Overview

URLwww.theparalegalresource.com/articles/view.php?article_id=13987&page_number=6
IP 104.26.4.17 (United States)
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-01-15 19:29:04 UTC
StatusLoading report..
IDS alerts1
Blocklist alert0
urlquery alerts No alerts detected
Tags None

Domain Summary (46)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
ocsp.globalsign.com (1) 2075 2012-05-25 06:20:55 UTC 2023-01-15 04:09:58 UTC 104.18.20.226
googleads.g.doubleclick.net (1) 42 2012-05-21 07:15:40 UTC 2023-01-15 13:55:03 UTC 142.250.74.98
script.hotjar.com (1) 887 2020-11-05 10:14:15 UTC 2023-01-15 14:10:39 UTC 143.204.55.68
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2023-01-15 04:09:03 UTC 34.120.237.76
www.googleadservices.com (1) 107 2012-06-26 14:53:06 UTC 2023-01-15 15:24:59 UTC 142.250.74.162
static.zdassets.com (1) 2154 2018-06-23 22:11:55 UTC 2023-01-15 04:20:26 UTC 104.18.72.113
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-01-15 04:09:02 UTC 34.160.144.191
use.typekit.net (6) 494 2012-07-05 01:42:39 UTC 2023-01-15 04:09:58 UTC 23.33.119.19
ik.imagekit.io (2) 30045 2017-04-02 12:17:08 UTC 2023-01-15 04:11:50 UTC 54.230.111.31
stats.g.doubleclick.net (1) 96 2012-07-01 17:13:23 UTC 2023-01-15 11:48:11 UTC 74.125.131.154
vc.hotjar.io (1) 2334 2019-04-16 10:33:25 UTC 2023-01-15 04:17:52 UTC 54.230.111.91
static.cloudflareinsights.com (1) 1294 2019-09-24 14:34:56 UTC 2023-01-15 12:00:52 UTC 104.16.56.101
www.googletagmanager.com (3) 75 2012-10-04 01:07:32 UTC 2023-01-15 07:13:52 UTC 142.250.74.40
snap.licdn.com (1) 1044 2014-10-06 08:43:45 UTC 2023-01-15 04:19:57 UTC 184.51.252.149
vars.hotjar.com (1) 1014 2020-11-05 10:13:14 UTC 2023-01-15 14:39:07 UTC 143.204.55.20
ka-p.fontawesome.com (6) 4489 2019-12-16 20:35:53 UTC 2023-01-15 13:40:51 UTC 104.18.22.52
scout.salesloft.com (2) 12709 2017-08-09 14:20:56 UTC 2023-01-15 03:33:13 UTC 52.4.108.218
www.google-analytics.com (1) 40 2012-05-21 09:41:50 UTC 2023-01-15 10:32:20 UTC 142.250.74.46
v2.zopim.com (4) 9869 2017-01-30 04:52:40 UTC 2023-01-15 04:20:25 UTC 104.16.105.139
840-uzq-044.mktoresp.com (1) 0 2020-02-28 18:53:54 UTC 2023-01-11 06:22:28 UTC 192.28.144.124 Domain (mktoresp.com) ranked at: 2732
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-01-15 04:09:18 UTC 34.117.237.239
www.lorman.com (17) 445034 2012-07-12 22:44:28 UTC 2023-01-15 19:27:47 UTC 104.26.2.49
cdn.jsdelivr.net (4) 439 2012-09-30 00:15:09 UTC 2023-01-15 09:11:22 UTC 151.101.193.229
ws.zoominfo.com (1) 8735 2019-11-13 21:26:54 UTC 2023-01-15 02:50:10 UTC 104.16.101.12
px.ads.linkedin.com (1) 522 2017-08-08 16:28:50 UTC 2023-01-15 09:34:54 UTC 13.107.42.14
www.linkedin.com (1) 608 2012-07-31 06:29:59 UTC 2023-01-15 12:29:07 UTC 13.107.42.14
widget-mediator.zopim.com (1) 2693 2019-04-23 08:46:17 UTC 2023-01-15 04:23:48 UTC 52.58.68.135
scout-cdn.salesloft.com (1) 11637 2017-08-09 14:20:55 UTC 2023-01-15 05:18:25 UTC 104.18.223.90
static.hotjar.com (1) 641 2014-11-01 05:14:27 UTC 2023-01-15 04:09:11 UTC 143.204.55.98
cdnjs.cloudflare.com (1) 235 2012-05-23 12:49:49 UTC 2023-01-15 12:54:51 UTC 104.17.24.14
p.typekit.net (1) 620 2012-05-23 14:28:57 UTC 2023-01-15 04:09:58 UTC 95.101.11.112
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-01-15 04:09:18 UTC 52.13.249.229
in.hotjar.com (1) 1746 2018-07-03 09:33:18 UTC 2023-01-15 04:09:12 UTC 34.246.81.18
cdn.linkedin.oribi.io (1) 0 2022-10-19 14:36:39 UTC 2023-01-15 04:19:59 UTC 54.230.111.42 Domain (oribi.io) ranked at: 21988
ocsp.pki.goog (10) 175 2017-06-14 07:23:31 UTC 2023-01-15 04:09:02 UTC 142.250.74.131
featureimg.lorman.com (4) 0 2019-03-27 08:22:17 UTC 2023-01-04 20:13:25 UTC 54.230.111.31 Domain (lorman.com) ranked at: 326737
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2023-01-15 09:02:17 UTC 93.184.220.29
munchkin.marketo.net (2) 3550 2012-12-17 00:39:54 UTC 2023-01-14 17:12:20 UTC 88.221.99.189
www.google.com (1) 7 2012-11-08 00:08:21 UTC 2023-01-15 05:34:19 UTC 142.250.74.132
www.theparalegalresource.com (1) 0 2013-05-29 18:51:12 UTC 2022-06-08 10:17:22 UTC 104.26.4.17 Unknown ranking
r3.o.lencr.org (9) 344 2020-12-02 08:52:13 UTC 2023-01-15 04:09:05 UTC 23.36.76.226
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-01-15 04:09:18 UTC 35.241.9.150
www.google.no (1) 25607 2012-06-26 23:22:08 UTC 2023-01-15 09:58:05 UTC 142.250.74.67
image.lorman.com (1) 0 2021-12-06 19:06:56 UTC 2023-01-11 06:22:27 UTC 54.230.111.13 Domain (lorman.com) ranked at: 326737
ocsp.sca1b.amazontrust.com (7) 1015 2016-02-14 02:37:56 UTC 2019-03-27 04:05:54 UTC 143.204.42.88
kit.fontawesome.com (1) 1868 2019-03-29 02:12:52 UTC 2023-01-15 04:11:23 UTC 104.18.22.52

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-01-15 19:28:59 UTC 2 Client IP  192.169.69.26 ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 104.26.4.17
Date UQ / IDS / BL URL IP
2023-01-15 19:29:04 +0000 0 - 1 - 0 www.theparalegalresource.com/articles/view.ph (...) 104.26.4.17


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-03-30 21:29:15 +0000 0 - 5 - 1 www.ddtools.top/handdiy_3.exe 188.114.97.1
2023-03-30 21:26:40 +0000 0 - 0 - 1 janitormoper.com/797c255adc63fe2c75ebb32121fcd76b 172.67.154.222
2023-03-30 21:25:03 +0000 0 - 2 - 0 download.filepuma.com/files/webcam/manycam/Ma (...) 104.26.0.63
2023-03-30 21:22:06 +0000 0 - 0 - 20 7om8qr3axsiake4eowtmr1i.lspower.xyz/usps/veri (...) 188.114.97.1
2023-03-30 21:20:11 +0000 0 - 1 - 0 cdn.discordapp.com/attachments/10886991025707 (...) 162.159.135.233


Last 1 reports on domain: theparalegalresource.com
Date UQ / IDS / BL URL IP
2023-01-15 19:29:04 +0000 0 - 1 - 0 www.theparalegalresource.com/articles/view.ph (...) 104.26.4.17


No other reports with similar screenshot

JavaScript

Executed Scripts (45)

Executed Evals (0)

Executed Writes (1)
#1 JavaScript::Write (size: 213) - SHA256: d7a9b41120492a8cd642835b54c099cdc1a0723b89aa212cec511b8e835c7e3f
< !DOCTYPE html > < html > < head > < style > html, body {
    height: 100 % ;width: 100 % ;
} * {
    border: 0;padding: 0;margin: 0;box - sizing: border - box; - moz - box - sizing: border - box; - webkit - box - sizing: border - box
} < /style></head > < body > < /body></html >


HTTP Transactions (116)


Request Response
                                        
                                            GET /articles/view.php?article_id=13987&page_number=6 HTTP/1.1 
Host: www.theparalegalresource.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         104.26.4.17
HTTP/1.1 301 Moved Permanently
                                        
Date: Sun, 15 Jan 2023 19:28:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 15 Jan 2023 20:28:52 GMT
Location: https://www.lorman.com/ds/the-paralegal-resource?p=19661
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qHhPjOIKkJdF6WXcVBhSm9n6e0PsG%2BtyKv4T0io%2BGOXV1yRdKKXxpOwfyqqN7dzwn%2FUVHKiwh%2Bw0wwpvM4qEHqwPtqr8JZ31L8UiUY%2F3JC8jYNQvR%2B2q99BYm%2FsNi%2FRgNsBer5PVyip4zurr%2BeM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78a104591ee6b4ff-OSL
alt-svc: h2=":443"; ma=60

