{"report_id":"c9448fe7-c08d-484a-bef5-0ee7f528bc80","version":6,"status":"done","tags":[],"date":"2026-04-02T15:01:43Z","url":{"schema":"http","addr":"knowles-firm.com/","fqdn":"knowles-firm.com","domain":"knowles-firm.com","tld":"com"},"ip":{"addr":"194.48.203.204","port":0,"asn":0,"as":"","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"https","addr":"knowles-firm.com/","fqdn":"knowles-firm.com","domain":"knowles-firm.com","tld":"com"},"title":"Knowles Law Firm","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"knowles-firm.com/","fqdn":"knowles-firm.com","domain":"knowles-firm.com","tld":"com"},"ip":{"addr":"194.48.203.204","port":0,"asn":0,"as":"","country":"Ireland","country_code":"IE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-07T15:01:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":1,"received_data":10746,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.tildacdn.net","ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"domain_registered":"2022-04-11","domain_rank":1384545,"first_seen":"2024-01-02T18:23:46Z","last_seen":"2026-03-27T11:23:46.719121Z","alert_count":0,"request_count":73,"received_data":2864884,"sent_data":34061,"comment":"","tags":null,"fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.dl.dropboxusercontent.com","ip":{"addr":"162.125.71.15","port":443,"asn":19679,"as":"DROPBOX","country":"United States","country_code":"US"},"domain_registered":"2012-01-13","domain_rank":1691864,"first_seen":"2017-04-24T23:13:28Z","last_seen":"2026-03-26T18:31:33.311853Z","alert_count":0,"request_count":6,"received_data":318160,"sent_data":3746,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"knowles-firm.com","ip":{"addr":"194.48.203.204","port":443,"asn":0,"as":"","country":"Ireland","country_code":"IE"},"domain_registered":"2026-03-21","domain_rank":0,"first_seen":"2026-04-02T15:01:45.626846Z","last_seen":"2026-04-02T15:01:45.626846Z","alert_count":0,"request_count":1,"received_data":1500178,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"Tilda","description":"Tilda is a web design tool.","website":"https://tilda.cc","common_platform_enumeration":"","icon":"Tilda.svg","categories":["CMS"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Hammer.js","description":"","website":"https://hammerjs.github.io","common_platform_enumeration":"","icon":"Hammer.js.png","categories":["JavaScript libraries"]}]},{"fqdn":"geo.tildaapi.one","ip":{"addr":"5.181.161.195","port":443,"asn":205282,"as":"Tilda Publishing Ltd.","country":"United States","country_code":"US"},"domain_registered":"2023-08-03","domain_rank":7172866,"first_seen":"2025-07-18T08:46:28.853866Z","last_seen":"2026-04-01T09:38:53.458171Z","alert_count":0,"request_count":1,"received_data":246,"sent_data":448,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stat.tildaapi.one","ip":{"addr":"5.181.161.226","port":443,"asn":205282,"as":"Tilda Publishing Ltd.","country":"United States","country_code":"US"},"domain_registered":"2023-08-03","domain_rank":886860,"first_seen":"2025-05-09T10:26:13.442288Z","last_seen":"2026-03-27T02:44:52.970352Z","alert_count":0,"request_count":1,"received_data":265,"sent_data":529,"comment":"","tags":null,"fingerprints":null},{"fqdn":"optim.tildacdn.net","ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"domain_registered":"2022-04-11","domain_rank":1795163,"first_seen":"2024-01-26T21:55:14Z","last_seen":"2026-03-27T17:45:59.739117Z","alert_count":0,"request_count":1,"received_data":208888,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":10,"received_data":205025,"sent_data":5370,"comment":"","tags":null,"fingerprints":null},{"fqdn":"thb.tildacdn.net","ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"domain_registered":"2022-04-11","domain_rank":1727611,"first_seen":"2024-01-26T21:55:13Z","last_seen":"2026-03-27T10:06:22.581784Z","alert_count":0,"request_count":8,"received_data":12533,"sent_data":3860,"comment":"","tags":null,"fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.tildacdn.one","ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"domain_registered":"2023-08-03","domain_rank":881159,"first_seen":"2024-01-09T11:27:50Z","last_seen":"2026-04-01T04:54:25.517547Z","alert_count":0,"request_count":2,"received_data":20761,"sent_data":890,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}]},{"fqdn":"neo.tildacdn.com","ip":{"addr":"194.48.203.181","port":443,"asn":0,"as":"","country":"Ireland","country_code":"IE"},"domain_registered":"2015-07-28","domain_rank":358009,"first_seen":"2022-08-05T12:33:28Z","last_seen":"2026-04-02T02:55:41.144913Z","alert_count":0,"request_count":2,"received_data":4475,"sent_data":907,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"static.tildacdn.net/js/tilda-stat-1.0.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"be35049cb22a1f9a118c4742dc739195","sha1":"fff4bb02119b777cc0f265efa51ab1e0aa87330c","sha256":"30299b6ef1aff24831fb728ee4edaf4fc02c8c7dd0806bfa90f3e3ea7fe2bb80","sha512":"628a8be11e89820691e629ad562a23a7921b2227bf6029f80b6da09b5e361069585f8aae61ef2de36a4daaa5c8cc7544351f4df513201e10b88064ac39eba690","ssdeep":"192:2gQsCK6tC4XHHD4V7Rqy6n1sQpvbvQnJ9RSRQMjieIJBIgd5ZNOCRnZ:2DsCK6Q4klssQpvLQnJ9RSVjxIJBI+dj","tlshash":"6e12c6ad2969213106f612ab63bfb78530339121b8039480215ed5543eb8fa79f1ffcb","size":9690,"data":"","first_seen":"2025-05-06T10:57:23.743997Z","last_seen":"2026-04-23T09:04:55.477976Z","times_seen":3210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.one/js/tilda-performance-1.0.min.js","fqdn":"static.tildacdn.one","domain":"tildacdn.one","tld":"one"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"085a93dc89fe3b0b497f99a222f9ac57","sha1":"339d9c7557c0fd2ca1c4d73227f9274bdd080ef3","sha256":"15cb1cffa887ec74a9ae3dad3c5c539e2b24c0c2e8e66f82fa536406e0c95db1","sha512":"429b8c4d240686dd6ff59ac1945a825bcfaa51cd3914fd49f68c7492054268729d87ed07a4d0a3e2a30bdeb0cbabd1fb715baa43dc02f1ea0fb7c49471f9501c","ssdeep":"","tlshash":"ca6172a5e32030772577082e22dfb20671b90751ac060c2e523ea5443cab5cbc7e7f5e","size":3312,"data":"","first_seen":"2023-03-08T20:13:50Z","last_seen":"2026-04-23T04:46:21.131525Z","times_seen":771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"knowles-firm.com/","fqdn":"knowles-firm.com","domain":"knowles-firm.com","tld":"com"},"ip":{"addr":"194.48.203.204","port":443,"asn":0,"as":"","country":"Ireland","country_code":"IE"},"introduction_type":"eventHandler","is_inline":false,"md5":"dd0c10bba926ff868d44d1cb840b9e92","sha1":"25215d8b169b1f092748eab6a5c2c65853521664","sha256":"89589aeee3165c1180f9e96215718519f11241cfe962f7e949e69c315a0e0dbd","sha512":"4f6fb6a046f3c4abf06f40067a07351b3c050ab3aeecd0ea1ceeccd92cd26129ea3df12bf42f44e2b186c67e902db0604688710c286aeb335a319cb971094765","ssdeep":"","tlshash":"e6600080828020a88320008082008000002a0002002322a8000880aaa000a088008003","size":17,"data":"","first_seen":"2023-04-18T20:14:20Z","last_seen":"2026-04-22T17:41:07.121616Z","times_seen":256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"knowles-firm.com/","fqdn":"knowles-firm.com","domain":"knowles-firm.com","tld":"com"},"ip":{"addr":"194.48.203.204","port":443,"asn":0,"as":"","country":"Ireland","country_code":"IE"},"introduction_type":"eventHandler","is_inline":false,"md5":"dd0c10bba926ff868d44d1cb840b9e92","sha1":"25215d8b169b1f092748eab6a5c2c65853521664","sha256":"89589aeee3165c1180f9e96215718519f11241cfe962f7e949e69c315a0e0dbd","sha512":"4f6fb6a046f3c4abf06f40067a07351b3c050ab3aeecd0ea1ceeccd92cd26129ea3df12bf42f44e2b186c67e902db0604688710c286aeb335a319cb971094765","ssdeep":"","tlshash":"e6600080828020a88320008082008000002a0002002322a8000880aaa000a088008003","size":17,"data":"","first_seen":"2023-04-18T20:14:20Z","last_seen":"2026-04-22T17:41:07.121616Z","times_seen":256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"knowles-firm.com/","fqdn":"knowles-firm.com","domain":"knowles-firm.com","tld":"com"},"ip":{"addr":"194.48.203.204","port":443,"asn":0,"as":"","country":"Ireland","country_code":"IE"},"introduction_type":"eventHandler","is_inline":false,"md5":"1a53725ce055877d9f9cf318b813cd94","sha1":"6c7b7069c4aeb305a5bb2bf1efd6555547473b2e","sha256":"158dfe03e92b1d10dc88d02f23d29ce584f58caf7c3b2fe3fe1e693e77420ba5","sha512":"df31c7dcfeba9ca18271b9bf9468d98f1a9c269a1b2fb5d60a036521ca68ac167f49de10207fe04fd6b152b277967267a66096503a3219ebd30f380940d623eb","ssdeep":"","tlshash":"0e6000f0003c00000003c30000330cf300000c0f00ccc30cfc0000c000cc0000000c03","size":17,"data":"","first_seen":"2023-04-11T13:20:15Z","last_seen":"2026-04-23T09:04:55.512187Z","times_seen":4032,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"knowles-firm.com/","fqdn":"knowles-firm.com","domain":"knowles-firm.com","tld":"com"},"ip":{"addr":"194.48.203.204","port":443,"asn":0,"as":"","country":"Ireland","country_code":"IE"},"introduction_type":"eventHandler","is_inline":false,"md5":"dd0c10bba926ff868d44d1cb840b9e92","sha1":"25215d8b169b1f092748eab6a5c2c65853521664","sha256":"89589aeee3165c1180f9e96215718519f11241cfe962f7e949e69c315a0e0dbd","sha512":"4f6fb6a046f3c4abf06f40067a07351b3c050ab3aeecd0ea1ceeccd92cd26129ea3df12bf42f44e2b186c67e902db0604688710c286aeb335a319cb971094765","ssdeep":"","tlshash":"e6600080828020a88320008082008000002a0002002322a8000880aaa000a088008003","size":17,"data":"","first_seen":"2023-04-18T20:14:20Z","last_seen":"2026-04-22T17:41:07.121616Z","times_seen":256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"knowles-firm.com/","fqdn":"knowles-firm.com","domain":"knowles-firm.com","tld":"com"},"ip":{"addr":"194.48.203.204","port":443,"asn":0,"as":"","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdf25a895336595169043557b3dbf429","sha1":"fbabc8ef1441f05508d8cf93ebc2687f7032e700","sha256":"80f8b5b63a7173de2bc8aaee336d8aa0ea34810e2e93533cf062d6e0d38020a0","sha512":"df949bb0320db06c672d9b44188d6ff999e33e8e7b87bc215b1099b09ac13fa55b4cc06ef6453b42567e036217e89436f003bf1c8f74a29874469abac75bbc8d","ssdeep":"","tlshash":"9a3140502524e539099706ce71ffa203b582c01ebc4ac081975fdcb8b8a5e874e0af9b","size":1720,"data":"","first_seen":"2024-10-05T17:34:40Z","last_seen":"2026-04-22T21:30:14.11623Z","times_seen":1051,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/js/tilda-phone-mask-1.1.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"71744625654361277624d01d96c83363","sha1":"7fdd072709528876b3dbf05a98a5dd9427f05145","sha256":"3d4249cb3d33c9bdd1350b4840be141c89862254727428017261b4322b9859e4","sha512":"6add75a1e07b0d77efe4412a1a37661496ace478bdc5a7a7c80d5c348145d022edbc51469a4413d77b5b29efb52a828359031b65cb2170a6f48aff2d19cc0aa5","ssdeep":"768:TeJvHRzbRTQaj+NCQONsloYW66FtsVqyG4TVp97bgFByX7onD3N93SLyo637E5xw:fNusl/G4lCWyhY7gCUF9FB","tlshash":"220370509a2f012dd4668f6c40a57349c23db6ecbfd181cb8acdedea0055eb2e725e71","size":38904,"data":"","first_seen":"2026-04-02T12:44:04.49659Z","last_seen":"2026-04-23T08:07:41.726676Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/js/tilda-skiplink-1.0.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea12dec71e029eba297d483c7a123962","sha1":"e07887a24d4dba4e2e3ba5aabe2ca68dadea86ae","sha256":"e30be28d85f8db5566078029d843d227687fd73ccfd6757d37b69b2fc06bf48d","sha512":"f71e32c78fe244b32640012f18b54b8cdc19f3d43402dbd814d105133d3d0ed229ec3ec57097cee96fcb87fc248eab4ec9e054c097e45186f291d8e3552d8979","ssdeep":"","tlshash":"8a417355e1d61c3682ea6364c1ee2ecdf0b1e0bafe924486d4ced07bbdb6dc90199701","size":1879,"data":"","first_seen":"2023-10-19T12:07:16Z","last_seen":"2026-04-22T23:24:56.904463Z","times_seen":2363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/js/jquery-1.10.2.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"39f0b66d352d9369a3951bfa5c3d0239","sha1":"159085b61d7edb354fab9d140f08f73e8333e780","sha256":"966bd60151ee1d780328d176a1e3533e6199d35475567fdca4a2325532a78e49","sha512":"4885c1a1767d4babbc4ffed6ac19e8d4270e5ed23ba1bb25b3d1e77add816d2aa770fc268e5f2a46411875ee8dbfbe14364531e5b6eb51c1988d3fc3cbda2093","ssdeep":"","tlshash":"cc1165aa37096d3c92b755a721fce31ad15721c62d6c0014d014d9e18d38ed51326f2c","size":1000,"data":"","first_seen":"2025-03-06T02:11:41.430562Z","last_seen":"2026-04-22T10:50:52.208241Z","times_seen":192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"knowles-firm.com/","fqdn":"knowles-firm.com","domain":"knowles-firm.com","tld":"com"},"ip":{"addr":"194.48.203.204","port":443,"asn":0,"as":"","country":"Ireland","country_code":"IE"},"introduction_type":"eventHandler","is_inline":false,"md5":"1a53725ce055877d9f9cf318b813cd94","sha1":"6c7b7069c4aeb305a5bb2bf1efd6555547473b2e","sha256":"158dfe03e92b1d10dc88d02f23d29ce584f58caf7c3b2fe3fe1e693e77420ba5","sha512":"df31c7dcfeba9ca18271b9bf9468d98f1a9c269a1b2fb5d60a036521ca68ac167f49de10207fe04fd6b152b277967267a66096503a3219ebd30f380940d623eb","ssdeep":"","tlshash":"0e6000f0003c00000003c30000330cf300000c0f00ccc30cfc0000c000cc0000000c03","size":17,"data":"","first_seen":"2023-04-11T13:20:15Z","last_seen":"2026-04-23T09:04:55.512187Z","times_seen":4032,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/js/tilda-popup-1.0.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb286eafe5f0b9d3ebc1022b3e1ee29d","sha1":"5f782bf6a25f09790ff426d95251157e77301d71","sha256":"22dd5ef26241412d3a0872d24e45000751ea3414fcf0b8d331413f6be6e5eb1c","sha512":"69a49a1237ddb3a3e8a71db0c68b2c189bdb4d90ca4becf72a3afd571d4eace16c8cf5643222ccbc43f3bfee7d3e122dd198f28720e3884af228e81b707e37af","ssdeep":"","tlshash":"c3615324b6b4317206df51f9e9da62cd3b3190aef6038c606468dc8865f88cac60597e","size":3366,"data":"","first_seen":"2025-11-25T15:11:39.238194Z","last_seen":"2026-04-22T21:30:14.178764Z","times_seen":797,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"knowles-firm.com/","fqdn":"knowles-firm.com","domain":"knowles-firm.com","tld":"com"},"ip":{"addr":"194.48.203.204","port":443,"asn":0,"as":"","country":"Ireland","country_code":"IE"},"introduction_type":"eventHandler","is_inline":false,"md5":"dd0c10bba926ff868d44d1cb840b9e92","sha1":"25215d8b169b1f092748eab6a5c2c65853521664","sha256":"89589aeee3165c1180f9e96215718519f11241cfe962f7e949e69c315a0e0dbd","sha512":"4f6fb6a046f3c4abf06f40067a07351b3c050ab3aeecd0ea1ceeccd92cd26129ea3df12bf42f44e2b186c67e902db0604688710c286aeb335a319cb971094765","ssdeep":"","tlshash":"e6600080828020a88320008082008000002a0002002322a8000880aaa000a088008003","size":17,"data":"","first_seen":"2023-04-18T20:14:20Z","last_seen":"2026-04-22T17:41:07.121616Z","times_seen":256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"knowles-firm.com/","fqdn":"knowles-firm.com","domain":"knowles-firm.com","tld":"com"},"ip":{"addr":"194.48.203.204","port":443,"asn":0,"as":"","country":"Ireland","country_code":"IE"},"introduction_type":"eventHandler","is_inline":false,"md5":"dd0c10bba926ff868d44d1cb840b9e92","sha1":"25215d8b169b1f092748eab6a5c2c65853521664","sha256":"89589aeee3165c1180f9e96215718519f11241cfe962f7e949e69c315a0e0dbd","sha512":"4f6fb6a046f3c4abf06f40067a07351b3c050ab3aeecd0ea1ceeccd92cd26129ea3df12bf42f44e2b186c67e902db0604688710c286aeb335a319cb971094765","ssdeep":"","tlshash":"e6600080828020a88320008082008000002a0002002322a8000880aaa000a088008003","size":17,"data":"","first_seen":"2023-04-18T20:14:20Z","last_seen":"2026-04-22T17:41:07.121616Z","times_seen":256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"knowles-firm.com/","fqdn":"knowles-firm.com","domain":"knowles-firm.com","tld":"com"},"ip":{"addr":"194.48.203.204","port":443,"asn":0,"as":"","country":"Ireland","country_code":"IE"},"introduction_type":"eventHandler","is_inline":false,"md5":"dd0c10bba926ff868d44d1cb840b9e92","sha1":"25215d8b169b1f092748eab6a5c2c65853521664","sha256":"89589aeee3165c1180f9e96215718519f11241cfe962f7e949e69c315a0e0dbd","sha512":"4f6fb6a046f3c4abf06f40067a07351b3c050ab3aeecd0ea1ceeccd92cd26129ea3df12bf42f44e2b186c67e902db0604688710c286aeb335a319cb971094765","ssdeep":"","tlshash":"e6600080828020a88320008082008000002a0002002322a8000880aaa000a088008003","size":17,"data":"","first_seen":"2023-04-18T20:14:20Z","last_seen":"2026-04-22T17:41:07.121616Z","times_seen":256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@300;400;500;600;700\u0026subset=latin,cyrillic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=Manrope:wght@300;400;500;600;700\u0026subset=latin,cyrillic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 02 Apr 2026 15:01:21 GMT\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10060,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fb6308c04d21b239fc9d858b18b99b54","sha1":"31a8fd53d97c335e29454c93030b4b1cfb46f1c2","sha256":"23de37f431898524378308194aee620bee4af794b22d44cebb4c3b70d6bf69c9","sha512":"b77fff3171b6023d049e93f06b046920897a7a4a099bbfbe2d0d7fba90e7b0d28b1343415b49b1dd45b0e056d561265be9cc79a28501603111726015b12ed498","ssdeep":"192:4JorV3dd8yoJx2V3888fzJ+pV3nn80KJ3kV3uu85tJMPV3hh8Gs:K2sIQ2ksAmO","tlshash":"822287a1012be804ab470cd677ce7d399d4e6186708584b69bfe1c9cadebd32336075e","first_seen":"2025-09-05T12:29:03.288546Z","last_seen":"2026-04-21T16:07:49.503329Z","times_seen":536,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":168,"dns":1,"connect":20,"send":0,"wait":48,"receive":0,"ssl":182},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3739-3764-4162-a362-343635343532/7548_1.jpg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3739-3764-4162-a362-343635343532/7548_1.jpg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 56900\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-3044ac3b022921b0a361de45ba8dc448-31406263b6e77ac6-01\r\nx-shard: sto5-shard0-default\r\netag: \"25d60f01b0fcf233932829da5f6bbf03\"\r\nlast-modified: Fri, 20 Mar 2026 08:30:47 GMT\r\nage: 941590\r\nx-tilda-origin: or-32\r\nx-id-shield: fr5-hw-edge-gc39\r\nx-id: sto5-hw-edge-gc19\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:11+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56900,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 561x316, components 3","md5":"25d60f01b0fcf233932829da5f6bbf03","sha1":"71653f9d225320653bb774a5dbdabb0f255d812a","sha256":"909455edbe4ff01951397e491f9e250c5f0bb8cdf85a7adf86f950d491278ba2","sha512":"613d8f58f9974a727a2abd71f554cd77f161ca9cb537d01b262af3b5068160950f039c649e70f5d01d63cc36f504dcf713d6c3a9dd6e91c6a5e88532b727de59","ssdeep":"1536:XUIP4yUn5DgciF+gais675lW9jfcZJNtuvn4cOFW+o:XRP4DDgcOa2dMlcJ3u22","tlshash":"514302368805786e467e10802e4ed7e87d979713ff5ab6aa9883c03cf45ac413ec9d74","first_seen":"2026-04-02T15:01:52.128412Z","last_seen":"2026-04-20T13:12:05.851501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://knowles-firm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 02 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 23730\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-04-23T11:14:28.391175Z","times_seen":18014,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":231,"dns":1,"connect":14,"send":0,"wait":8,"receive":2,"ssl":231},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3531-3530-4365-b330-643235323935/Frame_3_2.jpg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3531-3530-4365-b330-643235323935/Frame_3_2.jpg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 121233\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-5d7a2bd00bda23123361888c5452afac-c28d0ab0adb777e6-01\r\nx-shard: sto5-shard0-default\r\netag: \"0c5e1800cd62856ab015024c84d3e722\"\r\nlast-modified: Thu, 19 Mar 2026 12:05:40 GMT\r\nage: 941590\r\nx-tilda-origin: or-33\r\nx-id-shield: fr5-hw-edge-gc40\r\nx-id: sto5-hw-edge-gc15\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:10+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":121233,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 748x1119, components 3","md5":"0c5e1800cd62856ab015024c84d3e722","sha1":"2bac411784132b9f9eada640b612ef3998759167","sha256":"82b5dfd4e0bd6389e8d819e48b9b74bed5762ddd160478362b971ab0a605e26c","sha512":"5fedb45a30752b87c6fd9968d6fdcad00c790f16e8c76ab45750cb730554f2a44240a38b8af17fd2e29f7fd014a0d0f48fd53b0684728422d43638dac60e6143","ssdeep":"3072:ZWAy59ntxT8VOpiLRaShUIw3jMKP1nagRMGU:MAycgOaShjabNagRxU","tlshash":"d6c3f105cfd7e61a0b0f9532a0af781f48618bdce4895ce448131d66a6a0fd1deea4fc","first_seen":"2026-04-02T15:01:52.130964Z","last_seen":"2026-04-20T13:12:05.787585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3366-3537-4633-a162-333636386136/884_1.jpg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3366-3537-4633-a162-333636386136/884_1.jpg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50822\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-163ffd1d960363c55f5af9f22ae96c7b-36be32dcf386eac3-01\r\nx-shard: