links.survivor-tech.com/a/1656/click/1200/4294758/7d5b5c2a9d96b27144540e7a3210f8ce3616cb82/936d8010e8857484ec8639051ba9c415d3064d5c
302 Found 148 B URL User Request GET HTTP/1.1 links.survivor-tech.com/a/1656/click/1200/4294758/7d5b5c2a9d96b27144540e7a3210f8ce3616cb82/936d8010e8857484ec8639051ba9c415d3064d5c
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerLet's Encrypt
Subjectlinks.survivor-tech.com
Fingerprint28:E3:0D:38:A4:BC:19:C1:F0:33:83:DD:4A:05:9B:8B:DF:EC:80:7C
ValiditySat, 06 Apr 2024 08:29:03 GMT - Fri, 05 Jul 2024 08:29:02 GMT
File type HTML document, ASCII text, with no line terminators
Hash 17f8678dbb662cced8ea30e7f5d0f6cc
bef460ef57991b390de19ab6284610d25bddd60a
2b487d96f2a4752238b1727c2df35e2334b035122b170fe005020663960267b8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /a/1656/click/1200/4294758/7d5b5c2a9d96b27144540e7a3210f8ce3616cb82/936d8010e8857484ec8639051ba9c415d3064d5c HTTP/1.1
Host: links.survivor-tech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
location: https://go.offerwave.org/aff_c?offer_id=2528&aff_id=1557&aff_sub=stjourney
content-type: text/html; charset=utf-8
cache-control: no-cache
set-cookie: _session_id=269793933c4c68513162fb357746c4ba; path=/; expires=Mon, 29 Apr 2024 22:06:55 GMT; HttpOnly
x-request-id: 98417805-3c9c-4279-ad61-0436760644c5
x-runtime: 0.081838
vary: Origin
transfer-encoding: chunked
go.offerwave.org/aff_c?offer_id=2528&aff_id=1557&aff_sub=stjourney
302 Found 305 B URL User Request GET HTTP/1.1 go.offerwave.org/aff_c?offer_id=2528&aff_id=1557&aff_sub=stjourney
IP
Certificate IssuerAmazon
Subjectgo.offerwave.org
Fingerprint9D:7E:93:77:77:E5:E1:02:CE:6F:D8:74:9E:3B:1E:E3:AA:33:2C:1A
ValidityWed, 10 Jan 2024 00:00:00 GMT - Fri, 07 Feb 2025 23:59:59 GMT
File type HTML document, ASCII text
Hash 7bc9840182fa3cc43a76f79462627992
9b97b0c5a89631be4c9217de289f42d9f0051780
623aa874dfdb4a2440274ad2dc86dd1da05dbb2f23a0f6c7b7973b267d20cda6
GET /aff_c?offer_id=2528&aff_id=1557&aff_sub=stjourney HTTP/1.1
Host: go.offerwave.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 24 Apr 2024 22:06:55 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 305
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: https://www.bg6yrfg.com/69PDQW/52TFBR/?sub1=stjourney&sub2=10292351218df7438478f56e5f08be&sub3=2528&sub4=1557
P3p: CP="NOI CUR OUR NOR INT"
Pragma: no-cache
Set-Cookie: enc_aff_session_2528=ENC030668652825b06d9f6e0b8e26e53da63ce31d46d32e31c2dfcb4e76bb231dc6f1c6169900c9d622274eff0085827fed8169107526ca6903bdf3b57650408e4d3c1351c5e42cd6a3646684f6588c4a8525da7b748882de5c62db080e5a2f6f8a874ed58088ec8a44fd84fa2fe52f5077bc160cdf8d082a8e1d80a31b5f314e2d6a1fb19e42; expires=Fri, 24 May 2024 22:06:55 GMT; path=/; SameSite=None; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiI5Ni4wIiwibW9iaWxlX2NhcnJpZXIiOiI/IiwidXNlcl9hZ2VudCI6Ik1vemlsbGEvNS4wIChYMTE7IExpbnV4IFg4Nl82NDsgUnY6OTYuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC85Ni4wIiwiYWNjZXB0X2xhbmd1YWdlIjoiZW4tVVMsZW47cT0wLjUiLCJjb25uZWN0aW9uX3NwZWVkIjoiYnJvYWRiYW5kIn0=; expires=Sat, 20 Mar 2027 08:46:55 GMT; path=/; SameSite=None; Secure
Tracking_id: 10292351218df7438478f56e5f08be
X-Robots-Tag: noindex, nofollow
Access-Control-Allow-Origin: *
X-Request-Id: 0e18e3e1932dad36035d508c9eb736fb
Access-Control-Allow-Headers: Tune-SDK-Version
www.bg6yrfg.com/69PDQW/52TFBR/?sub1=stjourney&sub2=10292351218df7438478f56e5f08be&sub3=2528&sub4=1557
302 Found 245 B URL User Request GET HTTP/2 www.bg6yrfg.com/69PDQW/52TFBR/?sub1=stjourney&sub2=10292351218df7438478f56e5f08be&sub3=2528&sub4=1557
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerStarfield Technologies, Inc.
Subjectp8btrk.com
Fingerprint98:8E:CD:C3:72:D8:61:E2:06:1A:5E:08:84:EE:4E:92:5A:12:13:86
ValidityThu, 30 Nov 2023 22:40:27 GMT - Tue, 31 Dec 2024 22:40:27 GMT
File type HTML document, ASCII text
Hash 8d636a955c02b4e2bc5ebaa0f8190067
0020efa1d0e067e901bd01aecf3ddcfa633ba684
dbafe4da1a849ca204680bf4f95324c37fab56ad9073b52ec4b9b5546a1b51d6
GET /69PDQW/52TFBR/?sub1=stjourney&sub2=10292351218df7438478f56e5f08be&sub3=2528&sub4=1557 HTTP/1.1
Host: www.bg6yrfg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Wed, 24 Apr 2024 22:06:55 GMT
content-type: text/html; charset=utf-8
content-length: 245
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
location: https://yourliversupport.com?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
set-cookie: uniqueClick_52TFBR=b0acc295-4f28-4c83-8c47-b755f4d6d809:1713996415; Path=/; Expires=Thu, 25 Apr 2024 22:06:55 GMT; Secure; SameSite=None
transaction_id=70a3ad69a60c4ca4aa075e28673a25fd; Path=/; Expires=Tue, 23 Jul 2024 22:06:55 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: 0b6086ed-24fa-4ff8-94d8-79183da3fbb2
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
200 OK 14 kB URL User Request GET HTTP/1.1 yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
IP
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subjectyourliversupport.com
Fingerprint19:A0:BD:08:54:D6:29:77:82:77:30:B8:5F:8C:AD:4E:45:7B:1C:A7
ValidityThu, 14 Mar 2024 03:27:32 GMT - Wed, 12 Jun 2024 03:27:31 GMT
File type HTML document, ASCII text, with very long lines (9008)
Hash d3b8f92993308167a59cd2e02242a2a3
ce9b5c64c4e3ab3d6c2a2a2f214973d448a7b244
1cd0aa5a19b39c40e5747e543c19b053cc244d096c08e03cab882709ed0cc37f
GET /?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682 HTTP/1.1
Host: yourliversupport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 22:06:56 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: Express
ETag: W/"c228-zptcZMTjqz1sKiovIUlz1EinskQ"
Content-Encoding: gzip
www.googletagmanager.com/gtm.js?id=GTM-T58C6B7
200 OK 118 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-T58C6B7
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File type JavaScript source, ASCII text, with very long lines (62107)
Size 118 kB (118241 bytes)
Hash 207d62395a23bb217497b2c803992afc
13a3beb5c301f0eb65c76923890dd114aed95329
621cda7bd32726e0f3cee28af766fbefd892e535d2d85455d9b64351b797c929
GET /gtm.js?id=GTM-T58C6B7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:06:56 GMT
expires: Wed, 24 Apr 2024 22:06:56 GMT
cache-control: private, max-age=900
last-modified: Wed, 24 Apr 2024 21:11:04 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 118241
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://yourliversupport.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 16:27:38 GMT
expires: Wed, 23 Apr 2025 16:27:38 GMT
cache-control: public, max-age=31536000
age: 106758
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNZaxM.woff2
200 OK 27 kB URL GET HTTP/2 fonts.gstatic.com/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNZaxM.woff2
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File type Web Open Font Format (Version 2), TrueType, length 27120, version 1.0
Hash 43e7d3f1dec74478587a2b3cfa272631
c065f24ac428353854ebd6715c49966fc4f4c762
6c6c9c3fad669c3d32227f5cc3467735c8211ddcf4f8c184c2e62e7f3ef7af44
GET /s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNZaxM.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://yourliversupport.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27120
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 20 Apr 2024 22:05:33 GMT
expires: Sun, 20 Apr 2025 22:05:33 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 26 Apr 2022 16:42:07 GMT
content-type: font/woff2
age: 345683
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/librebaskerville/v14/kmKiZrc3Hgbbcjq75U4uslyuy4kn0qviTgY3KcA.woff2
200 OK 28 kB URL GET HTTP/2 fonts.gstatic.com/s/librebaskerville/v14/kmKiZrc3Hgbbcjq75U4uslyuy4kn0qviTgY3KcA.woff2
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File type Web Open Font Format (Version 2), TrueType, length 27976, version 1.0
Hash 22907ce040431644b934b72a7c431a36
78863dfb62414fe1a73f64d7f7fbff63ebccb322
658cbf469e751ade6d30b701fc7ca00b3403329481955d30acb721ca38b45d99
GET /s/librebaskerville/v14/kmKiZrc3Hgbbcjq75U4uslyuy4kn0qviTgY3KcA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://yourliversupport.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:24:29 GMT
expires: Fri, 18 Apr 2025 17:24:29 GMT
cache-control: public, max-age=31536000
age: 535347
last-modified: Tue, 26 Apr 2022 15:45:46 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://yourliversupport.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 13:20:56 GMT
expires: Fri, 18 Apr 2025 13:20:56 GMT
cache-control: public, max-age=31536000
age: 549960
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
yourliversupport.com/img/featured-on/king/featured-logo-d.svg
200 OK 3.7 kB URL GET HTTP/1.1 yourliversupport.com/img/featured-on/king/featured-logo-d.svg
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerLet's Encrypt
Subjectyourliversupport.com
Fingerprint19:A0:BD:08:54:D6:29:77:82:77:30:B8:5F:8C:AD:4E:45:7B:1C:A7
ValidityThu, 14 Mar 2024 03:27:32 GMT - Wed, 12 Jun 2024 03:27:31 GMT
File type SVG Scalable Vector Graphics image
Hash d0b252eba785e474f78fb1381fab14b5
1684f29113f6ca946cc90143e14a022ad726a554
3bb5fdf2030456fac4167dd69ab5137a70fd2bbf29931859454ead1057cb0a71
GET /img/featured-on/king/featured-logo-d.svg HTTP/1.1
Host: yourliversupport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 22:06:56 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Fri, 01 Sep 2023 13:01:04 GMT
ETag: W/"1e33-18a50d5329d"
Content-Encoding: gzip
secure.liverrenew.com/cgi-bin/UCAffiliateNetworkPixel
200 OK 850 B URL GET HTTP/2 secure.liverrenew.com/cgi-bin/UCAffiliateNetworkPixel
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerSectigo Limited
Subjectsecure.liverrenew.com
Fingerprint08:2F:D6:98:A0:C4:E3:74:0F:D1:C6:F4:3E:9D:93:8F:E0:95:92:48
ValidityFri, 14 Jul 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with CRLF line terminators
Hash 990436fab820f872b1093fdd0bbbc37c
528933960b182bd03964d1b6a86b3e7c44ef619b
90e5fdbf38c8075422335b685c0648ef987b1ecdb08de669af81edf12252d198
GET /cgi-bin/UCAffiliateNetworkPixel HTTP/1.1
Host: secure.liverrenew.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 22:06:56 GMT
content-type: text/javascript; charset=utf-8
content-length: 850
set-cookie: AWSALB=oy69nhkcLRdxOBdT0WxglPbwUafY6GQcNNmOyiMLxiSxqzOPWTM0fqjj/B2VDwm+wsZKQwAYiRYdpHnuprDnKevTy8c3XyVHWnyXqVes9C9BHfkI3vX3yTHLwj/U; Expires=Wed, 01 May 2024 22:06:56 GMT; Path=/
AWSALBCORS=oy69nhkcLRdxOBdT0WxglPbwUafY6GQcNNmOyiMLxiSxqzOPWTM0fqjj/B2VDwm+wsZKQwAYiRYdpHnuprDnKevTy8c3XyVHWnyXqVes9C9BHfkI3vX3yTHLwj/U; Expires=Wed, 01 May 2024 22:06:56 GMT; Path=/; SameSite=None; Secure
server: Apache
x-content-type-options: nosniff
p3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
d9i5ve8f04qxt.cloudfront.net/UC/62/uca/0.1.0/js/collect-g.js?mid=LHP&channel=secure.liverrenew.com
200 OK 20 kB URL GET HTTP/2 d9i5ve8f04qxt.cloudfront.net/UC/62/uca/0.1.0/js/collect-g.js?mid=LHP&channel=secure.liverrenew.com
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (5690), with CRLF, LF line terminators
Hash 2aea1dee660c740794a4c8bf0c08c16b
7a962aa6a9fd6ca4a43eef08db7e5335187904af
5fb3750248c24cf121b03396975be700ccbb285975ca23e963ba841f43c9e7d9
GET /UC/62/uca/0.1.0/js/collect-g.js?mid=LHP&channel=secure.liverrenew.com HTTP/1.1
Host: d9i5ve8f04qxt.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/x-javascript; charset=UTF-8
content-length: 20193
last-modified: Tue, 16 Apr 2024 12:57:02 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Tue, 23 Apr 2024 13:03:52 GMT
cache-control: max-age=604800,s-maxage=604800
etag: "f25aded1a2c0dc3e4131354d7a639683"
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: OuFW8dDATRtAV1CJRv_TuCAd2BM0H156PqJcKXI1aqOaiQuysMJinQ==
age: 119033
X-Firefox-Spdy: h2
sc-static.net/scevent.min.js
200 OK 19 kB URL GET HTTP/2 sc-static.net/scevent.min.js
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerAmazon
Subjectsc-static.net
FingerprintE4:8A:DF:2D:95:33:E5:93:D4:43:8A:14:06:EA:EA:E8:AD:29:20:0F
ValidityThu, 21 Dec 2023 00:00:00 GMT - Sat, 18 Jan 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (28360)
Hash b63285518f1bc28f01cfe8bfb4e6ca47
850cf5957261d3d7bc5484797f5ea6f32630f52f
dac99c71e943d58b4fac29e7bed45da2fc55ceec4d6627ecce863dec95a520aa
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 19396
server: CloudFront
date: Wed, 24 Apr 2024 22:06:57 GMT
access-control-allow-headers: Content-Type
access-control-allow-origin: *
content-encoding: gzip
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=24b5be485c2747719f2dadcc8288a94b;max-age=86400;expires=Thu, 25 Apr 2024 22:06:57 GMT;Path=/scevent.min.js;Secure;SameSite=None
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7w1aGEoWM-BlWn9cu2NgPApJlXkrrOP56pNdAdPB6XGCSAiG11Y2jQ==
X-Firefox-Spdy: h2
www.youtube-nocookie.com/s/player/9135c2ab/www-player.css
200 OK 48 kB URL GET HTTP/3 www.youtube-nocookie.com/s/player/9135c2ab/www-player.css
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash c0aca454c0a9b539d3af1213a20c6625
9893a760290f6d8a9fed3a9f3129e7285b702430