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "FAAC4E0D123F2112B58953C104EA746CD53047FC1ADA0EF5D669FEECF78DDFFF"
Last-Modified: Sat, 14 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3423
Expires: Sun, 15 Jan 2023 20:25:55 GMT
Date: Sun, 15 Jan 2023 19:28:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "619281D3B9753BC6D2845786DA75E8566687362769517AACF90F953FFBB8407C"
Last-Modified: Sat, 14 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2800
Expires: Sun, 15 Jan 2023 20:15:32 GMT
Date: Sun, 15 Jan 2023 19:28:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "71BDD130B8D143F228542F678E91C98AB4E5844FB9F47B036E15372660BE25FD"
Last-Modified: Sat, 14 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4585
Expires: Sun, 15 Jan 2023 20:45:17 GMT
Date: Sun, 15 Jan 2023 19:28:52 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 15 Jan 2023 18:42:08 GMT
age: 2804
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    30db107dcf4380cef05efea409c2e6a3
Sha1:   96e6a306fbc07299aba64e5c14e2bfca35872fa9
Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: BwpgUl+bLbkprfMj83zX32Futju/3NB4FkWmrJQOdXYkgtDvXhh510eKQtM43AIMtGtB4sJv3ug=
x-amz-request-id: 390A0RGF1ECTDWC4
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 15 Jan 2023 18:44:16 GMT
age: 2677
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    7b922915ebf1fa3639b333f994c74f24
Sha1:   144a3f80b98fd0652d4614f24cf6cbbee40f8938
Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 15 Jan 2023 19:28:53 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /ajax/libs/modernizr/2.6.2/modernizr.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.17.24.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sun, 15 Jan 2023 19:28:53 GMT
content-length: 5536
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03f26-3c36"
last-modified: Mon, 04 May 2020 16:13:26 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 267107
expires: Fri, 05 Jan 2024 19:28:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iJHde0txdAAJIZwLwSVh%2FPvJ35snYz%2FuyW5aSJpI1khrIxmAIChKPrmvnLsXGyFv08nO7Ayu%2BwxyngMJGUpfZC7dC5vXtTVQan7NbDtO4HTSHNQnMs96aLGTAqQk2zsZgNXVk%2FYZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 78a1045d79f61c0e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (14756)
Size:   5536
Md5:    b4890f8bd67549aba809e6ddb0decdaf
Sha1:   33e5c4cb399e79ab444e9fddd3f5b93c521f4b25
Sha256: 2dfe1f3ad6dda1e84ae5f3102828f74f5af2df36370b0ddcfb801a144724dd6a
                                        
                                            GET /images/site/social-facebook-32x32.png HTTP/1.1 
Host: www.lorman.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/ds/the-paralegal-resource?p=19661
Cookie: PHPSESSID=iar9gnbo06ch1ouvpgm46ejrou; code=19661; click_id=610950660
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.26.2.49
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 15 Jan 2023 19:28:53 GMT
content-length: 1431
strict-transport-security: max-age=0
last-modified: Mon, 15 Jul 2013 19:05:17 GMT
etag: "597-4e1918a801540"
content-security-policy: report-uri https://lorman.report-uri.com/r/d/csp/wizard; frame-ancestors 'self'
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CPCtmIu9yrbzpmBCUnwLJSKvYKB0TRbUjqpyNEb5UTMoIWey8OoWi1HR%2BbRLf6QYyHNLYMRgmlAzxeJ2wkfoh4roCZf%2F5hvuAFVzstH1aA4qk5QDbW6XPUmNkP3QqaNg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78a1045d4d3afab8-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Size:   1431
Md5:    1f22153af3266a06e6271242dec8488b
Sha1:   0b594e14a4c8a4737e41707018b0ff5fd68d9158
Sha256: 14a86bac2e09f27418b9c3d6982405b675f9d600e6656d1ee1534fb6e851f85d
                                        
                                            GET /npm/bootstrap@5.2.0/dist/css/bootstrap.min.css HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         151.101.193.229
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 5.2.0
x-jsd-version-type: version
etag: W/"2f88b-Yz6bIW1g1A6raHMXUTTpNbVU+JE"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 15 Jan 2023 19:28:53 GMT
age: 15565192
x-served-by: cache-fra19139-FRA, cache-bma1663-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 27464
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65305)
Size:   27464
Md5:    7888a9c5ee7f0dcbc252f18ea9205250
Sha1:   56fab9f4b3bf2422446e394be042eb29ef6a15bf
Sha256: 5da8436a211d7384f5a0ce219c548d245ae077f3474c95a66f25852bb9aa28d1
                                        
                                            GET /images/site/social-youtube-32x32.png HTTP/1.1 
Host: www.lorman.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/ds/the-paralegal-resource?p=19661
Cookie: PHPSESSID=iar9gnbo06ch1ouvpgm46ejrou; code=19661; click_id=610950660
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.26.2.49
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 15 Jan 2023 19:28:53 GMT
content-length: 1341
strict-transport-security: max-age=0
last-modified: Wed, 30 Apr 2014 20:12:29 GMT
etag: "53d-4f8482af6e540"
content-security-policy: report-uri https://lorman.report-uri.com/r/d/csp/wizard; frame-ancestors 'self'
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=McBau0dHFN%2BSjBFrP0D%2B9jvFLIoyzQE6XTCTyxJj3Qp5%2F6wHE96n0fg4vQni022flK0aRHKlZ%2Fytm9pmTrzAQ%2BIINK%2FjTEJEqKC4R6iUzdd%2BHz1QCiKXM%2By5XlF6Kbwk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78a1045d4d3dfab8-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced\012- data
Size:   1341
Md5:    e3c2cf6468fa554f743c782a8681aa0a
Sha1:   5005802f6f73fa901334b4388c90079be666b07a
Sha256: 738b555ad7f54697acd48ce1639265a953927aa128dad689b1bd95c52e85ad00
                                        
                                            GET /images/site/social-linkedin-32x32.png HTTP/1.1 
Host: www.lorman.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/ds/the-paralegal-resource?p=19661
Cookie: PHPSESSID=iar9gnbo06ch1ouvpgm46ejrou; code=19661; click_id=610950660
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.26.2.49
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 15 Jan 2023 19:28:53 GMT
content-length: 1559
strict-transport-security: max-age=0
last-modified: Mon, 15 Jul 2013 19:05:18 GMT
etag: "617-4e1918a8f5780"
content-security-policy: report-uri https://lorman.report-uri.com/r/d/csp/wizard; frame-ancestors 'self'
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G9ZyBGgo1fGsyt2pBMZZhAbxK6KUfs09l7aoaODq4PWfuXRns%2BNOps21BkmmrIIzaSPl2DM9lZxWx2QH0hTxSxZ60iX8vXTVBy0U6jMHWJESk1L02rc33wki4EqCP8gR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78a1045d4d3cfab8-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Size:   1559
Md5:    279a397be203d8745ea49a074b648df5
Sha1:   459feddea8a775d6de9bc207f350aee552488930
Sha256: 8f14973f7474bc208108130e1af3480cd76545f867a01c23424c9d16eecd5950
                                        
                                            GET /images/site/social-twitter-32x32.png HTTP/1.1 
Host: www.lorman.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/ds/the-paralegal-resource?p=19661
Cookie: PHPSESSID=iar9gnbo06ch1ouvpgm46ejrou; code=19661; click_id=610950660
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.26.2.49
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 15 Jan 2023 19:28:53 GMT
content-length: 1658
strict-transport-security: max-age=0
last-modified: Mon, 15 Jul 2013 19:05:18 GMT
etag: "67a-4e1918a8f5780"
content-security-policy: report-uri https://lorman.report-uri.com/r/d/csp/wizard; frame-ancestors 'self'
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZiOtsFhG9a5SqWdd3kjdeYBX%2FWE62942II3uBFosQwlswoJGAqZ9k1bGeyQw%2Ft2jigVIEoQwr2A6D5XJFjih3sSqWk35%2F8SfsTXkWFArTm8Q%2B2dKjzM%2BWo6m68EsV3XW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78a1045d5d4bfab8-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Size:   1658
Md5:    b4b6a99f1d1c413baf345272904d224c
Sha1:   41580615b919a0a5be051e47d3f7aa0b74b98ea5
Sha256: 7a2990e80175557d0dbc5f8f770152e3cc14318c2560e40da0a9164831d65c7d
                                        
                                            GET /npm/bootstrap@5.2.0/dist/js/bootstrap.bundle.min.js HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         151.101.193.229
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 5.2.0
x-jsd-version-type: version
etag: W/"137ae-xmO6oFGFa2TXRmKalh4ju/D7r4w"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 15 Jan 2023 19:28:53 GMT
age: 10701693
x-served-by: cache-fra19161-FRA, cache-bma1663-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23075
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65299)
Size:   23075
Md5:    ed5c6463c7bbe5b6a99a36ee500352b7
Sha1:   05dcf59651be45fa7079e4586cb36c625f4a859c
Sha256: e9c1ef143791a953e02f587edbddede54028c212954ec9daa5a789e79eb2e1cb
                                        
                                            GET /npm/jquery-migrate@3.3.2/dist/jquery-migrate.min.js HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         151.101.193.229
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 3.3.2
x-jsd-version-type: version
etag: W/"2c03-sKCW1IkcuY6y3aiKYmwUI+m72/I"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 15 Jan 2023 19:28:53 GMT
age: 5855043
x-served-by: cache-fra-eddf8230121-FRA, cache-bma1663-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4198
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   4198
Md5:    588d9985107dec8e4dc29f41237d0c6e
Sha1:   f03303d331371d75d83589b2d2115f3a1c55efa6
Sha256: ab306490ea78fd305fb9f462e3f81a36c65689d753302b8ec1863d92a79691fc
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 15 Jan 2023 19:28:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /npm/jquery@3.4.1/dist/jquery.min.js HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         151.101.193.229
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 3.4.1
x-jsd-version-type: version
etag: W/"15851-iFI5JDUbrAtdVg/gxXgeJVbnaT0"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 15 Jan 2023 19:28:53 GMT
age: 23473872
x-served-by: cache-fra19141-FRA, cache-bma1663-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 30718
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   30718
Md5:    a04231fc91db97b0c2931f4e32612bf0
Sha1:   09ced0d2247a109ab50c11002e65a6cdd503e23a
Sha256: 3e8b3cfab53538eed82e3a872d7aa4aaf72bf20fa8043e66d539ea1a92555b24
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 15 Jan 2023 19:28:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 15 Jan 2023 19:28:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "032AA5B233D8E785DBCA7AC26EE671BCC401B3AE"
Expires: Mon, 16 Jan 2023 06:00:00 GMT
Last-Modified: Sun, 15 Jan 2023 18:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2140
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78a1045eed57b4fd-OSL