sto5-shard0-default\r\netag: \"195b51caa1881952045fd7b8a46375db\"\r\nlast-modified: Thu, 19 Mar 2026 13:39:14 GMT\r\nage: 941590\r\nx-tilda-origin: or-32\r\nx-id-shield: am3-hw-edge-gc38\r\nx-id: sto5-hw-edge-gc22\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:10+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":50822,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x667, components 3","md5":"195b51caa1881952045fd7b8a46375db","sha1":"c4ba376adb57d551f4b4ce9d82fa9cd313c9b2b7","sha256":"452f46c82630de3906b3a22a6c8ad6c82ed3842c3405688af2e48d43e18770c2","sha512":"cc7dd2bbad931ed790c4ee329444972683fc2d15dea3e42b94cf8ee832071ef32adfe9506929441c9c12f57858588a2b11e64b659630de0856752f74838f69b5","ssdeep":"1536:aj+fivWmVSDF+/rtM4xknqhabWR0RTptKPizI0y2D:jwTVSD8/rt1dhabILRmD","tlshash":"a933f1259b857f77cae3f97c2d8a4f0a2b978187d1d0105818687a6170ab76b0e7b2c1","first_seen":"2026-04-02T15:01:52.132001Z","last_seen":"2026-04-20T13:12:05.809594Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3439-6634-4564-b666-613231373738/62165_1_1.jpg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3439-6634-4564-b666-613231373738/62165_1_1.jpg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 255227\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-ed93d8ce634da2ae6621e8d48fdef837-a37986187edd14f3-01\r\nx-shard: sto5-shard0-default\r\netag: \"07d705b56026fbbcf2162e12aac2a0f4\"\r\nlast-modified: Fri, 20 Mar 2026 08:34:24 GMT\r\nage: 941590\r\nx-tilda-origin: or-33\r\nx-id-shield: fr5-hw-edge-gc39\r\nx-id: sto5-hw-edge-gc14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:14+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":255227,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 802x533, components 3","md5":"07d705b56026fbbcf2162e12aac2a0f4","sha1":"9bcd65a85525b35609ad1d9d20714d5135593b90","sha256":"6e5b60cbbfb9d6a2d85f943c2faab808455dae752cdb637f1aa74f3df51a3f08","sha512":"ddd5f08f659b381cb655e08aa0820138208e73fdda9dbf16c212df01f0fb1c792cec233c4a332112161516af144cdf64bbf07b327696b8917ca19024b0407d3e","ssdeep":"6144:9VW0KjEJXpC4WdDpVeSLrCQyYmy8I9h4JMH476pPzBZE7Zu:+RYJX4RdFjvTyI9WJ4476p7QE","tlshash":"394423f8c8136113d3d6e43efce7598e005561fe81a4ae9eab400e58d6a53cb74d351e","first_seen":"2026-04-02T15:01:52.133435Z","last_seen":"2026-04-20T13:12:05.872348Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3263-3931-4763-a138-663763663765/Frame_1618873169.jpg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3263-3931-4763-a138-663763663765/Frame_1618873169.jpg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38822\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-f4d432165af5ac1004bf659420a3b1b2-3046ed9e8205afef-01\r\nx-shard: sto5-shard0-default\r\netag: \"cba31d21118ae43009a80af4a3aedcca\"\r\nlast-modified: Fri, 20 Mar 2026 11:04:21 GMT\r\nage: 941590\r\nx-tilda-origin: or-31\r\nx-id-shield: fr5-hw-edge-gc39\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:14+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38822,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x766, components 3","md5":"cba31d21118ae43009a80af4a3aedcca","sha1":"1d81101b976311ff500f9eeaf486ecf62812f151","sha256":"ecc894322ce0ff5a43c476dbd19ab17462b34d0cfe687b910b564b59edddd0cd","sha512":"dbe07944daecc23659a1df9b6c25546ec213a24e54bd1f8ac8ac6a3a54bf969b887ad62f0017cb5a78dd352f08306a3762bf2de32bbff74e1f08076bf34f819c","ssdeep":"768:I/xPv89BjmnuLSemedekXBTfmZmBYNcOG3n4wiOw/nbNm3POaT3UfwFY0:Sv89BCnuWtkRrWmBYhGRiOcZm3pmwD","tlshash":"ec03f1572feaa7abca892d3a068d57d2010f6332e5be520792a76b8f7404594fcc2711","first_seen":"2026-04-02T15:01:52.134951Z","last_seen":"2026-04-20T13:12:05.806636Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:23.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://knowles-firm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14500\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 02:09:12 GMT\r\nexpires: Sun, 28 Mar 2027 02:09:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:13 GMT\r\ncontent-type: font/woff2\r\nage: 478331\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14500,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-04-23T11:05:28.012536Z","times_seen":2312,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3038-3065-4532-a638-313736396430/3392_1.jpg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3038-3065-4532-a638-313736396430/3392_1.jpg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 332796\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-248a10dccf945b56663f8bf109bbe384-736b32abd9bb6864-01\r\nx-shard: sto5-shard0-default\r\netag: \"a99df0dcea363401d14602fe8702ab70\"\r\nlast-modified: Thu, 19 Mar 2026 12:13:55 GMT\r\nage: 941590\r\nx-tilda-origin: or-32\r\nx-id-shield: fr5-hw-edge-gc40\r\nx-id: sto5-hw-edge-gc22\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:10+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":332796,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x667, components 3","md5":"a99df0dcea363401d14602fe8702ab70","sha1":"8f45bc00a8d6ee6cbc6e8231a6e311c54b1e5b09","sha256":"94af59abf67801994d36fc3da76f0f94ac042603e8934e4c751144f495e7db1e","sha512":"f5276826695924ac1a1d800ee1fc6e80be4771629aac03440da8561323668b86401e3438f25fcbccd92877602b4c68f6dd0f568871871c75455ec5e1f72d9edd","ssdeep":"6144:Hh3pV8F0XXAVUYNBH0BaI9rtirvE1G3FmrLJDCZ9Z+c8lXYPAjtaGoW:B3pM0nqUYjUBa0RycDCZ9N8lXYPAjtX","tlshash":"08642233939156bce9159bb78ed84687870bee1ae63744a0da203fe3d7244811b746ec","first_seen":"2026-04-02T15:01:52.136724Z","last_seen":"2026-04-20T13:12:05.784989Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dl.dropboxusercontent.com/scl/fi/84fsq5cj81dzibgvbhmcr/GettyImages-1195900726-1.mp4?rlkey=ycczdgi6e5vhbys56dp3lvm03\u0026st=qor5gz5x\u0026dl=0#t=0.1","fqdn":"www.dl.dropboxusercontent.com","domain":"dropboxusercontent.com","tld":"com"},"ip":{"addr":"162.125.71.15","port":443,"asn":19679,"as":"DROPBOX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:24.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dl-au.dropboxusercontent.com","organization":"Dropbox, Inc"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Wed, 16 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"41:2A:CB:91:67:10:A1:EA:BC:B3:CD:67:A9:05:11:BF:99:18:03:C0","sha256":"17:E6:EC:FF:06:DD:41:CF:24:E9:C8:5F:D8:26:52:87:8E:7A:80:17:20:C5:1A:85:72:95:30:70:B2:E9:69:A2"}}},"request":{"raw":"GET /scl/fi/84fsq5cj81dzibgvbhmcr/GettyImages-1195900726-1.mp4?rlkey=ycczdgi6e5vhbys56dp3lvm03\u0026st=qor5gz5x\u0026dl=0 HTTP/1.1\r\nHost: www.dl.dropboxusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: video/mp4\r\naccept-ranges: bytes\r\ncache-control: max-age=60\r\ncontent-disposition: inline; filename=\"GettyImages-1195900726 (1).mp4\"; filename*=UTF-8''GettyImages-1195900726%20%281%29.mp4\r\ncontent-range: bytes 0-949379/949380\r\ncontent-security-policy: report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-usercontent ; sandbox allow-forms allow-scripts allow-top-navigation allow-popups, form-action 'none' ; report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-noscript ; script-src 'none'\r\netag: 1773219719614278n\r\npragma: public\r\nset-cookie: uc_session=Ci5roF2CqQx4W4j2Zcx6ZO02y5TUT7ho3zooPWD4GF6CoWBTvn4OVDHAXGfUfYpY; Domain=dropboxusercontent.com; HttpOnly; Path=/; SameSite=None; Secure\r\nx-content-type-options: nosniff\r\ndate: Thu, 02 Apr 2026 15:01:25 GMT\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-robots-tag: noindex, nofollow, noimageindex\r\ncontent-length: 949380\r\nx-dropbox-response-origin: far_remote\r\nx-dropbox-request-id: 48aba23cd8a24951b4a79ac269ce84c4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":32768,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"5215cc48a3865f76e4692ecfccc217f3","sha1":"4aef3f6dd294b881567c5910dc426f200dec7f2d","sha256":"a52bbf50182cffffac74d1f7bacc3c3e6c9d9f2d54977051df8c1d5715faffcc","sha512":"b61cca47e641b1cbd2901c321680207ad4a0d928afc76a1a2c280030936721588e9d9b06bae2de44db47436996f99a2a272b9302144d3857982f1d21a4cd2ab9","ssdeep":"768:xyQC8tyCSGBDbdo1OM4HSCr0kdCAU134jo:xa4yCjJ0wSCr0Aw348","tlshash":"e7e2d0e107ff852ce11ce2b034e7172fa6153ee54158838841ded6fa34eb2657e9a98c","first_seen":"2026-04-02T15:01:52.138034Z","last_seen":"2026-04-20T13:12:05.807737Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1502,"timings":{"blocked":196,"dns":94,"connect":6,"send":0,"wait":828,"receive":275,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3536-3231-4264-b537-663734376537/_2.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3536-3231-4264-b537-663734376537/_2.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-922cbe1819de18f677d53757a7abf2c4-39de77f652e4a394-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\netag: W/\"21c4fe4fab51cef30fd1e26e22aa28ad\"\r\nlast-modified: Thu, 19 Mar 2026 07:26:44 GMT\r\nage: 941589\r\nx-tilda-origin: or-31\r\nx-id-shield: fr5-hw-edge-gc40\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc15\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:09+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":15455,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"21c4fe4fab51cef30fd1e26e22aa28ad","sha1":"7bd63983a6118484697e13308417deeed9cbd84c","sha256":"e668a8ef31ff1feaca7f89d941d1503e41328767681fff8bf14879df51a9577c","sha512":"518ab93867a40ef417534f326fc4907db9ee73a4e7572fcf06915a08e10e90a12fc7de47b8e1650f3ca6288c90952037299b356faf4e53b13af1acacba657562","ssdeep":"192:Fkdd161Nfh6ujw5SihJuzRZPLx3UbjAXQlTojpA26vqf81UbWv7SEGl:c10wtLEvP1QJ6pA26Sg3v7S5","tlshash":"7d6276fdab6958fbda54d7deee00106821a680ffe5ca8b15c15d9f2e347118ccc4e982","first_seen":"2026-04-02T15:01:52.139222Z","last_seen":"2026-04-20T13:12:05.803764Z","times_seen":2,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":146,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3239-3837-4664-a535-616362356136/_2.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3239-3837-4664-a535-616362356136/_2.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-1295be4d370472c5ff3dd30123c60718-d8512d102e5aaa45-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\netag: W/\"45d0908cfcfaf797050dd58c9dba53f9\"\r\nlast-modified: Fri, 20 Mar 2026 20:29:26 GMT\r\nage: 941589\r\nx-tilda-origin: or-31\r\nx-id-shield: fr5-hw-edge-gc39\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:12+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":89767,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"45d0908cfcfaf797050dd58c9dba53f9","sha1":"2712f7c38a83355fe66a8966c1557de951504288","sha256":"bb68d0998125614dab00d9087cbc4b12e292c3e742565df5f6daa2dcedd9e3cb","sha512":"f8e0ebfe817faeb1aa5cbab30771f5a63f0ee77d45e8e0981b616be63266696f2d10e91389c5ac3486179f10954bf2faaa19e4348f8688daf7788d5f5cd2a5a4","ssdeep":"1536:oMmNVqJ22ScO5Rr43XV+cPCGKV9ijsZ8QlCIr48Wg3985Vgmok8v:oMmnr42","tlshash":"9693c8ed7b7584d4e98447e8971069b83b1aadbe1d27cb24c7ad5db1e992c0cc824cc3","first_seen":"2026-04-02T15:01:52.140193Z","last_seen":"2026-04-20T13:12:05.866242Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":135,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3361-3166-4236-a462-333735343933/photo.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3361-3166-4236-a462-333735343933/photo.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-c514a8bafd61b301457fa50ad2df7f9f-14f52e3bd287e743-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\netag: W/\"b1a1d0f12e5e88e86c1082e91dff816f\"\r\nlast-modified: Thu, 19 Mar 2026 09:26:33 GMT\r\nage: 941589\r\nx-tilda-origin: or-33\r\nx-id-shield: fr5-hw-edge-gc39\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc15\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:12+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":405,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b1a1d0f12e5e88e86c1082e91dff816f","sha1":"68c2e51385103b21e8ee0a4721ba4c5e01e3a898","sha256":"935ea7c267efd0908c48483088ee7db7899c430a4f314f91c63d87b4c8511cc8","sha512":"5c91f0f33b8d054ce5b6b5c58329f47fd2d2f18aecce7b1bbd3deb59af01bc74f55a10830dc0a547adefda04b69072888a92b01ad151cd982c05af4bb41f155b","ssdeep":"","tlshash":"e1e02b959308550cc8441715973eb07d31a971f89d142c44efc83bd7b58b8dfa428609","first_seen":"2026-04-02T15:01:52.14104Z","last_seen":"2026-04-20T13:12:05.827081Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":154,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://knowles-firm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14500\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 02:09:12 GMT\r\nexpires: Sun, 28 Mar 2027 02:09:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:13 GMT\r\ncontent-type: font/woff2\r\nage: 478330\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14500,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-04-23T11:05:28.012536Z","times_seen":2312,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":132,"dns":1,"connect":26,"send":0,"wait":8,"receive":2,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/js/tilda-zoom-2.0.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /js/tilda-zoom-2.0.min.js HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: application/javascript\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-5716a185cd051ca675dc94da489ec5a5-fa619ccecdafd1d0-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 24 Mar 2026 08:06:37 GMT\r\netag: W/\"69c2460d-8213\"\r\nx-tilda-front: fr-3\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\ncontent-encoding: gzip\r\nx-tilda-origin: or-32\r\nx-id-shield: fr5-hw-edge-gc40\r\nage: 800483\r\nx-id: sto5-hw-edge-gc18\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-24T08:40:02+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":33299,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33298)","md5":"182f90bf5557d85890436fc8e952a24d","sha1":"585b5125959d12f8bc1a040a748bb52913c763f8","sha256":"696c2747d51b502bfbb384c8be5dc84e82223cccc01488e1632cfb72a2e9dc50","sha512":"d74831324d727f88d44b36fe9a97bd312f134c7a8be31439d61cbf28c456ac8befb6168327a189f9e6ef1459eb89fd915141af2960a8d912d284be3e05e6fc14","ssdeep":"768:zpRv2ad7tOlkqllDnZUtSpNcsX0CoT7oZ/8mm6ZU6bz8RwohIp3OlD1zJ5tuY6mv:Lv2s5OKD0g6Ne6Q1","tlshash":"bee2c728b12d343a85d322ebd6ef67c879791658b5038001652ec89c3a78c4b7567efe","first_seen":"2026-03-24T09:48:55.52904Z","last_seen":"2026-04-23T06:03:13.649745Z","times_seen":122,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":153,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.net/tild3134-6131-4036-b431-386530393061/-/resize/20x/photo.png","fqdn":"thb.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3134-6131-4036-b431-386530393061/-/resize/20x/photo.png HTTP/1.1\r\nHost: thb.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/png\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-552705f084eacf2735d0efcd7a8a1a33-ef9200c5091918be-01\r\nx-shard: sto5-shard0-default\r\nx-tilda-origin: or-32, or-32\r\nx-id-shield: am3-hw-edge-gc11\r\nage: 940036\r\nx-id: sto5-hw-edge-gc22\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:09+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1723,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"a377acd160c51ef670da7f3f2b332ffd","sha1":"87239f166ad21753e37054bf2c37b8d50f0ac8c6","sha256":"0fbb355cd100749785985ab077b9135b137c0e27dfa0f8ee49f56a6b52a788df","sha512":"83931aa64c944af385884a8ea0c0296ceaa2733eff10778d802f4ead916fb78d28ae3a7da9d829aa82a4798fcadffce2e075299277ee16e727e1fa78cc567668","ssdeep":"","tlshash":"d731fa875b9006e6d0d490fbe41e07b44c37ccec95189945a03d8f12eed2d744fa7447","first_seen":"2026-04-02T15:01:52.142583Z","last_seen":"2026-04-20T13:12:05.792572Z","times_seen":2,"resource_available":false,"data":null}},"time_used":931,"timings":{"blocked":917,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://knowles-firm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14500\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 02:09:12 GMT\r\nexpires: Sun, 28 Mar 2027 02:09:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:13 GMT\r\ncontent-type: font/woff2\r\nage: 478330\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14500,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-04-23T11:05:28.012536Z","times_seen":2312,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"knowles-firm.com/","fqdn":"knowles-firm.com","domain":"knowles-firm.com","tld":"com"},"ip":{"addr":"194.48.203.204","port":443,"asn":0,"as":"","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-02T15:01:20.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"knowles-firm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 09:17:43 GMT","end":"Sun, 21 Jun 2026 09:17:42 GMT"},"fingerprint":{"sha1":"9D:16:FB:FB:E2:28:CD:9A:03:D9:F9:0E:D2:49:77:1B:5D:B9:D4:6E","sha256":"BA:AC:43:6B:05:21:75:ED:63:25:8C:97:3F:7D:09:78:75:65:FE:35:C7:38:A8:D2:B7:A2:0C:63:ED:97:1C:28"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: knowles-firm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 15:01:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlast-modified: Thu, 26 Mar 2026 08:44:39 GMT\r\netag: \"16e2aa-64de9651e3e04-gzip\"\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-ws-id: 3\r\nx-host: knowles-firm.com\r\nx-tilda-server: 5\r\nx-tilda-imprint: 0a52f68c-65c5-44fd-b052-0b4fac9e17d8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tilda","description":"Tilda is a web design tool.","website":"https://tilda.cc","common_platform_enumeration":"","icon":"Tilda.svg","categories":["CMS"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Hammer.js","description":"","website":"https://hammerjs.github.io","common_platform_enumeration":"","icon":"Hammer.js.png","categories":["JavaScript libraries"]}],"data":{"size":1499818,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (56502)","md5":"42193843c4f67f23c271440848708739","sha1":"176d77273993b1a6df56118c0b7b0453310e2d7e","sha256":"cde49545b007d180bce73bff5de51a85366a8243c13c21427ce02898f897d56e","sha512":"d8a3803bb3f79cf230f6c6696f0418a464f127b50c413121ca589760b7acdb73c6ab3d70e3b6755874b50ea0f9928575fa5ec7a1f7a33dfecafb85d31d843417","ssdeep":"12288:ovcAf1tnOU1DLG8/l8CrCeGBwQJdUHl8CrCeG1l8CrCerIJmx7E6+PNKJGbJEOGR:ovcAf1tnOuKeKdaKeiKee4cxwJN","tlshash":"8c25a762b241683bd417a8cf52dfc528732eb792cf0b13d4f7954e79269a8b12ca7c50","first_seen":"2026-04-02T15:01:52.143422Z","last_seen":"2026-04-02T15:01:52.143422Z","times_seen":1,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":182,"dns":74,"connect":48,"send":0,"wait":100,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild6236-3261-4736-a437-616264383039/photo.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild6236-3261-4736-a437-616264383039/photo.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-a43ce64abf333292a3a6179e10ca2422-b5abcf5dbef18461-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\netag: W/\"7c681d5837c18fdd1fa4f152bc5c2c89\"\r\nlast-modified: Fri, 20 Mar 2026 10:18:20 GMT\r\nage: 941589\r\nx-tilda-origin: or-32\r\nx-id-shield: am3-hw-edge-gc38\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc19\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:13+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":3481,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7c681d5837c18fdd1fa4f152bc5c2c89","sha1":"955c68419e1c04a0846efd7ac97f92d3ff5830cc","sha256":"1abd0d6f3e4c9cb6fc2d1ce3aecf4fcca9f57d7fa7a1c83a311b7db8f788502e","sha512":"60cbb41ec3465e0ccb7737235d219877daac25c838b1311cf7b6c7962900c895e7b48507999f4c54f2b9b069f65a4ee10e186ca9c94f684e648e447c8838163e","ssdeep":"","tlshash":"577131d6633973f86980f3c355349c743c52aefbba274f5e996069a4199281c0ca4ae3","first_seen":"2026-04-02T15:01:52.144343Z","last_seen":"2026-04-20T13:12:05.802561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/css/tilda-zoom-2.0.min.css","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /css/tilda-zoom-2.0.min.css HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: text/css\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-11888ea63610722a1e67474394d72afb-a729fe709817e7db-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 24 Mar 2026 08:06:37 GMT\r\netag: W/\"69c2460d-20f3\"\r\nx-tilda-front: fr-3\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-31\r\nx-id-shield: fr5-hw-edge-gc39\r\nage: 801986\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc15\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-24T08:14:59+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8435,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8435), with no line terminators","md5":"df2c02698f28aca2683b3f4398d16e0b","sha1":"009ac452b90ffbd6a608313c255ede601535a84f","sha256":"42e68d58210ff2d9e07e275ca393d951e819c2943011c3a0a80d909df4aed8c5","sha512":"7b0d9a9bfbc2820f390f38f5cd741e38179367034bd7fc5acfd7125982e5cdf2c1f82d5a5c0ccafef3bf54aadba12d75e775adc020d108c397515b811d47b53d","ssdeep":"192:FIhuQIHVGH3m6g92o8b+OYxlMskc6asGwJc6pDa:FIhuQIHEH3m6g92o8b+OYxlMskAsGwJO","tlshash":"3602139b705e214cc993a7378ddc4e38cc3d8b629a9135ddf1ab812d4342e11172b92f","first_seen":"2026-03-24T09:48:55.553329Z","last_seen":"2026-04-23T09:04:55.409838Z","times_seen":189,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/js/tilda-skiplink-1.0.