13a3fa279a6816ddd952f42fd82f5bc170ac2ff89410d14d43954b342ad40040
GET /s/player/9135c2ab/www-player.css HTTP/1.1
Host: www.youtube-nocookie.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 48109
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 07:37:01 GMT
expires: Wed, 23 Apr 2025 07:37:01 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 04:19:55 GMT
content-type: text/css
vary: Accept-Encoding, Origin
age: 138596
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
yourliversupport.com/img/featured-on/king/lisa-king-d.png
200 OK 63 kB URL GET HTTP/1.1 yourliversupport.com/img/featured-on/king/lisa-king-d.png
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerLet's Encrypt
Subjectyourliversupport.com
Fingerprint19:A0:BD:08:54:D6:29:77:82:77:30:B8:5F:8C:AD:4E:45:7B:1C:A7
ValidityThu, 14 Mar 2024 03:27:32 GMT - Wed, 12 Jun 2024 03:27:31 GMT
File type PNG image data, 824 x 440, 8-bit colormap, non-interlaced
Hash 1f940cc6dfe17d73eb548e71b927528e
e6a29b8fe824146ad59c6617bdc22f7426c0038a
d86dc3454bdf2110a74e7ba300b641a0700839347df9e6d08232dbbcde4fcde4
GET /img/featured-on/king/lisa-king-d.png HTTP/1.1
Host: yourliversupport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 22:06:56 GMT
Content-Type: image/png
Content-Length: 63192
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Fri, 15 Mar 2024 07:09:00 GMT
ETag: W/"f6d8-18e40f14efd"
cdn.mediago.io/js/pixel.js
200 OK 126 kB URL GET HTTP/2 cdn.mediago.io/js/pixel.js
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerAmazon
Subject*.mediago.io
FingerprintD4:6D:29:DE:0A:B4:82:54:F2:27:37:C3:E6:0A:2E:B9:B5:BC:A1:C5
ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 04 Sep 2024 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Size 126 kB (125772 bytes)
Hash 14fd02d1e2fbdd0101a7155a2310c3e7
517599cf217e2b13265891a1225a82f34f90027f
169e221079f22425b9a70e078510240f14c1df438a1123ea7f0352d23def0dfe
GET /js/pixel.js HTTP/1.1
Host: cdn.mediago.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
content-length: 125772
last-modified: Tue, 16 Apr 2024 06:55:57 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: Na3q8yFqHcGliiXH1g41DyoLOWzeMSSA
accept-ranges: bytes
server: AmazonS3
date: Wed, 24 Apr 2024 10:45:27 GMT
etag: "14fd02d1e2fbdd0101a7155a2310c3e7"
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: a97vSngAKF8ESRQFA5GlfeyuOXYUXmnua54p3GKoVO1cqUMrIaQEGw==
age: 40891
vary: Origin
X-Firefox-Spdy: h2
www.youtube-nocookie.com/s/player/9135c2ab/www-embed-player.vflset/www-embed-player.js
200 OK 97 kB URL GET HTTP/3 www.youtube-nocookie.com/s/player/9135c2ab/www-embed-player.vflset/www-embed-player.js
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File type JavaScript source, ASCII text, with very long lines (829)
Hash 0aed35a162e11be7d10ed66aa72e2e58
166c7428c266750580495281f8da7d304954393c
fc1254ce66294f56ad43e8e7dfbdc65093e2732764c0b8baba5536291699a96a
GET /s/player/9135c2ab/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube-nocookie.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 97263
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 07:37:01 GMT
expires: Wed, 23 Apr 2025 07:37:01 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 04:19:55 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138596
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/destination?id=DC-12763245&l=dataLayer&cx=c
200 OK 73 kB URL GET HTTP/3 www.googletagmanager.com/gtag/destination?id=DC-12763245&l=dataLayer&cx=c
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File type JavaScript source, ASCII text, with very long lines (2165)
Hash 0f940cc07641197aaaed6ab47a88299b
0d8fd9e49389eec4c2d0247dfe9941c9eeab71cc
b749992e97a4d9d593ca0e725fd999b2d0c99ec829b5d11ce30d7bd1e32914c0
GET /gtag/destination?id=DC-12763245&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:06:57 GMT
expires: Wed, 24 Apr 2024 22:06:57 GMT
cache-control: private, max-age=900
last-modified: Wed, 24 Apr 2024 21:11:04 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72752
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.mediago.io/js/h/val.html?postM=1&trackingid=
200 OK 21 kB URL GET HTTP/2 cdn.mediago.io/js/h/val.html?postM=1&trackingid=
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerAmazon
Subject*.mediago.io
FingerprintD4:6D:29:DE:0A:B4:82:54:F2:27:37:C3:E6:0A:2E:B9:B5:BC:A1:C5
ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 04 Sep 2024 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (21187), with no line terminators
Hash 8b68d17f3da429ee620c7a63e2f5098b
eaf0aae3d7a7b45db174058b5ba1fe9a289545c7
ed85daebc59103ac9b249bd3676ec425915eec9bdf24018d880c1178a571c9d6
GET /js/h/val.html?postM=1&trackingid= HTTP/1.1
Host: cdn.mediago.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 21187
last-modified: Mon, 08 Apr 2024 09:54:36 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 7MwpAgvznRx1dcq8IlUNovs5vfdi4Ypg
accept-ranges: bytes
server: AmazonS3
date: Wed, 24 Apr 2024 11:48:28 GMT
etag: "8b68d17f3da429ee620c7a63e2f5098b"
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: L9CcLwYE0vsqAlUH3szIr-dcEEBVD2yt5AfBmJGfiz_gcIs63NWryw==
age: 37121
vary: Origin
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube-nocookie.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:25:07 GMT
expires: Fri, 18 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 535310
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube-nocookie.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:43:03 GMT
expires: Fri, 18 Apr 2025 02:43:03 GMT
cache-control: public, max-age=31536000
age: 588234
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=AW-11030269056
200 OK 81 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=AW-11030269056
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File type JavaScript source, ASCII text, with very long lines (4179)
Hash aed703d0ef032c22d3d6f0935c826d69
a7d4b624c6ed216eea34a526d25b8a0a1f827c77
1135c9e4180a19b1b586b48ac609b1053a7a7fdf23d603c4c5ac6d67b5b9fc5d
GET /gtag/js?id=AW-11030269056 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:06:57 GMT
expires: Wed, 24 Apr 2024 22:06:57 GMT
cache-control: private, max-age=900
last-modified: Wed, 24 Apr 2024 21:11:04 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 80759
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=DC-12763245
200 OK 73 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=DC-12763245
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File type JavaScript source, ASCII text, with very long lines (2165)
Hash 4fb02e63c4503c2c5577c68705d8f768
66bcd3da2d9c7eb3fd49268020cbe4a78ea63667
3cbf385e9312556a1d4136505c57acbd037d7cd6092a3693b82e598657fb8a31
GET /gtag/js?id=DC-12763245 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:06:57 GMT
expires: Wed, 24 Apr 2024 22:06:57 GMT
cache-control: private, max-age=900
last-modified: Wed, 24 Apr 2024 21:11:04 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72712
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=AW-11110460071
200 OK 81 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=AW-11110460071
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File type JavaScript source, ASCII text, with very long lines (4179)
Hash 3c243964927962b72a7d5ac63c260da6
5b5e0c45a86e1cb919e2f1423229011a5e8e3a70
a968fe67b0f5b34ed3e74ca37eb63318432b4d0865d24883519967bbb394edac
GET /gtag/js?id=AW-11110460071 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:06:57 GMT
expires: Wed, 24 Apr 2024 22:06:57 GMT
cache-control: private, max-age=900
last-modified: Wed, 24 Apr 2024 21:11:04 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 80749
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.googleapis.com/css2?family=Libre+Baskerville:ital,wght@0,400;0,700;1,400&family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,700&display=swap
200 OK 74 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Libre+Baskerville:ital,wght@0,400;0,700;1,400&family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,700&display=swap
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File type gzip compressed data, max compression
Hash f09f0883db04741876d238df7d7bfe64
74942f9151b275d102872e5e141d5d4d1266bf83
6597300477755177154b532a2e649bbc7e25b83ec97baad25a2bb4b87af9c192
GET /css2?family=Libre+Baskerville:ital,wght@0,400;0,700;1,400&family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 22:06:56 GMT
date: Wed, 24 Apr 2024 22:06:56 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/destination?id=DC-13420094&l=dataLayer&cx=c
200 OK 73 kB URL GET HTTP/3 www.googletagmanager.com/gtag/destination?id=DC-13420094&l=dataLayer&cx=c
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File type JavaScript source, ASCII text, with very long lines (2165)
Hash 76162640cb9ba6290edb0408f89b8546
c20c14107fd7f6fb1f08d830cda213f08bbbb802
86967296d0da352f6ed2ac85c920023c62a8fb114b01886f4d8f0180ca1fb626
GET /gtag/destination?id=DC-13420094&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:06:57 GMT
expires: Wed, 24 Apr 2024 22:06:57 GMT
cache-control: private, max-age=900
last-modified: Wed, 24 Apr 2024 21:11:04 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72735
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=DC-14029931
200 OK 73 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=DC-14029931
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File type JavaScript source, ASCII text, with very long lines (2165)
Hash 61c91a83df5688a8ed3b836bd06c0c13
b0e014551d5d3f18c3ca777d047901b5969208d9
f2c48c5b3128a5c414617e44b9ed2d8c4723898593077e8641487d128ac20d33
GET /gtag/js?id=DC-14029931 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:06:57 GMT
expires: Wed, 24 Apr 2024 22:06:57 GMT
cache-control: private, max-age=900
last-modified: Wed, 24 Apr 2024 21:11:04 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72705
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=G-SSVM2TL5G6&l=dataLayer&cx=c
200 OK 109 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-SSVM2TL5G6&l=dataLayer&cx=c
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File type JavaScript source, ASCII text, with very long lines (14311)
Size 109 kB (108606 bytes)
Hash 160a246b8ba4349415dfe9c053703b34
4c8a697650526a101c5e666a9772284a14080f33
799d451f64e5c9f1036c918ad1cd465f44d71397913e80da0cc6eaf51db36e0c
GET /gtag/js?id=G-SSVM2TL5G6&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:06:57 GMT
expires: Wed, 24 Apr 2024 22:06:57 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 108606
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/destination?id=DC-14029931&l=dataLayer&cx=c
200 OK 73 kB URL GET HTTP/3 www.googletagmanager.com/gtag/destination?id=DC-14029931&l=dataLayer&cx=c
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File type JavaScript source, ASCII text, with very long lines (2165)
Hash cc64ffc6a67401744d4fbc2cf879474f
f3fc972dddd8672bb1e51d81424037ddf2f9eb8d
6ef0e440989e80e286dc939a3f258787aaf3dac85e20643ded3fd5613ef668ee
GET /gtag/destination?id=DC-14029931&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:06:57 GMT
expires: Wed, 24 Apr 2024 22:06:57 GMT
cache-control: private, max-age=900
last-modified: Wed, 24 Apr 2024 21:11:04 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72742
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
yourliversupport.com/img/video/play-img-3-d.gif
200 OK 163 kB URL GET HTTP/1.1 yourliversupport.com/img/video/play-img-3-d.gif
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerLet's Encrypt
Subjectyourliversupport.com
Fingerprint19:A0:BD:08:54:D6:29:77:82:77:30:B8:5F:8C:AD:4E:45:7B:1C:A7
ValidityThu, 14 Mar 2024 03:27:32 GMT - Wed, 12 Jun 2024 03:27:31 GMT
File type GIF image data, version 89a, 862 x 486
Size 163 kB (162934 bytes)
Hash cfda95950f575f5284caf3f89298d791
727754794553505698edfab1469ac8f23b2438b1
ff7240485a45cd921e4d8ed43e9833fc8c15931c92cb1cb22bee31309274ed12
GET /img/video/play-img-3-d.gif HTTP/1.1
Host: yourliversupport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 22:06:56 GMT
Content-Type: image/gif
Content-Length: 162934
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 07 Nov 2023 14:05:25 GMT
ETag: W/"27c76-18baa1a3419"
secure.liverrenew.com/cgi-bin/UCAffiliateNetworkPixel?t=0.016180805594067316&r=&u=https%3A%2F%2Fyourliversupport.com%2F%3Futm_source%3Dcpa%26utm_medium%3Daffiliate%26utm_content%3DLRvsl%26utm_campaign%3Dliverrenewcpa%26affid%3D117%26oid%3D82%26uid%3D0%26_ef_transaction_id%3D70a3ad69a60c4ca4aa075e28673a25fd%26n%3D682
200 OK 0 B URL GET HTTP/2 secure.liverrenew.com/cgi-bin/UCAffiliateNetworkPixel?t=0.016180805594067316&r=&u=https%3A%2F%2Fyourliversupport.com%2F%3Futm_source%3Dcpa%26utm_medium%3Daffiliate%26utm_content%3DLRvsl%26utm_campaign%3Dliverrenewcpa%26affid%3D117%26oid%3D82%26uid%3D0%26_ef_transaction_id%3D70a3ad69a60c4ca4aa075e28673a25fd%26n%3D682
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerSectigo Limited
Subjectsecure.liverrenew.com
Fingerprint08:2F:D6:98:A0:C4:E3:74:0F:D1:C6:F4:3E:9D:93:8F:E0:95:92:48