--- Additional Info ---
Magic:  data
Size:   1462
Md5:    46046148eefeec2d4022780c0b3b8de8
Sha1:   adb6fdf8767a15f494cb8b90296fb07b4dfb7b57
Sha256: 90e1f87f858d79b67f85f99839527f2a0254095b3c8b91d86217e2c50b0c0424
                                        
                                            GET /gtm.js?id=GTM-P559NL HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.40
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 15 Jan 2023 19:28:53 GMT
expires: Sun, 15 Jan 2023 19:28:53 GMT
cache-control: private, max-age=900
last-modified: Sun, 15 Jan 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 61790
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1921)
Size:   61790
Md5:    a0f85a32aee367ba0c6aa74f51d84f54
Sha1:   089b413f58265f9ad7d73b91eb878a8b125abbb0
Sha256: 3965f7141a5e6bbd51bc148a9fee96c12e0e5920cfda64fb8bd7d7d1c4c1674a
                                        
                                            GET /gtag/js?id=G-D7FPWJXVQY HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.40
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 15 Jan 2023 19:28:53 GMT
expires: Sun, 15 Jan 2023 19:28:53 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 80040
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (26337)
Size:   80040
Md5:    bc35e7fbbfaa96a0c50a7bcf1fd9eb83
Sha1:   aa6d295a362425ee58f723d193aa199c3e72bfb2
Sha256: 2f3541855eb0df0d8b799a8a31810675b5c2a078c6a1110cf54d2cc30047de58
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F0CA5DACA26F21CF02878EED41DE3B9460BAFA70B250ADAA6ED89B201F8086BC"
Last-Modified: Sat, 14 Jan 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20262
Expires: Mon, 16 Jan 2023 01:06:35 GMT
Date: Sun, 15 Jan 2023 19:28:53 GMT
Connection: keep-alive

                                        
                                            GET /gtag/js?id=UA-2988884-3 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.40
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 15 Jan 2023 19:28:53 GMT
expires: Sun, 15 Jan 2023 19:28:53 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45208
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1921)
Size:   45208
Md5:    ccb28f10561621184e5b6150bda5b008
Sha1:   26d2cf9b2bf891186d0f080a98001f02f6cd1a9c
Sha256: e22f61d8eaf9a757af88b1ed4b7fd276680d60ab024b04c70b473a311e6c77ff
                                        
                                            GET /hum4ori.js HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.33.119.19
HTTP/2 200 OK
content-type: text/javascript;charset=utf-8
                                        
server: nginx
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: public, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 6768
date: Sun, 15 Jan 2023 19:28:53 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (2258)
Size:   6768
Md5:    877f67d43d4825e1fa81321b8121e39b
Sha1:   3b51fd13d151820cc63b48949b65094065ce9574
Sha256: 5145dcac844b69662b0a666cca923e4aa08c1f44b79e0020b1b839e7453eeaae
                                        
                                            GET /site/logo-lorman.png HTTP/1.1 
Host: image.lorman.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Cookie: code=19661; click_id=610950660
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

search
                                         54.230.111.13
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 2834
x-request-id: 2b23ee32-2764-4ab0-8fe4-4300f292e8bc
x-server: ImageKit.io
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, s-maxage=15552000, max-age=15552000, must-revalidate
etag: W/"b12-MWmjKnEmU4FnDb9IdOboXKd3MGk"
date: Wed, 11 Jan 2023 06:22:27 GMT
vary: Accept
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 8izktI60PMIl6ykopumMV8WD-t469WyAGoMXTnXgBFYqZMfomvnJEQ==
age: 392786
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   2834
Md5:    52fefa8bb674051cdf7cac4285d07769
Sha1:   3169a32a71265381670dbf4874e6e85ca7773069
Sha256: fa298a662128cd540788ca3bb29b0078c5a22a9d7a051a02f6c947d8bf722a9b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 15 Jan 2023 19:28:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F0CA5DACA26F21CF02878EED41DE3B9460BAFA70B250ADAA6ED89B201F8086BC"
Last-Modified: Sat, 14 Jan 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20262
Expires: Mon, 16 Jan 2023 01:06:35 GMT
Date: Sun, 15 Jan 2023 19:28:53 GMT
Connection: keep-alive

                                        
                                            GET /releases/v5.15.4/css/pro-v4-font-face.min.css?token=852c20d03a HTTP/1.1 
Host: ka-p.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.lorman.com/
Origin: https://www.lorman.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.18.22.52
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 15 Jan 2023 19:28:53 GMT
content-length: 2603
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-a2b"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 78a1045f5964b4f9-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (27832)
Size:   2603
Md5:    eaaabd3f60063923cd5333eb1d7a20a1
Sha1:   0da69706105e28896a1f6eeaa91d5bec1b82f7f1
Sha256: f863309ec0ac675409167610ff9776fa9c7620d6ee3592cc0c19d0b883ff2f70
                                        
                                            GET /releases/v5.15.4/css/pro.min.css?token=852c20d03a HTTP/1.1 
Host: ka-p.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.lorman.com/
Origin: https://www.lorman.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.18.22.52
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 15 Jan 2023 19:28:53 GMT
content-length: 54194
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-d3b2"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 78a1045f595bb4f9-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65397)
Size:   54194
Md5:    dc9270247a97f75913a5d8934c24de03
Sha1:   ed9b0fa01b552571f99d529ed355b2ba91cfc48d
Sha256: 847cc3ab1ea736cbbaac34833596335471fc7a888089b501b3c83a323566f0b8
                                        
                                            GET /releases/v5.15.4/css/pro-v4-shims.min.css?token=852c20d03a HTTP/1.1 
Host: ka-p.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.lorman.com/
Origin: https://www.lorman.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.18.22.52
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 15 Jan 2023 19:28:53 GMT
content-length: 4194
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-1062"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 78a1045f595fb4f9-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (26366)
Size:   4194
Md5:    7fd743485fa194e25e2a207bff6c258a
Sha1:   97c999d752b95ee1ed6271a29aa58109dc17281e
Sha256: dd939d69a23f003d49287291f0bcb59df58119d60bc5f14a81cbfd957894f6dc
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         143.204.42.88
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sun, 15 Jan 2023 19:28:53 GMT
Etag: "63c081bd-1d7"
Server: ECS (dcb/7FA3)
X-Cache: Miss from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: l-CLsFHm_YgF8QczJXwpiFiEpFOT2xSe8KpjIoesI3XKJMYkHybr9w==

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         143.204.42.88
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=95173
Date: Sun, 15 Jan 2023 19:28:53 GMT
Etag: "63c324ba-1d7"
Expires: Mon, 16 Jan 2023 21:55:06 GMT
Last-Modified: Sat, 14 Jan 2023 21:55:06 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: j9Ajbi_8DSI9VtNlW3BYMh07eDwEGJY5GqnYid06DkS4NAyOtJMnNg==

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         143.204.42.88
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sun, 15 Jan 2023 19:28:53 GMT
Server: ECS (dcb/7F5D)
X-Cache: Miss from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Glbuk5Td9ZSMuHenlocX_W5kH89fpHHO5z98kUKCWKZYeW_KN_DcyQ==

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         143.204.42.88
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sun, 15 Jan 2023 19:28:53 GMT
Server: ECS (dcb/7F81)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6ViemX-c-Bcf4Wbpo294ZcEqJKKPdUq0sLhV1z0XHuWTMEAarn6A5w==

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 15 Jan 2023 19:17:25 GMT
age: 688
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /14102-product_index-full.jpg HTTP/1.1 
Host: featureimg.lorman.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Cookie: code=19661; click_id=610950660
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         54.230.111.31
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 7362
date: Sun, 15 Jan 2023 06:03:30 GMT
last-modified: Mon, 13 Jan 2020 22:06:44 GMT
etag: "a610e7ac1750a3783436ba724205dba0"
cache-control: max-age=15768000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0VY2hwZVAsss7ojaJi2oiYWo210n6aE4QGcxNHE436Snm_qS96uUIQ==
age: 48324
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 60", baseline, precision 8, 275x176, components 3\012- data
Size:   7362
Md5:    a610e7ac1750a3783436ba724205dba0
Sha1:   6abfd1f3b9650c523de940c3345f520426a3030a
Sha256: 40d3300cf82a245031cbf282e6dd06cc31cc511e8b6c71bf13b81a09b42dd1c4
                                        
                                            GET /3993-product_index-full.jpg HTTP/1.1 
Host: featureimg.lorman.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Cookie: code=19661; click_id=610950660
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         54.230.111.31
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 7739
date: Fri, 13 Jan 2023 10:00:59 GMT
last-modified: Sat, 23 Dec 2017 09:36:10 GMT
etag: "cb5120c8ef4488bdca46a90ad3a028c0"
cache-control: max-age=15768000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BWF1Z2iGFUi1eFRXUCPc6jyC3SISYeiBSg4gu9BzHc6RjOrG-DPghQ==
age: 206876
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 60", baseline, precision 8, 275x176, components 3\012- data
Size:   7739
Md5:    cb5120c8ef4488bdca46a90ad3a028c0
Sha1:   25014a1c478f8b0ae8b5d6c056f92f289d10a72f
Sha256: bfc2152218bf05bf8036355059665156cf5aecf433f5e915da97960f07f16ff7
                                        