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /js/tilda-skiplink-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-f7569df0fd0aacce8141b6343f92e6bc-f1c18f335e743181-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 19 Oct 2023 07:35:23 GMT\r\netag: W/\"6530dc3b-757\"\r\ntserver: TLNcrzFd\r\nx-id-shield: am3-hw-edge-gc38\r\nage: 2763609\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc20\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-05T14:04:27+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1879,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1842)","md5":"ea12dec71e029eba297d483c7a123962","sha1":"e07887a24d4dba4e2e3ba5aabe2ca68dadea86ae","sha256":"e30be28d85f8db5566078029d843d227687fd73ccfd6757d37b69b2fc06bf48d","sha512":"f71e32c78fe244b32640012f18b54b8cdc19f3d43402dbd814d105133d3d0ed229ec3ec57097cee96fcb87fc248eab4ec9e054c097e45186f291d8e3552d8979","ssdeep":"","tlshash":"8a417355e1d61c3682ea6364c1ee2ecdf0b1e0bafe924486d4ced07bbdb6dc90199701","first_seen":"2023-10-19T12:07:16Z","last_seen":"2026-04-22T23:24:56.904463Z","times_seen":2363,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":150,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild6335-3865-4434-b863-643763663466/Group_4.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild6335-3865-4434-b863-643763663466/Group_4.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-57cc82e96fbfec7abfef019b4a336b47-1b4ada390047a45f-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nx-amz-id-2: XcSy6BVCKM+ePpuMICJyehUHxIII7ZuFCH7aRzwB5keC5qeGZLy8ZHb3E7YkrpQKnsdEnmV8qyc=\r\nx-amz-request-id: BJ6KM9B7JFZ7A1NP\r\nlast-modified: Thu, 19 Mar 2026 11:53:49 GMT\r\netag: W/\"c4287aab95236312eea62e76559e08e8\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-tilda-origin: or-32\r\nx-id-shield: fr5-hw-edge-gc39\r\nage: 941589\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:11+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":465,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4287aab95236312eea62e76559e08e8","sha1":"bc050236b49714ce571d045ca1cb39a721d910b9","sha256":"6864f161ba8cb4b54086e2693cf6cde51ee3ce55b5c08c4a74196c54a8fa7427","sha512":"7bff70ab96062cd0ac9710420e9443ca3695ad8f936b976dde2c6c3d23ad724385a304fad118afc82b816dc380b48be0412035fdd870fa1e9f7e0bc261e4c6c6","ssdeep":"","tlshash":"13f0e284836e4930ada8830d9abdb4b9133531a5979c0828c9d02e3227540ed7c37dec","first_seen":"2026-04-02T15:01:52.146452Z","last_seen":"2026-04-20T13:12:05.860866Z","times_seen":2,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":139,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3035-3035-4266-a662-653138383935/_4.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3035-3035-4266-a662-653138383935/_4.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-80de2bec1ff56552f0715c7e09e47510-d12ca5d0b6818641-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nx-amz-id-2: B0I1SyKvgMJ6gd3vyi1xs71MmrN5EdHG+bI2RKR0OQsU6ktIOJu4zv/Ti9WxR4/iRF+utOa2EGZtXzErxYQJLVVb4E6RvYMsQrE7aQXSSiE=\r\nx-amz-request-id: BJ6Y5EYB279XDEZP\r\nlast-modified: Thu, 19 Mar 2026 10:17:19 GMT\r\netag: W/\"ec35382c6d53555b48deb8435fd0b895\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-tilda-origin: or-32\r\nx-id-shield: am3-hw-edge-gc11\r\nage: 941589\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:13+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec35382c6d53555b48deb8435fd0b895","sha1":"f7c1813d97e1618423708ae8642d0633385ff463","sha256":"fa07b1bda7b96cc29ccb30026323528b58995fef07a6fee0621dd0986eef70e9","sha512":"d180f9d185802aba78c19da56ec41341e616119c39432c7997972f866c178641f8e606e6c4072bff0b7933d22920bf9a8112365fd61cc306d6194ea70c0a568d","ssdeep":"","tlshash":"9dd02b6582045dd12848cb092778a0b00ba7e1f990c8035dddd04d71b2466cb34015dc","first_seen":"2026-04-02T15:01:52.147839Z","last_seen":"2026-04-20T13:12:05.868231Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":157,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.one/js/tilda-performance-1.0.min.js","fqdn":"static.tildacdn.one","domain":"tildacdn.one","tld":"one"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:26.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.one","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Fri, 07 Nov 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AB:76:8B:2F:30:2E:31:4B:6C:0A:C2:2E:56:B4:1D:E2:B5:CA:0B:23","sha256":"F9:68:D7:A6:D4:BA:97:B2:64:2D:33:BA:8B:5A:C8:8F:EB:4E:21:86:FA:DC:92:3C:6F:DC:CA:46:31:C4:92:10"}}},"request":{"raw":"GET /js/tilda-performance-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-52c9919049068d8b22f6ecf60592822c-840383d3945ef268-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 05 Dec 2022 06:48:46 GMT\r\netag: W/\"638d944e-cf0\"\r\ntserver: qrwvtK1f\r\nx-id-shield: am3-hw-edge-gc11\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc22\r\nexpires: Mon, 01 Jun 2026 15:01:26 GMT\r\ncache-control: max-age=5184000\r\nage: 2429152\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-05T14:05:15+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":3312,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3312), with no line terminators","md5":"085a93dc89fe3b0b497f99a222f9ac57","sha1":"339d9c7557c0fd2ca1c4d73227f9274bdd080ef3","sha256":"15cb1cffa887ec74a9ae3dad3c5c539e2b24c0c2e8e66f82fa536406e0c95db1","sha512":"429b8c4d240686dd6ff59ac1945a825bcfaa51cd3914fd49f68c7492054268729d87ed07a4d0a3e2a30bdeb0cbabd1fb715baa43dc02f1ea0fb7c49471f9501c","ssdeep":"","tlshash":"ca6172a5e32030772577082e22dfb20671b90751ac060c2e523ea5443cab5cbc7e7f5e","first_seen":"2023-03-08T20:13:50Z","last_seen":"2026-04-23T04:46:21.131525Z","times_seen":771,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":93,"dns":61,"connect":8,"send":0,"wait":9,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dl.dropboxusercontent.com/scl/fi/usrv89j4860zta3fxfs97/0_Office_Desk_1280x720-2.mp4?rlkey=15xt8fy2o4uhvg813g9mskn2p\u0026st=9gmb634q\u0026dl=0#t=0.1","fqdn":"www.dl.dropboxusercontent.com","domain":"dropboxusercontent.com","tld":"com"},"ip":{"addr":"162.125.71.15","port":443,"asn":19679,"as":"DROPBOX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:24.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dl-au.dropboxusercontent.com","organization":"Dropbox, Inc"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Wed, 16 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"41:2A:CB:91:67:10:A1:EA:BC:B3:CD:67:A9:05:11:BF:99:18:03:C0","sha256":"17:E6:EC:FF:06:DD:41:CF:24:E9:C8:5F:D8:26:52:87:8E:7A:80:17:20:C5:1A:85:72:95:30:70:B2:E9:69:A2"}}},"request":{"raw":"GET /scl/fi/usrv89j4860zta3fxfs97/0_Office_Desk_1280x720-2.mp4?rlkey=15xt8fy2o4uhvg813g9mskn2p\u0026st=9gmb634q\u0026dl=0 HTTP/1.1\r\nHost: www.dl.dropboxusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: video/mp4\r\naccept-ranges: bytes\r\ncache-control: max-age=60\r\ncontent-disposition: inline; filename=\"0_Office_Desk_1280x720 (2).mp4\"; filename*=UTF-8''0_Office_Desk_1280x720%20%282%29.mp4\r\ncontent-range: bytes 0-1654821/1654822\r\ncontent-security-policy: report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-usercontent ; sandbox allow-forms allow-scripts allow-top-navigation allow-popups, form-action 'none' ; report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-noscript ; script-src 'none'\r\netag: 1773752874116890n\r\npragma: public\r\nset-cookie: uc_session=of9X1W9SduwK6DWVERHiwfMGSzmwrBHTt5UnySrZRiPPuSh1yYE2SVawXR7i2ReA; Domain=dropboxusercontent.com; HttpOnly; Path=/; SameSite=None; Secure\r\nx-content-type-options: nosniff\r\ndate: Thu, 02 Apr 2026 15:01:25 GMT\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-robots-tag: noindex, nofollow, noimageindex\r\ncontent-length: 1654822\r\nx-dropbox-response-origin: far_remote\r\nx-dropbox-request-id: 1051bbdd06164be5ad89db5e69ce84c4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":98304,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"0b6bf2dae50745dbbcb5f5ae722b6d16","sha1":"4e2a5db46cd8c01659ba51f4d5176737caea4014","sha256":"c9da622addd6be6f99fc56c24004a8b91bf8d4c3650ff43cd5296e3e6ed161b8","sha512":"1a70c5b38f4c6d24a3f1ae202380daf28ba49c0a550038c60370959e4e6d33da11e2f00ed0db5a322851295d7c399525d339cd83850279650e557681df17f147","ssdeep":"1536:pao8M+iWmv3OEmb0sHTvQMes/T1N53ODCCO8hih1WuuxI+nvFd59Vgic1lwh89z:Mo8Mx/v3OhhTvQ1iT1NZwCCVA1WuuGCI","tlshash":"a5a3ef6af7b1ac7bc33a6f3c1449873472c1a261d66afe07894a11bc5d3678c0e0b5d6","first_seen":"2026-04-02T15:01:52.149495Z","last_seen":"2026-04-02T15:01:52.149495Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1624,"timings":{"blocked":186,"dns":97,"connect":1,"send":0,"wait":891,"receive":357,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/css/tilda-animation-2.0.min.css","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /css/tilda-animation-2.0.min.css HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: text/css\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-f0daa7a8388c0dc918d1fb54c450d978-331c84919fc405c7-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Jul 2025 11:59:57 GMT\r\netag: W/\"687f7d3d-a77\"\r\nt-server: or-2\r\nx-id-shield: fr5-hw-edge-gc40\r\nage: 1220410\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc20\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-19T12:01:22+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2679,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2679), with no line terminators","md5":"a2e83a85322807a783feebfda59e0e1f","sha1":"e71e09218938b4a560acdc593b3d290632dd1576","sha256":"4367cfe21925829103cb1d8a3e599fde37dcf00e90c8303c904e5db1f5816292","sha512":"b2b17f7d18d61bbf6c860a8714355899ebadb5d22c1c46f9ae45257b159f7fa1538614b8466f56feb5ac1b830c49b91664b74206d6438b4e3ee91c82d33926b0","ssdeep":"","tlshash":"0651b7576926175002630da345cfbb644e289eb106520eceb3bc242f67c165ef27e2bf","first_seen":"2025-07-23T08:20:05.317665Z","last_seen":"2026-04-23T06:03:13.681937Z","times_seen":2199,"resource_available":false,"data":null}},"time_used":1957,"timings":{"blocked":955,"dns":56,"connect":10,"send":0,"wait":9,"receive":0,"ssl":916},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/js/tilda-animation-sbs-1.0.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /js/tilda-animation-sbs-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: application/javascript\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-e6aed2538f320805e77d2f0970be8214-1282233615fd3e23-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 02 Apr 2026 10:29:29 GMT\r\netag: W/\"69ce4509-ac39\"\r\nx-tilda-front: fr-3\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-32\r\nx-id-shield: fr5-hw-edge-gc40\r\nage: 15795\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc22\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-02T10:38:51+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":44089,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44088)","md5":"226df4dbbc7a7463d883d21844825bef","sha1":"a3d40a37fb9493354a5e0dd2f673150badf30680","sha256":"7f6c4aad5954f6b2a2fc9ca14b455b8f875d24be58d018bdefefec4d169f424b","sha512":"293162846d5e71444f1802d49ef93f6c88c8ccc001f956224c4c3a351ffded2fa636cb0bdb7f2a0268d7fa0418feb385d7a734e3ed24edd64a8a05b627a6e1e2","ssdeep":"768:jViNQDBjMxpeX6TvhHM4/HzObfw78qH1pQkV0SIU2JTuvg0ZUOsidbb+1nnLI2oP:4NeXMvhs4/HzObQ8+1ptgXTJiIityYiM","tlshash":"3713b8f9a2a4353603df53f3819f31496e300888b217987cb57dd45d282c99a639bfb9","first_seen":"2026-04-02T10:57:30.124136Z","last_seen":"2026-04-22T18:48:52.138889Z","times_seen":99,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":153,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3865-3139-4735-b938-396364346166/_2.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3865-3139-4735-b938-396364346166/_2.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-f20fd5b1be4298039152c1840fa65f30-8c526919df22398d-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: PUT, OPTIONS, POST\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-33\r\nx-id-shield: fr5-hw-edge-gc39\r\nage: 941589\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:11+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":15455,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"21c4fe4fab51cef30fd1e26e22aa28ad","sha1":"7bd63983a6118484697e13308417deeed9cbd84c","sha256":"e668a8ef31ff1feaca7f89d941d1503e41328767681fff8bf14879df51a9577c","sha512":"518ab93867a40ef417534f326fc4907db9ee73a4e7572fcf06915a08e10e90a12fc7de47b8e1650f3ca6288c90952037299b356faf4e53b13af1acacba657562","ssdeep":"192:Fkdd161Nfh6ujw5SihJuzRZPLx3UbjAXQlTojpA26vqf81UbWv7SEGl:c10wtLEvP1QJ6pA26Sg3v7S5","tlshash":"7d6276fdab6958fbda54d7deee00106821a680ffe5ca8b15c15d9f2e347118ccc4e982","first_seen":"2026-04-02T15:01:52.139222Z","last_seen":"2026-04-20T13:12:05.803764Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":135,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://knowles-firm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 02 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 23730\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-04-23T11:14:28.391175Z","times_seen":18014,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":28,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild6230-3431-4765-b033-316162326531/Frame_1618873181.jpg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild6230-3431-4765-b033-316162326531/Frame_1618873181.jpg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/jpeg\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-181dc643107f88dc2fb8bb55b4e2a0fa-3157c8d7fb229e5b-01\r\nx-shard: sto5-shard0-default\r\naccess-control-allow-methods: PUT, OPTIONS, POST\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-32\r\nx-id-shield: fr5-hw-edge-gc39\r\nage: 941590\r\nx-id: sto5-hw-edge-gc18\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:14+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1805,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 612x472, components 3","md5":"83c2bd98d9b644ee94594f42292637e5","sha1":"38caf35c964701d246aed04e36aa33344c44d15c","sha256":"a039fc38a34c2efd6e25f99130c36ac837ca90a5d5c0b71bdebac135fab26751","sha512":"88d5c48435a7143933646da548f9bd29a068dc7f487236f3fc2f2ed39718799477bf25790572a2c022d56b9d81d0ed5c9eabc0b8842643b9dc0317f21e6e5419","ssdeep":"","tlshash":"ad31a7067bd29403f5a05231846a7711bb01c7664b057be92a1fe635dee30eebf0235a","first_seen":"2026-04-02T15:01:52.151415Z","last_seen":"2026-04-20T13:12:05.842463Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3264-3565-4833-a366-373934633330/photo.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3264-3565-4833-a366-373934633330/photo.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-17f795a890b1792e33f67dc22e5e4c11-085b0e31cf07a6bb-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: PUT, OPTIONS, POST\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-32\r\nx-id-shield: fr5-hw-edge-gc40\r\nage: 941589\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc20\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:12+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":3481,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7c681d5837c18fdd1fa4f152bc5c2c89","sha1":"955c68419e1c04a0846efd7ac97f92d3ff5830cc","sha256":"1abd0d6f3e4c9cb6fc2d1ce3aecf4fcca9f57d7fa7a1c83a311b7db8f788502e","sha512":"60cbb41ec3465e0ccb7737235d219877daac25c838b1311cf7b6c7962900c895e7b48507999f4c54f2b9b069f65a4ee10e186ca9c94f684e648e447c8838163e","ssdeep":"","tlshash":"577131d6633973f86980f3c355349c743c52aefbba274f5e996069a4199281c0ca4ae3","first_seen":"2026-04-02T15:01:52.144343Z","last_seen":"2026-04-20T13:12:05.802561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3465-3161-4066-b863-623731386336/Frame_3_2.jpg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3465-3161-4066-b863-623731386336/Frame_3_2.jpg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/jpeg\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-68707e42c9d32e71f4b61c9845aa1ee7-a2b4c87b69443036-01\r\nx-shard: sto5-shard0-default\r\naccess-control-allow-methods: PUT, OPTIONS, POST\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-32\r\nx-id-shield: am3-hw-edge-gc38\r\nage: 941590\r\nx-id: sto5-hw-edge-gc14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:10+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":121233,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 748x1119, components 3","md5":"0c5e1800cd62856ab015024c84d3e722","sha1":"2bac411784132b9f9eada640b612ef3998759167","sha256":"82b5dfd4e0bd6389e8d819e48b9b74bed5762ddd160478362b971ab0a605e26c","sha512":"5fedb45a30752b87c6fd9968d6fdcad00c790f16e8c76ab45750cb730554f2a44240a38b8af17fd2e29f7fd014a0d0f48fd53b0684728422d43638dac60e6143","ssdeep":"3072:ZWAy59ntxT8VOpiLRaShUIw3jMKP1nagRMGU:MAycgOaShjabNagRxU","tlshash":"d6c3f105cfd7e61a0b0f9532a0af781f48618bdce4895ce448131d66a6a0fd1deea4fc","first_seen":"2026-04-02T15:01:52.130964Z","last_seen":"2026-04-20T13:12:05.787585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3865-6539-4561-b332-323162323038/2341_1.jpg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3865-6539-4561-b332-323162323038/2341_1.jpg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 47816\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-7a291901eb2ddfe4f96118599986b471-75b05140e236e981-01\r\nx-shard: sto5-shard0-default\r\netag: \"a64bb8cee376b7d5929ab45b7d336a6e\"\r\nlast-modified: Fri, 20 Mar 2026 08:28:24 GMT\r\nage: 941590\r\nx-tilda-origin: or-33\r\nx-id-shield: am3-hw-edge-gc11\r\nx-id: sto5-hw-edge-gc15\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:14+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":47816,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x667, components 3","md5":"a64bb8cee376b7d5929ab45b7d336a6e","sha1":"ac328aefa07f246192e4fdd840688c74f8acbb75","sha256":"c0a0ec05b32550fd749fcb11300d5cfe02923cfc7c7a1a6d0b3788cf2f2f9889","sha512":"e27642206c5ba0703446e445ca41456ffe89e7f7724b3bbc1419dd7d840604c3cf9008abdce520ff09d8a0c28a17c1cd74f446457eceb1304033020f86d29217","ssdeep":"768:ezUjiqzvR1Q3VIpsUmvHos6DTXLr848VPvuNRqBOWJU8R8oRXklmxPr5ybj1T3RK:ewnzZDp1mv/6HQWNQRR8qAsr5wj1I","tlshash":"8e23f29652757fe7c8a0733667e76b064bddbc2b349bc7271fa8263c8123284d8a1305","first_seen":"2026-04-02T15:01:52.152271Z","last_seen":"2026-04-20T13:12:05.869485Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geo.tildaapi.one/geo/country/","fqdn":"geo.tildaapi.one","domain":"tildaapi.one","tld":"one"},"ip":{"addr":"5.181.161.195","port":443,"asn":205282,"as":"Tilda Publishing Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:24.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildaapi.one","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Thu, 24 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:92:2F:4A:24:19:56:59:56:85:33:31:5F:67:64:5A:97:D2:B2:29","sha256":"F8:35:D3:56:36:29:EE:06:7E:99:A7:41:C9:9B:57:C4:4C:7A:09:22:4D:92:E2:28:DB:89:FB:11:8A:19:B8:64"}}},"request":{"raw":"GET /geo/country/ HTTP/1.1\r\nHost: geo.tildaapi.