ValidityFri, 14 Jul 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cgi-bin/UCAffiliateNetworkPixel?t=0.016180805594067316&r=&u=https%3A%2F%2Fyourliversupport.com%2F%3Futm_source%3Dcpa%26utm_medium%3Daffiliate%26utm_content%3DLRvsl%26utm_campaign%3Dliverrenewcpa%26affid%3D117%26oid%3D82%26uid%3D0%26_ef_transaction_id%3D70a3ad69a60c4ca4aa075e28673a25fd%26n%3D682 HTTP/1.1
Host: secure.liverrenew.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Cookie: AWSALBCORS=oy69nhkcLRdxOBdT0WxglPbwUafY6GQcNNmOyiMLxiSxqzOPWTM0fqjj/B2VDwm+wsZKQwAYiRYdpHnuprDnKevTy8c3XyVHWnyXqVes9C9BHfkI3vX3yTHLwj/U
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 22:06:57 GMT
content-length: 0
set-cookie: AWSALB=6SPA6VRhm9idet0Pr2Bi2FVojKYd5t6NWIE8jkaRNQrbCsc1MCzfOuuhwjyprsZ/kQEy2Mw0wWOgSezVeyKlqERyWh5QSo5uAeN+woMK1mXEWyf2g/FDvUa+zDrD; Expires=Wed, 01 May 2024 22:06:57 GMT; Path=/
AWSALBCORS=6SPA6VRhm9idet0Pr2Bi2FVojKYd5t6NWIE8jkaRNQrbCsc1MCzfOuuhwjyprsZ/kQEy2Mw0wWOgSezVeyKlqERyWh5QSo5uAeN+woMK1mXEWyf2g/FDvUa+zDrD; Expires=Wed, 01 May 2024 22:06:57 GMT; Path=/; SameSite=None; Secure
LHP-ANP=8991; domain=secure.liverrenew.com; path=/; expires=Fri, 24-May-2024 22:06:57 GMT; HttpOnly
JSESSIONID=abcEjshRAKVWrUqwtzgBN; path=/; HttpOnly
LBJSESSIONID=abcEjshRAKVWrUqwtzgBN.n360; path=/; HttpOnly
server: Apache
p3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
X-Firefox-Spdy: h2
gtrace.mediago.io/ju/cs/eplist?acid=&gdpr_consent=&dm=https%253A%252F%252Fyourliversupport.com&mcb=mmgg_1713996417277_949
200 OK 44 B URL GET HTTP/2 gtrace.mediago.io/ju/cs/eplist?acid=&gdpr_consent=&dm=https%253A%252F%252Fyourliversupport.com&mcb=mmgg_1713996417277_949
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerDigiCert Inc
Subject*.mediago.io
Fingerprint13:26:8E:87:3E:6B:7D:C0:F9:32:B1:3B:53:DC:E6:2C:DF:3A:5D:C4
ValidityThu, 11 Jan 2024 00:00:00 GMT - Fri, 10 Jan 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash cfc92c320e12161ae3533e4c1b1b6a1e
89fdf8e8b763f96322375e7ab7b521ea493414f9
6c3137d524e72eafd1bdbaa6ce0c7eedb90ccd5cf7f200361335860c1305391d
GET /ju/cs/eplist?acid=&gdpr_consent=&dm=https%253A%252F%252Fyourliversupport.com&mcb=mmgg_1713996417277_949 HTTP/1.1
Host: gtrace.mediago.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: https%3A%2F%2Fyourliversupport.com
content-length: 44
content-type: application/javascript; charset=utf-8
set-cookie: __mguid_=9df76ce14e73fcef2ddjlx00lved7o6u; Path=/; Domain=mediago.io; Max-Age=31536000; Secure; SameSite=None
date: Wed, 24 Apr 2024 22:06:57 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/pagead/landing?gcs=G111&gcd=13v3v3v2v5&rnd=1289826033.1713996417&url=https%3A%2F%2Fyourliversupport.com%2F&dma_cps=sypham&dma=1&npa=0>m=45He44m0n81T58C6B7v890812984za200&auid=243498133.1713996417
302 Found 42 B URL POST HTTP/2 www.google.com/pagead/landing?gcs=G111&gcd=13v3v3v2v5&rnd=1289826033.1713996417&url=https%3A%2F%2Fyourliversupport.com%2F&dma_cps=sypham&dma=1&npa=0>m=45He44m0n81T58C6B7v890812984za200&auid=243498133.1713996417
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintCD:48:2A:0C:60:1D:37:5A:D4:D5:A9:F7:DE:A0:2B:5E:2F:29:76:73
ValidityMon, 18 Mar 2024 20:38:49 GMT - Mon, 10 Jun 2024 20:38:48 GMT
File type GIF image data, version 89a, 1 x 1
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /pagead/landing?gcs=G111&gcd=13v3v3v2v5&rnd=1289826033.1713996417&url=https%3A%2F%2Fyourliversupport.com%2F&dma_cps=sypham&dma=1&npa=0>m=45He44m0n81T58C6B7v890812984za200&auid=243498133.1713996417 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yourliversupport.com
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 24 Apr 2024 22:06:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13v3v3v2v5&rnd=1289826033.1713996417&url=https%3A%2F%2Fyourliversupport.com%2F&dma_cps=sypham&dma=1&npa=0>m=45He44m0n81T58C6B7v890812984za200&auid=243498133.1713996417
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube-nocookie.com/s/player/9135c2ab/player_ias.vflset/en_US/base.js
200 OK 810 kB URL GET HTTP/3 www.youtube-nocookie.com/s/player/9135c2ab/player_ias.vflset/en_US/base.js
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File type JavaScript source, ASCII text, with very long lines (555)
Size 810 kB (809527 bytes)
Hash 91d5fcfcb441e6966feed5a3f5e95644
117f9a8fb5a86b70e007876a7fa9941f31c3834b
c090253b46de68d84dacc263c152648fd296b4e8ffff418f5ff2dda06018c9e7
GET /s/player/9135c2ab/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube-nocookie.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 809527
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 07:41:49 GMT
expires: Wed, 23 Apr 2025 07:41:49 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 04:19:55 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138308
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
yourliversupport.com/img/favicon.png
200 OK 1.9 kB URL GET HTTP/1.1 yourliversupport.com/img/favicon.png
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerLet's Encrypt
Subjectyourliversupport.com
Fingerprint19:A0:BD:08:54:D6:29:77:82:77:30:B8:5F:8C:AD:4E:45:7B:1C:A7
ValidityThu, 14 Mar 2024 03:27:32 GMT - Wed, 12 Jun 2024 03:27:31 GMT
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced
Hash 41934545781fd0a7d2450ed51ce00746
3c8e5492284ea823de5fa821b4eee18f5afc2ca0
20d1160d4baa8eb4c0ad192f9497de3a531a2a2d4357006ea7d5bb29f8b0d838
GET /img/favicon.png HTTP/1.1
Host: yourliversupport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Cookie: _gcl_au=1.1.243498133.1713996417; _scid=c717648f-dcd4-4b29-b9bc-66762fdeb3f1; _scid_r=c717648f-dcd4-4b29-b9bc-66762fdeb3f1; _mg_ckp=eyJja1RrZERGIjoiIn0=; _ga_SSVM2TL5G6=GS1.1.1713996417.1.0.1713996417.60.0.0; _ga=GA1.1.740947474.1713996418
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 22:06:58 GMT
Content-Type: image/png
Content-Length: 1928
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Mon, 08 Aug 2022 08:09:57 GMT
ETag: W/"788-1827c80e185"
d1pqvb2h9xgm7r.cloudfront.net/v1/id?channel=secure.liverrenew.com
200 OK 30 B URL GET HTTP/2 d1pqvb2h9xgm7r.cloudfront.net/v1/id?channel=secure.liverrenew.com
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
Hash 5576912afa6e0ae380b733f4ca5b20cf
5588b53dcbf24947effdf8d6c93da3789b4e125d
9723f6be664c6c67e87bfb763f6d1641725cddcc83eec0c40228f7b05dac8f00
GET /v1/id?channel=secure.liverrenew.com HTTP/1.1
Host: d1pqvb2h9xgm7r.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yourliversupport.com
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 30
date: Wed, 24 Apr 2024 22:06:58 GMT
access-control-allow-origin: *
access-control-expose-headers: date, x-api-id
apigw-requestid: WwFUaiwEIAMEaJw=
x-cache: Miss from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: jIzwFPLGmMxV4Ln0Kqf0f-36qnqfyDUY3qSsIs1dKcDefnxltgtUSA==
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-SSVM2TL5G6&cid=740947474.1713996418>m=45je44m0v871036254z8890812984za200&aip=1&dma=1&dma_cps=sypham&gcs=G111&gcd=13v3v3v2v5&npa=0&z=587191010
200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-SSVM2TL5G6&cid=740947474.1713996418>m=45je44m0v871036254z8890812984za200&aip=1&dma=1&dma_cps=sypham&gcs=G111&gcd=13v3v3v2v5&npa=0&z=587191010
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint4E:BD:F9:72:97:67:A2:4B:EE:E4:B0:03:CD:C8:F3:30:53:27:53:1D
ValidityMon, 18 Mar 2024 20:50:06 GMT - Mon, 10 Jun 2024 20:50:05 GMT
File type GIF image data, version 89a, 1 x 1
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-SSVM2TL5G6&cid=740947474.1713996418>m=45je44m0v871036254z8890812984za200&aip=1&dma=1&dma_cps=sypham&gcs=G111&gcd=13v3v3v2v5&npa=0&z=587191010 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 24 Apr 2024 22:06:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
a.ads.rmbl.ws/ratag?id=AV-4610
200 OK 7.9 kB URL GET HTTP/2 a.ads.rmbl.ws/ratag?id=AV-4610
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerLet's Encrypt
Subjecta.ads.rmbl.ws
Fingerprint47:08:9C:66:22:B0:37:7A:B5:B1:2F:5D:76:18:C4:E2:57:EC:6A:80
ValiditySun, 14 Apr 2024 23:01:42 GMT - Sat, 13 Jul 2024 23:01:41 GMT
File type JavaScript source, ASCII text, with very long lines (18187)
Hash 1bf09b3324077a75ad3b50260c45fe36
a478a757bbe40487c503319663a30be905bb1ca9
de796734ce15eb89e25b4ef17e263db2eeee2f45b6134f2faed25d62bc5cf808
GET /ratag?id=AV-4610 HTTP/1.1
Host: a.ads.rmbl.ws
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 22:06:57 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=900
access-control-allow-origin: *
access-control-allow-credentials: true
etag: W/"788ed2f782eb45b57dff78c742214a69"
content-encoding: gzip
X-Firefox-Spdy: h2
www.youtube.com/s/player/9135c2ab/www-widgetapi.vflset/www-widgetapi.js
200 OK 68 kB URL GET HTTP/3 www.youtube.com/s/player/9135c2ab/www-widgetapi.vflset/www-widgetapi.js
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File type JavaScript source, ASCII text, with very long lines (531)
Hash fb49c3c7d5ca52a516613b6947f7d016
b999b3683107b2f76e96f1689087ccbf1e819e62
63a3d01b852ed34867594ef2c007f0fcd1b8ec428d346154201739182d2f1911
GET /s/player/9135c2ab/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 68157
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 07:35:40 GMT
expires: Wed, 23 Apr 2025 07:35:40 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 04:19:55 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138678
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
region1.analytics.google.com/g/collect?v=2&tid=G-SSVM2TL5G6>m=45je44m0v871036254z8890812984za200&_p=1713996416517&_gaz=1&gcs=G111&gcd=13v3v3v2v5&npa=0&dma_cps=sypham&dma=1&cid=740947474.1713996418&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713996417&sct=1&seg=0&dl=https%3A%2F%2Fyourliversupport.com%2F%3Futm_source%3Dcpa%26utm_medium%3Daffiliate%26utm_content%3DLRvsl%26utm_campaign%3Dliverrenewcpa%26affid%3D117%26oid%3D82%26uid%3D0%26_ef_transaction_id%3D70a3ad69a60c4ca4aa075e28673a25fd%26n%3D682&dt=Liver%20Renew&en=page_view&_fv=1&_nsi=1&_ss=1&_c=1&tfd=3111
204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-SSVM2TL5G6>m=45je44m0v871036254z8890812984za200&_p=1713996416517&_gaz=1&gcs=G111&gcd=13v3v3v2v5&npa=0&dma_cps=sypham&dma=1&cid=740947474.1713996418&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713996417&sct=1&seg=0&dl=https%3A%2F%2Fyourliversupport.com%2F%3Futm_source%3Dcpa%26utm_medium%3Daffiliate%26utm_content%3DLRvsl%26utm_campaign%3Dliverrenewcpa%26affid%3D117%26oid%3D82%26uid%3D0%26_ef_transaction_id%3D70a3ad69a60c4ca4aa075e28673a25fd%26n%3D682&dt=Liver%20Renew&en=page_view&_fv=1&_nsi=1&_ss=1&_c=1&tfd=3111
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-SSVM2TL5G6>m=45je44m0v871036254z8890812984za200&_p=1713996416517&_gaz=1&gcs=G111&gcd=13v3v3v2v5&npa=0&dma_cps=sypham&dma=1&cid=740947474.1713996418&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713996417&sct=1&seg=0&dl=https%3A%2F%2Fyourliversupport.com%2F%3Futm_source%3Dcpa%26utm_medium%3Daffiliate%26utm_content%3DLRvsl%26utm_campaign%3Dliverrenewcpa%26affid%3D117%26oid%3D82%26uid%3D0%26_ef_transaction_id%3D70a3ad69a60c4ca4aa075e28673a25fd%26n%3D682&dt=Liver%20Renew&en=page_view&_fv=1&_nsi=1&_ss=1&_c=1&tfd=3111 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yourliversupport.com
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://yourliversupport.com
date: Wed, 24 Apr 2024 22:06:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube-nocookie.com/s/player/9135c2ab/player_ias.vflset/en_US/embed.js
200 OK 18 kB URL GET HTTP/3 www.youtube-nocookie.com/s/player/9135c2ab/player_ias.vflset/en_US/embed.js
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File type JavaScript source, ASCII text, with very long lines (3391)
Hash 8908762cb1a2c9b3c1f5ca78ee779bf9
c14c75ff1f0bc588ea3d95d2a0edd5658f5bc980
95779bc0979b5224a9e8a7ef995e0f3320cef36b62c20d6816b865cd68d3cd6a
GET /s/player/9135c2ab/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube-nocookie.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 18293
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 07:41:49 GMT
expires: Wed, 23 Apr 2025 07:41:49 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 04:19:55 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138309
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL POST HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube-nocookie.com/
Origin: https://www.youtube-nocookie.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube-nocookie.com
vary: origin, referer, x-origin
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 24 Apr 2024 22:06:58 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.p8btrk.com/sdk/click?effp=4065323d44037d0c81333201f3fe1032&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&oid=82&affid=117&__cc=&async=json&uid=0&__efckuq=98
200 OK 86 B URL GET HTTP/3 www.p8btrk.com/sdk/click?effp=4065323d44037d0c81333201f3fe1032&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&oid=82&affid=117&__cc=&async=json&uid=0&__efckuq=98
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerStarfield Technologies, Inc.