                                            GET /af/71f83c/00000000000000003b9b093b/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.33.119.19
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 33660
etag: "a0f35f91fdc2ca0a90c8288c08c20681c1aecfcf"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sun, 15 Jan 2023 19:28:54 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), CFF, length 33660, version 1.0\012- data
Size:   33660
Md5:    e21953c87f09ca307fea4132455a059a
Sha1:   08b07c629dc5407c6f9dfa375279d53af4bf2727
Sha256: a2b997da567762896061490c3c08e506b2e5b936978560fc12251dd245140b32
                                        
                                            GET /af/ed0e78/00000000000000003b9b0931/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n1&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.33.119.19
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 31476
etag: "dce7b30d884014b37cc4cbec8bf268d08a7d4bd4"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sun, 15 Jan 2023 19:28:54 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), CFF, length 31476, version 1.0\012- data
Size:   31476
Md5:    f17428de8360d57d94678e731369c4e8
Sha1:   7d2f8821c4e354eb0fafcae18a6d65248bd61b83
Sha256: 3e9779dec52550e11a984c17f8a8a60463b2a7d26452b35670aa99e2bb64110a
                                        
                                            GET /af/4838bd/00000000000000003b9b0934/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.33.119.19
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 32688
etag: "852dacc5cd2685c187708b882b28635465e17bd0"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sun, 15 Jan 2023 19:28:54 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), CFF, length 32688, version 1.0\012- data
Size:   32688
Md5:    c654f50b24ad0685a12a2c387542e700
Sha1:   b2cfcca0589023f4371e4a673ec305f8ecace38e
Sha256: 9b99ce50d05750058143cb93936075ad5107f9a3e5b03f2d4872c0ebe753a9f7
                                        
                                            GET /af/437c3d/00000000000000003b9b0932/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n3&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.33.119.19
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 32384
etag: "474f8294a654ddd4e855cc66b1bb647cd40bfa9b"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sun, 15 Jan 2023 19:28:54 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), CFF, length 32384, version 1.0\012- data
Size:   32384
Md5:    8aba0d65966ae522c79c6cd9d5fabd29
Sha1:   b1d04e4c4487e562fe96604efe78a5c891c75961
Sha256: 582f1b5d33e54e95557255c97d79a90d3fda73d7b2b105695446fe643eb737cc
                                        
                                            GET /af/55bd39/00000000000000003b9b093f/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n9&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.33.119.19
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 33264
etag: "e37ccd92cd587b2884c51bb3b59abba2db840b5a"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sun, 15 Jan 2023 19:28:54 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), CFF, length 33264, version 1.0\012- data
Size:   33264
Md5:    5ffcdb45af7b1094988068d816d7b7f6
Sha1:   0156d6468b46a458cfb80125315e38cb9e76f866
Sha256: 39b31c348da0630be5bbf8272fe74a83930c539075f4aadb11df9b3631ca2fbf
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1890
Cache-Control: max-age=137362
Date: Sun, 15 Jan 2023 19:28:54 GMT
Etag: "63c3c226-1d7"
Expires: Tue, 17 Jan 2023 09:38:16 GMT
Last-Modified: Sun, 15 Jan 2023 09:06:46 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /p.gif?s=1&k=hum4ori&ht=tk&h=www.lorman.com&f=137.139.171.175.5474&a=763427&js=1.21.0&app=typekit&e=js&_=1673810934471 HTTP/1.1 
Host: p.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         95.101.11.112
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=604800
cross-origin-resource-policy: cross-origin
etag: "61c32ad2-23"
last-modified: Wed, 22 Dec 2021 13:40:34 GMT
server: nginx
content-length: 35
date: Sun, 15 Jan 2023 19:28:54 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   35
Md5:    81144d75b3e69e9aa2fa3e9d83a64d03
Sha1:   f0fbc60b50edf5b2a0b76e0aa0537b76bf346ffc
Sha256: 9b9265c69a5cc295d1ab0d04e0273b3677db1a6216ce2ccf4efc8c277ed84b39
                                        
                                            GET /r?tid=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0IjoxMDI0NDF9.4vCpvZvLH9eXOx1bNyNbFSWg9g9D1s8v1ncRO1HYhAg HTTP/1.1 
Host: scout.salesloft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         52.4.108.218
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Sun, 15 Jan 2023 19:28:54 GMT
content-length: 41
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://www.lorman.com
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
x-request-id: 8d6b5fabc149cd801cc4195cbfc7fa7a
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   41
Md5:    8c11e15db0f3e1ea036edba78abf1151
Sha1:   72f74f85aa08c65e9927b8d53916a7c45a102d44
Sha256: aa011ed383cb780028a85caaa0dda67dce19b0f4bc596f4f708d1857015c1362
                                        
                                            GET /5119-product_index-full.jpg HTTP/1.1 
Host: featureimg.lorman.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Cookie: code=19661; click_id=610950660
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         54.230.111.31
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 5380
date: Sun, 15 Jan 2023 19:28:55 GMT
last-modified: Sat, 23 Dec 2017 10:25:48 GMT
etag: "39a64c43f6c9f59cfc8c845fe9de7e03"
cache-control: max-age=15768000
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8ilggdoCctiTVsrA5BFwdMYQ0lwwHQryfOPYBTBpvL0DSz2BpOPS2Q==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 60", baseline, precision 8, 275x176, components 3\012- data
Size:   5380
Md5:    39a64c43f6c9f59cfc8c845fe9de7e03
Sha1:   e39f153385e202c9f05596e9989129a2fe3388aa
Sha256: c8632ca341a8105e9b6225b52a06172ce4709ce737a9a82d3499798d8319fe41
                                        
                                            GET /lorman/dslogo/lorman.jpg HTTP/1.1 
Host: ik.imagekit.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.31
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 3340
x-request-id: fc4ae61d-41d7-45ca-ad21-bb28e4649262
x-server: ImageKit.io
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, s-maxage=15552000, max-age=15552000, must-revalidate
server-timing: download;dur=0
etag: W/"d0c-c5gK8TvVwnrjkmXZEnSkldYtDmk"
date: Sun, 15 Jan 2023 19:28:54 GMT
via: 1.1 cb0a9b0d01a1b0cc9278d9875ce23c92.cloudfront.net (CloudFront), 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
vary: Accept
x-cache: Miss from cloudfront
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Z4Kb3MUGex6oSfcGgpRpQdF1LCL60LtI5qOMqPUwLcpPobMDXKzX3A==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 300x83, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   3340
Md5:    800c345fc2e9b80e437893c92cc47034
Sha1:   73980af13bd5c27ae39265d91274a495d62d0e69
Sha256: cdb89b9bcaeeeeedb823561c05dcac1b72cc5a579f65102f7207075bc1c71c38
                                        
                                            GET /5049-product_index-full.jpg HTTP/1.1 
Host: featureimg.lorman.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Cookie: code=19661; click_id=610950660
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         54.230.111.31
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 5435
date: Sun, 15 Jan 2023 19:28:55 GMT
last-modified: Sat, 23 Dec 2017 10:22:21 GMT
etag: "8adf949f8fbfc2d2794bc0b5aea13789"
cache-control: max-age=15768000
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ogj-IwuvsTBWufYPz1UlNyBejGdxJQbKMIRnYkPKiHkhQNPqb-OUcA==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 60", baseline, precision 8, 275x176, components 3\012- data
Size:   5435
Md5:    8adf949f8fbfc2d2794bc0b5aea13789
Sha1:   01a5b1909d33fd877f099029df06e4196416027c
Sha256: c65adeff69fa170edd9b0682fb8071945464b5874402b5a34a4e685609b78d10
                                        
                                            GET /releases/v5.15.4/webfonts/pro-fa-light-300-5.0.0.woff2 HTTP/1.1 
Host: ka-p.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.18.22.52
HTTP/2 200 OK
content-type: font/woff2
                                        
date: Sun, 15 Jan 2023 19:28:54 GMT
content-length: 24800
access-control-allow-origin: *
cache-control: max-age=31556926
etag: "610ae357-60e0"
last-modified: Wed, 04 Aug 2021 18:58:31 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 78a104630f3db4f9-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 24800, version 331.-31196\012- data
Size:   24800
Md5:    4abe94f1746789f39110d3ebac7ebd96
Sha1:   bdc3b41f3cc3e5e3e87ca020eeddc2b288f0dd91
Sha256: 299dc8e16be2ab2214e279b5536efd387d17fd3d364f397ce9f1fed602384fea
                                        
                                            GET /releases/v5.15.4/webfonts/pro-fa-solid-900-5.0.0.woff2 HTTP/1.1 
Host: ka-p.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.18.22.52
HTTP/2 200 OK
content-type: font/woff2
                                        
date: Sun, 15 Jan 2023 19:28:54 GMT
content-length: 19784
access-control-allow-origin: *
cache-control: max-age=31556926
etag: "610ae35f-4d48"
last-modified: Wed, 04 Aug 2021 18:58:39 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 78a104630f59b4f9-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 19784, version 331.-31196\012- data
Size:   19784
Md5:    c7682b8035fc1d1672d6455631813794
Sha1:   9e2955e5e55b3073e229c218724406425862d4a1
Sha256: 1b50aa1d36ea249991fb44f8f6ad2aa74fe360df9cc04c564b5edf3b053b739c
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: sOAaBggxyDU1jiT7rCQXvg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.13.249.229
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: o7MNL+mhvG6tB2I0slOMP1GTpwY=