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://knowles-firm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 15:01:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nx-tilda-server: 8\r\nx-tilda-imprint: a9b1fb66-e01c-417f-b76e-5dec9920bfa0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"c2f3f489a00553e7a01d369c103c7251","sha1":"a0509b7780628bd9d9abc7eb8a2163477341053a","sha256":"23794d91c53ae875c8e247d72561e35d9d06ee07c70c9e0dbcc977a6d161504a","sha512":"0f446282a46dfefa3995e9e78443c907aca544aff495badfcb632b9df2457f8491babf852d8ebbe7ecc9392461b559e9e242960f13e624e79dbcfca44a6e5de1","ssdeep":"","tlshash":"c7100000000000000000c0000000000000000000003300000000000000000300000000","first_seen":"2023-03-10T09:11:58Z","last_seen":"2026-04-23T09:55:35.528142Z","times_seen":6918,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":108,"dns":27,"connect":28,"send":0,"wait":38,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"neo.tildacdn.com/js/tilda-fallback-1.0.min.js","fqdn":"neo.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"194.48.203.181","port":443,"asn":0,"as":"","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-fallback-1.0.min.js HTTP/1.1\r\nHost: neo.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Apr 2025 10:43:25 GMT\r\netag: W/\"6811fecd-77e\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncontent-encoding: gzip\r\nexpires: Thu, 09 Apr 2026 15:01:22 GMT\r\ncache-control: max-age=604800\r\nx-tilda-server: 16\r\nx-tilda-imprint: 68c8dce0-a007-4159-9882-cc8f01407b58\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1918,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1918), with no line terminators","md5":"8e582042c3e2c49a8f2c1aaf96c70da0","sha1":"d72ccdcc11d24594480a4ca8b699c029a8e0765c","sha256":"cdf65e26b905a653bce60df182886b032b606940391badb1e3a655f434ca446c","sha512":"b289159bb4cd83316ce8a9a9e0e53a845065454ac847e54fcddecbdb201ee84c0a4623c5288680e472e5c47bb4ef5852b399df43786a1e745f4165d99a6b0644","ssdeep":"","tlshash":"c741cc70a51fdc324e2393ab94bbf71734b901066d0bd1c22aa9dfdc9c62c8a5355b4e","first_seen":"2023-03-07T18:27:23Z","last_seen":"2026-04-23T09:04:55.478784Z","times_seen":4082,"resource_available":true,"data":null}},"time_used":2255,"timings":{"blocked":1088,"dns":27,"connect":56,"send":0,"wait":48,"receive":0,"ssl":1028},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://knowles-firm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14500\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 02:09:12 GMT\r\nexpires: Sun, 28 Mar 2027 02:09:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:13 GMT\r\ncontent-type: font/woff2\r\nage: 478330\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14500,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-04-23T11:05:28.012536Z","times_seen":2312,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":117,"dns":6,"connect":25,"send":0,"wait":15,"receive":1,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/js/tilda-menu-widgeticons-1.0.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /js/tilda-menu-widgeticons-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-0f950ca38886d3f9e720b717dd2fc3b3-1fb258fb2788ef4e-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 31 Oct 2025 10:29:26 GMT\r\netag: W/\"69048f86-1d52\"\r\nt-server: or-3\r\nx-id-shield: am3-hw-edge-gc38\r\nage: 2866990\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc20\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-28T10:38:41+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":7506,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7035)","md5":"3804032b042b651173e1514bb4fa53bb","sha1":"2675147fbf28f302a72abdb8477b184419a889a8","sha256":"e51f827e9fc321f9eebf9d035dc76b84cb6198276acca1141d1d638daf753b25","sha512":"9b9b0736203642c357de61da46c0a766f5fd14ef6818ff8203119469eee90847308d5b15f1e5f1ea48af07f50a117afc97cf5f1df489d398753e7012f459d007","ssdeep":"192:E2CUgSOK923NLf4neiCNBYG6mWUUZz7zr/jWOfHDCiLo:E2CcOg8Lgn7CUGd1UPzr/jrfHDJU","tlshash":"3bf1417c519e607703a61ca3d14b3345af7142fdfe068e804c29ee667c348eabde2655","first_seen":"2025-10-31T18:23:09.543007Z","last_seen":"2026-04-23T06:03:13.646466Z","times_seen":544,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":159,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3931-3033-4266-b532-303030613365/Group_6.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3931-3033-4266-b532-303030613365/Group_6.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-68eef3c184a476dca8e7f6efc07a9735-0bdab83b47dd1f66-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: PUT, OPTIONS, POST\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-31\r\nx-id-shield: fr5-hw-edge-gc40\r\nage: 941589\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc20\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:11+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":487,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e79850463eccfa9b13723037efc83cbd","sha1":"a4382dd5b4cffa955f1a8f94f6f96cefd1448870","sha256":"177f01e60da37a22feb4f5b237c4c3a950f42754f632ee2143b276dc6f24ae30","sha512":"faf78172f40c079d8f6f461508fa72cff5bf1ba0da037bf855ba1fd092aeb74d348aca65312bdafdb9bca2e754c7651603a9017e58d7c1d8dde432f644be0361","ssdeep":"","tlshash":"f5f0e284963d49542ca8834d977ab0b0226931a993ed4408ca812e33175849d2c7bcfe","first_seen":"2026-04-02T15:01:52.154649Z","last_seen":"2026-04-20T13:12:05.858005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":137,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3961-6330-4063-a239-626537316232/19493_1.jpg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3961-6330-4063-a239-626537316232/19493_1.jpg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/jpeg\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-13a4fbfd5010bfdf90343efbc6c93396-35ee0cbca32ce563-01\r\nx-shard: sto5-shard0-default\r\naccess-control-allow-methods: PUT, OPTIONS, POST\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-33\r\nx-id-shield: am3-hw-edge-gc11\r\nage: 941590\r\nx-id: sto5-hw-edge-gc15\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:14+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":40618,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x667, components 3","md5":"03cf29ddc55f5a515992a2ce1e939a93","sha1":"56fd7f9fb06f6479c3fa426914edb2da9ffa65bc","sha256":"d3436d84dd4be1fb75b9aced9f8510a9ba42263df0d46379e32432bf249b4a3d","sha512":"7174a42fb0a801c7644f543ca4538bf057dac6a8feb04a8bb964cd812e3dd905e6afddca09b77c15eed76e6ea8a514a5d86fcfa3c4969bee314b1b849b3ee659","ssdeep":"768:hlOLsAsZ7sYLHJ/KOwVX1pDH3HG1BBJs1n8J26peL3oUS568:hltPZI4hKrXm1jC8sq1","tlshash":"6403021552eae340c8cae1bb71de415016d2af3d0386f72283919724f9e82f2d995877","first_seen":"2026-04-02T15:01:52.155576Z","last_seen":"2026-04-20T13:12:05.841499Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dl.dropboxusercontent.com/scl/fi/boedf5ph2c86gzypqozl5/1471689_People_Business_1280x720-online-video-cutter.com-1.mp4?rlkey=305u2w9cxogx5k9tn4u696xbu\u0026st=p7ssyrfx\u0026dl=0#t=0.1","fqdn":"www.dl.dropboxusercontent.com","domain":"dropboxusercontent.com","tld":"com"},"ip":{"addr":"162.125.71.15","port":443,"asn":19679,"as":"DROPBOX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:24.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dl-au.dropboxusercontent.com","organization":"Dropbox, Inc"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Wed, 16 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"41:2A:CB:91:67:10:A1:EA:BC:B3:CD:67:A9:05:11:BF:99:18:03:C0","sha256":"17:E6:EC:FF:06:DD:41:CF:24:E9:C8:5F:D8:26:52:87:8E:7A:80:17:20:C5:1A:85:72:95:30:70:B2:E9:69:A2"}}},"request":{"raw":"GET /scl/fi/boedf5ph2c86gzypqozl5/1471689_People_Business_1280x720-online-video-cutter.com-1.mp4?rlkey=305u2w9cxogx5k9tn4u696xbu\u0026st=p7ssyrfx\u0026dl=0 HTTP/1.1\r\nHost: www.dl.dropboxusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: video/mp4\r\naccept-ranges: bytes\r\ncache-control: max-age=60\r\ncontent-disposition: inline; filename=\"1471689_People_Business_1280x720 (online-video-cutter.com) (1).mp4\"; filename*=UTF-8''1471689_People_Business_1280x720%20%28online-video-cutter.com%29%20%281%29.mp4\r\ncontent-range: bytes 0-1713191/1713192\r\ncontent-security-policy: report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-usercontent ; sandbox allow-forms allow-scripts allow-top-navigation allow-popups, form-action 'none' ; report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-noscript ; script-src 'none'\r\netag: 1773924800729038n\r\npragma: public\r\nset-cookie: uc_session=bC34Avxwv5I6k6hNfp0sg8FOienZhEnjSt7PRYDfQTO5EbOji3tSE9b9gPZWGc6Y; Domain=dropboxusercontent.com; HttpOnly; Path=/; SameSite=None; Secure\r\nx-content-type-options: nosniff\r\ndate: Thu, 02 Apr 2026 15:01:25 GMT\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-robots-tag: noindex, nofollow, noimageindex\r\ncontent-length: 1713192\r\nx-dropbox-response-origin: far_remote\r\nx-dropbox-request-id: 3893630c483941e0b5489ee469ce84c4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32768,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"2c6844e6986aa81dd3acb253f0b16f22","sha1":"5dfa0cfb00621b9ccbb674277f6b3919c7e70365","sha256":"305cfc51f5d2fb49daef465ece8dd914bab3a46beeac8c661905a7c81aec9a8c","sha512":"c5665d264a05c8744eee5ce16b775f6b55ec0a9ed2d90585aa0604a030f21f807bcae4c7394daf9da8af77c8cd2982d57a1d672fbe26132b2f43808b70937c13","ssdeep":"768:mzJ4Tnf7vxl6W4UCT2iW6dw+sBvm0SXJgqJuTJs:eezxlKU6dfsps4TJs","tlshash":"b7e2f1b683fb1862eac041b6d4f15ab2d27658846b4da7ccb4c980327d439f3ac70c29","first_seen":"2026-04-02T15:01:52.156455Z","last_seen":"2026-04-20T13:12:05.794394Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1736,"timings":{"blocked":206,"dns":85,"connect":6,"send":0,"wait":1097,"receive":225,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/css/tilda-forms-1.0.min.css","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /css/tilda-forms-1.0.min.css HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: text/css\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-771da8eaf84aff5445379e5c3388d59f-69a40b29abf8cc03-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 19 Mar 2026 10:58:49 GMT\r\netag: W/\"69bbd6e9-aa94\"\r\nx-tilda-front: fr-3\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-32\r\nx-id-shield: am3-hw-edge-gc38\r\nage: 1223618\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-19T11:08:13+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":43668,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13954)","md5":"f8ee2d5186b98d41d201142e05e9e699","sha1":"4e4dd6268d3e349aeee0d1b25bb36d96a5ece217","sha256":"bb0a9d9ab78d96817a39e50613f24fabcf9839faec0bf6940b38806f89339183","sha512":"3811109fd5c2e74dc1e03d04745cfd330bc92def0ecec5d99015bc1ffe1261427193d4455c6e434ef2ffe77cc1a840f7e53cc7c49dee36a1984ff1676bbcf55f","ssdeep":"384:3rr8bs0QLtyCXDaOoJ/8+WXWHdfPgAaQJL7K6NEjuBXR6Fhrx/2x/d8p:P8bs0QLttDaZWXadfPgAaQFG6z0","tlshash":"cd132233a874365cb8168e7c5ac5d2184528c4218f9349cfe2847838678e597d7ffbae","first_seen":"2026-03-20T01:03:25.296118Z","last_seen":"2026-04-12T21:03:45.93766Z","times_seen":143,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":53,"connect":9,"send":0,"wait":10,"receive":0,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/js/hammer.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /js/hammer.min.js HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-ac5c6e4edc4d229934b75810b132b8a2-cf3f339136b11ba4-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 18 Mar 2021 12:08:37 GMT\r\netag: W/\"605342c5-50f6\"\r\ntserver: qrwvtK1f\r\nx-id-shield: fr5-hw-edge-gc40\r\nage: 3457787\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc19\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-05T14:04:45+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20726,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20581)","md5":"deb120e036463f68a4ccf8c797bdcb2e","sha1":"9063ec8fbe51fd80a857758e24b267f041761f21","sha256":"090a7068a2209545279f858c6f41ff7ae42815e11c3d69463a2a2ea835282bd9","sha512":"cebe96684560909d47cfe1071c13ef34dab5d341e49963792a9823c767748af5658c601785fa786c1332e8aeb6f5862d44197bd6f65c7ccd3e037250d390bcfe","ssdeep":"384:mb5vj+l3jfaksTAAvNWUwLATFqACns+CSHDJDLrO:i5vj+5jfSTtrTFqACs+CSHtDm","tlshash":"6692c68633c7728192a720b5a0af020b61378c8694cd5968b4bdded57eb553c927bf3c","first_seen":"2023-03-07T13:01:41Z","last_seen":"2026-04-23T09:04:55.434205Z","times_seen":2653,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":151,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.net/tild6531-3563-4662-b932-646330346432/-/empty/__2.jpg","fqdn":"thb.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild6531-3563-4662-b932-646330346432/-/empty/__2.jpg HTTP/1.1\r\nHost: thb.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/png\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-4ab1504a3910be0f7714a6a353ae4bdb-a210a2bf7a0cbe74-01\r\nx-shard: sto5-shard0-default\r\nx-tilda-origin: or-32, or-32\r\nx-id-shield: fr5-hw-edge-gc39\r\nage: 941561\r\nx-id: sto5-hw-edge-gc18\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:13+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1001 x 380, 8-bit gray+alpha, non-interlaced","md5":"47204b261ead4b96d5afe49592a14d3a","sha1":"d81a2f7f3cd6788693da928b2f99027f2abb8212","sha256":"b21d84882195515c449c96380558ff6acaae5547b512ae7e0aa6fd7fbadd6ecb","sha512":"768f8b7e1af61b94cb6c0b55d34b610c3d26ebfc94ae30a7a961e23f44ea180fcd70722a3951f551cb524d72285b02160549efc74b4bbb353c6615cd27b203be","ssdeep":"","tlshash":"071197cb6bb00e77c023203ccc2b07a45632e9882402fc8b120984012cc3ce4deacac0","first_seen":"2026-04-02T15:01:52.158251Z","last_seen":"2026-04-20T13:12:05.797585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":900,"timings":{"blocked":886,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3237-6366-4265-a331-616534663638/77.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3237-6366-4265-a331-616534663638/77.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-0fe2e00956d5012b9884466001bdd966-d1aa21d11a267ad2-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\netag: W/\"bdd163b5bded1442e00cec31a33d3d2e\"\r\nlast-modified: Tue, 17 Mar 2026 10:24:50 GMT\r\nage: 941589\r\nx-tilda-origin: or-31\r\nx-id-shield: am3-hw-edge-gc38\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc16\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:12+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":385,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bdd163b5bded1442e00cec31a33d3d2e","sha1":"6c5986dd885b121a95d5f82fe8b2fd313eec7a95","sha256":"a18bffc8cd66a3f36795be732e1ccbf3e9312cbb9060cfc169f735d994b643df","sha512":"f9b06041e6dd4a394663e2392d302936a6964655aab493921057f829705fcdc20d3f929fabf106c1f00770975a8be887cbeed73e45ec954a3e1dc7afb2eaa04e","ssdeep":"","tlshash":"56e060a0929dd25e8e44c7080778b0804bb230ec0bcc010c9ac03ebbb8cd2c374a631c","first_seen":"2026-04-02T15:01:52.159054Z","last_seen":"2026-04-20T13:12:05.833771Z","times_seen":2,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":137,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3564-6665-4635-a431-313663303766/Frame_1618873170_1.jpg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3564-6665-4635-a431-313663303766/Frame_1618873170_1.jpg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25271\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-e480b6308315b473408aecaf9646406f-d089661a1aff3b6d-01\r\nx-shard: sto5-shard0-default\r\netag: \"6516a811f99bbe15b68b97b2ff5f2412\"\r\nlast-modified: Fri, 20 Mar 2026 11:05:08 GMT\r\nage: 941590\r\nx-tilda-origin: or-33\r\nx-id-shield: am3-hw-edge-gc38\r\nx-id: sto5-hw-edge-gc19\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:14+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":25271,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x766, components 3","md5":"6516a811f99bbe15b68b97b2ff5f2412","sha1":"263a960fbe0d6b946feefbabc87a3f007dfac2aa","sha256":"75d5ae4aca66183461e66fe72f0c89ba9f9158473d4a1bbc78f9fb1fb2383702","sha512":"a920048e998660a2b84ef5f6c956de5440875cae8d3cc2a6e16bf194275c1004041f18d211b5b160e4bebf099d2800d83d512cf5588d1e2cfcce4d49d60c5277","ssdeep":"768:DKUM6Pzbwznk295AK/IoIxKmLo8bOhLQb8w:9Pj2bA50mLtSSbt","tlshash":"ccb2aeae24132b5ae00f7736532a0f345b8b1c60569bc7748684bf216e1e77cf1a467e","first_seen":"2026-04-02T15:01:52.159867Z","last_seen":"2026-04-20T13:12:05.846576Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/css/tilda-grid-3.0.min.css","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /css/tilda-grid-3.0.min.css HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: text/css\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-c93a045f10f88cff61d94c0a499ff851-2f10011828074b72-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 21 Feb 2023 12:52:41 GMT\r\netag: W/\"63f4be99-11a2\"\r\ntserver: ZyFb5Nu0\r\nx-id-shield: am3-hw-edge-gc38\r\nage: 4217271\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc22\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-05T14:04:02+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4514,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4514), with no line terminators","md5":"ffd973cc9b002ba30ce57896976c7218","sha1":"9e330a8ea115d5b11ab8e04040546956f9923fb6","sha256":"0b5f664c528f466606c93195975f671fc46c3a9c10fee54426c2cd1cf89b1fec","sha512":"3979c8e6acfdffadc1a5534ad9b05270fdd43484340974e03d973e0c77d1b7b72492aa65fd6fd296cacf135b218bc07df0f5b5a583f0a25bbae674d58f3c6cb4","ssdeep":"96:ptBrBxFXC29lpgiikFFncB1XqRirWBQcoLlcY2e:pzVjS2BYzXwiXute","tlshash":"f89121230fad5a3ea555c45cc1d1a17e5a0fa30573eb1cc9fd12a8bba54ffc014b0a5a","first_seen":"2023-04-05T15:36:49Z","last_seen":"2026-04-23T09:04:55.479617Z","times_seen":3690,"resource_available":false,"data":null}},"time_used":1201,"timings":{"blocked":580,"dns":59,"connect":8,"send":0,"wait":8,"receive":0,"ssl":544},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/js/tilda-forms-1.0.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /js/tilda-forms-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: application/javascript\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-360a9414cadd730be7238b1759fcfa16-ea85c20fc274fcb9-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 11 Feb 2026 09:33:20 GMT\r\netag: W/\"698c4ce0-18885\"\r\nx-tilda-front: fr-3\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-33\r\nx-id-shield: fr5-hw-edge-gc40\r\nage: 4339201\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc22\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-11T09:41:52+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":100485,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32666)","md5":"309b9fe33d2272074564f27326013501","sha1":"3b68b5c9c5908c5919c2de380702848932f19c65","sha256":"05d35efb43e25de655d2f565a41e2e6c608ea80bfa97de519087566e4631df96","sha512":"217b1959500d33b916524db3fe8233c01523bad57e46195a308d8adc6662c0c54ee76f7ec17346e509add160a4c5ab9cd3e728edf8615a2a5caac98ca88f6186","ssdeep":"1536:gtHtx2bbV453a+IGcnzN0RZqPvdw9ocKjVLnK:Otz53a+e6RZqaHKjVLK","tlshash":"a6a318a9b1393071169747b991ef174a77312128b906c440d968d8d63facccbee23fe9","first_seen":"2026-02-11T17:08:11.816515Z","last_seen":"2026-04-23T08:07:41.725938Z","times_seen":487,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3137-3132-4230-b138-623366393564/Frame_2.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3137-3132-4230-b138-623366393564/Frame_2.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-ef077b0473d3073106ba226a27b54c9f-cbc619d728f799e5-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\netag: W/\"63dc68bc8ea02848133ee21a8b8c3c5e\"\r\nlast-modified: Tue, 17 Mar 2026 13:01:49 GMT\r\nage: 941589\r\nx-tilda-origin: or-33\r\nx-id-shield: am3-hw-edge-gc38\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc17\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:09+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8385,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63dc68bc8ea02848133ee21a8b8c3c5e","sha1":"1264162eeaeb3301bf60b66a2b3b4302cab36006","sha256":"881c4d7c4f5dd33dcdae8c648d851ec07521df1eeb1b779afc50fb6a4669d557","sha512":"3a70e203dfdffe8fca81af87f7302c2508ca82d178d62b4e64ecb3111e8620452371ed3bf95af148e1bc7d9d12eecf50a9bc463a13fe574b052b9a70c3f4d415","ssdeep":"192:KM7JtwXOr5hOzUF+l9dTseTuVIzDQ1b2fmz:z7JtwoOUcl9ZTtnEis","tlshash":"a302c78db77053ecf491aaf4e691643c368aadeabe01c535c7be0d1e649541c8835ce3","first_seen":"2026-04-02T15:01:52.161718Z","last_seen":"2026-04-20T13:12:05.83905Z","times_seen":2,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":146,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild6537-6333-4338-b038-353136656434/photo.