Subjectp8btrk.com
Fingerprint98:8E:CD:C3:72:D8:61:E2:06:1A:5E:08:84:EE:4E:92:5A:12:13:86
ValidityThu, 30 Nov 2023 22:40:27 GMT - Tue, 31 Dec 2024 22:40:27 GMT
Hash f18ac4df345ba8c9f01175e484debc5e
acc618bdfa568025792063c81fc928a810a723e3
70d969eaeaafdefed349b41f7800913ab65083cbff860facd830286d0bf5077c
GET /sdk/click?effp=4065323d44037d0c81333201f3fe1032&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&oid=82&affid=117&__cc=&async=json&uid=0&__efckuq=98 HTTP/1.1
Host: www.p8btrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yourliversupport.com/
Origin: https://yourliversupport.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
server: nginx
date: Wed, 24 Apr 2024 22:06:58 GMT
content-type: application/json; charset=utf-8
content-length: 86
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
access-control-allow-credentials: true
access-control-allow-origin: https://yourliversupport.com
set-cookie: uniqueClick=5350b06e-f961-4fcc-9af2-a14f831712b9:1713996418; Path=/; Expires=Thu, 25 Apr 2024 22:06:58 GMT; Secure; SameSite=None
transaction_id=70a3ad69a60c4ca4aa075e28673a25fd; Path=/; Expires=Tue, 23 Jul 2024 22:06:58 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: 316ca16f-e40c-4fc6-a635-e9e6781c5d22
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 42 kB URL POST HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hash 81c5425a924e492a1213fd36922e84ec
a208e9138d806f6049bcaaf5e01975cc9a1b36a1
8ca9d96ef9ca869d48dc4bc2e4087f503f25e4411d26e1d15860e029743ae859
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube-nocookie.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 24 Apr 2024 22:06:58 GMT
server: ESF
cache-control: private
content-length: 41536
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube-nocookie.com
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
200 OK 65 kB URL GET HTTP/2 www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (58050)
Hash d5d0fa7b5ed20390e325b4deb8f9dcb5
823818ba75bbd1a36ccadaf817abc4b505404e89
1435cc089afecd0500533d63ce1898c954bf986ca41314fa28717e5b2d439117
GET /embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3 HTTP/1.1
Host: www.youtube-nocookie.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 22:06:56 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="YOUTUBE_NOCOOKIE_DOMAIN"
report-to: {"group":"YOUTUBE_NOCOOKIE_DOMAIN","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/YOUTUBE_NOCOOKIE_DOMAIN"}]}
cross-origin-resource-policy: cross-origin
origin-trial: AsnbWYr3bqK88n/C2BgXPMpBC+msV4jf6vsgnAir+gFnHw3zXZEKmz271E4vhxTja+7SD2q3dr2BxZlHzvj9HA0AAACBeyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUtbm9jb29raWUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: br
server: ESF
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
d1pqvb2h9xgm7r.cloudfront.net/v1/rt
200 OK 0 B URL POST HTTP/3 d1pqvb2h9xgm7r.cloudfront.net/v1/rt
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/rt HTTP/1.1
Host: d1pqvb2h9xgm7r.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://yourliversupport.com/
Origin: https://yourliversupport.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 05:15:10 GMT
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
access-control-max-age: 300
apigw-requestid: WtxG0guZIAMEMNg=
x-cache: Hit from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: BWo-HZ0VAXrAcaXa7UhifLcV9C4-p5I5KMlQYlwgBmN2K4LcH-G4FQ==
age: 60708
X-Firefox-Spdy: h2
yt3.ggpht.com/GtshdF8TW0uhFZ4PkJNQO2cJRYuSbXv9NJK_g4n2MyXrx7zyY-2QQ4OBDh5vpBKHZBN3BpkP=s68-c-k-c0x00ffffff-no-rj
200 OK 1.3 kB URL GET HTTP/2 yt3.ggpht.com/GtshdF8TW0uhFZ4PkJNQO2cJRYuSbXv9NJK_g4n2MyXrx7zyY-2QQ4OBDh5vpBKHZBN3BpkP=s68-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47
ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Hash d1c682359406f041943bf6349774def1
fbdc5c0b43d6817e7c7e575ec8e4bfa7e35fcb1b
9dce8e874f6e7a89f7f3ac819f413767dd02e9401ffdc980f80ee60978c3923d
GET /GtshdF8TW0uhFZ4PkJNQO2cJRYuSbXv9NJK_g4n2MyXrx7zyY-2QQ4OBDh5vpBKHZBN3BpkP=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="channels4_profile.jpg"
x-content-type-options: nosniff
server: fife
content-length: 1313
x-xss-protection: 0
cross-origin-resource-policy: cross-origin
date: Wed, 24 Apr 2024 19:21:37 GMT
expires: Thu, 25 Apr 2024 19:21:37 GMT
cache-control: public, max-age=86400, no-transform
age: 9921
etag: "v1"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
service3.purehealthresearch.com/adnypeu
201 Created 0 B URL GET HTTP/1.1 service3.purehealthresearch.com/adnypeu
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerLet's Encrypt
Subjectservice3.purehealthresearch.com
Fingerprint1B:82:AE:55:AD:D1:FB:F4:20:30:B5:32:52:60:37:42:5E:60:8B:F0
ValidityFri, 05 Apr 2024 17:56:50 GMT - Thu, 04 Jul 2024 17:56:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adnypeu HTTP/1.1
Host: service3.purehealthresearch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yourliversupport.com/
Origin: https://yourliversupport.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 201 Created
Server: nginx
Date: Wed, 24 Apr 2024 22:06:58 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
www.youtube-nocookie.com/s/player/9135c2ab/player_ias.vflset/en_US/captions.js
200 OK 24 kB URL GET HTTP/3 www.youtube-nocookie.com/s/player/9135c2ab/player_ias.vflset/en_US/captions.js
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File type JavaScript source, ASCII text, with very long lines (546)
Hash 61a147750af65b0d1400117348e799fc
9384e4d4db59541e5bf9dbf2a9cd3a479fddd490
11a290f6940c75508d0d913aff6613aa09426bf5b5752336b293d846301d95fa
GET /s/player/9135c2ab/player_ias.vflset/en_US/captions.js HTTP/1.1
Host: www.youtube-nocookie.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 24447
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 07:58:35 GMT
expires: Wed, 23 Apr 2025 07:58:35 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 04:19:55 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 137304
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube-nocookie.com/s/player/9135c2ab/player_ias.vflset/en_US/endscreen.js
200 OK 8.4 kB URL GET HTTP/3 www.youtube-nocookie.com/s/player/9135c2ab/player_ias.vflset/en_US/endscreen.js
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File type JavaScript source, ASCII text, with very long lines (607)
Hash da5efc313d1c3bc9f4c94000cd6c36c3
ba1381a416a2feb065d3e9e71680843419db5783
7264425d18fb1db658d45f44a04bf8d1ed8048d1631fa64c7981c6a2eb28eca8
GET /s/player/9135c2ab/player_ias.vflset/en_US/endscreen.js HTTP/1.1
Host: www.youtube-nocookie.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 8390
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 07:58:35 GMT
expires: Wed, 23 Apr 2025 07:58:35 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 04:19:55 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 137304
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
s.yimg.com/wi/config/10195287.json
200 OK 22 B URL GET HTTP/2 s.yimg.com/wi/config/10195287.json
IP
ASN #203220 Yahoo-UK Limited
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10195287.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yourliversupport.com
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
x-amz-request-id: HX0V28WPAY77TRE2
x-amz-id-2: s1ISFXoq6LgAVwDtCFBWcaoMiACHK6FdJhcnHLr/EEr1pFUnHGhtAJgifJbnh/BGbrhGHMyOz2k=
content-type: application/json
date: Wed, 24 Apr 2024 22:06:58 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
age: 3
content-encoding: gzip
content-length: 22
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.youtube-nocookie.com/api/stats/qoe?fmt=134&cpn=4HbneYHvfM-xDnUN&el=embedded&ns=yt&fexp=v1%2C23983296%2C21348%2C76094%2C54572%2C304051%2C84737%2C36318%2C6271%2C26443548%2C7111%2C36343%2C9954%2C1192%2C10512%2C15984%2C6966%2C2%2C6689%2C2007%2C662%2C5689%2C2721%2C4654%2C15421%2C9076%2C531%2C1667%2C4395%2C4574%2C1026%2C1103%2C20%2C7085%2C2606%2C55%2C496%2C142%2C5%2C3%2C41%2C3%2C288%2C2%2C79%2C4915&cl=627220534&seq=1&docid=Wd9ZtH9NQWc&ei=goIpZszDKpbL0u8PkIuneA&event=streamingstats&plid=AAYW3uOvV19yqx3f&referrer=https%3A%2F%2Fwww.youtube-nocookie.com%2Fembed%2FWd9ZtH9NQWc%3Fenablejsapi%3D1%26playsinline%3D1%26rel%3D0%26controls%3D0%26showinfo%3D0%26autoplay%3D1%26modestbranding%3D1%26iv_load_policy%3D3&qclc=ChA0SGJuZVlIdmZNLXhEblVOEAE&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240422.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&vps=0.000:N,0.025:B,0.322:B,0.322:B&cat=streaming&cmt=0.025:0.000,0.322:0.000&vfs=0.322:134:134::r&view=0.322:926:521&bwe=0.322:130000&vis=0.322:0&bh=0.322:0.000
204 No Content 0 B URL POST HTTP/3 www.youtube-nocookie.com/api/stats/qoe?fmt=134&cpn=4HbneYHvfM-xDnUN&el=embedded&ns=yt&fexp=v1%2C23983296%2C21348%2C76094%2C54572%2C304051%2C84737%2C36318%2C6271%2C26443548%2C7111%2C36343%2C9954%2C1192%2C10512%2C15984%2C6966%2C2%2C6689%2C2007%2C662%2C5689%2C2721%2C4654%2C15421%2C9076%2C531%2C1667%2C4395%2C4574%2C1026%2C1103%2C20%2C7085%2C2606%2C55%2C496%2C142%2C5%2C3%2C41%2C3%2C288%2C2%2C79%2C4915&cl=627220534&seq=1&docid=Wd9ZtH9NQWc&ei=goIpZszDKpbL0u8PkIuneA&event=streamingstats&plid=AAYW3uOvV19yqx3f&referrer=https%3A%2F%2Fwww.youtube-nocookie.com%2Fembed%2FWd9ZtH9NQWc%3Fenablejsapi%3D1%26playsinline%3D1%26rel%3D0%26controls%3D0%26showinfo%3D0%26autoplay%3D1%26modestbranding%3D1%26iv_load_policy%3D3&qclc=ChA0SGJuZVlIdmZNLXhEblVOEAE&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240422.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&vps=0.000:N,0.025:B,0.322:B,0.322:B&cat=streaming&cmt=0.025:0.000,0.322:0.000&vfs=0.322:134:134::r&view=0.322:926:521&bwe=0.322:130000&vis=0.322:0&bh=0.322:0.000