                                        
                                            GET /releases/v5.15.4/webfonts/pro-fa-regular-400-5.0.0.woff2 HTTP/1.1 
Host: ka-p.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.18.22.52
HTTP/2 200 OK
content-type: font/woff2
                                        
date: Sun, 15 Jan 2023 19:28:54 GMT
content-length: 23316
access-control-allow-origin: *
cache-control: max-age=31556926
etag: "610ae35c-5b14"
last-modified: Wed, 04 Aug 2021 18:58:36 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 78a104630f4fb4f9-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 23316, version 331.-31196\012- data
Size:   23316
Md5:    e0e8f01313f5061924cb318b031d706e
Sha1:   8ddfde7f46123a327ec627acf520741b1f016eb9
Sha256: 78f2234a60cbe6920db07df9663c0b035d9a602d8f7b82e174fc9e0f5bf89ad0
                                        
                                            GET /lorman/dslogo/the-paralegal-resource.png HTTP/1.1 
Host: ik.imagekit.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.31
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 3572
x-request-id: 6a8cbfc1-d843-487f-b7c2-14292116b145
x-server: ImageKit.io
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, s-maxage=15552000, max-age=15552000, must-revalidate
server-timing: download;dur=0
etag: W/"df4-BODYYN21r7l7AM4FSA/UW2BZN+g"
date: Sun, 15 Jan 2023 19:28:54 GMT
via: 1.1 142ded88048f806cc40a5a225130cc8a.cloudfront.net (CloudFront), 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
vary: Accept
x-cache: Miss from cloudfront
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: yk_iVBcpYs_18XpyrY5sOgqr1g51M4o7IhcZ-Bvavfu15VlXhm_r2w==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   3572
Md5:    3f866b7fb6f2b21bab37db25dcd25379
Sha1:   04e0d860ddb5afb97b00ce05480fd45b605937e8
Sha256: aa6dd10a9f17c6e6fb7441387ff3c2d7e5b73315ef0a17b39cf19458fd618fb3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         143.204.42.88
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=96875
Date: Sun, 15 Jan 2023 19:28:54 GMT
Etag: "63c31db9-1d7"
Expires: Mon, 16 Jan 2023 22:23:29 GMT
Last-Modified: Sat, 14 Jan 2023 21:25:13 GMT
Server: ECS (nyb/1D1B)
X-Cache: Miss from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 8m9waLbVe0PIUr2utyXQZZb8Wpw1o9T_ncjh2nrVY3wP1CtZMIls1Q==
Age: 3496

                                        
                                            GET /i HTTP/1.1 
Host: scout.salesloft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         52.4.108.218
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Sun, 15 Jan 2023 19:28:54 GMT
content-length: 48
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://www.lorman.com
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
x-request-id: 2ec12dba60ec0fa7f8a9ceeca44c6fec
set-cookie: site_identity=5e180f0d-486b-4c84-ae22-e8631f1a9149; path=/; expires=Mon, 15 Jan 2024 19:28:54 GMT; max-age=31536000; HttpOnly
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   48
Md5:    3ab51e3cd77d5a4d77c377366675b9cb
Sha1:   81e068cc89565c2564f1a58f0ab5745bc268a5b1
Sha256: 0952b52ae33c4a6f2215d6dafe533547fe783d7f4fa70cb9d884e5ee12831301
                                        
                                            GET /munchkin.js HTTP/1.1 
Host: munchkin.marketo.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         88.221.99.189
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Accept-Ranges: bytes
ETag: "92b41a298690c047b0c4602dd843cba4:1662686319.691662"
Last-Modified: Fri, 09 Sep 2022 01:18:39 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 15 Jan 2023 19:28:54 GMT
Content-Length: 728
Connection: keep-alive
P3P: policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR"


--- Additional Info ---
Magic:  ASCII text, with very long lines (521)
Size:   728
Md5:    51a92d8c69733d719447dea0416ed039
Sha1:   69f4c1e0b7ebba812bc096708d57627927dff265
Sha256: cb483c0ea4012ac512bcba6204b37622b388c1aefd4ae9028f60abb965f23d29
                                        
                                            GET /li.lms-analytics/insight.min.js HTTP/1.1 
Host: snap.licdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.51.252.149
HTTP/2 200 OK
content-type: application/x-javascript;charset=utf-8
                                        
last-modified: Tue, 10 Jan 2023 17:22:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=35679
date: Sun, 15 Jan 2023 19:28:54 GMT
content-length: 4777
x-cdn: AKAM
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (13351)
Size:   4777
Md5:    74f72658f6efd10c4c286ab07cd5e452
Sha1:   9fa4dfc644b6e818914f2f2c4fe4bdf791fd6d39
Sha256: 6681619d5962f95b3fccfa34a7f035664edb66522d237ea0c28a05851f9d295c
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.46
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sun, 15 Jan 2023 18:21:54 GMT
expires: Sun, 15 Jan 2023 20:21:54 GMT
cache-control: public, max-age=7200
age: 4020
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1490)
Size:   20085
Md5:    ca7fbbfd120e3e329633044190bbf134
Sha1:   d17f81e03dd827554ddd207ea081fb46b3415445
Sha256: 847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
                                        
                                            GET /162/munchkin.js HTTP/1.1 
Host: munchkin.marketo.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         88.221.99.189
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Accept-Ranges: bytes
ETag: "75daf56f6191efe42577301908659c29:1656637152.894482"
Last-Modified: Fri, 01 Jul 2022 00:59:12 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=8640000
Expires: Tue, 25 Apr 2023 19:28:54 GMT
Date: Sun, 15 Jan 2023 19:28:54 GMT
Content-Length: 4677
Connection: keep-alive
P3P: policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR"


--- Additional Info ---
Magic:  ASCII text, with very long lines (606)
Size:   4677
Md5:    3e9baed982956735f6e0a0e756d97ed9
Sha1:   9223be6a494a10959101a7942419df7b05b84d73
Sha256: 930a508ed0ea6b4861d19c0738360182514010913c4ebfe9352064ae5006f8a1
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 15 Jan 2023 19:28:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/viewthroughconversion/1015561868/?random=1673810934335&cv=11&fst=1673810934335&bg=ffffff&guid=ON&async=1&gtm=2wg1a1&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.lorman.com%2Fds%2Fthe-paralegal-resource%3Fp%3D19661&tiba=The%20Paralegal%20Resource&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.98
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 15 Jan 2023 19:28:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 887
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 15-Jan-2023 19:43:54 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1865), with no line terminators
Size:   887
Md5:    1cd823b081d5cebec04364e5ddde371b
Sha1:   cd37248aceb75ca5f65a0538d6a56bf5a89fc2fa
Sha256: e5ee836987db50b51e4db0726058085df01080a798406833bd773e62cd42ea1f
                                        
                                            GET /images/site/favicon-32x32.png HTTP/1.1 
Host: www.lorman.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/ds/the-paralegal-resource?p=19661
Cookie: PHPSESSID=iar9gnbo06ch1ouvpgm46ejrou; code=19661; click_id=610950660; _ga_D7FPWJXVQY=GS1.1.1673810934.1.0.1673810934.0.0.0; _ga=GA1.1.1317807014.1673810934; _ga_PNVL0DT00X=GS1.1.1673810934.1.0.1673810934.0.0.0; slireg=https://scout.us2.salesloft.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.26.2.49
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 15 Jan 2023 19:28:54 GMT
content-length: 2915
last-modified: Wed, 23 Oct 2013 15:12:53 GMT
etag: "b63-4e969f3810740"
content-security-policy-report-only: report-uri https://lorman.report-uri.com/r/d/csp/wizard; frame-ancestors 'self'
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7dYAWqw8lFDM5OBQsiMGFPUX5nqAXwsSTnQ4dRBZxfv9Td4hmSmwMx2HynSm7y9AE5jwPc2u8tGbaTVK4BGIPvdhBrAVUrnkwF8R2Ur8e45NRbndS8RfMGovIExHGOPL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 78a104650cfafab8-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size:   2915
Md5:    aba5bbf26d60c31084b73970a4d6c75d
Sha1:   83f0b2b5ea27f81df62b6a0aa134e8aef02e5f42
Sha256: 6c4ee870b1769cacb5e560e36804fbb09da2354ac18ddd955313551a9e37a162
                                        
                                            GET /images/site/favicon-114x114.png HTTP/1.1 
Host: www.lorman.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/ds/the-paralegal-resource?p=19661
Cookie: PHPSESSID=iar9gnbo06ch1ouvpgm46ejrou; code=19661; click_id=610950660; _ga_D7FPWJXVQY=GS1.1.1673810934.1.0.1673810934.0.0.0; _ga=GA1.1.1317807014.1673810934; _ga_PNVL0DT00X=GS1.1.1673810934.1.0.1673810934.0.0.0; slireg=https://scout.us2.salesloft.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.26.2.49
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 15 Jan 2023 19:28:54 GMT
content-length: 10501
last-modified: Wed, 23 Oct 2013 14:52:10 GMT
etag: "2905-4e969a96a5a80"
content-security-policy: report-uri https://lorman.report-uri.com/r/d/csp/wizard; frame-ancestors 'self'
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wyspg%2FV1QUbNKwEdZRmppylW98bSWkGYH2DxWmPEXrDfpBeCa3Bodjrb5Jvyl52GedGCFgmLr7D3tAvNpxhWGbC8bis3H5yjIi3lcqZHroVLWLvw4CfKNf8gsihlLGyv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 78a10464fce8fab8-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 114 x 114, 8-bit colormap, non-interlaced\012- data
Size:   10501
Md5:    776797d5a9292c28735c802a28c949c4
Sha1:   bb4bcd073f1ca59bd98cd1c97d4c2921370dce62
Sha256: a62f4df245505146503c20022671c5ec207657ad512a65e0bc0b8f8e2a1c5e81
                                        
                                            GET /modules.0a5831f9446624640839.js HTTP/1.1 
Host: script.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.68
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 68992
date: Thu, 12 Jan 2023 12:30:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "c190d47cd0259bc45c4cf36c6c1a261a"
last-modified: Thu, 12 Jan 2023 12:29:16 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Hqq90w-cGq9juAGLwti7kyVyVi9xgbvOncD43P-3fLAAkChO2_pvxw==
age: 284328
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (47958)
Size:   68992
Md5:    c190d47cd0259bc45c4cf36c6c1a261a
Sha1:   a4d82aab61799b506dcaa84753e481eea33547ad
Sha256: 8593a0bee7b36326e5243a3eb4f70618a602a1d3646e732567ce05f7cda2c7cb
                                        