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild6537-6333-4338-b038-353136656434/photo.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-e349962f2082e5d65979b7dc0d91def6-772cf664501154e3-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\netag: W/\"7c681d5837c18fdd1fa4f152bc5c2c89\"\r\nlast-modified: Fri, 20 Mar 2026 10:17:08 GMT\r\nage: 941589\r\nx-tilda-origin: or-33\r\nx-id-shield: fr5-hw-edge-gc40\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc17\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:12+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3481,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7c681d5837c18fdd1fa4f152bc5c2c89","sha1":"955c68419e1c04a0846efd7ac97f92d3ff5830cc","sha256":"1abd0d6f3e4c9cb6fc2d1ce3aecf4fcca9f57d7fa7a1c83a311b7db8f788502e","sha512":"60cbb41ec3465e0ccb7737235d219877daac25c838b1311cf7b6c7962900c895e7b48507999f4c54f2b9b069f65a4ee10e186ca9c94f684e648e447c8838163e","ssdeep":"","tlshash":"577131d6633973f86980f3c355349c743c52aefbba274f5e996069a4199281c0ca4ae3","first_seen":"2026-04-02T15:01:52.144343Z","last_seen":"2026-04-20T13:12:05.802561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":157,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3735-3532-4631-b435-303666336561/_2.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3735-3532-4631-b435-303666336561/_2.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-138d6683f296485c63b75a45e5b35d52-a08ab966e79e863f-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\netag: W/\"21c4fe4fab51cef30fd1e26e22aa28ad\"\r\nlast-modified: Thu, 19 Mar 2026 11:00:17 GMT\r\nage: 941561\r\nx-tilda-origin: or-33\r\nx-id-shield: fr5-hw-edge-gc39\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:13+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":15455,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"21c4fe4fab51cef30fd1e26e22aa28ad","sha1":"7bd63983a6118484697e13308417deeed9cbd84c","sha256":"e668a8ef31ff1feaca7f89d941d1503e41328767681fff8bf14879df51a9577c","sha512":"518ab93867a40ef417534f326fc4907db9ee73a4e7572fcf06915a08e10e90a12fc7de47b8e1650f3ca6288c90952037299b356faf4e53b13af1acacba657562","ssdeep":"192:Fkdd161Nfh6ujw5SihJuzRZPLx3UbjAXQlTojpA26vqf81UbWv7SEGl:c10wtLEvP1QJ6pA26Sg3v7S5","tlshash":"7d6276fdab6958fbda54d7deee00106821a680ffe5ca8b15c15d9f2e347118ccc4e982","first_seen":"2026-04-02T15:01:52.139222Z","last_seen":"2026-04-20T13:12:05.803764Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/js/tilda-phone-mask-1.1.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:23.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /js/tilda-phone-mask-1.1.min.js HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:23 GMT\r\ncontent-type: application/javascript\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-47dc6dc62e88b9c981da943a6590a8e7-03947b32035eab23-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Wed, 01 Apr 2026 15:23:32 GMT\r\netag: W/\"69cd3874-97f8\"\r\nx-tilda-front: fr-3\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\ncontent-encoding: gzip\r\nx-tilda-origin: or-32\r\nx-id-shield: am3-hw-edge-gc11\r\nage: 27473\r\nx-id: sto5-hw-edge-gc14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-02T07:23:36+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":38904,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38399)","md5":"71744625654361277624d01d96c83363","sha1":"7fdd072709528876b3dbf05a98a5dd9427f05145","sha256":"3d4249cb3d33c9bdd1350b4840be141c89862254727428017261b4322b9859e4","sha512":"6add75a1e07b0d77efe4412a1a37661496ace478bdc5a7a7c80d5c348145d022edbc51469a4413d77b5b29efb52a828359031b65cb2170a6f48aff2d19cc0aa5","ssdeep":"768:TeJvHRzbRTQaj+NCQONsloYW66FtsVqyG4TVp97bgFByX7onD3N93SLyo637E5xw:fNusl/G4lCWyhY7gCUF9FB","tlshash":"220370509a2f012dd4668f6c40a57349c23db6ecbfd181cb8acdedea0055eb2e725e71","first_seen":"2026-04-02T12:44:04.49659Z","last_seen":"2026-04-23T08:07:41.726676Z","times_seen":113,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/css/tilda-menu-widgeticons-1.0.min.css","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /css/tilda-menu-widgeticons-1.0.min.css HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: text/css\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-fedb0752d5b9759e0c77f258fc2df278-69938eefbb5e6088-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 24 Oct 2025 15:17:02 GMT\r\netag: W/\"68fb986e-e61\"\r\nt-server: or-3\r\nx-id-shield: am3-hw-edge-gc38\r\nage: 3219545\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc16\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-24T09:49:58+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3681,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3681), with no line terminators","md5":"92e84fb075f40b2ebd7276f7c04b1d99","sha1":"f49f73096ed21d9776f695c641146a507821a34d","sha256":"cd9dd605775142671ad91879c918d4144214edce4ad8e51f4bf565c637b18b1b","sha512":"8459605b6a2f136025a420f4ebb9068dfe7019553f36454ab22ccba01832f7b7fdf801a7ea342af095cddc6879fa7a86a6922d73ef6d0202e39f4e4e09e2db12","ssdeep":"","tlshash":"6571493a4183e13aeb135c01c54224e73b1865dedf5acde4dc40ff26ee7a2c266b2648","first_seen":"2025-10-27T20:42:46.587511Z","last_seen":"2026-04-23T06:03:13.657689Z","times_seen":547,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":231,"dns":59,"connect":10,"send":0,"wait":12,"receive":0,"ssl":177},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild6432-6361-4266-a666-626430633938/photo.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild6432-6361-4266-a666-626430633938/photo.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-cd1fd981e0505bf7fbb2dae884738d24-d908adb504156e98-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\netag: W/\"7c681d5837c18fdd1fa4f152bc5c2c89\"\r\nlast-modified: Fri, 20 Mar 2026 08:29:45 GMT\r\nage: 941589\r\nx-tilda-origin: or-32\r\nx-id-shield: am3-hw-edge-gc11\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc17\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:09+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3481,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7c681d5837c18fdd1fa4f152bc5c2c89","sha1":"955c68419e1c04a0846efd7ac97f92d3ff5830cc","sha256":"1abd0d6f3e4c9cb6fc2d1ce3aecf4fcca9f57d7fa7a1c83a311b7db8f788502e","sha512":"60cbb41ec3465e0ccb7737235d219877daac25c838b1311cf7b6c7962900c895e7b48507999f4c54f2b9b069f65a4ee10e186ca9c94f684e648e447c8838163e","ssdeep":"","tlshash":"577131d6633973f86980f3c355349c743c52aefbba274f5e996069a4199281c0ca4ae3","first_seen":"2026-04-02T15:01:52.144343Z","last_seen":"2026-04-20T13:12:05.802561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":147,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.net/tild6266-3962-4537-b339-306639666661/-/empty/__5.jpg","fqdn":"thb.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild6266-3962-4537-b339-306639666661/-/empty/__5.jpg HTTP/1.1\r\nHost: thb.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/png\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-51f98e6ea538fd6766f5e574b57f1263-8980d5b06f232a49-01\r\nx-shard: sto5-shard0-default\r\nx-tilda-origin: or-33, or-33\r\nx-id-shield: am3-hw-edge-gc38\r\nage: 941561\r\nx-id: sto5-hw-edge-gc19\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:13+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1001 x 380, 8-bit gray+alpha, non-interlaced","md5":"47204b261ead4b96d5afe49592a14d3a","sha1":"d81a2f7f3cd6788693da928b2f99027f2abb8212","sha256":"b21d84882195515c449c96380558ff6acaae5547b512ae7e0aa6fd7fbadd6ecb","sha512":"768f8b7e1af61b94cb6c0b55d34b610c3d26ebfc94ae30a7a961e23f44ea180fcd70722a3951f551cb524d72285b02160549efc74b4bbb353c6615cd27b203be","ssdeep":"","tlshash":"071197cb6bb00e77c023203ccc2b07a45632e9882402fc8b120984012cc3ce4deacac0","first_seen":"2026-04-02T15:01:52.158251Z","last_seen":"2026-04-20T13:12:05.797585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":896,"timings":{"blocked":880,"dns":0,"connect":8,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3363-6235-4634-b132-363366656264/Frame_3_2.jpg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3363-6235-4634-b132-363366656264/Frame_3_2.jpg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 121233\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-62baa639b94faa246dedc69911692255-d6f05d6938eca325-01\r\nx-shard: sto5-shard0-default\r\netag: \"0c5e1800cd62856ab015024c84d3e722\"\r\nlast-modified: Thu, 19 Mar 2026 08:33:10 GMT\r\nage: 941590\r\nx-tilda-origin: or-31\r\nx-id-shield: am3-hw-edge-gc11\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:10+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121233,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 748x1119, components 3","md5":"0c5e1800cd62856ab015024c84d3e722","sha1":"2bac411784132b9f9eada640b612ef3998759167","sha256":"82b5dfd4e0bd6389e8d819e48b9b74bed5762ddd160478362b971ab0a605e26c","sha512":"5fedb45a30752b87c6fd9968d6fdcad00c790f16e8c76ab45750cb730554f2a44240a38b8af17fd2e29f7fd014a0d0f48fd53b0684728422d43638dac60e6143","ssdeep":"3072:ZWAy59ntxT8VOpiLRaShUIw3jMKP1nagRMGU:MAycgOaShjabNagRxU","tlshash":"d6c3f105cfd7e61a0b0f9532a0af781f48618bdce4895ce448131d66a6a0fd1deea4fc","first_seen":"2026-04-02T15:01:52.130964Z","last_seen":"2026-04-20T13:12:05.787585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dl.dropboxusercontent.com/scl/fi/62xfostuekyrdxwbwbn3i/freepik_create-a-video_seedance_720p_4-3_24fps_10605-1.mp4?rlkey=td9v1ix1n2rk2jf57yfnbtmi9\u0026st=qb3ibswb\u0026dl=0#t=0.1","fqdn":"www.dl.dropboxusercontent.com","domain":"dropboxusercontent.com","tld":"com"},"ip":{"addr":"162.125.71.15","port":443,"asn":19679,"as":"DROPBOX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:24.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dl-au.dropboxusercontent.com","organization":"Dropbox, Inc"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Wed, 16 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"41:2A:CB:91:67:10:A1:EA:BC:B3:CD:67:A9:05:11:BF:99:18:03:C0","sha256":"17:E6:EC:FF:06:DD:41:CF:24:E9:C8:5F:D8:26:52:87:8E:7A:80:17:20:C5:1A:85:72:95:30:70:B2:E9:69:A2"}}},"request":{"raw":"GET /scl/fi/62xfostuekyrdxwbwbn3i/freepik_create-a-video_seedance_720p_4-3_24fps_10605-1.mp4?rlkey=td9v1ix1n2rk2jf57yfnbtmi9\u0026st=qb3ibswb\u0026dl=0 HTTP/1.1\r\nHost: www.dl.dropboxusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: video/mp4\r\naccept-ranges: bytes\r\ncache-control: max-age=60\r\ncontent-disposition: inline; filename=\"freepik_create-a-video_seedance_720p_4-3_24fps_10605 (1).mp4\"; filename*=UTF-8''freepik_create-a-video_seedance_720p_4-3_24fps_10605%20%281%29.mp4\r\ncontent-range: bytes 0-1071062/1071063\r\ncontent-security-policy: report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-usercontent ; sandbox allow-forms allow-scripts allow-top-navigation allow-popups, form-action 'none' ; report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-noscript ; script-src 'none'\r\netag: 1773921051061721n\r\npragma: public\r\nset-cookie: uc_session=z9VgphiourAfp9Tnzaoz6ME7gTZO8kPx7nfTgWyibplxiuQj1OWAVr3h7pGeZQeo; Domain=dropboxusercontent.com; HttpOnly; Path=/; SameSite=None; Secure\r\nx-content-type-options: nosniff\r\ndate: Thu, 02 Apr 2026 15:01:24 GMT\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-robots-tag: noindex, nofollow, noimageindex\r\ncontent-length: 1071063\r\nx-dropbox-response-origin: far_remote\r\nx-dropbox-request-id: 36308586d9754a399c604dd969ce84c4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81920,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"2994d3722305c5fa38bf5a33eaf39b7b","sha1":"15adb1e6835721181f5700d844e4108d50f4f047","sha256":"764b4d6e9b9890e7901ec68de7188d8fc0bc41ebd05906c1ed0204b35b222a7f","sha512":"34799659fd6b49136480ca34ee90acdfe337376419a9beb8a1f6d73cba95a5bc445139f1b9705da948b324573beecd87ef1d561d26de061bf8686abe64dcd118","ssdeep":"1536:+DFHbmCE5fB3LOcXe+VR2ohAd50v/b0Ig8L/irEAoV3gdsNMmemZ0+Ie7IMSwbEF:60FCvyT0b8LvARev0FwIBYw","tlshash":"ce8301321ac7c262d88997bfb5e328cd0b116b39c52a62903b43fd4d2d8c51edf66d16","first_seen":"2026-04-02T15:01:52.164443Z","last_seen":"2026-04-20T13:12:05.862551Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1709,"timings":{"blocked":180,"dns":93,"connect":6,"send":0,"wait":964,"receive":371,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3431-6638-4738-b932-623534306231/Group_2.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:24.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3431-6638-4738-b932-623534306231/Group_2.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:24 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-b6c85eb10f921074c3b2c66b267c6732-c9b5082630dcf57a-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: PUT, OPTIONS, POST\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-33\r\nx-id-shield: fr5-hw-edge-gc39\r\nage: 941592\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc21\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:32+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1646,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e4037050252bfca73c5e162b11b6123","sha1":"16fdfd2587658e982e0a58b7702eb55ca4a32e65","sha256":"55f8c5dedb2178faa77d1c3eed09f88cda720138170f8365e4686a4ea318648c","sha512":"2a3bcbf73fba61612818348093b45cc8de440c302a633a83763627512c4606cfd89de1823d56cb11e29876ddbf5da8ae9c14eed0a0e11391e373f892d9a091de","ssdeep":"","tlshash":"3b318691e5bb43eafc6e43f859357094ce3a90e5f3cd52b4c2704eb96b130c19248890","first_seen":"2026-04-02T15:01:52.165365Z","last_seen":"2026-04-20T13:12:05.859602Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/js/tilda-stat-1.0.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:25.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /js/tilda-stat-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-e1e7a5cec705b89386f8575d3117bcf0-408bc61605e3c46d-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 05 May 2025 10:35:52 GMT\r\netag: W/\"68189488-25da\"\r\nt-server: or-1\r\nx-id-shield: am3-hw-edge-gc38\r\nage: 3412160\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc15\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-05T14:04:29+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":9690,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9689)","md5":"be35049cb22a1f9a118c4742dc739195","sha1":"fff4bb02119b777cc0f265efa51ab1e0aa87330c","sha256":"30299b6ef1aff24831fb728ee4edaf4fc02c8c7dd0806bfa90f3e3ea7fe2bb80","sha512":"628a8be11e89820691e629ad562a23a7921b2227bf6029f80b6da09b5e361069585f8aae61ef2de36a4daaa5c8cc7544351f4df513201e10b88064ac39eba690","ssdeep":"192:2gQsCK6tC4XHHD4V7Rqy6n1sQpvbvQnJ9RSRQMjieIJBIgd5ZNOCRnZ:2DsCK6Q4klssQpvLQnJ9RSVjxIJBI+dj","tlshash":"6e12c6ad2969213106f612ab63bfb78530339121b8039480215ed5543eb8fa79f1ffcb","first_seen":"2025-05-06T10:57:23.743997Z","last_seen":"2026-04-23T09:04:55.477976Z","times_seen":3210,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3639-3738-4639-a333-326137323165/2148986612.jpg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3639-3738-4639-a333-326137323165/2148986612.jpg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 227693\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-c83116b7442218b69e0a96c2c8bfead9-7d5e58ab59c9cbc8-01\r\nx-shard: sto5-shard0-default\r\netag: \"fd8b4c48d832a6238f6f1c974dcc04b8\"\r\nlast-modified: Tue, 17 Mar 2026 13:13:57 GMT\r\nage: 941590\r\nx-tilda-origin: or-33\r\nx-id-shield: am3-hw-edge-gc38\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:10+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":227693,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x667, components 3","md5":"fd8b4c48d832a6238f6f1c974dcc04b8","sha1":"a8ec9aaa079f3a5dc2280f2894a5ecd171b7e6ce","sha256":"73fcc0576d8d9d55e88ec7e5ad039e835cd7705ea96d457d7fef0cc32dc9a363","sha512":"4b70b62c56f1c7831b4f32f9cda3780af0efd770cac73dc3894029db68b0b0aebe939352823644315c8ad9e6a067ef2ab4f59bad5ed511f12c21e027e69c92b6","ssdeep":"6144:p2myvrRYtM+PfVCuMmgrDUotx0C1phDjngw:p2myWtM0fVHMHAExpDjngw","tlshash":"3f24129cfefaa108ca4efb3766136b9751bc11318e3a5c4b1190eb40c96779acd2cd52","first_seen":"2026-04-02T15:01:52.167003Z","last_seen":"2026-04-20T13:12:05.850332Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild6662-3865-4938-b763-363539376633/Frame_3_2.jpg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild6662-3865-4938-b763-363539376633/Frame_3_2.jpg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 121233\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-ce9f660ed65f4ca6f1392896296854ea-d37cda890e5c8900-01\r\nx-shard: sto5-shard0-default\r\netag: \"0c5e1800cd62856ab015024c84d3e722\"\r\nlast-modified: Thu, 19 Mar 2026 12:06:22 GMT\r\nage: 941590\r\nx-tilda-origin: or-32\r\nx-id-shield: am3-hw-edge-gc11\r\nx-id: sto5-hw-edge-gc22\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:14+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":121233,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 748x1119, components 3","md5":"0c5e1800cd62856ab015024c84d3e722","sha1":"2bac411784132b9f9eada640b612ef3998759167","sha256":"82b5dfd4e0bd6389e8d819e48b9b74bed5762ddd160478362b971ab0a605e26c","sha512":"5fedb45a30752b87c6fd9968d6fdcad00c790f16e8c76ab45750cb730554f2a44240a38b8af17fd2e29f7fd014a0d0f48fd53b0684728422d43638dac60e6143","ssdeep":"3072:ZWAy59ntxT8VOpiLRaShUIw3jMKP1nagRMGU:MAycgOaShjabNagRxU","tlshash":"d6c3f105cfd7e61a0b0f9532a0af781f48618bdce4895ce448131d66a6a0fd1deea4fc","first_seen":"2026-04-02T15:01:52.130964Z","last_seen":"2026-04-20T13:12:05.787585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild6562-6262-4535-b136-613033373434/Frame_1618873172.jpg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild6562-6262-4535-b136-613033373434/Frame_1618873172.jpg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/jpeg\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-d3f4667633f3a274a24b1abe48a218f6-a8844ab8dab640b5-01\r\nx-shard: sto5-shard0-default\r\naccess-control-allow-methods: PUT, OPTIONS, POST\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-31\r\nx-id-shield: am3-hw-edge-gc11\r\nage: 941590\r\nx-id: sto5-hw-edge-gc18\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:14+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":45000,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x766, components 3","md5":"86ef5f0049601aa9bafc1a6f578f24e4","sha1":"4348d90d08a536e65c9bcf2d64903cc6561b0a5c","sha256":"cf4b6886e2a50c1b8adfdf554a9b4c6aac78d42ed8133ac9cbbab597ed8f777f","sha512":"4354183eeba4ca804f0014d8e537f233070dcb976842a98d1b94a5265a75da34aae888899c28a506e1c1e889ce7c349b108761a6937b106c53b04e09fc1a64af","ssdeep":"768:OWJyL+Bj1k7WsDi8WeNxKYkN7VFSo8KeDmgyoGaNA73hm09YFX6fyOkRAI:BJtoDr6N7VFSosDxyojNZ6Yt6f41","tlshash":"3a1302b4edc9b91ceaaf6b76145f41f0f2d1e1fc6d1b478921a25e40e2e44c4ac91e13","first_seen":"2026-04-02T15:01:52.168008Z","last_seen":"2026-04-20T13:12:05.840591Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.net/tild3934-3766-4130-b839-626534396338/-/resize/20x/2151202465_1.jpg","fqdn":"thb.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3934-3766-4130-b839-626534396338/-/resize/20x/2151202465_1.jpg HTTP/1.1\r\nHost: thb.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/jpeg\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-6bb482715cc0a0771aaeae67b492566c-6ab6f08a8725d4a8-01\r\nx-shard: sto5-shard0-default\r\nx-tilda-origin: or-33, or-33\r\nx-id-shield: fr5-hw-edge-gc40\r\nage: 940037\r\nx-id: sto5-hw-edge-gc15\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:14+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":949,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x11, components 3","md5":"f2ca59017a54d81e524709dd258c7062","sha1":"bdf999382b9d64cddfca1634651a07d19c808072","sha256":"01560ff829460049d37d81875c601ec2516106474fc968cfe90aa0e1c02ae8d8","sha512":"ed22277e03f8e3e325b6d66aeb754159436a17f76bce1c70a2d5a6db521a81992f0a04cf868bab35ecd2b872d0060c48c5e1b0a67d00ad37c9687be5f6b98de5","ssdeep":"","tlshash":"4611121b6b134b20df2395bd95273767f19ac8813a2477371a214329cd90cf5cd9c98c","first_seen":"2026-04-02T15:01:52.183042Z","last_seen":"2026-04-20T13:12:05.855745Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dl.dropboxusercontent.com/scl/fi/84fsq5cj81dzibgvbhmcr/GettyImages-1195900726-1.mp4?rlkey=ycczdgi6e5vhbys56dp3lvm03\u0026st=qor5gz5x\u0026dl=0#t=0.1","fqdn":"www.dl.dropboxusercontent.com","domain":"dropboxusercontent.com","tld":"com"},"ip":{"addr":"162.125.71.15","port":443,"asn":19679,"as":"DROPBOX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:24.