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/stats/qoe?fmt=134&cpn=4HbneYHvfM-xDnUN&el=embedded&ns=yt&fexp=v1%2C23983296%2C21348%2C76094%2C54572%2C304051%2C84737%2C36318%2C6271%2C26443548%2C7111%2C36343%2C9954%2C1192%2C10512%2C15984%2C6966%2C2%2C6689%2C2007%2C662%2C5689%2C2721%2C4654%2C15421%2C9076%2C531%2C1667%2C4395%2C4574%2C1026%2C1103%2C20%2C7085%2C2606%2C55%2C496%2C142%2C5%2C3%2C41%2C3%2C288%2C2%2C79%2C4915&cl=627220534&seq=1&docid=Wd9ZtH9NQWc&ei=goIpZszDKpbL0u8PkIuneA&event=streamingstats&plid=AAYW3uOvV19yqx3f&referrer=https%3A%2F%2Fwww.youtube-nocookie.com%2Fembed%2FWd9ZtH9NQWc%3Fenablejsapi%3D1%26playsinline%3D1%26rel%3D0%26controls%3D0%26showinfo%3D0%26autoplay%3D1%26modestbranding%3D1%26iv_load_policy%3D3&qclc=ChA0SGJuZVlIdmZNLXhEblVOEAE&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240422.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&vps=0.000:N,0.025:B,0.322:B,0.322:B&cat=streaming&cmt=0.025:0.000,0.322:0.000&vfs=0.322:134:134::r&view=0.322:926:521&bwe=0.322:130000&vis=0.322:0&bh=0.322:0.000 HTTP/1.1
Host: www.youtube-nocookie.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Visitor-Id: CgtYTHlQX2tEQ2NJZyiAhaaxBjIOCgJOTxIIEgQSAgsMIGk%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240422.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1713996418449&flash=0&frm=2&u_tz&u_his=3&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C926%2C521&vis=1&wgl=true&ca_type=image
Content-Type: application/x-www-form-urlencoded
Content-Length: 226
Origin: https://www.youtube-nocookie.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
date: Wed, 24 Apr 2024 22:06:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: Video Stats Server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL POST HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.youtube-nocookie.com/
Origin: https://www.youtube-nocookie.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube-nocookie.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 24 Apr 2024 22:06:59 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL POST HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.youtube-nocookie.com/
Origin: https://www.youtube-nocookie.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube-nocookie.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 24 Apr 2024 22:06:59 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://yourliversupport.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:32:46 GMT
expires: Fri, 18 Apr 2025 02:32:46 GMT
cache-control: public, max-age=31536000
age: 588853
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube-nocookie.com/
Origin: https://www.youtube-nocookie.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube-nocookie.com
vary: origin, referer, x-origin
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 24 Apr 2024 22:06:59 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1714018018&ei=goIpZszDKpbL0u8PkIuneA&ip=91.90.42.154&id=o-AE3a9YkNQSn77c7jlAdbAKeYvwZwRoOoStgKAgc2g_wm&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=3D&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeen7y&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=4366250&bui=AWRWj2TuN5vw_Cm0T_26wfsJZowGUNzvtlwIjBYsqOILZWDuyykoAyD0piR4T-N172ZxjvjBo7UnFvqu&spc=UWF9fz4dQ8Z4giS5gPDWC11nJZFp1hQsftRwjkIKAQWZHQ3mduC3aKlMNg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=Fzz3dij4bXYVnQZWEWYXS8oQ&gir=yes&clen=22022156&dur=1548.181&lmt=1702642292486665&mt=1713996045&fvip=1&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=6218224&n=ONM8u0igi7budQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AHWaYeowRQIhAMU1SgGnWw--uBhIKfkac4ohBR5PXqnIJXmtAfydITZzAiA_4obnhM9zGCc5lAkqrdcFRACECLshcGRvW4HcZ6m5gA%3D%3D&alr=yes&sig=AJfQdSswRAIgYb0jhR9rl37I9XAsvc0ipnm3DtxIIEGSzGL4B-PD3BoCIHdUjMX2w6rnKh8oNaKXfMwcs7BStJ0dX1rsX_AYfkN4&cpn=4HbneYHvfM-xDnUN&cver=1.20240422.01.00&range=0-68468&rn=2&rbuf=0&pot=IjpN9k3wK9_PdA6ROa8ZviGnFcQ5sxzEA7wXjyS3JZcsjg-cBLkOkQe5GY4EvwiRHKUMkT67BLEm036y&ump=1&srfvp=1
200 OK 1.3 kB URL POST HTTP/1.1 rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1714018018&ei=goIpZszDKpbL0u8PkIuneA&ip=91.90.42.154&id=o-AE3a9YkNQSn77c7jlAdbAKeYvwZwRoOoStgKAgc2g_wm&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=3D&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeen7y&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=4366250&bui=AWRWj2TuN5vw_Cm0T_26wfsJZowGUNzvtlwIjBYsqOILZWDuyykoAyD0piR4T-N172ZxjvjBo7UnFvqu&spc=UWF9fz4dQ8Z4giS5gPDWC11nJZFp1hQsftRwjkIKAQWZHQ3mduC3aKlMNg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=Fzz3dij4bXYVnQZWEWYXS8oQ&gir=yes&clen=22022156&dur=1548.181&lmt=1702642292486665&mt=1713996045&fvip=1&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=6218224&n=ONM8u0igi7budQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AHWaYeowRQIhAMU1SgGnWw--uBhIKfkac4ohBR5PXqnIJXmtAfydITZzAiA_4obnhM9zGCc5lAkqrdcFRACECLshcGRvW4HcZ6m5gA%3D%3D&alr=yes&sig=AJfQdSswRAIgYb0jhR9rl37I9XAsvc0ipnm3DtxIIEGSzGL4B-PD3BoCIHdUjMX2w6rnKh8oNaKXfMwcs7BStJ0dX1rsX_AYfkN4&cpn=4HbneYHvfM-xDnUN&cver=1.20240422.01.00&range=0-68468&rn=2&rbuf=0&pot=IjpN9k3wK9_PdA6ROa8ZviGnFcQ5sxzEA7wXjyS3JZcsjg-cBLkOkQe5GY4EvwiRHKUMkT67BLEm036y&ump=1&srfvp=1
IP
ASN #50304 Blix Solutions AS
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.googlevideo.com
Fingerprint05:65:DE:5B:B7:CF:9A:4A:22:AF:57:DB:9B:EC:B9:BD:E5:B0:57:E2
ValidityTue, 09 Apr 2024 14:31:07 GMT - Tue, 18 Jun 2024 14:31:06 GMT
Hash c3a412fbb20bd163d3dcc9c5af6d8bb4
d034172e3499dc90c1f57d5dcbab53365867596f
13b3ed705cd3441d2e6920f7a65c470412f1309f8494d669a3f48023742dadfe
POST /videoplayback?expire=1714018018&ei=goIpZszDKpbL0u8PkIuneA&ip=91.90.42.154&id=o-AE3a9YkNQSn77c7jlAdbAKeYvwZwRoOoStgKAgc2g_wm&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=3D&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeen7y&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=4366250&bui=AWRWj2TuN5vw_Cm0T_26wfsJZowGUNzvtlwIjBYsqOILZWDuyykoAyD0piR4T-N172ZxjvjBo7UnFvqu&spc=UWF9fz4dQ8Z4giS5gPDWC11nJZFp1hQsftRwjkIKAQWZHQ3mduC3aKlMNg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=Fzz3dij4bXYVnQZWEWYXS8oQ&gir=yes&clen=22022156&dur=1548.181&lmt=1702642292486665&mt=1713996045&fvip=1&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=6218224&n=ONM8u0igi7budQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AHWaYeowRQIhAMU1SgGnWw--uBhIKfkac4ohBR5PXqnIJXmtAfydITZzAiA_4obnhM9zGCc5lAkqrdcFRACECLshcGRvW4HcZ6m5gA%3D%3D&alr=yes&sig=AJfQdSswRAIgYb0jhR9rl37I9XAsvc0ipnm3DtxIIEGSzGL4B-PD3BoCIHdUjMX2w6rnKh8oNaKXfMwcs7BStJ0dX1rsX_AYfkN4&cpn=4HbneYHvfM-xDnUN&cver=1.20240422.01.00&range=0-68468&rn=2&rbuf=0&pot=IjpN9k3wK9_PdA6ROa8ZviGnFcQ5sxzEA7wXjyS3JZcsjg-cBLkOkQe5GY4EvwiRHKUMkT67BLEm036y&ump=1&srfvp=1 HTTP/1.1
Host: rr1---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.youtube-nocookie.com/
Content-Length: 2
Origin: https://www.youtube-nocookie.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Wed, 24 Apr 2024 22:06:59 GMT
Expires: Wed, 24 Apr 2024 22:06:59 GMT
Cache-Control: private, max-age=21299
Content-Type: application/vnd.yt-ump
Transfer-Encoding: chunked
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
Access-Control-Allow-Origin: https://www.youtube-nocookie.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube-nocookie.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1714018018&ei=goIpZszDKpbL0u8PkIuneA&ip=91.90.42.154&id=o-AE3a9YkNQSn77c7jlAdbAKeYvwZwRoOoStgKAgc2g_wm&itag=134&aitags=134%2C136%2C137%2C160&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=3D&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeen7y&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=4366250&bui=AWRWj2TuN5vw_Cm0T_26wfsJZowGUNzvtlwIjBYsqOILZWDuyykoAyD0piR4T-N172ZxjvjBo7UnFvqu&spc=UWF9fz4dQ8Z4giS5gPDWC11nJZFp1hQsftRwjkIKAQWZHQ3mduC3aKlMNg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=Fzz3dij4bXYVnQZWEWYXS8oQ&gir=yes&clen=59095068&dur=1548.146&lmt=1702642291339316&mt=1713996045&fvip=1&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=6219224&n=ONM8u0igi7budQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AHWaYeowRQIhAMU1SgGnWw--uBhIKfkac4ohBR5PXqnIJXmtAfydITZzAiA_4obnhM9zGCc5lAkqrdcFRACECLshcGRvW4HcZ6m5gA%3D%3D&alr=yes&sig=AJfQdSswRQIgMP-c_F5DsHBIUxp8DhK5Z23GfccIQxYV_PJU_OVNoVQCIQCmW3qqDotzkdaRqLsyf7Wddl5A32bzes81Ql_pXnMZrQ%3D%3D&cpn=4HbneYHvfM-xDnUN&cver=1.20240422.01.00&range=0-177565&rn=1&rbuf=0&pot=Ijq48Lj23tk6cvuXzKnsuNSh4MLMtenC9rriidGx0JHZiPqa8b_7l_K_7Ijxuf2X6aP5l8u98bfT1Yu0&ump=1&srfvp=1
200 OK 1.4 kB URL POST HTTP/1.1 rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1714018018&ei=goIpZszDKpbL0u8PkIuneA&ip=91.90.42.154&id=o-AE3a9YkNQSn77c7jlAdbAKeYvwZwRoOoStgKAgc2g_wm&itag=134&aitags=134%2C136%2C137%2C160&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=3D&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeen7y&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=4366250&bui=AWRWj2TuN5vw_Cm0T_26wfsJZowGUNzvtlwIjBYsqOILZWDuyykoAyD0piR4T-N172ZxjvjBo7UnFvqu&spc=UWF9fz4dQ8Z4giS5gPDWC11nJZFp1hQsftRwjkIKAQWZHQ3mduC3aKlMNg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=Fzz3dij4bXYVnQZWEWYXS8oQ&gir=yes&clen=59095068&dur=1548.146&lmt=1702642291339316&mt=1713996045&fvip=1&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=6219224&n=ONM8u0igi7budQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AHWaYeowRQIhAMU1SgGnWw--uBhIKfkac4ohBR5PXqnIJXmtAfydITZzAiA_4obnhM9zGCc5lAkqrdcFRACECLshcGRvW4HcZ6m5gA%3D%3D&alr=yes&sig=AJfQdSswRQIgMP-c_F5DsHBIUxp8DhK5Z23GfccIQxYV_PJU_OVNoVQCIQCmW3qqDotzkdaRqLsyf7Wddl5A32bzes81Ql_pXnMZrQ%3D%3D&cpn=4HbneYHvfM-xDnUN&cver=1.20240422.01.00&range=0-177565&rn=1&rbuf=0&pot=Ijq48Lj23tk6cvuXzKnsuNSh4MLMtenC9rriidGx0JHZiPqa8b_7l_K_7Ijxuf2X6aP5l8u98bfT1Yu0&ump=1&srfvp=1
IP
ASN #50304 Blix Solutions AS
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.googlevideo.com
Fingerprint05:65:DE:5B:B7:CF:9A:4A:22:AF:57:DB:9B:EC:B9:BD:E5:B0:57:E2
ValidityTue, 09 Apr 2024 14:31:07 GMT - Tue, 18 Jun 2024 14:31:06 GMT
Hash dbc2c772ddc98ed4c05d3ac518607cf5
caec5e946f088b17bdc69724235586af11b94419
aa9e856f9a61165bcdfcf10474b9e4931f0376f7494eb574493622a6b81efde9