                                            GET /core/css/main-bs5.981da37ffc4ede4fbf7563d422ee18db.css HTTP/1.1 
Host: www.lorman.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/ds/the-paralegal-resource?p=19661
Cookie: PHPSESSID=iar9gnbo06ch1ouvpgm46ejrou; code=19661; click_id=610950660
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.26.2.49
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 15 Jan 2023 19:28:53 GMT
strict-transport-security: max-age=0
last-modified: Wed, 27 Jul 2022 14:43:46 GMT
etag: W/"277b-5e4ca71b88c80-gzip"
vary: Accept-Encoding
content-security-policy: report-uri https://lorman.report-uri.com/r/d/csp/wizard; frame-ancestors 'self'
cache-control: max-age=31536000
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N%2BXyKtp%2FMxAH6UhMMtj5H1qLN%2BNaCCjiLNXtsext05ZNLPPJhQk7VzKLl5mm6Z66IJjC1q4Ri%2Be9dyfbFvBbCLKaD03TIbZ63GXrvnWS9BUTH4io9IEvtEg4jk67Lrw9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78a1045d2d18fab8-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  assembler source, ASCII text
Size:   2556
Md5:    64947af919c7740ea3727f82db3fcc40
Sha1:   ae66401dcdc64ed1e03ac5bc9d0f085793b91443
Sha256: 806e515edc31c406a3e86c93e449a3e34ea14f40624b9e6d0ac6f4cf3ac0d119
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 15 Jan 2023 19:28:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /collect?v=2&fmt=js&pid=1615884&time=1673810934932&url=https%3A%2F%2Fwww.lorman.com%2Fds%2Fthe-paralegal-resource%3Fp%3D19661 HTTP/1.1 
Host: px.ads.linkedin.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         13.107.42.14
HTTP/2 302 Found
                                        
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D1615884%26time%3D1673810934932%26url%3Dhttps%253A%252F%252Fwww.lorman.com%252Fds%252Fthe-paralegal-resource%253Fp%253D19661%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQIaI8aRIUxMKAAAAYW25_vUQBhrA4kc6SxQmF96zZ6xE272dpbc9RiKQ5me39oRVbEBCnmf8pJ0Lw; Max-Age=2592000; Expires=Tue, 14 Feb 2023 19:28:54 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure AnalyticsSyncHistory=AQJpQzMzrRZG1AAAAYW25_vUOmTAFD-T2D4-NrOM89Gp16nfzgz-xbjrcj-AcWRpJvT3hKEnVN8uesiWN9U7TA; Max-Age=2592000; Expires=Tue, 14 Feb 2023 19:28:54 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure bcookie="v=2&679f1e34-695e-43ce-8c4d-d7906b42f10a"; domain=.linkedin.com; Path=/; Secure; Expires=Mon, 15-Jan-2024 19:28:54 GMT; SameSite=None lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2468:u=1:x=1:i=1673810934:t=1673897334:v=2:sig=AQH-PR8B_fVUVkfX_9hnE2-YWcnbfqXF"; Expires=Mon, 16 Jan 2023 19:28:54 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXyUnovlH6H+Vz93M5VQA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 9ED487B76A89401F96E049697AFE4473 Ref B: OSL30EDGE0415 Ref C: 2023-01-15T19:28:54Z
date: Sun, 15 Jan 2023 19:28:54 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 15 Jan 2023 19:28:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /box-5e66f98b4ee957db209dc6f63e3d59dd.html HTTP/1.1 
Host: vars.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         143.204.55.20
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 1035
date: Sat, 03 Dec 2022 04:42:02 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "e0652b84b7b3b650769c759fc520c3f8"
last-modified: Thu, 01 Dec 2022 13:36:28 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BYh-CD_WabSiqoLp6eRPgwXDfW8JOxLhHT5vvDjNWzZ8HxyCf8rddQ==
age: 3768412
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Size:   1035
Md5:    e0652b84b7b3b650769c759fc520c3f8
Sha1:   0b55d6e28613350c7f41b88f19e726e6751ad03b
Sha256: 94b4c240f83065223dcacdd3f8b69cb229d0616edc3e2041eef3e270d859fc3d
                                        
                                            GET /pagead/1p-user-list/1015561868/?random=1673810934335&cv=11&fst=1673809200000&bg=ffffff&guid=ON&async=1&gtm=2wg1a1&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.lorman.com%2Fds%2Fthe-paralegal-resource%3Fp%3D19661&tiba=The%20Paralegal%20Resource&fmt=3&is_vtc=1&random=795659804&rmt_tld=0&ipr=y HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.132
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 15 Jan 2023 19:28:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-user-list/1015561868/?random=1673810934335&cv=11&fst=1673809200000&bg=ffffff&guid=ON&async=1&gtm=2wg1a1&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.lorman.com%2Fds%2Fthe-paralegal-resource%3Fp%3D19661&tiba=The%20Paralegal%20Resource&fmt=3&is_vtc=1&random=795659804&rmt_tld=1&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.67
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 15 Jan 2023 19:28:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 15 Jan 2023 19:28:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 15 Jan 2023 19:28:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D1615884%26time%3D1673810934932%26url%3Dhttps%253A%252F%252Fwww.lorman.com%252Fds%252Fthe-paralegal-resource%253Fp%253D19661%26liSync%3Dtrue HTTP/1.1 
Host: www.linkedin.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.lorman.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         13.107.42.14
HTTP/2 302 Found
                                        
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=1615884&time=1673810934932&url=https%3A%2F%2Fwww.lorman.com%2Fds%2Fthe-paralegal-resource%3Fp%3D19661&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None bcookie="v=2&8bc98580-085e-45e5-8531-194b9a8b1ff8"; Domain=.linkedin.com; Expires=Mon, 15-Jan-2024 19:28:54 GMT; Path=/; Secure; SameSite=None bscookie="v=1&202301151928544fae8f70-34f8-4021-8392-5bdea23fc2afAQFxLjYCY_llklSS14c70ckOQcb2s5W_"; Domain=.www.linkedin.com; Expires=Mon, 15-Jan-2024 19:28:54 GMT; Path=/; HttpOnly; Secure; SameSite=None li_gc=MTswOzE2NzM4MTA5MzQ7MjswMjGiPVNGZAg7DeP+0ftcdp8ZmSv73ePrEN4uLZRxYdi/DQ==; Domain=.linkedin.com; Expires=Fri, 14 Jul 2023 19:28:54 GMT; Path=/; Secure; SameSite=None lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2445:u=1:x=1:i=1673810934:t=1673897334:v=2:sig=AQH-IcaCNphwlaadQSppdWiG-WD_B8Vq"; Expires=Mon, 16 Jan 2023 19:28:54 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXyUnoyQG+THxaH1Mh0/w==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: E91892F3AB784CB28FC53171173F7AEC Ref B: OSL30EDGE0415 Ref C: 2023-01-15T19:28:54Z
date: Sun, 15 Jan 2023 19:28:54 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3554
Cache-Control: 'max-age=158059'
Date: Sun, 15 Jan 2023 19:28:55 GMT
Last-Modified: Sun, 15 Jan 2023 18:29:41 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-2988884-3&cid=1317807014.1673810934&jid=470375965&gjid=191597091&_gid=955123819.1673810935&_u=YADAAUAAAAAAACAAI~&z=2051016551 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         74.125.131.154
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: https://www.lorman.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 15 Jan 2023 19:28:55 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            GET /sessions/1888963?s=0.25&r=0.17665590124312203 HTTP/1.1 
Host: vc.hotjar.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.91
HTTP/2 204 No Content
                                        
access-control-allow-origin: *
cache-control: no-store
date: Sun, 15 Jan 2023 19:28:55 GMT
server: Python/3.7 aiohttp/3.5.4
x-cache: Miss from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lRO-6qFHiBdq6v1N8eBkjTqavbg3y1-Hy5F9tuebi84YIsI0JbFNuA==
X-Firefox-Spdy: h2

                                        
                                            GET /?1FYhEsND6bXKHEVQlnZspup7c79uNLen HTTP/1.1 
Host: v2.zopim.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.16.105.139
HTTP/2 302 Found
                                        
date: Sun, 15 Jan 2023 19:28:54 GMT
location: https://static.zdassets.com/ekr/asset_composer.js
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 78a104652df9fac0-OSL
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         143.204.42.88
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=163360
Date: Sun, 15 Jan 2023 19:28:55 GMT
Etag: "63c41adb-1d7"
Expires: Tue, 17 Jan 2023 16:51:35 GMT
Last-Modified: Sun, 15 Jan 2023 15:25:15 GMT
Server: ECS (nyb/1D0C)
X-Cache: Miss from cloudfront
Via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: w40vhvR4YvBIev2eG7nxzyt7aOuqrat21suHhXTZrA_-yIYuOK0MJQ==
Age: 5180

                                        
                                            POST /webevents/visitWebPage?_mchNc=1673810934971&_mchCn=&_mchId=840-UZQ-044&_mchTk=_mch-lorman.com-1673810934970-38733&_mchHo=www.lorman.com&_mchPo=&_mchRu=%2Fds%2Fthe-paralegal-resource&_mchPc=https%3A&_mchVr=162&_mchEcid=&_mchHa=&_mchRe=&_mchQp=p%3D19661 HTTP/1.1 
Host: 840-uzq-044.mktoresp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         192.28.144.124
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
                                        
