, non-interlaced
Hash 162bcfc2a68a2fc470dadc210d589190
2978a35e64c766c0734eba949d97f039274ec6e6
706f330a3768faf851a49d02e385e1b52f3d9e979ec6f70931317e2cd60e2e92
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/DualPolar.png?versionId=M3MEXTxGaLRNOnmFFnPR0oA16hlLPgit HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 7509
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: 0LDeX9uL_7THyeqfC_nQi5EKwL0W0nYF
server: AmazonS3
date: Wed, 08 May 2024 04:32:34 GMT
etag: "162bcfc2a68a2fc470dadc210d589190"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YIPxRwrHkdvnmawVyngt4a-mir4DiDHivVhkMccQ3ZnLV9zVEZ_e6Q==
age: 50347
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_182021891.jpg?versionId=zhyqEwpGlrzkKheC07j5_3rXmcziiPk6
200 OK 13 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_182021891.jpg?versionId=zhyqEwpGlrzkKheC07j5_3rXmcziiPk6
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 525x350, components 3
Hash 135893d1b25a412f44c3ca4dbb9567a2
17e95dcb970002356509b14a080cdea9a34ba9b9
60511d181c33e413b14a91a451d00ad7c045f19256dd4be45bae473b81eefefb
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_182021891.jpg?versionId=zhyqEwpGlrzkKheC07j5_3rXmcziiPk6 HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 12780
date: Wed, 08 May 2024 06:24:22 GMT
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: ZcFoTECTnh3QCnNP0NL1EgFcCiHc1SOQ
etag: "135893d1b25a412f44c3ca4dbb9567a2"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rnovEufmbK5c6gi11gV0iGYYjJYpEqOSIbZZ3EM8D1BF-Dzdv79fWA==
age: 43639
vary: Origin
X-Firefox-Spdy: h2
assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_126385128.jpg?versionId=kj1oEJSKO4geqJJ6B3o8qpvhTBbbbbS9
200 OK 31 kB URL GET HTTP/2 assets.checkoutchamp.com/Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_126385128.jpg?versionId=kj1oEJSKO4geqJJ6B3o8qpvhTBbbbbS9
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerAmazon
Subject*.checkoutchamp.com
Fingerprint9F:84:AC:9A:62:B2:94:B4:74:F8:61:F0:FA:48:83:68:B7:8E:04:3A
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 10 May 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 525x350, components 3
Hash 9bf58d81402d04feb622f00ba2ab002e
90de6d9d4bc2b289866f1cbdc6f4765878211308
7621b8aa7f37da56ab7c72432bde20f8d79ff84bd856b28b1190239bcecf469b
GET /Funnel/assets/images/550cd81d-bd07-4121-867d-7dfcf9219d60/ba49dabd-1374-4e13-8322-24efd0cfcdf5/AdobeStock_126385128.jpg?versionId=kj1oEJSKO4geqJJ6B3o8qpvhTBbbbbS9 HTTP/1.1
Host: assets.checkoutchamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 31343
date: Wed, 08 May 2024 01:51:03 GMT
last-modified: Thu, 11 Apr 2024 14:48:46 GMT
x-amz-version-id: KB4bC9L0h2TtIApiKFlATQJYPbh9r4AW
etag: "9bf58d81402d04feb622f00ba2ab002e"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FRNhPiTxxxVMd2-m8UKU_nbICM0t4TDe1RkU5XNygxg-cBMR9UHqfQ==
age: 60038
vary: Origin
X-Firefox-Spdy: h2
www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
200 OK 93 kB URL GET HTTP/2 www.youtube.com/embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/Adq6bemJNFE?controls=0&showinfo=0&rel=0&modestbranding=1 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.gdr-labs.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 08 May 2024 18:31:41 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
cross-origin-resource-policy: cross-origin
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
origin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=nZEFQ4WyiMY; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=8QvXlj0yEO8; Domain=.youtube.com; Expires=Mon, 04-Nov-2024 18:31:41 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxIIEgQSAgsMIGQ%3D; Domain=.youtube.com; Expires=Mon, 04-Nov-2024 18:31:41 GMT; Path=/; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.lbj4trk.com/scripts/sdk/everflow.js
0 B URL GET www.lbj4trk.com/scripts/sdk/everflow.js
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /scripts/sdk/everflow.js HTTP/1.1
Host: www.lbj4trk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
fonts.googleapis.com/css?family=Poppins:100,200,300,400,500,600,700,800,900|Patua+One:100,200,300,400,500,600,700,800,900|Bebas+Neue:100,200,300,400,500,600,700,800,900|Caveat:100,200,300,400,500,600,700,800,900|Roboto:100,200,300,400,500,600,700,800,900|Montserrat:100,200,300,400,500,600,700,800,900|Poppins:100,200,300,400,500,600,700,800,900&display=swap
200 OK 44 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Poppins:100,200,300,400,500,600,700,800,900|Patua+One:100,200,300,400,500,600,700,800,900|Bebas+Neue:100,200,300,400,500,600,700,800,900|Caveat:100,200,300,400,500,600,700,800,900|Roboto:100,200,300,400,500,600,700,800,900|Montserrat:100,200,300,400,500,600,700,800,900|Poppins:100,200,300,400,500,600,700,800,900&display=swap
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash edfededf59c998af3807dd2e18014044
4959adaf7c6f202633c09104b58ab2e8d13986fb
6a90be5ea06fb7bcdccfadcee8c86a967e9acfc989b4eaa96b4cca1a99a152a4
GET /css?family=Poppins:100,200,300,400,500,600,700,800,900|Patua+One:100,200,300,400,500,600,700,800,900|Bebas+Neue:100,200,300,400,500,600,700,800,900|Caveat:100,200,300,400,500,600,700,800,900|Roboto:100,200,300,400,500,600,700,800,900|Montserrat:100,200,300,400,500,600,700,800,900|Poppins:100,200,300,400,500,600,700,800,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 18:31:40 GMT
date: Wed, 08 May 2024 18:31:40 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
200 OK 160 kB URL GET HTTP/3 stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
IP
Requested by https://secure.gdr-labs.com/lp-article?_ef_transaction_id=ea60b9fed2c54d94b6c97f0f2c4590d0&affId=05CB3DC4&c1=ea60b9fed2c54d94b6c97f0f2c4590d0
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File type ASCII text, with very long lines (65324)
Size 160 kB (160403 bytes)
Hash 3afe15e976734d9daac26310110c4594
4f14a09a606c99a11f8fda15564ef66f70402826
680af6669abc319f9803f0fa26d443df1b6bc29133d88a8e4bea560ffed7288c
GET /bootstrap/4.5.0/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.gdr-labs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:31:40 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"3afe15e976734d9daac26310110c4594"
last-modified: Mon, 25 Jan 2021 22:04:10 GMT
cdn-cachedat: 10/31/2023 18:50:52
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 865
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: d5984a916a5f0bcc448a8c9f79acf6af
cdn-cache: HIT
cf-cache-status: HIT
age: 699211
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 880b87306e3e0b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
3.234.43.8
104.17.25.14
188.114.96.1