POST /videoplayback?expire=1714018018&ei=goIpZszDKpbL0u8PkIuneA&ip=91.90.42.154&id=o-AE3a9YkNQSn77c7jlAdbAKeYvwZwRoOoStgKAgc2g_wm&itag=134&aitags=134%2C136%2C137%2C160&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=3D&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeen7y&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=4366250&bui=AWRWj2TuN5vw_Cm0T_26wfsJZowGUNzvtlwIjBYsqOILZWDuyykoAyD0piR4T-N172ZxjvjBo7UnFvqu&spc=UWF9fz4dQ8Z4giS5gPDWC11nJZFp1hQsftRwjkIKAQWZHQ3mduC3aKlMNg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=Fzz3dij4bXYVnQZWEWYXS8oQ&gir=yes&clen=59095068&dur=1548.146&lmt=1702642291339316&mt=1713996045&fvip=1&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=6219224&n=ONM8u0igi7budQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AHWaYeowRQIhAMU1SgGnWw--uBhIKfkac4ohBR5PXqnIJXmtAfydITZzAiA_4obnhM9zGCc5lAkqrdcFRACECLshcGRvW4HcZ6m5gA%3D%3D&alr=yes&sig=AJfQdSswRQIgMP-c_F5DsHBIUxp8DhK5Z23GfccIQxYV_PJU_OVNoVQCIQCmW3qqDotzkdaRqLsyf7Wddl5A32bzes81Ql_pXnMZrQ%3D%3D&cpn=4HbneYHvfM-xDnUN&cver=1.20240422.01.00&range=0-177565&rn=1&rbuf=0&pot=Ijq48Lj23tk6cvuXzKnsuNSh4MLMtenC9rriidGx0JHZiPqa8b_7l_K_7Ijxuf2X6aP5l8u98bfT1Yu0&ump=1&srfvp=1 HTTP/1.1
Host: rr1---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.youtube-nocookie.com/
Content-Length: 2
Origin: https://www.youtube-nocookie.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Wed, 24 Apr 2024 22:06:59 GMT
Expires: Wed, 24 Apr 2024 22:06:59 GMT
Cache-Control: private, max-age=21299
Content-Type: application/vnd.yt-ump
Transfer-Encoding: chunked
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
Access-Control-Allow-Origin: https://www.youtube-nocookie.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube-nocookie.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL POST HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 555
Origin: https://www.youtube-nocookie.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube-nocookie.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 24 Apr 2024 22:06:59 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL POST HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 413
Origin: https://www.youtube-nocookie.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube-nocookie.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 24 Apr 2024 22:06:59 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hash 181527e0fdd445987bbff6f08fe6cef7
5a7d3b550b4e0893614fa2cbf785db2c20e345ac
8b513c4e6efa40e6162a46149f3ca2dbde00a0bdbc3177aed8e16495347362f8
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1111
Origin: https://www.youtube-nocookie.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 24 Apr 2024 22:06:59 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube-nocookie.com
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.ytimg.com/vi/Wd9ZtH9NQWc/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgXihUMA8=&rs=AOn4CLDAVmTF5_VGNwnIxj6Ln05Tk3YMIQ
200 OK 56 kB URL GET HTTP/2 i.ytimg.com/vi/Wd9ZtH9NQWc/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgXihUMA8=&rs=AOn4CLDAVmTF5_VGNwnIxj6Ln05Tk3YMIQ
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintF5:71:D6:56:B9:45:4B:F5:FD:12:4B:A7:FF:5F:1D:C9:74:FE:B0:C8
ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Hash 283d0e8cd42e9a0dc55c1ed546fdfd15
e6c782c2cd636cfd6d8b0ad026f7021f57f42d38
01e303cb9814723c56a53e1de30e5dd30b52cd675bc28030aeea780866b2e7bb
GET /vi/Wd9ZtH9NQWc/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgXihUMA8=&rs=AOn4CLDAVmTF5_VGNwnIxj6Ln05Tk3YMIQ HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 56214
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 21:08:35 GMT
expires: Wed, 24 Apr 2024 23:08:35 GMT
cache-control: public, max-age=7200
age: 3504
etag: "0"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
d1pqvb2h9xgm7r.cloudfront.net/v1/rt
200 OK 512 B URL POST HTTP/3 d1pqvb2h9xgm7r.cloudfront.net/v1/rt
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type XML 1.0 document, ASCII text, with very long lines (512), with no line terminators
Hash 05fc808507ea46df1b1eb4386a987e95
53f623015983ba9c6762ead51b8f5c07df01a7f0
9cb616a9499dc43e67735a795e8017b47e071f51d7ecfe635e094c76e7e52ae0
POST /v1/rt HTTP/1.1
Host: d1pqvb2h9xgm7r.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Content-Length: 482
Origin: https://yourliversupport.com
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/xml
content-length: 512
date: Wed, 24 Apr 2024 22:06:59 GMT
x-amzn-requestid: d56e3712-e1cc-52e4-8d5e-69b1650fda77
apigw-requestid: WwFUiigboAMEasA=
access-control-allow-origin: *
access-control-expose-headers: date, x-api-id
x-cache: Miss from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Adl56AI6WqkKnqNLrvseY9aGBVtwP5lCOUw5Zy5RVbeP5ygm__k7zw==
X-Firefox-Spdy: h2
d1pqvb2h9xgm7r.cloudfront.net/v1/rt
200 OK 0 B URL POST HTTP/3 d1pqvb2h9xgm7r.cloudfront.net/v1/rt
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/rt HTTP/1.1
Host: d1pqvb2h9xgm7r.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://yourliversupport.com/
Origin: https://yourliversupport.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
age: 60709
date: Wed, 24 Apr 2024 05:15:10 GMT
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
access-control-max-age: 300
apigw-requestid: WtxG0guZIAMEMNg=
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ywwG-6NMyA5U7pp2dKPo0AtaUN3W-KeeRX7qlVUkny3DHXz8-JTpAg==
www.youtube-nocookie.com/generate_204?MhEQzA
204 No Content 0 B URL GET HTTP/3 www.youtube-nocookie.com/generate_204?MhEQzA
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?MhEQzA HTTP/1.1
Host: www.youtube-nocookie.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Wed, 24 Apr 2024 22:06:59 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube-nocookie.com/youtubei/v1/embedded_player?prettyPrint=false
200 OK 23 kB URL POST HTTP/3 www.youtube-nocookie.com/youtubei/v1/embedded_player?prettyPrint=false
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hash a7839ef9f75ac51ab51910d8de75c1fc
bc572ef76fe462cd2d90a345a6b29b7a010f139e
750a38d2d0d9407b0263c882c88c24039cbd56539e3fade4411566f1499eaea6
POST /youtubei/v1/embedded_player?prettyPrint=false HTTP/1.1
Host: www.youtube-nocookie.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Goog-Visitor-Id: CgtYTHlQX2tEQ2NJZyiAhaaxBjIOCgJOTxIIEgQSAgsMIGk%3D
X-Youtube-Bootstrap-Logged-In: false
X-Youtube-Client-Name: 56
X-Youtube-Client-Version: 1.20240422.01.00
Content-Length: 2503
Origin: https://www.youtube-nocookie.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 24 Apr 2024 22:06:59 GMT
server: scaffolding on HTTPServer2
content-length: 23040
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube-nocookie.com/youtubei/v1/next?prettyPrint=false
200 OK 1.8 kB URL POST HTTP/3 www.youtube-nocookie.com/youtubei/v1/next?prettyPrint=false
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hash b2c3ce10daae71d7cbce8470311e75ab
4071b47ce54693e1cb32eaf17982d9758e23e443
c4ec35ac428785f8489698c2a95c4baec51ab667c32b05df0f065b0d32f9285f
POST /youtubei/v1/next?prettyPrint=false HTTP/1.1
Host: www.youtube-nocookie.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Goog-Visitor-Id: CgtYTHlQX2tEQ2NJZyiAhaaxBjIOCgJOTxIIEgQSAgsMIGk%3D
X-Youtube-Bootstrap-Logged-In: false
X-Youtube-Client-Name: 56
X-Youtube-Client-Version: 1.20240422.01.00
Content-Length: 2647
Origin: https://www.youtube-nocookie.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 24 Apr 2024 22:06:59 GMT
server: scaffolding on HTTPServer2
content-length: 1767
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube-nocookie.com/api/stats/qoe?fmt=134&afmt=251&cpn=4HbneYHvfM-xDnUN&el=embedded&ns=yt&fexp=v1%2C23983296%2C21348%2C76094%2C54572%2C304051%2C84737%2C36318%2C6271%2C26443548%2C7111%2C36343%2C9954%2C1192%2C10512%2C15984%2C6966%2C2%2C6689%2C2007%2C662%2C5689%2C2721%2C4654%2C15421%2C9076%2C531%2C1667%2C4395%2C4574%2C1026%2C1103%2C20%2C7085%2C2606%2C55%2C496%2C142%2C5%2C3%2C41%2C3%2C288%2C2%2C79%2C4915&cl=627220534&seq=2&docid=Wd9ZtH9NQWc&ei=goIpZszDKpbL0u8PkIuneA&event=streamingstats&plid=AAYW3uOvV19yqx3f&referrer=https%3A%2F%2Fwww.youtube-nocookie.com%2Fembed%2FWd9ZtH9NQWc%3Fenablejsapi%3D1%26playsinline%3D1%26rel%3D0%26controls%3D0%26showinfo%3D0%26autoplay%3D1%26modestbranding%3D1%26iv_load_policy%3D3&qclc=ChA0SGJuZVlIdmZNLXhEblVOEAI&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240422.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&afs=0.325:251::i&cmt=0.354:0.000,0.737:0.000,0.740:0.000&vps=0.354:N,0.737:SU,0.740:SU&ctmp=dompaused:t.357;r.promise;m.NotAllowedError,itr:t.642;&bwm=0.740:2697:0.680&bh=0.740:0.000
204 No Content 0 B URL POST HTTP/3 www.youtube-nocookie.com/api/stats/qoe?fmt=134&afmt=251&cpn=4HbneYHvfM-xDnUN&el=embedded&ns=yt&fexp=v1%2C23983296%2C21348%2C76094%2C54572%2C304051%2C84737%2C36318%2C6271%2C26443548%2C7111%2C36343%2C9954%2C1192%2C10512%2C15984%2C6966%2C2%2C6689%2C2007%2C662%2C5689%2C2721%2C4654%2C15421%2C9076%2C531%2C1667%2C4395%2C4574%2C1026%2C1103%2C20%2C7085%2C2606%2C55%2C496%2C142%2C5%2C3%2C41%2C3%2C288%2C2%2C79%2C4915&cl=627220534&seq=2&docid=Wd9ZtH9NQWc&ei=goIpZszDKpbL0u8PkIuneA&event=streamingstats&plid=AAYW3uOvV19yqx3f&referrer=https%3A%2F%2Fwww.youtube-nocookie.com%2Fembed%2FWd9ZtH9NQWc%3Fenablejsapi%3D1%26playsinline%3D1%26rel%3D0%26controls%3D0%26showinfo%3D0%26autoplay%3D1%26modestbranding%3D1%26iv_load_policy%3D3&qclc=ChA0SGJuZVlIdmZNLXhEblVOEAI&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240422.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&afs=0.325:251::i&cmt=0.354:0.000,0.737:0.000,0.740:0.000&vps=0.354:N,0.737:SU,0.740:SU&ctmp=dompaused:t.357;r.promise;m.NotAllowedError,itr:t.642;&bwm=0.740:2697:0.680&bh=0.740:0.000
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/stats/qoe?fmt=134&afmt=251&cpn=4HbneYHvfM-xDnUN&el=embedded&ns=yt&fexp=v1%2C23983296%2C21348%2C76094%2C54572%2C304051%2C84737%2C36318%2C6271%2C26443548%2C7111%2C36343%2C9954%2C1192%2C10512%2C15984%2C6966%2C2%2C6689%2C2007%2C662%2C5689%2C2721%2C4654%2C15421%2C9076%2C531%2C1667%2C4395%2C4574%2C1026%2C1103%2C20%2C7085%2C2606%2C55%2C496%2C142%2C5%2C3%2C41%2C3%2C288%2C2%2C79%2C4915&cl=627220534&seq=2&docid=Wd9ZtH9NQWc&ei=goIpZszDKpbL0u8PkIuneA&event=streamingstats&plid=AAYW3uOvV19yqx3f&referrer=https%3A%2F%2Fwww.youtube-nocookie.com%2Fembed%2FWd9ZtH9NQWc%3Fenablejsapi%3D1%26playsinline%3D1%26rel%3D0%26controls%3D0%26showinfo%3D0%26autoplay%3D1%26modestbranding%3D1%26iv_load_policy%3D3&qclc=ChA0SGJuZVlIdmZNLXhEblVOEAI&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240422.01.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&afs=0.325:251::i&cmt=0.354:0.000,0.737:0.000,0.740:0.000&vps=0.354:N,0.737:SU,0.740:SU&ctmp=dompaused:t.357;r.promise;m.NotAllowedError,itr:t.642;&bwm=0.740:2697:0.680&bh=0.740:0.000 HTTP/1.1