Server: nginx/1.20.1
Date: Sun, 15 Jan 2023 19:28:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Request-Id: 24cea9ec-1030-445c-91d0-98cdb10fe982
Content-Encoding: gzip
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   28
Md5:    9dafc521bd59955b4986f0fc3777f77a
Sha1:   5a572b4730d4a2bce2fa35597a0993c649f26c74
Sha256: e4e90a7b8bacdfe395361149a9fd42f9192b68bdf1497e4454d0ab4c4917f746
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 15 Jan 2023 19:28:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /cdn-cgi/rum? HTTP/1.1 
Host: www.lorman.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 21622
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/ds/the-paralegal-resource?p=19661
Cookie: PHPSESSID=iar9gnbo06ch1ouvpgm46ejrou; code=19661; click_id=610950660; _ga_D7FPWJXVQY=GS1.1.1673810934.1.0.1673810934.0.0.0; _ga=GA1.2.1317807014.1673810934; _ga_PNVL0DT00X=GS1.1.1673810934.1.0.1673810934.0.0.0; slireg=https://scout.us2.salesloft.com; _mkto_trk=id:840-UZQ-044&token:_mch-lorman.com-1673810934970-38733; _gid=GA1.2.955123819.1673810935; _gat_gtag_UA_2988884_3=1; sliguid=5e180f0d-486b-4c84-ae22-e8631f1a9149; slirequested=true; _hjSessionUser_1888963=eyJpZCI6IjhlYjBlMzFhLTM5YzktNTU4NC04MTljLTczNThiMjZhZGYzMCIsImNyZWF0ZWQiOjE2NzM4MTA5MzUxNzAsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1888963=eyJpZCI6IjEzOWY3MWJiLTJiZDktNDU2NC1hYmNiLTk3NjhlNDA3MzY4MSIsImNyZWF0ZWQiOjE2NzM4MTA5MzUyMTksImluU2FtcGxlIjpmYWxzZX0=; _hjIncludedInPageviewSample=1; _hjAbsoluteSessionInProgress=1; ln_or=eyIxNjE1ODg0IjoiZCJ9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.26.2.49
HTTP/2 204 No Content
                                        
date: Sun, 15 Jan 2023 19:28:55 GMT
access-control-allow-origin: https://www.lorman.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 78a1046a8a64fab8-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            GET /pagead/conversion_async.js HTTP/1.1 
Host: www.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.162
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sun, 15 Jan 2023 19:28:55 GMT
expires: Sun, 15 Jan 2023 19:28:55 GMT
cache-control: private, max-age=3600
etag: 15007264592431658177
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 15155
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1654)
Size:   15155
Md5:    57d846f4595d22590eafe49556e63c61
Sha1:   7732ded8fd65c4c5e0ffde75391f73a715cfc473
Sha256: 24050742b331538f073a4eb776c497b96e651a95e65dc297d5f8a5a3af60c802
                                        
                                            GET /w?1FYhEsND6bXKHEVQlnZspup7c79uNLen HTTP/1.1 
Host: v2.zopim.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.16.105.139
HTTP/2 302 Found
content-type: application/octet-stream
                                        
date: Sun, 15 Jan 2023 19:28:55 GMT
content-length: 0
location: https://v2.zopim.com/bin/v/widget_v2.334.js
etag: "62e9bace-0"
expires: Sun, 15 Jan 2023 23:28:55 GMT
cache-control: max-age=14400, max-age=14400, public, must-revalidate, proxy-revalidate
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 78a1046a9ad1fac0-OSL
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 15 Jan 2023 19:28:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "35A05F202611C548FD0768C5F1B3D749A0DD50ADE93E6DF29940547480C5EC91"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3070
Expires: Sun, 15 Jan 2023 20:20:05 GMT
Date: Sun, 15 Jan 2023 19:28:55 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "35A05F202611C548FD0768C5F1B3D749A0DD50ADE93E6DF29940547480C5EC91"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3070
Expires: Sun, 15 Jan 2023 20:20:05 GMT
Date: Sun, 15 Jan 2023 19:28:55 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "35A05F202611C548FD0768C5F1B3D749A0DD50ADE93E6DF29940547480C5EC91"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3070
Expires: Sun, 15 Jan 2023 20:20:05 GMT
Date: Sun, 15 Jan 2023 19:28:55 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "35A05F202611C548FD0768C5F1B3D749A0DD50ADE93E6DF29940547480C5EC91"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3070
Expires: Sun, 15 Jan 2023 20:20:05 GMT
Date: Sun, 15 Jan 2023 19:28:55 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3456fd70-5207-41e6-abed-adbc381fd7a4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9801
x-amzn-requestid: 39d84a20-55f7-4b7c-abc4-9ac1ff100da9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eqSkoGCZoAMF1zA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c0caea-4f7a1cf676335cc83018dc51;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 03:07:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rUFicgD94yxyZhMtQm-aYS-QpZXn07rLRBhnBLMTIQh6qHKOX_LRFg==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 15 Jan 2023 05:32:33 GMT
age: 50182
etag: "1368d81de22ea2e4054a3e1a8f01ef337c63e35b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9801
Md5:    74ac30be02dee9dcfeee79a7dc54edff
Sha1:   1368d81de22ea2e4054a3e1a8f01ef337c63e35b
Sha256: 8abc2f276906dfb9ce75c2526d2c2cfa6aea6dbe13f4046de1040cd611cbbc1f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9539
x-amzn-requestid: 33735807-3403-41ee-a488-a3f25f9b12d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ewX9XFvoIAMFzMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c339ee-65def8747314ecb63b000a4c;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 23:25:34 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: D6FaDcaWbJehldBR7ASM60ey56hQS1H4ZpLlGqI-ptDupfJT-iugfw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 15 Jan 2023 05:58:31 GMT
age: 48624
etag: "82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9539
Md5:    a23d61d610c7b55d943fcb2636a01b65
Sha1:   82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065
Sha256: 28bf3039cc8c1213e64893c71bc150eda573223feb2cc15ad0814a44960d434a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c678ae9-1df5-47c4-bbe3-ec12e97322d9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5495
x-amzn-requestid: d76b8f1d-37a2-47ac-9acf-1b0a44a4a5fe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eqsroF62IAMF-mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c0f4b0-67700bfd11f1ad5d0aaab92d;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 06:05:36 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: i1qN9bIaz5ekgkM81KehmDDQpzBULDfPkp-fjEOHiZxFVogDBOIGzg==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 23:08:05 GMT
age: 73250
etag: "805c27d8f82a5eb6583814313c36f5e7699408e5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5495
Md5:    90fc5463f271bab652af099cb526f189
Sha1:   805c27d8f82a5eb6583814313c36f5e7699408e5
Sha256: 749dca33aa337b494fb113896bf035bc9dcb17068ecffdf30fc5ac85a4ac5185
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6eabf5f-7d91-476e-9896-3162652163aa.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5463
x-amzn-requestid: 5e0c891d-c5f0-48a9-8f69-6ca2290039b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ejsaSEHpoAMFW6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63be2774-55e5f2937d688fb00a12d61b;Sampled=0
x-amzn-remapped-date: Wed, 11 Jan 2023 03:05:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3hggMHuhCbQp66miHL5WSjLEyg-J_BwLJnliLAUzdJfCj0Eim5jgPg==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 15 Jan 2023 06:29:56 GMT
age: 46739
etag: "a9e0dc338dabcdebb33b35a162b0fb6950b31ddb"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5463
Md5:    9365e4ddb0fa0d3f6dbdec98433e02a9
Sha1:   a9e0dc338dabcdebb33b35a162b0fb6950b31ddb
Sha256: cbe4cdf59e5a2f7433485637c88c3fba9c022de1c7559e42ceb9a2c8a872fd21
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59115b15-3223-4534-8922-0aff0bedae1b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9894
x-amzn-requestid: e5a7bd4f-2d64-44c4-815f-8deae16fd5e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: es0pbGdOIAMFToA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1ce3c-283396d9346608cf01ef52e6;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: VSKRl2CvP9rNmEn6arD63QK0yFGvMnAjfyS3cVrHlylTjuXKAyZYVg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 21:43:36 GMT
age: 78319
etag: "dd23bfbd068f380d7bbd2459921570c63c46cce3"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9894
Md5:    14f17eb27938efbfade5b80646ffc881
Sha1:   dd23bfbd068f380d7bbd2459921570c63c46cce3
Sha256: 0695aef5736c7c63fb3c45383182824db19045b4eba186feb9da198ac7b9a124
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77d2ca2b-548c-4f63-b8a5-e55b6e92d5e9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4981
x-amzn-requestid: b6c3a2c1-b88e-4eb9-9c22-788748559fea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ewISXEQ9oAMFbkg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c320db-0a9f9ac1084e4f02006598cf;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 21:38:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: a8kL20Yet_IuO2ZztlKmenTGOFa4BCYHi2B-4B1W1eq5-tCqGK3isg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 21:38:35 GMT
etag: "be8e369be0ccc707b904546798aacc9afe413cfa"
age: 78620
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4981
Md5:    5c609c89120eef87bbdd0d8ee5ee18f9
Sha1:   be8e369be0ccc707b904546798aacc9afe413cfa
Sha256: feaa9f41b45aaa71d87008fe3112bc09e41cf6c2c500b4bc1adc125c7c82eee1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         143.204.42.88
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=169342
Date: Sun, 15 Jan 2023 19:28:55 GMT
Etag: "63c43596-1d7"
Expires: Tue, 17 Jan 2023 18:31:17 GMT
Last-Modified: Sun, 15 Jan 2023 17:19:18 GMT
Server: ECS (nyb/1D23)
X-Cache: Miss from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 53tU87EhtwTfF9Pefae0jypQReqJSQ4qH4ek1Q80vgV_HEVkO4fNnw==
Age: 4319