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dl-au.dropboxusercontent.com","organization":"Dropbox, Inc"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Wed, 16 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"41:2A:CB:91:67:10:A1:EA:BC:B3:CD:67:A9:05:11:BF:99:18:03:C0","sha256":"17:E6:EC:FF:06:DD:41:CF:24:E9:C8:5F:D8:26:52:87:8E:7A:80:17:20:C5:1A:85:72:95:30:70:B2:E9:69:A2"}}},"request":{"raw":"GET /scl/fi/84fsq5cj81dzibgvbhmcr/GettyImages-1195900726-1.mp4?rlkey=ycczdgi6e5vhbys56dp3lvm03\u0026st=qor5gz5x\u0026dl=0 HTTP/1.1\r\nHost: www.dl.dropboxusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: video/mp4\r\naccept-ranges: bytes\r\ncache-control: max-age=60\r\ncontent-disposition: inline; filename=\"GettyImages-1195900726 (1).mp4\"; filename*=UTF-8''GettyImages-1195900726%20%281%29.mp4\r\ncontent-range: bytes 0-949379/949380\r\ncontent-security-policy: report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-usercontent ; sandbox allow-forms allow-scripts allow-top-navigation allow-popups, form-action 'none' ; report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-noscript ; script-src 'none'\r\netag: 1773219719614278n\r\npragma: public\r\nset-cookie: uc_session=xV2dyIfzr3JaeehE9w9SJwKkP8ulsxwntTuA8LTVeupxIT20NXthPuS8EsXy0zZQ; Domain=dropboxusercontent.com; HttpOnly; Path=/; SameSite=None; Secure\r\nx-content-type-options: nosniff\r\ndate: Thu, 02 Apr 2026 15:01:25 GMT\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-robots-tag: noindex, nofollow, noimageindex\r\ncontent-length: 949380\r\nx-dropbox-response-origin: far_remote\r\nx-dropbox-request-id: df77f3f97b8a4c69988e29e869ce84c4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32768,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"5215cc48a3865f76e4692ecfccc217f3","sha1":"4aef3f6dd294b881567c5910dc426f200dec7f2d","sha256":"a52bbf50182cffffac74d1f7bacc3c3e6c9d9f2d54977051df8c1d5715faffcc","sha512":"b61cca47e641b1cbd2901c321680207ad4a0d928afc76a1a2c280030936721588e9d9b06bae2de44db47436996f99a2a272b9302144d3857982f1d21a4cd2ab9","ssdeep":"768:xyQC8tyCSGBDbdo1OM4HSCr0kdCAU134jo:xa4yCjJ0wSCr0Aw348","tlshash":"e7e2d0e107ff852ce11ce2b034e7172fa6153ee54158838841ded6fa34eb2657e9a98c","first_seen":"2026-04-02T15:01:52.138034Z","last_seen":"2026-04-20T13:12:05.807737Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1521,"timings":{"blocked":211,"dns":95,"connect":1,"send":0,"wait":822,"receive":271,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dl.dropboxusercontent.com/scl/fi/6snueq2tjafl1ys7w5ttz/0_Lawyer_Advocate_1280x720-online-video-cutter.com-1.mp4?rlkey=n79saaetwehi4fr7pyk1yd6s7\u0026st=i4cps0hf\u0026dl=0#t=0.1","fqdn":"www.dl.dropboxusercontent.com","domain":"dropboxusercontent.com","tld":"com"},"ip":{"addr":"162.125.71.15","port":443,"asn":19679,"as":"DROPBOX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:24.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dl-au.dropboxusercontent.com","organization":"Dropbox, Inc"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Wed, 16 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"41:2A:CB:91:67:10:A1:EA:BC:B3:CD:67:A9:05:11:BF:99:18:03:C0","sha256":"17:E6:EC:FF:06:DD:41:CF:24:E9:C8:5F:D8:26:52:87:8E:7A:80:17:20:C5:1A:85:72:95:30:70:B2:E9:69:A2"}}},"request":{"raw":"GET /scl/fi/6snueq2tjafl1ys7w5ttz/0_Lawyer_Advocate_1280x720-online-video-cutter.com-1.mp4?rlkey=n79saaetwehi4fr7pyk1yd6s7\u0026st=i4cps0hf\u0026dl=0 HTTP/1.1\r\nHost: www.dl.dropboxusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: video/mp4\r\naccept-ranges: bytes\r\ncache-control: max-age=60\r\ncontent-disposition: inline; filename=\"0_Lawyer_Advocate_1280x720 (online-video-cutter.com) (1).mp4\"; filename*=UTF-8''0_Lawyer_Advocate_1280x720%20%28online-video-cutter.com%29%20%281%29.mp4\r\ncontent-range: bytes 0-1125136/1125137\r\ncontent-security-policy: report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-usercontent ; sandbox allow-forms allow-scripts allow-top-navigation allow-popups, form-action 'none' ; report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-noscript ; script-src 'none'\r\netag: 1773948132604019n\r\npragma: public\r\nset-cookie: uc_session=iIL87cxdhGVZvyAX8pqbXCLAKKa59hQPX2KGy2YAztaStop1Tx8RIQ0LjJ4kKpPa; Domain=dropboxusercontent.com; HttpOnly; Path=/; SameSite=None; Secure\r\nx-content-type-options: nosniff\r\ndate: Thu, 02 Apr 2026 15:01:25 GMT\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-robots-tag: noindex, nofollow, noimageindex\r\ncontent-length: 1125137\r\nx-dropbox-response-origin: far_remote\r\nx-dropbox-request-id: 8249844f22f646459e91670469ce84c4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":32768,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"d9ff10937fbaf737ea75789401f48ac2","sha1":"7014cab12033c9e0c6dfaa3320276c1fc47bafcf","sha256":"9f20b4187b1d836991229813a3bc2ac2f702695e096ab62fc14fb7db7f8ae329","sha512":"6e83566ba3231680587a88022f2bb5ca021e0f3546d5c9e80b4fee627204c3bee1fe45fb002343780f13ca6a2df29179b3786716db21ffa2cfb4b6632be48b2b","ssdeep":"768:FW1YvtXthap+miGEwt6ne7TTRWviyjJrGL79Fg/h17wqC0:c1YFdhs+zwt6nghWKyFqlK/hlC0","tlshash":"b4e2f1e562798a45e72103fbfc6a35e5267832c1d06407db638cba6d58078a098f47fe","first_seen":"2026-04-02T15:01:52.184185Z","last_seen":"2026-04-20T13:12:05.829627Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1818,"timings":{"blocked":201,"dns":89,"connect":6,"send":0,"wait":1173,"receive":234,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/js/tilda-menu-1.0.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /js/tilda-menu-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-852edd1de67cb4621c203e509e5ea79a-5e249ba80d980678-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 04 Dec 2025 10:22:16 GMT\r\netag: W/\"693160d8-2c96\"\r\nt-server: or-1\r\nx-id-shield: fr5-hw-edge-gc40\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc16\r\nage: 5111075\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-02T11:16:46+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11414,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11413)","md5":"d7d97ec4bd9572356bb590a9dc253335","sha1":"aa56fe491603dc246f31334787e5f3e195b9296c","sha256":"ec950b2112e31f39f0be799da2b0ed68dc816fa78c24bbeccc3b858111743fb3","sha512":"6c90bf5f4880f5cd97cb170d6431ad360ea429ed6961a617c39007a94c7c4901350cacff4b3a219b6a1fc622383a8a9cfaf165a45e22592ed88bd1eceb6ac1ff","ssdeep":"192:FiFYrFy3BLGQB5x5q69271JFn8QmYZTRobaxlLKA5UuL94uX+8/lyCgBfjnCh5Rk:yYrGLJBH39g1JF8qZTRob0lLKa2uX++U","tlshash":"c532c9f97101313749cf28faa0cfaa867674915da90b88404578d8d16dbcccb36e7af9","first_seen":"2025-12-04T12:20:08.939619Z","last_seen":"2026-04-22T23:24:56.915746Z","times_seen":673,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":161,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://knowles-firm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 02 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 23730\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-04-23T11:14:28.391175Z","times_seen":18014,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":32,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/ws/project23399333/tilda-blocks-page127276683.min.css?t=1774514678","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /ws/project23399333/tilda-blocks-page127276683.min.css?t=1774514678 HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: text/css\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-cf3b7a12b6854c5d6759b55a98774320-ffd0fb6bf7086162-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 08:44:40 GMT\r\nx-host: ws.tildacdn.com\r\nx-tilda-origin: or-33\r\nx-id-shield: am3-hw-edge-gc11\r\nage: 627185\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc22\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:08+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":46857,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (46857), with no line terminators","md5":"48823594a53cbfdfa330283eeb3d5bf5","sha1":"5af02bf53ad0901725be60027a0ca70abb833092","sha256":"146471889893134d4df71d2011e8030dd94781bf7fee383e4d6e56a273b69ac7","sha512":"cd5580c72d96361532ccdd68a20de578804451ac5af75831d2d55185536538203b174f921dd79f36ee84ef14a271d670f9dd941924202b1e7c3871524e555f66","ssdeep":"768:Tjzprb2TOA8IATwZmki2JRx7hMiB8b/0bwsDXQqRb6nIJndV1sKV98g:DAVpmqx","tlshash":"0623d737bb94322cb52b862ea6e7ba1cb02cc543de530ddde5185b38d3a728517163c9","first_seen":"2026-04-02T15:01:52.185935Z","last_seen":"2026-04-02T15:01:52.185935Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1968,"timings":{"blocked":961,"dns":55,"connect":10,"send":0,"wait":14,"receive":0,"ssl":921},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/js/jquery-1.10.2.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /js/jquery-1.10.2.min.js HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-9c4ef835da2063945888ed1ddd57edf7-659826a037087e8e-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 18 Mar 2021 12:08:37 GMT\r\netag: W/\"605342c5-16b88\"\r\ntserver: 5GiJX0mZ\r\nx-id-shield: am3-hw-edge-gc38\r\nage: 2502269\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc18\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-05T14:04:22+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":93064,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32072)","md5":"bdce12c949e78d570c8d44e9c2b23508","sha1":"9afdc4fec954646bd6270caf82f107fdef605bc5","sha256":"c73b004ebf31b395cf237c3d2b13c1e576f385e04660ceb5f7be163ff3c201dc","sha512":"b96588d93fb86228ecc8f501bee6db5f199b20b086fc88c683bbe1feb6c343dec3f99467e1d3140b7f4731d07adf2f918f0ca88bb257d10b5ab8879ff9ce8ed3","ssdeep":"1536:34mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:3GsKXlI2p0WPSbDrstfam","tlshash":"f193f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T12:27:49Z","last_seen":"2026-04-23T06:03:13.645843Z","times_seen":4405,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":52,"connect":9,"send":0,"wait":9,"receive":0,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/js/tilda-events-1.0.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /js/tilda-events-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-ef6a8bc917f1d427f1df2acd88ff2cbb-ee13989bae8243c1-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 10 Jul 2025 12:35:06 GMT\r\netag: W/\"686fb37a-347f\"\r\nt-server: or-3\r\nx-id-shield: fr5-hw-edge-gc39\r\nage: 2254649\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc18\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-07T12:44:24+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13439,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13438)","md5":"fe0741f3cca980618b067b8ce3bb9377","sha1":"b013bd95a88f242bda0288423aac5e5be7261cea","sha256":"5ef75137fa784d916c1731eb5c3700fdadaf7babc8c55a933cb52910249ce576","sha512":"b99997ac68d6cd3b517a8c76ffe9247a41d77be1b2031fd9d4f87ba6c51473fe56ea576d9dae5b1eec639e32ba0a75492778149959205f898a7f65e271367b8b","ssdeep":"384:ZjAm742zrc9BZvBTB/CQsxq8s70g91sSqMRC2tx8eVhJKsXug+q1:F574crc9BZvBTB/hsxq8A1sSqMRC2txV","tlshash":"2852f793a8307d7465f824ac6e6a37c534b822adf5c501812d48fdae33159438a2bf9d","first_seen":"2025-07-10T16:23:26.55297Z","last_seen":"2026-04-23T09:04:55.469045Z","times_seen":3134,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":149,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.net/tild3862-3931-4363-a135-363361646230/-/empty/__3.jpg","fqdn":"thb.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3862-3931-4363-a135-363361646230/-/empty/__3.jpg HTTP/1.1\r\nHost: thb.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/png\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-9758353609a7eb2b5ac92a3265f7ab9e-7de3113ec8f831d5-01\r\nx-shard: sto5-shard0-default\r\nx-tilda-origin: or-32, or-32\r\nx-id-shield: am3-hw-edge-gc38\r\nage: 941561\r\nx-id: sto5-hw-edge-gc17\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:13+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1001 x 380, 8-bit gray+alpha, non-interlaced","md5":"47204b261ead4b96d5afe49592a14d3a","sha1":"d81a2f7f3cd6788693da928b2f99027f2abb8212","sha256":"b21d84882195515c449c96380558ff6acaae5547b512ae7e0aa6fd7fbadd6ecb","sha512":"768f8b7e1af61b94cb6c0b55d34b610c3d26ebfc94ae30a7a961e23f44ea180fcd70722a3951f551cb524d72285b02160549efc74b4bbb353c6615cd27b203be","ssdeep":"","tlshash":"071197cb6bb00e77c023203ccc2b07a45632e9882402fc8b120984012cc3ce4deacac0","first_seen":"2026-04-02T15:01:52.158251Z","last_seen":"2026-04-20T13:12:05.797585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":895,"timings":{"blocked":881,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/js/tilda-animation-2.0.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /js/tilda-animation-2.0.min.js HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-cf2e66ac67a33467c7b36524a06b6674-8a740eed1df86065-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 25 Nov 2025 14:58:40 GMT\r\netag: W/\"6925c420-8a79\"\r\nt-server: or-2\r\nx-id-shield: am3-hw-edge-gc38\r\nage: 690607\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc18\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-25T15:11:48+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":35449,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (35448)","md5":"2219912e772b40c1433a34e532d76fec","sha1":"33901bdeccbda70885f394bb0bda42710b61f25f","sha256":"c764f6558612179a585b3b4e0f4e952a12142d0b158c5b570160cdf3db82b524","sha512":"09afda2a6005396922fa293a737e3ee43b830a9c612f78e49ff73dbb017824c86dcf81965f0dcbf891fd046e922b72d381b300b5ddd226124b8a43e6bb2ce902","ssdeep":"768:56fSctcnLcn1cnscntcnOcnFcnccnTcnGcnhcnCcnPcn2cnvcn6g+6bc78INhAiJ:pCYhze","tlshash":"1bf2a69bf654a032437732b281cf618c5e345d55a50644acba3dd88f2864a4ae37fe3f","first_seen":"2025-11-25T15:07:41.355429Z","last_seen":"2026-04-23T06:03:13.677477Z","times_seen":1068,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":165,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.net/tild3533-6465-4539-b935-313838376330/-/empty/__4.jpg","fqdn":"thb.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3533-6465-4539-b935-313838376330/-/empty/__4.jpg HTTP/1.1\r\nHost: thb.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/png\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-4e8de63dcf762a53642f589aaa276d34-e1112bdac50b3e47-01\r\nx-shard: sto5-shard0-default\r\nx-tilda-origin: or-31, or-31\r\nx-id-shield: fr5-hw-edge-gc40\r\nage: 941561\r\nx-id: sto5-hw-edge-gc20\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:13+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1001 x 380, 8-bit gray+alpha, non-interlaced","md5":"47204b261ead4b96d5afe49592a14d3a","sha1":"d81a2f7f3cd6788693da928b2f99027f2abb8212","sha256":"b21d84882195515c449c96380558ff6acaae5547b512ae7e0aa6fd7fbadd6ecb","sha512":"768f8b7e1af61b94cb6c0b55d34b610c3d26ebfc94ae30a7a961e23f44ea180fcd70722a3951f551cb524d72285b02160549efc74b4bbb353c6615cd27b203be","ssdeep":"","tlshash":"071197cb6bb00e77c023203ccc2b07a45632e9882402fc8b120984012cc3ce4deacac0","first_seen":"2026-04-02T15:01:52.158251Z","last_seen":"2026-04-20T13:12:05.797585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":898,"timings":{"blocked":884,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/js/tilda-lazyload-1.0.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /js/tilda-lazyload-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: application/javascript\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-a24ba9675c80e9d93a2433fc03218c5a-0dd60e9b0fb6b4a2-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 02 Apr 2026 11:34:17 GMT\r\netag: W/\"69ce5439-4f86\"\r\nx-tilda-front: fr-3\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-31\r\nx-id-shield: am3-hw-edge-gc11\r\nage: 11515\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc15\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-02T11:49:52+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20358,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20357)","md5":"3ad0915384153521ebbf22746e562d2f","sha1":"157477ab06b8798a8fcaeddd51d41b84b6864ad8","sha256":"025e9d638edd640333695841bb52f2385835de630d869719389244fc83c1303f","sha512":"64ac69f2cdf4997952254a1931941d5ed56ac9b69b5fe5599e6e43c937da65277ef3ec73386818b13e382e2b9100da3b6ad4db1291849a21da300ebea4858733","ssdeep":"384:KN48L56BZVBicX7UwlLlArKTgSffCeUrhwjVLdUf41j6Eqy+dvZCHHTa+92Gc3Mu:KN48L56BZ7icX7UmLiOTUTrijVLdUQ1Q","tlshash":"31923b6c3a81f536b6b251b123ff06437234265af9024051fc29e0dc6af8c47b757b9a","first_seen":"2026-04-02T11:36:30.123145Z","last_seen":"2026-04-23T09:04:55.443872Z","times_seen":256,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":167,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.net/tild6435-6131-4431-a631-316337343766/-/resize/20x/photo.png","fqdn":"thb.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild6435-6131-4431-a631-316337343766/-/resize/20x/photo.png HTTP/1.1\r\nHost: thb.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/png\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-f9325a5104cbd06215648d9c96308816-b1c7687658fb8291-01\r\nx-shard: sto5-shard0-default\r\nx-tilda-origin: or-31, or-31\r\nx-id-shield: am3-hw-edge-gc38\r\nage: 940036\r\nx-id: sto5-hw-edge-gc15\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:12+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1286,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"001d27a3ba2cd14ae0d2cbe4ef48fe3e","sha1":"67af0a045b4f6399e78bac28b476928227d5a66e","sha256":"6a9d49459f164c0c4d20fa508368eec0f456879645f99ddedf6c05d33cd20b6f","sha512":"bd3ffafe95f977552546ef925ba994c9899c8ca4dcf02776497d32eb0fe1cf145578fff006fde83a3b715a0216fceb5d8e562d9f51724f4a89713b6405cd99ff","ssdeep":"","tlshash":"3e2195fe8fd45d6bc2a561b6d9b5c301d1ba484c1e2170617374581e9d46e70c8ec04a","first_seen":"2026-04-02T15:01:52.189681Z","last_seen":"2026-04-20T13:12:05.805056Z","times_seen":2,"resource_available":false,"data":null}},"time_used":910,"timings":{"blocked":895,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3632-3266-4936-a631-636234353634/photo.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3632-3266-4936-a631-636234353634/photo.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-14d5a361322fa6bae88281c07143ffeb-0e69405c4910cc9f-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: PUT, OPTIONS, POST\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-33\r\nx-id-shield: am3-hw-edge-gc11\r\nage: 941589\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:12+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":456,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eae1cd7162df8d05e3a51d3cef01389","sha1":"67a99e7bb3e143828527522bdd9329f316b69ec1","sha256":"705228155c765252915fbb5f9cead6fbb5c2e7d63c72bd9f72f67182749b0a8e","sha512":"1ca1be7773811b391c15738cbba71ff3f699d81efc99ea4bf2cb262388b3c8918fb0111388d002d1aeb444e06bc94409523c899529408bbdbd15b3fe5e36243b","ssdeep":"","tlshash":"94f0d475a207d714c444db55333cf4317d3b40e41fd4428e56e2155671085896c0c6dd","first_seen":"2026-04-02T15:01:52.190679Z","last_seen":"2026-04-20T13:12:05.801384Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":154,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stat.tildaapi.one/event/","fqdn":"stat.tildaapi.one","domain":"tildaapi.one","tld":"one"},"ip":{"addr":"5.181.161.226","port":443,"asn":205282,"as":"Tilda Publishing Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:26.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildaapi.one","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Thu, 24 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:92:2F:4A:24:19:56:59:56:85:33:31:5F:67:64:5A:97:D2:B2:29","sha256":"F8:35:D3:56:36:29:EE:06:7E:99:A7:41:C9:9B:57:C4:4C:7A:09:22:4D:92:E2:28:DB:89:FB:11:8A:19:B8:64"}}},"request":{"raw":"POST /event/ HTTP/1.1\r\nHost: stat.tildaapi.