Host: www.youtube-nocookie.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Visitor-Id: CgtYTHlQX2tEQ2NJZyiAhaaxBjIOCgJOTxIIEgQSAgsMIGk%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240422.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1713996418449&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C926%2C521&vis=1&wgl=true&ca_type=image
Content-Type: application/x-www-form-urlencoded
Content-Length: 226
Origin: https://www.youtube-nocookie.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
date: Wed, 24 Apr 2024 22:06:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: Video Stats Server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
d1pqvb2h9xgm7r.cloudfront.net/v1/rt
200 OK 512 B URL POST HTTP/3 d1pqvb2h9xgm7r.cloudfront.net/v1/rt
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type XML 1.0 document, ASCII text, with very long lines (512), with no line terminators
Hash 0b6053b2a79e0d3cfe8ef07486203ca3
9011ac7d71d24b875af72e3fbed8b9a3d5190e03
4be20d4aaf140b1c5de074f2b032f61838a326e1def23bbd3d51065015021399
POST /v1/rt HTTP/1.1
Host: d1pqvb2h9xgm7r.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Content-Length: 290
Origin: https://yourliversupport.com
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/xml
content-length: 512
alt-svc: h3=":443"; ma=86400
date: Wed, 24 Apr 2024 22:06:59 GMT
x-amzn-requestid: 2154a2e7-249d-5017-a4c3-fc44a05eba67
apigw-requestid: WwFUmjzYoAMEagw=
access-control-allow-origin: *
access-control-expose-headers: date, x-api-id
x-cache: Miss from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: KfAHq7l_-LBpnty68aoTpBeB-4a4KYmFG-GDb4c6W6VcMw5ouT_IjQ==
www.youtube-nocookie.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube-nocookie.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube-nocookie.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1713996420742
Content-Type: application/json
X-Goog-Visitor-Id: CgtYTHlQX2tEQ2NJZyiAhaaxBjIOCgJOTxIIEgQSAgsMIGk%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240422.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1713996417290&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C926%2C521&vis=1&wgl=true&ca_type=image
Content-Length: 14743
Origin: https://www.youtube-nocookie.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 24 Apr 2024 22:07:00 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
region1.analytics.google.com/g/collect?v=2&tid=G-SSVM2TL5G6>m=45je44m0v871036254za200&_p=1713996416517&gcs=G111&gcd=13v3v3v2v5&npa=0&dma_cps=sypham&dma=1&cid=740947474.1713996418&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEA&_s=2&sid=1713996417&sct=1&seg=0&dl=https%3A%2F%2Fyourliversupport.com%2F%3Futm_source%3Dcpa%26utm_medium%3Daffiliate%26utm_content%3DLRvsl%26utm_campaign%3Dliverrenewcpa%26affid%3D117%26oid%3D82%26uid%3D0%26_ef_transaction_id%3D70a3ad69a60c4ca4aa075e28673a25fd%26n%3D682&dt=Liver%20Renew&en=scroll&epn.percent_scrolled=90&tfd=8169
204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-SSVM2TL5G6>m=45je44m0v871036254za200&_p=1713996416517&gcs=G111&gcd=13v3v3v2v5&npa=0&dma_cps=sypham&dma=1&cid=740947474.1713996418&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEA&_s=2&sid=1713996417&sct=1&seg=0&dl=https%3A%2F%2Fyourliversupport.com%2F%3Futm_source%3Dcpa%26utm_medium%3Daffiliate%26utm_content%3DLRvsl%26utm_campaign%3Dliverrenewcpa%26affid%3D117%26oid%3D82%26uid%3D0%26_ef_transaction_id%3D70a3ad69a60c4ca4aa075e28673a25fd%26n%3D682&dt=Liver%20Renew&en=scroll&epn.percent_scrolled=90&tfd=8169
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-SSVM2TL5G6>m=45je44m0v871036254za200&_p=1713996416517&gcs=G111&gcd=13v3v3v2v5&npa=0&dma_cps=sypham&dma=1&cid=740947474.1713996418&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEA&_s=2&sid=1713996417&sct=1&seg=0&dl=https%3A%2F%2Fyourliversupport.com%2F%3Futm_source%3Dcpa%26utm_medium%3Daffiliate%26utm_content%3DLRvsl%26utm_campaign%3Dliverrenewcpa%26affid%3D117%26oid%3D82%26uid%3D0%26_ef_transaction_id%3D70a3ad69a60c4ca4aa075e28673a25fd%26n%3D682&dt=Liver%20Renew&en=scroll&epn.percent_scrolled=90&tfd=8169 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yourliversupport.com
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://yourliversupport.com
date: Wed, 24 Apr 2024 22:07:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
gtrace.mediago.io/ju/log/c?tn=f9f2b1ef23fe2759c2cad0953029a94b&trackingid=&mguid=&app=ERR-PIXEL&ext={%22type%22:%22PIXEL%22,%22msg%22:%22addIframe%20timeout%22,%22acid%22:%22%22,%22cpid%22:%22%22,%22jsversion%22:%22153586075%22}
200 OK 0 B URL POST HTTP/2 gtrace.mediago.io/ju/log/c?tn=f9f2b1ef23fe2759c2cad0953029a94b&trackingid=&mguid=&app=ERR-PIXEL&ext={%22type%22:%22PIXEL%22,%22msg%22:%22addIframe%20timeout%22,%22acid%22:%22%22,%22cpid%22:%22%22,%22jsversion%22:%22153586075%22}
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerDigiCert Inc
Subject*.mediago.io
Fingerprint13:26:8E:87:3E:6B:7D:C0:F9:32:B1:3B:53:DC:E6:2C:DF:3A:5D:C4
ValidityThu, 11 Jan 2024 00:00:00 GMT - Fri, 10 Jan 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /ju/log/c?tn=f9f2b1ef23fe2759c2cad0953029a94b&trackingid=&mguid=&app=ERR-PIXEL&ext={%22type%22:%22PIXEL%22,%22msg%22:%22addIframe%20timeout%22,%22acid%22:%22%22,%22cpid%22:%22%22,%22jsversion%22:%22153586075%22} HTTP/1.1
Host: gtrace.mediago.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yourliversupport.com
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Cookie: __mguid_=9df76ce14e73fcef2ddjlx00lved7o6u
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 0
content-type: text/html; charset=utf-8
date: Wed, 24 Apr 2024 22:07:17 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
gtrace.mediago.io/api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=9370d21d40d54bcdbccef6064a194301&ptd=&tkd=&acd=&cpid=&v=153586075
200 OK 0 B URL POST HTTP/2 gtrace.mediago.io/api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=9370d21d40d54bcdbccef6064a194301&ptd=&tkd=&acd=&cpid=&v=153586075
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerDigiCert Inc
Subject*.mediago.io
Fingerprint13:26:8E:87:3E:6B:7D:C0:F9:32:B1:3B:53:DC:E6:2C:DF:3A:5D:C4
ValidityThu, 11 Jan 2024 00:00:00 GMT - Fri, 10 Jan 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=9370d21d40d54bcdbccef6064a194301&ptd=&tkd=&acd=&cpid=&v=153586075 HTTP/1.1
Host: gtrace.mediago.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yourliversupport.com
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Cookie: __mguid_=9df76ce14e73fcef2ddjlx00lved7o6u
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
date: Wed, 24 Apr 2024 22:07:17 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube-nocookie.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube-nocookie.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube-nocookie.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1713996442790
Content-Type: application/json
X-Goog-Visitor-Id: CgtYTHlQX2tEQ2NJZyiAhaaxBjIOCgJOTxIIEgQSAgsMIGk%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240422.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1713996417290&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C926%2C521&vis=1&wgl=true&ca_type=image
Content-Length: 941
Origin: https://www.youtube-nocookie.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 24 Apr 2024 22:07:22 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube-nocookie.com/youtubei/v1/player?prettyPrint=false
200 OK 59 kB URL POST HTTP/3 www.youtube-nocookie.com/youtubei/v1/player?prettyPrint=false
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /youtubei/v1/player?prettyPrint=false HTTP/1.1
Host: www.youtube-nocookie.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Goog-Visitor-Id: CgtYTHlQX2tEQ2NJZyiAhaaxBjIOCgJOTxIIEgQSAgsMIGk%3D
X-Youtube-Bootstrap-Logged-In: false
X-Youtube-Client-Name: 56
X-Youtube-Client-Version: 1.20240422.01.00
Content-Length: 3011
Origin: https://www.youtube-nocookie.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 24 Apr 2024 22:06:58 GMT
server: scaffolding on HTTPServer2
content-length: 27221
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
s.yimg.com/wi/ytc.js
200 OK 18 kB IP
ASN #203220 Yahoo-UK Limited
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB
ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (18187), with no line terminators
Hash 5c6ed25dce803fd84288922b8928409e
3ccc10546ae12f160bacac1e9e422af091ea4a41
480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: yX2A+YRUq6GGU7v6JmtDaLMbpWBhjNCnVH2HoeUI3AZBGVQ2C6SrzggDcewtQXW5AYqlnWF+IBs=
x-amz-request-id: P85PGXA1NBAZR3AV
date: Wed, 24 Apr 2024 21:40:02 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "5c6ed25dce803fd84288922b8928409e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 1617
content-encoding: gzip
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
www.p8btrk.com/scripts/sdk/everflow.js
200 OK 61 kB URL GET HTTP/2 www.p8btrk.com/scripts/sdk/everflow.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerStarfield Technologies, Inc.
Subjectp8btrk.com
Fingerprint98:8E:CD:C3:72:D8:61:E2:06:1A:5E:08:84:EE:4E:92:5A:12:13:86
ValidityThu, 30 Nov 2023 22:40:27 GMT - Tue, 31 Dec 2024 22:40:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /scripts/sdk/everflow.js HTTP/1.1
Host: www.p8btrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 22:06:57 GMT
content-type: text/javascript
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
cache-control: max-age=14400
vary: Origin
x-eflow-request-id: 7a817b83-dabf-4687-b99c-303fce5af2d9
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
optassets.ontraport.com/tracking.js
200 OK 7.9 kB URL GET HTTP/2 optassets.ontraport.com/tracking.js
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerCloudflare, Inc.
Subjectoptassets.ontraport.com
Fingerprint89:8D:89:71:C6:DB:4F:28:89:B4:34:C7:C8:99:C2:C1:28:AB:F9:08
ValidityWed, 29 Nov 2023 00:00:00 GMT - Wed, 27 Nov 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (7926), with no line terminators
Hash 4dd297f4b5ea00f758e42926fceab623
4df5aa8352390c512f2db44e4b43a4a341bc1bac
e56bc75e49c7ab1c13d579c37512af968257c5ef0d279c86420dafd37346f132
GET /tracking.js HTTP/1.1
Host: optassets.ontraport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 22:06:57 GMT
content-type: application/javascript
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
cf-bgj: minify
cf-polished: origSize=12107
etag: W/"662844fc-2f4b"
last-modified: Tue, 23 Apr 2024 23:32:12 GMT
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-op-ca: 172.69.40.166
cf-cache-status: HIT
age: 3755
expires: Thu, 25 Apr 2024 06:06:57 GMT
cache-control: public, max-age=28800
server: cloudflare
cf-ray: 879967486958712e-OSL
content-encoding: br
X-Firefox-Spdy: h2
rr1---sn-5goeen7y.googlevideo.com/videoplayback?expire=1714018018&ei=goIpZszDKpbL0u8PkIuneA&ip=91.90.42.154&id=o-AE3a9YkNQSn77c7jlAdbAKeYvwZwRoOoStgKAgc2g_wm&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AWRWj2TuN5vw_Cm0T_26wfsJZowGUNzvtlwIjBYsqOILZWDuyykoAyD0piR4T-N172ZxjvjBo7UnFvqu&spc=UWF9fz4dQ8Z4giS5gPDWC11nJZFp1hQsftRwjkIKAQWZHQ3mduC3aKlMNg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=Fzz3dij4bXYVnQZWEWYXS8oQ&gir=yes&clen=22022156&dur=1548.181&lmt=1702642292486665&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=6218224&n=ONM8u0igi7budQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AJfQdSswRAIgYb0jhR9rl37I9XAsvc0ipnm3DtxIIEGSzGL4B-PD3BoCIHdUjMX2w6rnKh8oNaKXfMwcs7BStJ0dX1rsX_AYfkN4&cpn=4HbneYHvfM-xDnUN&cver=1.20240422.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&fexp=24350295,24350324,24350328,24350330,24350379,24350412,24350424,24350445,24350447&cms_redirect=yes&cmsv=e&mh=3D&mm=29&mn=sn-5goeen7y&ms=rdu&mt=1713996284&mv=m&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AHWaYeowRQIgQQ_4Fi3n-m65zgi6LOUsjyskx77r8EDuRD3spy7ZPDECIQDWXTYCdWPXFVhyfrYUrc7MQrDDyRkv7BkPbRmYNgr5Jw%3D%3D&range=0-68468&rn=3&rbuf=0&pot=MnmW6EIn8vChapbTWwRXLTjcNryq52LXshtEyn0fBT1nT3_1oJAitnVi-UODcfbdimPIpJR7St4egA6418zw4-H_d2aqsxP8yCerZETbEZln462OLt2EKcNFPPa_g-abMx6-IKoYK3IVI0AUSIPUN4oYv_keASpr-rZW&ump=1&srfvp=1
0 B URL POST rr1---sn-5goeen7y.googlevideo.com/videoplayback?expire=1714018018&ei=goIpZszDKpbL0u8PkIuneA&ip=91.90.42.154&id=o-AE3a9YkNQSn77c7jlAdbAKeYvwZwRoOoStgKAgc2g_wm&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AWRWj2TuN5vw_Cm0T_26wfsJZowGUNzvtlwIjBYsqOILZWDuyykoAyD0piR4T-N172ZxjvjBo7UnFvqu&spc=UWF9fz4dQ8Z4giS5gPDWC11nJZFp1hQsftRwjkIKAQWZHQ3mduC3aKlMNg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=Fzz3dij4bXYVnQZWEWYXS8oQ&gir=yes&clen=22022156&dur=1548.181&lmt=1702642292486665&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=6218224&n=ONM8u0igi7budQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AJfQdSswRAIgYb0jhR9rl37I9XAsvc0ipnm3DtxIIEGSzGL4B-PD3BoCIHdUjMX2w6rnKh8oNaKXfMwcs7BStJ0dX1rsX_AYfkN4&cpn=4HbneYHvfM-xDnUN&cver=1.20240422.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&fexp=24350295,24350324,24350328,24350330,24350379,24350412,24350424,24350445,24350447&cms_redirect=yes&cmsv=e&mh=3D&mm=29&mn=sn-5goeen7y&ms=rdu&mt=1713996284&mv=m&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AHWaYeowRQIgQQ_4Fi3n-m65zgi6LOUsjyskx77r8EDuRD3spy7ZPDECIQDWXTYCdWPXFVhyfrYUrc7MQrDDyRkv7BkPbRmYNgr5Jw%3D%3D&range=0-68468&rn=3&rbuf=0&pot=MnmW6EIn8vChapbTWwRXLTjcNryq52LXshtEyn0fBT1nT3_1oJAitnVi-UODcfbdimPIpJR7St4egA6418zw4-H_d2aqsxP8yCerZETbEZln462OLt2EKcNFPPa_g-abMx6-IKoYK3IVI0AUSIPUN4oYv_keASpr-rZW&ump=1&srfvp=1
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /videoplayback?expire=1714018018&ei=goIpZszDKpbL0u8PkIuneA&ip=91.90.42.154&id=o-AE3a9YkNQSn77c7jlAdbAKeYvwZwRoOoStgKAgc2g_wm&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AWRWj2TuN5vw_Cm0T_26wfsJZowGUNzvtlwIjBYsqOILZWDuyykoAyD0piR4T-N172ZxjvjBo7UnFvqu&spc=UWF9fz4dQ8Z4giS5gPDWC11nJZFp1hQsftRwjkIKAQWZHQ3mduC3aKlMNg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=Fzz3dij4bXYVnQZWEWYXS8oQ&gir=yes&clen=22022156&dur=1548.181&lmt=1702642292486665&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=6218224&n=ONM8u0igi7budQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AJfQdSswRAIgYb0jhR9rl37I9XAsvc0ipnm3DtxIIEGSzGL4B-PD3BoCIHdUjMX2w6rnKh8oNaKXfMwcs7BStJ0dX1rsX_AYfkN4&cpn=4HbneYHvfM-xDnUN&cver=1.20240422.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&fexp=24350295,24350324,24350328,24350330,24350379,24350412,24350424,24350445,24350447&cms_redirect=yes&cmsv=e&mh=3D&mm=29&mn=sn-5goeen7y&ms=rdu&mt=1713996284&mv=m&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AHWaYeowRQIgQQ_4Fi3n-m65zgi6LOUsjyskx77r8EDuRD3spy7ZPDECIQDWXTYCdWPXFVhyfrYUrc7MQrDDyRkv7BkPbRmYNgr5Jw%3D%3D&range=0-68468&rn=3&rbuf=0&pot=MnmW6EIn8vChapbTWwRXLTjcNryq52LXshtEyn0fBT1nT3_1oJAitnVi-UODcfbdimPIpJR7St4egA6418zw4-H_d2aqsxP8yCerZETbEZln462OLt2EKcNFPPa_g-abMx6-IKoYK3IVI0AUSIPUN4oYv_keASpr-rZW&ump=1&srfvp=1 HTTP/1.1
Host: rr1---sn-5goeen7y.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.youtube-nocookie.com/
Content-Length: 2
Origin: https://www.youtube-nocookie.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
www.youtube.com/iframe_api
200 OK 1.1 kB URL GET HTTP/3 www.youtube.com/iframe_api
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File type JavaScript source, ASCII text, with very long lines (1087), with no line terminators
Hash a6e967ef935b093206709cba4b82f02a
94e12727f298743d32fe78ceca0289ca579deb58
efbf1f4fa95714004de4eab86833198fa8ad3e82a8f357b715e56939c8b0a46a
GET /iframe_api HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
x-content-type-options: nosniff
expires: Wed, 24 Apr 2024 22:06:58 GMT
date: Wed, 24 Apr 2024 22:06:58 GMT
cache-control: private, max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
origin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=A8YH_Cfn4SY; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=uPhYCzTh9EQ; Domain=.youtube.com; Expires=Mon, 21-Oct-2024 22:06:58 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxIIEgQSAgsMIGo%3D; Domain=.youtube.com; Expires=Mon, 21-Oct-2024 22:06:58 GMT; Path=/; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/js/th/8MCXU0AIro2_0_rmGrwQkiCikxcMmBfRkjB6mvS6TbY.js
200 OK 53 kB URL GET HTTP/3 www.google.com/js/th/8MCXU0AIro2_0_rmGrwQkiCikxcMmBfRkjB6mvS6TbY.js
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File type JavaScript source, ASCII text, with very long lines (51575)
Hash 75aaf723d5862a8eb3eb263cef614157
c62cf17173a0c4155902b80f13f360936de119f9
f0c097534008ae8dbfd3fae61abc109220a293170c9817d192307a9af4ba4db6
GET /js/th/8MCXU0AIro2_0_rmGrwQkiCikxcMmBfRkjB6mvS6TbY.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 20286
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 19 Apr 2024 11:06:15 GMT
expires: Sat, 19 Apr 2025 11:06:15 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 16 Apr 2024 13:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 471643
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=DC-13420094
200 OK 201 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=DC-13420094
IP
Requested by https://yourliversupport.com/?utm_source=cpa&utm_medium=affiliate&utm_content=LRvsl&utm_campaign=liverrenewcpa&affid=117&oid=82&uid=0&_ef_transaction_id=70a3ad69a60c4ca4aa075e28673a25fd&n=682
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File type JavaScript source, ASCII text, with very long lines (2165)
Size 201 kB (201449 bytes)
Hash 5b59347c5560e246dcf4a77bc10ee064
39f1d0cd9397f6d1717915a9e04cec56ea250454
8eddc20a90b6e1f119deb2d5c5f0c785c82a1f88c36ece31d5cdacf4cea16f35
GET /gtag/js?id=DC-13420094 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yourliversupport.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:06:57 GMT
expires: Wed, 24 Apr 2024 22:06:57 GMT
cache-control: private, max-age=900
last-modified: Wed, 24 Apr 2024 21:11:04 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 73427
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
rr1---sn-5goeen7y.googlevideo.com/videoplayback?expire=1714018018&ei=goIpZszDKpbL0u8PkIuneA&ip=91.90.42.154&id=o-AE3a9YkNQSn77c7jlAdbAKeYvwZwRoOoStgKAgc2g_wm&itag=134&aitags=134%2C136%2C137%2C160&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AWRWj2TuN5vw_Cm0T_26wfsJZowGUNzvtlwIjBYsqOILZWDuyykoAyD0piR4T-N172ZxjvjBo7UnFvqu&spc=UWF9fz4dQ8Z4giS5gPDWC11nJZFp1hQsftRwjkIKAQWZHQ3mduC3aKlMNg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=Fzz3dij4bXYVnQZWEWYXS8oQ&gir=yes&clen=59095068&dur=1548.146&lmt=1702642291339316&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=6219224&n=ONM8u0igi7budQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AJfQdSswRQIgMP-c_F5DsHBIUxp8DhK5Z23GfccIQxYV_PJU_OVNoVQCIQCmW3qqDotzkdaRqLsyf7Wddl5A32bzes81Ql_pXnMZrQ%3D%3D&cpn=4HbneYHvfM-xDnUN&cver=1.20240422.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&fexp=24350295,24350324,24350328,24350330,24350379,24350412,24350424,24350445,24350447&cms_redirect=yes&cmsv=e&mh=3D&mm=29&mn=sn-5goeen7y&ms=rdu&mt=1713996284&mv=m&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AHWaYeowRAIgVDSGz8iSktdWUqnpcnEU1k1K6hKrPVHO3ZcR65M0lH0CIGwtmzIa6AI_7UbPXgF5XCN82pEvDUrv_GrnGeO10C7t&range=0-177565&rn=4&rbuf=0&pot=MnmW6EIn8vChapbTWwRXLTjcNryq52LXshtEyn0fBT1nT3_1oJAitnVi-UODcfbdimPIpJR7St4egA6418zw4-H_d2aqsxP8yCerZETbEZln462OLt2EKcNFPPa_g-abMx6-IKoYK3IVI0AUSIPUN4oYv_keASpr-rZW&ump=1&srfvp=1&altitags=160
0 B URL POST rr1---sn-5goeen7y.googlevideo.com/videoplayback?expire=1714018018&ei=goIpZszDKpbL0u8PkIuneA&ip=91.90.42.154&id=o-AE3a9YkNQSn77c7jlAdbAKeYvwZwRoOoStgKAgc2g_wm&itag=134&aitags=134%2C136%2C137%2C160&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AWRWj2TuN5vw_Cm0T_26wfsJZowGUNzvtlwIjBYsqOILZWDuyykoAyD0piR4T-N172ZxjvjBo7UnFvqu&spc=UWF9fz4dQ8Z4giS5gPDWC11nJZFp1hQsftRwjkIKAQWZHQ3mduC3aKlMNg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=Fzz3dij4bXYVnQZWEWYXS8oQ&gir=yes&clen=59095068&dur=1548.146&lmt=1702642291339316&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=6219224&n=ONM8u0igi7budQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AJfQdSswRQIgMP-c_F5DsHBIUxp8DhK5Z23GfccIQxYV_PJU_OVNoVQCIQCmW3qqDotzkdaRqLsyf7Wddl5A32bzes81Ql_pXnMZrQ%3D%3D&cpn=4HbneYHvfM-xDnUN&cver=1.20240422.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&fexp=24350295,24350324,24350328,24350330,24350379,24350412,24350424,24350445,24350447&cms_redirect=yes&cmsv=e&mh=3D&mm=29&mn=sn-5goeen7y&ms=rdu&mt=1713996284&mv=m&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AHWaYeowRAIgVDSGz8iSktdWUqnpcnEU1k1K6hKrPVHO3ZcR65M0lH0CIGwtmzIa6AI_7UbPXgF5XCN82pEvDUrv_GrnGeO10C7t&range=0-177565&rn=4&rbuf=0&pot=MnmW6EIn8vChapbTWwRXLTjcNryq52LXshtEyn0fBT1nT3_1oJAitnVi-UODcfbdimPIpJR7St4egA6418zw4-H_d2aqsxP8yCerZETbEZln462OLt2EKcNFPPa_g-abMx6-IKoYK3IVI0AUSIPUN4oYv_keASpr-rZW&ump=1&srfvp=1&altitags=160
IP
Requested by https://www.youtube-nocookie.com/embed/Wd9ZtH9NQWc?enablejsapi=1&playsinline=1&rel=0&controls=0&showinfo=0&autoplay=1&modestbranding=1&iv_load_policy=3
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /videoplayback?expire=1714018018&ei=goIpZszDKpbL0u8PkIuneA&ip=91.90.42.154&id=o-AE3a9YkNQSn77c7jlAdbAKeYvwZwRoOoStgKAgc2g_wm&itag=134&aitags=134%2C136%2C137%2C160&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AWRWj2TuN5vw_Cm0T_26wfsJZowGUNzvtlwIjBYsqOILZWDuyykoAyD0piR4T-N172ZxjvjBo7UnFvqu&spc=UWF9fz4dQ8Z4giS5gPDWC11nJZFp1hQsftRwjkIKAQWZHQ3mduC3aKlMNg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=Fzz3dij4bXYVnQZWEWYXS8oQ&gir=yes&clen=59095068&dur=1548.146&lmt=1702642291339316&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=6219224&n=ONM8u0igi7budQ&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AJfQdSswRQIgMP-c_F5DsHBIUxp8DhK5Z23GfccIQxYV_PJU_OVNoVQCIQCmW3qqDotzkdaRqLsyf7Wddl5A32bzes81Ql_pXnMZrQ%3D%3D&cpn=4HbneYHvfM-xDnUN&cver=1.20240422.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&fexp=24350295,24350324,24350328,24350330,24350379,24350412,24350424,24350445,24350447&cms_redirect=yes&cmsv=e&mh=3D&mm=29&mn=sn-5goeen7y&ms=rdu&mt=1713996284&mv=m&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AHWaYeowRAIgVDSGz8iSktdWUqnpcnEU1k1K6hKrPVHO3ZcR65M0lH0CIGwtmzIa6AI_7UbPXgF5XCN82pEvDUrv_GrnGeO10C7t&range=0-177565&rn=4&rbuf=0&pot=MnmW6EIn8vChapbTWwRXLTjcNryq52LXshtEyn0fBT1nT3_1oJAitnVi-UODcfbdimPIpJR7St4egA6418zw4-H_d2aqsxP8yCerZETbEZln462OLt2EKcNFPPa_g-abMx6-IKoYK3IVI0AUSIPUN4oYv_keASpr-rZW&ump=1&srfvp=1&altitags=160 HTTP/1.1
Host: rr1---sn-5goeen7y.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.youtube-nocookie.com/
Content-Length: 2
Origin: https://www.youtube-nocookie.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
35.238.129.105
87.248.119.251
0.0.0.0
172.98.56.41
91.90.45.172
54.246.135.161
35.214.168.80
0.0.0.0