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 731\r\nOrigin: https://knowles-firm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":731,"data":"page=knowles-firm.com%2F\u0026referrer=\u0026userid=simple\u0026sessionid=simple\u0026user_agent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026user_language=en-US\u0026projectid=23399333\u0026pageid=127276683\u0026pagealias=\u0026formskey=70f833bce59839ea2ce513bd23399333\u0026ismobile=false\u0026tildastatcode=320911c8edd874f05489b59a68a5b716\u0026fingerprint=63547c646d7c686334387c6c656e2d55532c656e7c7057696e33327c767c614d6f7a696c6c617c6e4e657473636170657c706c696e7465726e616c2d7064662d766965776572696e7465726e616c2d7064662d766965776572696e7465726e616c2d7064662d766965776572696e7465726e616c2d7064662d766965776572696e7465726e616c2d7064662d7669657765727c7072317c773132383068313032347c634432347c744f307c6d54307c\u0026tildautm="}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 15:01:26 GMT\r\ncontent-type: application/json;charset=utf-8\r\naccess-control-allow-origin: https://knowles-firm.com\r\nx-tilda-server: 5\r\nx-tilda-imprint: f901b6bf-1283-4428-ae0c-276953cbaf82\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ba518e7bb13f1b9d72a0569a52fc2832","sha1":"331078cb830b731e900eca7c6fcbe0a7b885305a","sha256":"fb1bf528d8237aac3e9ead389ab246ba0068f61fe281610110937ef2b8adefce","sha512":"778a950dc96b5bc54714b3f7b94a9debb250d075ce004168fcd5e747d2f41324cc35ae410bdb822d5f534acaec509595a162109cec1a642c1cbca4e92f6a832c","ssdeep":"","tlshash":"bf60000000033c0c030300033300f003030000c000c33003030fc00c0300c0000c3300","first_seen":"2023-04-06T17:21:16Z","last_seen":"2026-04-23T09:42:34.820003Z","times_seen":11393,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":131,"dns":27,"connect":49,"send":0,"wait":98,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/ws/project23399333/tilda-blocks-page127276683.min.js?t=1774514678","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /ws/project23399333/tilda-blocks-page127276683.min.js?t=1774514678 HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: application/javascript\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-b20eea6c97c3a18bd949128d36afc8de-49c3e130b3c5171f-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 08:44:40 GMT\r\nx-host: ws.tildacdn.com\r\nx-tilda-origin: or-33\r\nx-id-shield: fr5-hw-edge-gc40\r\nage: 627185\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:09+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":20718,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1192)","md5":"ab395c4bef41d7a26ab04357e475838c","sha1":"278bd1507a345f1ca9aa20cca89900f35aecdc61","sha256":"6ba7e9f42f7f4935d5bfc6561c795d5500577b05e735dde7bc0da4614d1608a8","sha512":"79a9b2ecfbef1afb3fce7881b49935fd55c3e768bfca4f41ecf66b71fd401600b7bdfec4d9612e530046f5b71512d8a3c552ee6bde9275b96c0d7e22b9912da1","ssdeep":"384:l1JkJQlzz4aAlIRIIR0xiaUn3tqblodMNtVSGMrm:7JkJQlzcaAlIRIIR0xirgblod0tVSrm","tlshash":"b992b9a836502037c4ff17bbd15f378836305192a80bdca1955ecd9c2eb4a87a993ded","first_seen":"2026-04-02T15:01:52.192166Z","last_seen":"2026-04-02T15:01:52.192166Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":170,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/js/tilda-popup-1.0.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /js/tilda-popup-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-c29c5f87df4463e563c2c9e8c1e0c7a1-7e559da46bfa527f-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 25 Nov 2025 14:58:40 GMT\r\netag: W/\"6925c420-d26\"\r\nt-server: or-2\r\nx-id-shield: fr5-hw-edge-gc39\r\nage: 690587\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc16\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-25T15:12:04+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3366,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3365)","md5":"eb286eafe5f0b9d3ebc1022b3e1ee29d","sha1":"5f782bf6a25f09790ff426d95251157e77301d71","sha256":"22dd5ef26241412d3a0872d24e45000751ea3414fcf0b8d331413f6be6e5eb1c","sha512":"69a49a1237ddb3a3e8a71db0c68b2c189bdb4d90ca4becf72a3afd571d4eace16c8cf5643222ccbc43f3bfee7d3e122dd198f28720e3884af228e81b707e37af","ssdeep":"","tlshash":"c3615324b6b4317206df51f9e9da62cd3b3190aef6038c606468dc8865f88cac60597e","first_seen":"2025-11-25T15:11:39.238194Z","last_seen":"2026-04-22T21:30:14.178764Z","times_seen":797,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":158,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/js/tilda-zero-forms-1.0.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /js/tilda-zero-forms-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: application/javascript\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-7a7f9520959276f02b227aa57b41f1f2-7b577134215cd1e3-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 31 Mar 2026 07:57:45 GMT\r\netag: W/\"69cb7e79-10ec8\"\r\nx-tilda-front: fr-3\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-33\r\nx-id-shield: fr5-hw-edge-gc40\r\nage: 197506\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-31T08:09:55+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69320,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b47a5c018cc370136c280b4bde46254c","sha1":"80cccad780ff5d0ac72d83c2c151e2858372a17a","sha256":"f25dc94e01db431f31981ba2a97c9ffc448642c56d32b2973a9c944499569c12","sha512":"eca642d67fd7575857a0095a9b275d8ab020617155de36c179af89d017c33a28f7418921eeab0349c2382c9834353ff0436e0de01c1dabaace5c599ecc7a3deb","ssdeep":"1536:RyJ5DuQ6hM5w3VJoqcZ9PsKuvaAqbdPbIfQbQ15yYcZJIVSP5Z:YJGhllRc/sKulqbdPrJI8n","tlshash":"306394b47137253602974fbe24ff7785776ca1219562c810cc68c84d2abd887d73bbaa","first_seen":"2026-03-31T14:21:04.642715Z","last_seen":"2026-04-22T18:48:52.139971Z","times_seen":73,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":154,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://knowles-firm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 02 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 23730\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-04-23T11:14:28.391175Z","times_seen":18014,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":105,"dns":4,"connect":9,"send":0,"wait":20,"receive":8,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://knowles-firm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 02 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 23730\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-04-23T11:14:28.391175Z","times_seen":18014,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":203,"dns":0,"connect":30,"send":0,"wait":8,"receive":2,"ssl":194},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3261-3836-4363-a261-623861653264/1.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:24.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3261-3836-4363-a261-623861653264/1.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:24 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-7c81c7d9e2cdaa183fc7574a54e1e8e6-8a52d0f752b03a87-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\netag: W/\"493d58d90a56d9233464e931302e97c2\"\r\nlast-modified: Tue, 17 Mar 2026 13:07:19 GMT\r\nage: 941592\r\nx-tilda-origin: or-31\r\nx-id-shield: fr5-hw-edge-gc40\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc17\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:32+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1895,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"493d58d90a56d9233464e931302e97c2","sha1":"23678bb7a2bb722b72877d5da7018255fce3e66d","sha256":"7e506de10fcb332aaa534bb561126c89132c90bc6fb3d2b1952df178e8cb4ce7","sha512":"a12b28aa869510075286881234970ed9bf095568c85d5834fa65a9d86d168024b86ee3778dc263653fc095a3011bed2943a1c49b66ef048af034dfbbf45e8218","ssdeep":"","tlshash":"e4412ecfb476a2e8ec81c990de62119d741fc0fa42d69274c9d49f0bf1038daeac19a4","first_seen":"2026-04-02T15:01:52.194544Z","last_seen":"2026-04-20T13:12:05.82023Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.one/lib/flags/flags7.png","fqdn":"static.tildacdn.one","domain":"tildacdn.one","tld":"one"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:26.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.one","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Fri, 07 Nov 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AB:76:8B:2F:30:2E:31:4B:6C:0A:C2:2E:56:B4:1D:E2:B5:CA:0B:23","sha256":"F9:68:D7:A6:D4:BA:97:B2:64:2D:33:BA:8B:5A:C8:8F:EB:4E:21:86:FA:DC:92:3C:6F:DC:CA:46:31:C4:92:10"}}},"request":{"raw":"GET /lib/flags/flags7.png HTTP/1.1\r\nHost: static.tildacdn.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 16022\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-b6563fc0b2f1e744546bdb22e40b8e6e-89f32944474bcbea-01\r\nx-shard: sto5-shard0-default\r\netag: \"f3afe21c0e68faa5c47253edae171990\"\r\nlast-modified: Thu, 29 Aug 2024 08:24:26 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nx-container-storage-policy-index: 0\r\nx-container-storage-policy-name: Policy-0\r\nt-server: or-3\r\nx-id-shield: am3-hw-edge-gc38\r\nx-id: sto5-hw-edge-gc21\r\nexpires: Mon, 01 Jun 2026 15:01:26 GMT\r\ncache-control: max-age=5184000\r\nage: 7079438\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-05T14:04:06+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":16022,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 390 x 368, 8-bit colormap, non-interlaced","md5":"f3afe21c0e68faa5c47253edae171990","sha1":"b9fa27673c0c25248704e186e14e66a5a8aaccd6","sha256":"8b0b0ed59ece9154a4b973dadfd07984ae75d27ae304667825679fd95ff06fd5","sha512":"3d1e5acddb4fc8f0bbf84a942cd61a29dae415268aebcdcd09c16bbd268bbce14755a0deb972f66baafd16c85b716004764d0d2004f81223ced887505b6df45b","ssdeep":"384:JYeAqUzOy+dfG8kQRxkBp8M2f5oCix+KHuYbzfxpaXa6qCD:qqUzOyB1POMs5oiKtfxQXaFe","tlshash":"d272d086d3aee5e44c6f638a8be85dadb59a4bf40041dd32581d0e6effb0d849904cb4","first_seen":"2024-10-15T03:12:48.645673Z","last_seen":"2026-04-23T08:07:41.730608Z","times_seen":776,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":70,"dns":23,"connect":7,"send":0,"wait":8,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3265-3039-4463-a464-386432383632/photo.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3265-3039-4463-a464-386432383632/photo.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-de9d9ce9b572afafc4f989c41218b9e6-5dc1f622d20e5755-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\netag: W/\"0393965cd9badb3e0d243d445750e085\"\r\nlast-modified: Thu, 19 Mar 2026 07:27:59 GMT\r\nage: 941589\r\nx-tilda-origin: or-33\r\nx-id-shield: fr5-hw-edge-gc39\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc15\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:09+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":392,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0393965cd9badb3e0d243d445750e085","sha1":"a252c62295175c97e6a38768fdd9ed72676894a9","sha256":"d154424d9ee0f408f411345b347bfa843ad09fd3d9391f73aff26c7eb3eea283","sha512":"a9d48ba306b0e924c1ddbe51c1a59ce50800d6ae838506b33be0e827d9a9151f81c38082e228672b13169507bc8385d8da40d3c4b248b2d561df50f5a49780a5","ssdeep":"","tlshash":"2be09260e28de40a8b000e0a436ca4d7b519b19acf9c0104ebc0236bb51f4c7bc7925e","first_seen":"2026-04-02T15:01:52.196478Z","last_seen":"2026-04-20T13:12:05.864779Z","times_seen":2,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":144,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3365-3663-4163-b337-366135346532/photo.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3365-3663-4163-b337-366135346532/photo.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-ac0cfed0d16cc3d41683be9b5ec2a722-b32f85d8b005fa87-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\netag: W/\"7c681d5837c18fdd1fa4f152bc5c2c89\"\r\nlast-modified: Fri, 20 Mar 2026 10:18:08 GMT\r\nage: 941589\r\nx-tilda-origin: or-33\r\nx-id-shield: am3-hw-edge-gc38\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc17\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:13+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":3481,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7c681d5837c18fdd1fa4f152bc5c2c89","sha1":"955c68419e1c04a0846efd7ac97f92d3ff5830cc","sha256":"1abd0d6f3e4c9cb6fc2d1ce3aecf4fcca9f57d7fa7a1c83a311b7db8f788502e","sha512":"60cbb41ec3465e0ccb7737235d219877daac25c838b1311cf7b6c7962900c895e7b48507999f4c54f2b9b069f65a4ee10e186ca9c94f684e648e447c8838163e","ssdeep":"","tlshash":"577131d6633973f86980f3c355349c743c52aefbba274f5e996069a4199281c0ca4ae3","first_seen":"2026-04-02T15:01:52.144343Z","last_seen":"2026-04-20T13:12:05.802561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.net/tild3031-3366-4631-b531-306132356334/-/empty/__1.jpg","fqdn":"thb.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3031-3366-4631-b531-306132356334/-/empty/__1.jpg HTTP/1.1\r\nHost: thb.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/png\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-b53263d8e73730e09e272cee3226f488-b4bb8f7057f85e5b-01\r\nx-shard: sto5-shard0-default\r\nx-tilda-origin: or-32, or-32\r\nx-id-shield: fr5-hw-edge-gc39\r\nage: 941561\r\nx-id: sto5-hw-edge-gc18\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:13+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1001 x 380, 8-bit gray+alpha, non-interlaced","md5":"47204b261ead4b96d5afe49592a14d3a","sha1":"d81a2f7f3cd6788693da928b2f99027f2abb8212","sha256":"b21d84882195515c449c96380558ff6acaae5547b512ae7e0aa6fd7fbadd6ecb","sha512":"768f8b7e1af61b94cb6c0b55d34b610c3d26ebfc94ae30a7a961e23f44ea180fcd70722a3951f551cb524d72285b02160549efc74b4bbb353c6615cd27b203be","ssdeep":"","tlshash":"071197cb6bb00e77c023203ccc2b07a45632e9882402fc8b120984012cc3ce4deacac0","first_seen":"2026-04-02T15:01:52.158251Z","last_seen":"2026-04-20T13:12:05.797585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":901,"timings":{"blocked":887,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3335-6365-4038-b035-306435323538/Frame_3_2.jpg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3335-6365-4038-b035-306435323538/Frame_3_2.jpg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 121233\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-a8738fc863cf8b7495d5149a6a0809bd-ede4e8f69e156119-01\r\nx-shard: sto5-shard0-default\r\netag: \"0c5e1800cd62856ab015024c84d3e722\"\r\nlast-modified: Thu, 19 Mar 2026 12:06:10 GMT\r\nage: 941590\r\nx-tilda-origin: or-31\r\nx-id-shield: fr5-hw-edge-gc39\r\nx-id: sto5-hw-edge-gc14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:13+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121233,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 748x1119, components 3","md5":"0c5e1800cd62856ab015024c84d3e722","sha1":"2bac411784132b9f9eada640b612ef3998759167","sha256":"82b5dfd4e0bd6389e8d819e48b9b74bed5762ddd160478362b971ab0a605e26c","sha512":"5fedb45a30752b87c6fd9968d6fdcad00c790f16e8c76ab45750cb730554f2a44240a38b8af17fd2e29f7fd014a0d0f48fd53b0684728422d43638dac60e6143","ssdeep":"3072:ZWAy59ntxT8VOpiLRaShUIw3jMKP1nagRMGU:MAycgOaShjabNagRxU","tlshash":"d6c3f105cfd7e61a0b0f9532a0af781f48618bdce4895ce448131d66a6a0fd1deea4fc","first_seen":"2026-04-02T15:01:52.130964Z","last_seen":"2026-04-20T13:12:05.787585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3062-3661-4537-b435-313063636335/Frame_1618873171.jpg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3062-3661-4537-b435-313063636335/Frame_1618873171.jpg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31578\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-eb2d5d25a1409c7824b279088f3b71f3-a886b3a0f3678d90-01\r\nx-shard: sto5-shard0-default\r\netag: \"5c0ea7cc1f56d27abe2fd55bc5ad16fe\"\r\nlast-modified: Fri, 20 Mar 2026 11:06:28 GMT\r\nage: 941590\r\nx-tilda-origin: or-33\r\nx-id-shield: fr5-hw-edge-gc39\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:14+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31578,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x766, components 3","md5":"5c0ea7cc1f56d27abe2fd55bc5ad16fe","sha1":"3b2b5e566199d4e26e7bdeb6f2130bf7fd0b76be","sha256":"72d01744f35c3618e3599a01e8118360e215b0fbb9c3a94d5f5e2f4158077df1","sha512":"55138a4a4f8fe97918ad1a11c79be7e408494f8ec98ee1f943fe86e479838c11d39d71eb300225d2f080eff10585b2a2931630ee727d026fd4a447316d032f2d","ssdeep":"768:QT8mUB/H5DOzdf1CfzF5oZgj595oBxTzVEJgdTT2WV9:Q4jtH4df1Cfh2WjDAmSdTbV9","tlshash":"61e2f19a8f2128a7fa35d278db8143006734e4160f83465fcd3683d5f564daf254eb4e","first_seen":"2026-04-02T15:01:52.19735Z","last_seen":"2026-04-20T13:12:05.818644Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3034-3639-4233-a334-656233613663/12247_1.jpg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3034-3639-4233-a334-656233613663/12247_1.jpg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 42276\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-615d18c34c13b84acac7b467c1ea82bb-b4ad389f8b5596ca-01\r\nx-shard: sto5-shard0-default\r\netag: \"fc273c0ac3daa556ca482b0b77b2f814\"\r\nlast-modified: Fri, 20 Mar 2026 08:36:55 GMT\r\nage: 941590\r\nx-tilda-origin: or-32\r\nx-id-shield: am3-hw-edge-gc11\r\nx-id: sto5-hw-edge-gc18\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:13+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42276,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x667, components 3","md5":"fc273c0ac3daa556ca482b0b77b2f814","sha1":"3b185a39f6b744bb45db8682213a69fee189b066","sha256":"9ebeaa29bcff458737aef6344dcce5a3c5286edd2f4a1871517b2a6c2b390971","sha512":"d817faddcefc4e278050bfbf491e8dabe9b69c28fa61aedf10f8796bd329cc8c32669047c6b86919ebe2080fc9f57dd82599d1588076f40a2727bd7ce9c469b0","ssdeep":"768:gkKLTmdqez+2BzWsbVV0yl0POb6Bwz5N1TSpzeHDssU2cyEw9G:l6mdxbbVG1I5N1Teaj1dew9G","tlshash":"0f13f204f6a7d8baf74568772dbd7372eb16cc44a922a209001eb165f720fb59c08e47","first_seen":"2026-04-02T15:01:52.198209Z","last_seen":"2026-04-20T13:12:05.844991Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3036-3133-4533-a161-343761643333/Vector_011.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3036-3133-4533-a161-343761643333/Vector_011.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-447d6b1ac33e2629a8f4a8ac7d6a0ad1-9d36d560b8cd3c44-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\netag: W/\"82559963cfc31455312c7ad5b87c79bc\"\r\nlast-modified: Tue, 17 Mar 2026 09:54:31 GMT\r\nage: 941589\r\nx-tilda-origin: or-33\r\nx-id-shield: fr5-hw-edge-gc40\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc15\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:12+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":251,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"82559963cfc31455312c7ad5b87c79bc","sha1":"23315680b7e40fe54f347c84c5d950df4bd4fc96","sha256":"665fff55580b8c5b6853071181380a521f85edf31d5554161dbb4d2f0184f2e5","sha512":"137e3ac385a98a16ca9a77196ea617e94b3244fd14e06f0321cccb0ca274c78460fa437d74d980d368b45574c108f6aa05cdce7aa6f5150fedf3270219a653a1","ssdeep":"","tlshash":"4dd0954d414ddd148900c730daf9e140779e70b94184646ccae04d60754588435a6258","first_seen":"2026-04-02T15:01:52.199105Z","last_seen":"2026-04-20T13:12:05.8356Z","times_seen":2,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":136,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild6264-3132-4337-a330-316438376635/photo.png","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild6264-3132-4337-a330-316438376635/photo.png HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 7048\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-d9bce7d2fabd027c9b179accc0925447-e2ecd488d0ea57f9-01\r\nx-shard: sto5-shard0-default\r\netag: \"da00fdf4e6021cda3dbe4955ea8808c5\"\r\nlast-modified: Thu, 19 Mar 2026 19:20:59 GMT\r\nage: 939886\r\nx-tilda-origin: or-33\r\nx-id-shield: am3-hw-edge-gc11\r\nx-id: sto5-hw-edge-gc14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-27T06:46:07+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":7048,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 131 x 131, 8-bit/color RGBA, non-interlaced","md5":"da00fdf4e6021cda3dbe4955ea8808c5","sha1":"17ec429d104e84564045be0f598b9cbca494e0bf","sha256":"e357b62a97af6a1772362f7cc329dbf4c7bbf25c15de3dd1d00dffa0ab6c8e18","sha512":"5e000107ec618438d5019939b81e473a33285f196a791c856ffab21759a30796c788710c187dff40dee58f5e4d4c3e5d03d4971cc0e7e1272cfe4267e5da9c93","ssdeep":"192:QStezQhTbKS2dWBqNjJBeTOxhDthMO+TZzy:3te8TIdDNjJBPdhMW","tlshash":"80e1af9d448d66e5e5d6992cf30b47d3310251320b17c59e926ce4ca11e35fc45bf477","first_seen":"2026-04-02T15:01:52.199971Z","last_seen":"2026-04-20T13:12:05.789848Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/css/tilda-zero-form-errorbox.min.css","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:23.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /css/tilda-zero-form-errorbox.min.css HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:23 GMT\r\ncontent-type: text/css\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-f884dd0e99fd4542a1a822a7adb807aa-2f9227313fa96fa5-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 29 Apr 2025 10:49:28 GMT\r\netag: W/\"6810aeb8-6be\"\r\nt-server: or-2\r\nx-id-shield: am3-hw-edge-gc11\r\nage: 3397832\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-05T14:05:02+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1726,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1726), with no line terminators","md5":"7e7145b5a8bbfbe938fd97a980196ee9","sha1":"c765e10e5b691ad59999ec6141387bd55624584e","sha256":"ea4d85bf21925568c05e4178eb746bed0cbb116a8bf79f64ee8dcfacc00b3c55","sha512":"a9c74ace21eaffade962103f637461d60f073ba56b05397f8390b3aece3e375fee9eb3cbbe4ba83496667de7a0863cfd82f46cb54963ac455f577708ef652920","ssdeep":"","tlshash":"1431f1215814378d747ee10db699855c95a49923bbf30aefb3c4f8748bc64e68d17a10","first_seen":"2025-05-10T01:53:54.434552Z","last_seen":"2026-04-22T21:30:14.110335Z","times_seen":841,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3139-6434-4439-b965-313763353761/Frame_3_2.jpg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3139-6434-4439-b965-313763353761/Frame_3_2.jpg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 121233\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-931a728bd817687f681265052a22a541-7769736c10f59075-01\r\nx-shard: sto5-shard0-default\r\netag: \"0c5e1800cd62856ab015024c84d3e722\"\r\nlast-modified: Thu, 19 Mar 2026 12:05:54 GMT\r\nage: 941590\r\nx-tilda-origin: or-31\r\nx-id-shield: am3-hw-edge-gc11\r\nx-id: sto5-hw-edge-gc14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:13+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":121233,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 748x1119, components 3","md5":"0c5e1800cd62856ab015024c84d3e722","sha1":"2bac411784132b9f9eada640b612ef3998759167","sha256":"82b5dfd4e0bd6389e8d819e48b9b74bed5762ddd160478362b971ab0a605e26c","sha512":"5fedb45a30752b87c6fd9968d6fdcad00c790f16e8c76ab45750cb730554f2a44240a38b8af17fd2e29f7fd014a0d0f48fd53b0684728422d43638dac60e6143","ssdeep":"3072:ZWAy59ntxT8VOpiLRaShUIw3jMKP1nagRMGU:MAycgOaShjabNagRxU","tlshash":"d6c3f105cfd7e61a0b0f9532a0af781f48618bdce4895ce448131d66a6a0fd1deea4fc","first_seen":"2026-04-02T15:01:52.130964Z","last_seen":"2026-04-20T13:12:05.787585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3433-6235-4433-b364-366337333239/telege.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3433-6235-4433-b364-366337333239/telege.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-31d4134701a6221413b5bd506e538a33-623c0176be375b78-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, Expires, Cache-Control\r\ncache-control: public\r\netag: W/\"f7ded58d90576576a6ad1a46c57222f6\"\r\nlast-modified: Wed, 18 Sep 2024 12:03:50 GMT\r\nx-container-storage-policy-index: 0\r\nx-container-storage-policy-name: Policy-0\r\nx-timestamp: 1726661029.29359\r\nx-trans-id: 17f6550ed277f08f\r\nage: 5534374\r\nt-server: or-2\r\nx-id-shield: fr5-hw-edge-gc40\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc19\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-23T09:12:40+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1630,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f7ded58d90576576a6ad1a46c57222f6","sha1":"75e45eb7233613e68551fa815be2a7d886a8103f","sha256":"73c9ea895625a3364cc7301581be195249821c4f92ea0afc9757817d58bcad28","sha512":"249a28188e49fe5de5957f2a96c8ac41a8c7894386d68b473fd673c7fcc149a9b3805dea598b2727684303dd9d822c53ec00c254de4fbf2d60bfa9cf091e67f5","ssdeep":"","tlshash":"7b3120f6d2c873e4f147db94ce76e0381a7f28f66fc40a854bd49ee46682086450dc84","first_seen":"2025-10-01T10:50:30.619412Z","last_seen":"2026-04-20T13:12:05.874078Z","times_seen":15,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3431-6631-4137-b663-653964383238/whatsapp.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3431-6631-4137-b663-653964383238/whatsapp.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-abced67fda37d69e3e76db2d00fbffd6-614c3ebd3ceafa1f-01\r\nx-shard: sto5-shard0-default\r\ncache-control: public\r\netag: W/\"582f51e2c1f15e3be3ef8b6e24b5793e\"\r\nlast-modified: Wed, 18 Sep 2024 12:03:57 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nx-container-storage-policy-index: 0\r\nx-container-storage-policy-name: Policy-0\r\nage: 5534374\r\nt-server: or-3\r\nx-id-shield: fr5-hw-edge-gc39\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc19\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-23T09:12:40+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":2782,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"582f51e2c1f15e3be3ef8b6e24b5793e","sha1":"7470a61bb60b22ccdebc2bf2615dd64e6ed23d53","sha256":"d5b68cba5889a2719c8f868303be26536caa1fa5389345ab98be5783fa4af2c8","sha512":"10181d95154b3d3300ee3d67ae39e042674428fd8971346f877b20d0f5f11e1a72bd23204c3bd63437052c1ef9d28113f2da6d7969e7ba60e9cdcae03aa7cf05","ssdeep":"","tlshash":"a151b7ebe1d8f2e9f209db88d935d034ba6f30ffafd49a5981d09fd951182898548cc0","first_seen":"2025-10-01T10:50:30.575236Z","last_seen":"2026-04-20T13:12:05.853154Z","times_seen":15,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/js/tilda-zero-scale-1.0.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /js/tilda-zero-scale-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-b555dd013f571c46b121d46a0182e400-145b179474ade18b-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 04 Dec 2025 10:22:16 GMT\r\netag: W/\"693160d8-1ec3\"\r\nt-server: or-2\r\nx-id-shield: am3-hw-edge-gc38\r\nage: 5113175\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc17\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-02T10:41:47+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":7875,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7874)","md5":"9982e00e9829cc7af014d4c9c2f6ef87","sha1":"8968b8b5d1377529bb76850cdca79517420f74de","sha256":"0d07db15951afcf2cd7c0b4807799b71e788ef6e870289b2faf7f5245b05705d","sha512":"6c393bce79f096087d4ccf3e77d7cafdad33871cfea53187582b15ac8f8c3c73932d3435457544435cc15b7e77a745e5d8a7828e85aa3da4d5b810ae24ec4af9","ssdeep":"192:PKMuA/JKWuilDREGJPCinMNV42y5gcJzJhJPJwJItJJtJdJmJGJVJP1rtgxgtvTM:nuA/JB1lDREGJPCinmGScJzJhJPJwJqM","tlshash":"53f163957a3e702a8bae15b7011f230f7e7992d5530f8b44c8358466382dd1bfa87ee1","first_seen":"2025-12-04T12:20:08.930341Z","last_seen":"2026-04-23T09:04:55.434905Z","times_seen":980,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":150,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3963-6161-4462-a161-373832313166/photo.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3963-6161-4462-a161-373832313166/photo.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-086fa1ca818e04c9e96a874d5425ccc8-e12841e7dc8ae099-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\netag: W/\"7c681d5837c18fdd1fa4f152bc5c2c89\"\r\nlast-modified: Fri, 20 Mar 2026 10:17:59 GMT\r\nage: 941589\r\nx-tilda-origin: or-31\r\nx-id-shield: fr5-hw-edge-gc40\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc21\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:13+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":3481,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7c681d5837c18fdd1fa4f152bc5c2c89","sha1":"955c68419e1c04a0846efd7ac97f92d3ff5830cc","sha256":"1abd0d6f3e4c9cb6fc2d1ce3aecf4fcca9f57d7fa7a1c83a311b7db8f788502e","sha512":"60cbb41ec3465e0ccb7737235d219877daac25c838b1311cf7b6c7962900c895e7b48507999f4c54f2b9b069f65a4ee10e186ca9c94f684e648e447c8838163e","ssdeep":"","tlshash":"577131d6633973f86980f3c355349c743c52aefbba274f5e996069a4199281c0ca4ae3","first_seen":"2026-04-02T15:01:52.144343Z","last_seen":"2026-04-20T13:12:05.802561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":155,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/css/tilda-popup-1.1.min.css","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /css/tilda-popup-1.1.min.css HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: text/css\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-6b15214d5dcc94df8c6fceeebb777956-683e30200affccc5-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 19 Sep 2025 12:27:37 GMT\r\netag: W/\"68cd4c39-6bc\"\r\nt-server: or-1\r\nx-id-shield: am3-hw-edge-gc11\r\nage: 1304730\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc19\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-18T12:36:29+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1724,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1724), with no line terminators","md5":"aecf2d7c1b9df4ccfd01693a24685d99","sha1":"28806487778424a2fb837b0fe3d4a6da35700f98","sha256":"6f284e1ae65f2f2b636e361febafaa49d1aa0a3322c713be9238725b39948101","sha512":"acfcd21b37ac2af7523e5688761fd0f17ec241abe27334120fcd5e99b2e5931addd3f330fa7b4a0c521a337ec5e178e953becddb77cf9a1c72795991d9f86ceb","ssdeep":"","tlshash":"8831bc504ab13109a076c625dfe187ac133ec15bb7624daf72099c2987c62ddd17f62f","first_seen":"2025-09-19T20:40:05.562289Z","last_seen":"2026-04-23T06:03:13.666225Z","times_seen":1688,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3036-6339-4632-a538-373962623365/Group_1707478529.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3036-6339-4632-a538-373962623365/Group_1707478529.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-4b15cb4043c10ce3caf7428034ac57cb-2a889d019dd09655-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: PUT, OPTIONS, POST\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-31\r\nx-id-shield: fr5-hw-edge-gc40\r\nage: 941589\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:11+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":606,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0f2a4eee669104bbe6a5b40c6dfa21ed","sha1":"844ecee9ae989ec2dfe60d7c9ca1b393141cdee0","sha256":"2644cd289b2e18ebf214842ddd20054e988d38af6a6340de45cca94fc502e316","sha512":"9bbd7c778d1d93e3b84d4ddcfac2b3d483ca8bf93f4f11877cb87b1aaa84ec3d005d7eb6a560797be572daf3af9d2350202e4d0315a97922ebc032b88e9b9fcc","ssdeep":"","tlshash":"55f078c0d37e0530bda883095abdb47a533532d5aa8c0425c9902f222b400ed7c7bcac","first_seen":"2026-04-02T15:01:52.20512Z","last_seen":"2026-04-20T13:12:05.824991Z","times_seen":2,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3337-3265-4936-a435-343832383566/Frame_1618873167.png","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3337-3265-4936-a435-343832383566/Frame_1618873167.png HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.tildacdn.net/ws/project23399333/tilda-blocks-page127276683.min.css?t=1774514678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: image/png\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-9aa23095930de539a8d8892c7efb42e2-a086b32b983b42a9-01\r\nx-shard: sto5-shard0-default\r\naccess-control-allow-methods: PUT, OPTIONS, POST\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-31\r\nx-id-shield: am3-hw-edge-gc11\r\nage: 941590\r\nx-id: sto5-hw-edge-gc19\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:14+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":172,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"161916af87a005759e908cb1326239a9","sha1":"0bd2448bc284658fe93eec9e3dd970cb5a7c93fc","sha256":"38d48ff66ec82ec7c1364c9bc6ec4fee8553955e0ddd001219c855af3a869efe","sha512":"199911ed3ccffb411bfeb433a496f6ad81af2544d2a03b9155fb60996d74b175be8fa2779dd41c078ff2343bc44bbcb2e03e032a8a6dfa23fc2e9813357fdb3e","ssdeep":"","tlshash":"a5c08cdbb7c28879ca094eb6039e5104f5b72b8d140c20256dd46828e56d9484252362","first_seen":"2026-04-02T15:01:52.205882Z","last_seen":"2026-04-20T13:12:05.82318Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/js/tilda-zero-1.1.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /js/tilda-zero-1.1.min.js HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: application/javascript\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-200fc6545de71176171d4444451c20c8-8294129c95cfc765-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 31 Mar 2026 07:57:45 GMT\r\netag: W/\"69cb7e79-ad34\"\r\nx-tilda-front: fr-3\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-31\r\nx-id-shield: am3-hw-edge-gc11\r\nage: 197521\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc18\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-31T08:09:54+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":44340,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44339)","md5":"7bbde502c2938e3f47ad7dd68dff6e04","sha1":"769fecc2e78fe7e1e68af6090a21e090b1ce1661","sha256":"8e45763afe4c97ceaddf2e1f3e9f68dc46d5100501a0ee5624a8a5e7c41472ef","sha512":"cf6f23ce57e2f522a36b20219ffb0450c3b4dd4b2408df2bea2c5a9ebcffd045acdfa6749e436640467c7a51966cc9a815ded02f65ac052d5500276a1473ccd1","ssdeep":"768:b5pKi2jqTzjkRFeMV0MkWG5Zg5TMuwYdrtNqpgAEbw7myr2TfObTvII6YzpHS1fe:b5/xY7XxG+hmpvB4WTEMD0VsjBlLOhLs","tlshash":"f5131978f634303b817726b7845f3706ba357195a74f4484ce29c496783c88fba63ea5","first_seen":"2026-03-31T09:06:34.991144Z","last_seen":"2026-04-23T09:04:55.399618Z","times_seen":229,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":163,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/tild3362-3139-4330-b138-666261616662/Group_5.svg","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3362-3139-4330-b138-666261616662/Group_5.svg HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-2943fbfb82efc9220a4cad4730de8783-616d9d6744858c1b-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: PUT, OPTIONS, POST\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-31\r\nx-id-shield: am3-hw-edge-gc38\r\nage: 941589\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc10\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-26T14:32:11+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":628,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4157afa56ced29fcab6952cd2b58644","sha1":"fa5d5c84176f1a389c63e8bf8c4553b8bb2d54b2","sha256":"75a193d658de721dd09f56beb49ad1775e16d627bfc25612d3e35902e079d56f","sha512":"7354241f397b2cbe6e588dbdcf730ebf92e6344af8d4e78b30a47bda46f87ce111c636248c3d4b9229f9bbeb8dd633a7d52500452cade4a7acc4e55df04349a4","ssdeep":"","tlshash":"ebf044c0a53e15983c68838d47bab070222835e8a7ad8008da812d63171859d2cbecfe","first_seen":"2026-04-02T15:01:52.207166Z","last_seen":"2026-04-20T13:12:05.814749Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":140,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://knowles-firm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14500\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 02:09:12 GMT\r\nexpires: Sun, 28 Mar 2027 02:09:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:13 GMT\r\ncontent-type: font/woff2\r\nage: 478330\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14500,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-04-23T11:05:28.012536Z","times_seen":2312,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":162,"dns":1,"connect":14,"send":0,"wait":8,"receive":1,"ssl":165},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"neo.tildacdn.com/js/tilda-fallback-advanced-1.0.min.js","fqdn":"neo.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"194.48.203.181","port":443,"asn":0,"as":"","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:22.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-fallback-advanced-1.0.min.js HTTP/1.1\r\nHost: neo.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://knowles-firm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 15:01:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Apr 2025 10:43:25 GMT\r\netag: W/\"6811fecd-6b8\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncontent-encoding: gzip\r\nexpires: Thu, 09 Apr 2026 15:01:22 GMT\r\ncache-control: max-age=604800\r\nx-tilda-server: 5\r\nx-tilda-imprint: 54ce4ce9-6f80-4c16-84f8-4377b43fa808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1720,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1719)","md5":"bdf25a895336595169043557b3dbf429","sha1":"fbabc8ef1441f05508d8cf93ebc2687f7032e700","sha256":"80f8b5b63a7173de2bc8aaee336d8aa0ea34810e2e93533cf062d6e0d38020a0","sha512":"df949bb0320db06c672d9b44188d6ff999e33e8e7b87bc215b1099b09ac13fa55b4cc06ef6453b42567e036217e89436f003bf1c8f74a29874469abac75bbc8d","ssdeep":"","tlshash":"9a3140502524e539099706ce71ffa203b582c01ebc4ac081975fdcb8b8a5e874e0af9b","first_seen":"2024-10-05T17:34:40Z","last_seen":"2026-04-22T21:30:14.11623Z","times_seen":1051,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":110,"dns":1,"connect":48,"send":0,"wait":53,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.net/js/tilda-scripts-3.0.min.js","fqdn":"static.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:21.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /js/tilda-scripts-3.0.min.js HTTP/1.1\r\nHost: static.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:21 GMT\r\ncontent-type: application/javascript\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-0284cae9a4cd6a6d0b8407bcd38cf566-33bdeeead94f7d51-01\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 30 Mar 2026 13:57:03 GMT\r\netag: W/\"69ca812f-5934\"\r\nx-tilda-front: fr-3\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-33\r\nx-id-shield: am3-hw-edge-gc38\r\nage: 194052\r\ncontent-encoding: br\r\nx-id: sto5-hw-edge-gc17\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-31T09:08:32+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":22836,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22814)","md5":"bc9aeb2337044ad6af8c59a6c025ff59","sha1":"b603ac94bc70707060e4b5fa10a38582a7dedb96","sha256":"0567d6ceba709b26ba60648561dad1121b451a0ccd6809a1bd9da6793fc8b945","sha512":"9270d73399e2fa3f5f2eb4deeae3956d8838085c17335d6294f82442d6374a1688f05d2ac6e7a9b7c5b061d1f7319605629695ce79309a5813b71187c5b6f53e","ssdeep":"384:4N+t+WCz/Ip+uJkU2p6o8VYk5qSzJp2T7uj8n+zav0oezfllh/RMokdDiUy/p9Kq:xthCz/Iouwp6o8Ck5qSzJM3uj8n+Ov0L","tlshash":"c1a2c8387744383701ab1aabb7bab38835306619ab038440f11ddda4b99cec76917fd9","first_seen":"2026-03-31T09:06:35.109711Z","last_seen":"2026-04-21T08:11:06.723302Z","times_seen":227,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":171,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optim.tildacdn.net/tild3134-6131-4036-b431-386530393061/-/resize/710x/-/format/webp/photo.png.webp","fqdn":"optim.tildacdn.net","domain":"tildacdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://knowles-firm.com/","date":"2026-04-02T15:01:24.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.net","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Fri, 10 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:74:0D:4F:8C:CC:6D:4E:9D:30:96:4D:47:38:73:BA:E7:99:70:98","sha256":"25:0B:58:12:21:6B:33:6D:38:B5:95:CC:76:94:2D:40:C8:D5:8E:8A:09:11:E7:35:F4:5B:B5:19:BD:4C:5E:7C"}}},"request":{"raw":"GET /tild3134-6131-4036-b431-386530393061/-/resize/710x/-/format/webp/photo.png.webp HTTP/1.1\r\nHost: optim.tildacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://knowles-firm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:01:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 208348\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-28e3e4de28b21718c614296c22b67f21-be051444938f6c20-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Mon, 23 Mar 2026 11:20:05 GMT\r\netag: \"69c121e5-32ddc\"\r\nx-tilda-server: 6\r\nx-id-shield: am3-hw-edge-gc11\r\nage: 877262\r\nx-cached-since: 2026-03-23T11:20:22+00:00\r\nx-id: sto5-hw-edge-gc22\r\naccess-control-allow-origin: *\r\ncache: HIT, MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":208348,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"edab427ee14f786ab3444b8859b7bca1","sha1":"95b49fe7ae4efe30cce558780b6e2c5e03cecee1","sha256":"d5e37697b7367f214cdf05e7f46db7f3e751a956b2fff244cbb816b0d8b67ab3","sha512":"2ef4934cc875a6b02629e1df85f0124f195f413bd2a6348f29c31b00fe85e0fec13994ce45e44dd79f1ebd5dd771c071253bb416ea7aa8cb9a5bc11107fb60c9","ssdeep":"6144:FgJhK6AKXjOXYoL2e8JIbrV4sqoeG+TnUv4:FgPK6AeOXXreoj+Q4","tlshash":"2a14239678a6aeb89879bd1381c08af3f53110111a5118df3b4f496e1ed0ef58e9d21b","first_seen":"2026-04-02T15:01:52.209307Z","last_seen":"2026-04-20T13:12:05.854215Z","times_seen":2,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":52,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}