                                        
                                            GET /s/W/ws/TEPDekUpTiBFtVhP/c/1673810936085 HTTP/1.1 
Host: widget-mediator.zopim.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.lorman.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: hmIBBdgjNh3R5Xbr6+Z3TQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.58.68.135
HTTP/1.1 101 Switching Protocols
                                        
Date: Sun, 15 Jan 2023 19:28:56 GMT
Connection: upgrade
Set-Cookie: AWSALB=/t6xAusIlswaN6Up03Wq+0JOJYiyl4ir7A+ZkgzTEfUH6CAy29ieIuHtfWaTzgBFAVh813AMmI3470ZTBwfiSDNYP/86XhhaT1H1s07EJXM17T7hOmtfzMwhL/56; Expires=Sun, 22 Jan 2023 19:28:56 GMT; Path=/ AWSALBCORS=/t6xAusIlswaN6Up03Wq+0JOJYiyl4ir7A+ZkgzTEfUH6CAy29ieIuHtfWaTzgBFAVh813AMmI3470ZTBwfiSDNYP/86XhhaT1H1s07EJXM17T7hOmtfzMwhL/56; Expires=Sun, 22 Jan 2023 19:28:56 GMT; Path=/; SameSite=None; Secure
Upgrade: websocket
Sec-WebSocket-Accept: US/Ezg6D/FO9o+ZZIi5ZR8zAxlc=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets

                                        
                                            GET /widget/images/avatar_simple_visitor.png HTTP/1.1 
Host: v2.zopim.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.16.105.139
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 15 Jan 2023 19:28:56 GMT
content-length: 638
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: origSize=1922
etag: "58b8006b-782"
expires: Sun, 22 Jan 2023 19:28:56 GMT
last-modified: Thu, 02 Mar 2017 11:22:19 GMT
cf-cache-status: HIT
age: 320933
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78a10470d8ebfac0-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced\012- data
Size:   638
Md5:    3fac65d78e7f62804a6ca574c2a3bbd9
Sha1:   2baeb6d302f26c89e6265dd648868c8247561597
Sha256: 59b0b341f2377d03855e6151484cc22019c58f997a11577715121d710fd2386c
                                        
                                            POST /cdn-cgi/rum? HTTP/1.1 
Host: www.lorman.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 704
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/ds/the-paralegal-resource?p=19661
Cookie: PHPSESSID=iar9gnbo06ch1ouvpgm46ejrou; code=19661; click_id=610950660; _ga_D7FPWJXVQY=GS1.1.1673810934.1.0.1673810941.0.0.0; _ga=GA1.2.1317807014.1673810934; _ga_PNVL0DT00X=GS1.1.1673810934.1.0.1673810941.0.0.0; slireg=https://scout.us2.salesloft.com; _mkto_trk=id:840-UZQ-044&token:_mch-lorman.com-1673810934970-38733; _gid=GA1.2.955123819.1673810935; _gat_gtag_UA_2988884_3=1; sliguid=5e180f0d-486b-4c84-ae22-e8631f1a9149; slirequested=true; _hjSessionUser_1888963=eyJpZCI6IjhlYjBlMzFhLTM5YzktNTU4NC04MTljLTczNThiMjZhZGYzMCIsImNyZWF0ZWQiOjE2NzM4MTA5MzUxNzAsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1888963=eyJpZCI6IjEzOWY3MWJiLTJiZDktNDU2NC1hYmNiLTk3NjhlNDA3MzY4MSIsImNyZWF0ZWQiOjE2NzM4MTA5MzUyMTksImluU2FtcGxlIjpmYWxzZX0=; _hjIncludedInPageviewSample=1; _hjAbsoluteSessionInProgress=1; ln_or=eyIxNjE1ODg0IjoiZCJ9; __zlcmid=1DwlWpxKz9Mn9RD
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.26.2.49
HTTP/2 204 No Content
                                        
date: Sun, 15 Jan 2023 19:29:01 GMT
access-control-allow-origin: https://www.lorman.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 78a10491ae60fab8-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            GET /ds/the-paralegal-resource?p=19661 HTTP/1.1 
Host: www.lorman.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         104.26.2.49
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Sun, 15 Jan 2023 19:28:53 GMT
strict-transport-security: max-age=0
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
content-security-policy: report-uri https://lorman.report-uri.com/r/d/csp/wizard; frame-ancestors 'self'
cf-cache-status: DYNAMIC
set-cookie: PHPSESSID=iar9gnbo06ch1ouvpgm46ejrou; path=/ code=19661; expires=Sat, 15-Apr-2023 19:28:53 GMT; Max-Age=7776000; path=/; domain=lorman.com mailing_data=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=lorman.com click_id=610950660; expires=Tue, 14-Feb-2023 19:28:53 GMT; Max-Age=2592000; path=/; domain=lorman.com code=19661; expires=Sat, 15-Apr-2023 19:28:53 GMT; Max-Age=7776000; path=/; domain=lorman.com
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i9%2FzemKET2qHW9ICzIzpyDf037PPM7b7bmU5Pa3m1c1iwQ36GmEJfZ3DTsheAHZ6auI9ioXvGlPp5xqeUacN07LvP3%2F6JHry6lzU%2B2Ln9TRzCCJ3E1iDA79R2tF02%2B8s"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78a1045b0b25fab8-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /core/css/main-menu-bs5.981da37ffc4ede4fbf7563d422ee18db.css?v=1.0 HTTP/1.1 
Host: www.lorman.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/ds/the-paralegal-resource?p=19661
Cookie: PHPSESSID=iar9gnbo06ch1ouvpgm46ejrou; code=19661; click_id=610950660
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.26.2.49
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 15 Jan 2023 19:28:53 GMT
strict-transport-security: max-age=0
last-modified: Fri, 22 Jul 2022 17:22:14 GMT
etag: W/"2d75-5e468133c3d80-gzip"
vary: Accept-Encoding
content-security-policy: report-uri https://lorman.report-uri.com/r/d/csp/wizard; frame-ancestors 'self'
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=94qlCptQS6Mtp4o58Y4e3mKjteUBDb6NW9jsKm68yDK65%2Fj4POBr0hPrUR4h7u0yrmAySNuCn30p834nyrYG6L13wNdZEoqwiF2vz%2FlL3sDuXYzqFBbNvA9rhCdaxB5E"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78a1045d2d20fab8-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /ekr/asset_composer.js HTTP/1.1 
Host: static.zdassets.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.lorman.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.18.72.113
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 15 Jan 2023 19:28:54 GMT
x-amz-id-2: dUZfshkH6s6HIQA7+U0tDhX+A5i1VSOF0AP1wrYwttudGl3FDx99SpKMnalxiwyFmxN4PZcqRnA=
x-amz-request-id: Y9E1NT7ZVNF7R3ZX
x-amz-replication-status: COMPLETED
last-modified: Thu, 28 Jul 2022 23:44:02 GMT
etag: W/"5cae6ce528dce0c327b2bcbaad459fdb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600, s-maxage=60
x-amz-version-id: 57KHzv0Z81imwMa0XxScJAmcLiHhq1Ku
cf-cache-status: HIT
age: 32
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L%2BZYSC8XwiH0ViQjMERpkYZ2krOLYe6QNaKQTOvdCjD%2BKCvZAagL3krzKdMUGCaMUPMtPaB5SYQwxlGIcYGLJZV9y0ieDpBTl5c2Ii7%2BqkN3gaPpx6IG8nD1kK5UuRCNz380f2k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 78a1046639c80b02-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /core/js/main-menu.981da37ffc4ede4fbf7563d422ee18db.js?v=1.0 HTTP/1.1 
Host: www.lorman.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/ds/the-paralegal-resource?p=19661
Cookie: PHPSESSID=iar9gnbo06ch1ouvpgm46ejrou; code=19661; click_id=610950660
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.26.2.49
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 15 Jan 2023 19:28:53 GMT
strict-transport-security: max-age=0
last-modified: Wed, 21 Apr 2021 16:53:38 GMT
etag: W/"a01-5c07e6779c880-gzip"
vary: Accept-Encoding
content-security-policy: report-uri https://lorman.report-uri.com/r/d/csp/wizard; frame-ancestors 'self'
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9fcdEIRKggKr%2FXn4%2BGKB9aDNY3q%2BAEGAA7gaf2E2lPWoMIRcBGrUcf%2F0SyJn3j9xDBpp7pMdHDSqh7V8c4WbaUOgNpRz6415KUYAL5WEnPEHctLfzRN4wKd%2B0UdNq3l1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78a1045d6d59fab8-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /sl.js HTTP/1.1 
Host: scout-cdn.salesloft.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.18.223.90
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 15 Jan 2023 19:28:53 GMT
x-amz-id-2: qf3ClpuTPcJIcaf9lDMbAj/C7KTb6wrTNVZvpPTuMcDn6J5apuWPupZ7ygGsCuih8R4rYooBk/g=
x-amz-request-id: N67V786YKMD3QBGX
last-modified: Mon, 13 Dec 2021 16:28:37 GMT
etag: W/"d74cc4825c8e333b2116da3fcc649db1"
x-amz-version-id: 6anzvBQcvmaBDc8BSO9zI6Th.IIiwArc
cf-cache-status: HIT
age: 2780
expires: Sun, 15 Jan 2023 23:28:53 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
strict-transport-security: max-age=0
access-control-allow-origin: *
server: cloudflare
cf-ray: 78a10460ff31b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /core/css/main.981da37ffc4ede4fbf7563d422ee18db.css HTTP/1.1 
Host: www.lorman.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/ds/the-paralegal-resource?p=19661
Cookie: PHPSESSID=iar9gnbo06ch1ouvpgm46ejrou; code=19661; click_id=610950660
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.26.2.49
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 15 Jan 2023 19:28:53 GMT
cf-bgj: minify
cf-polished: origSize=299162
content-security-policy: report-uri https://lorman.report-uri.com/r/d/csp/wizard; frame-ancestors 'self'
etag: W/"4909a-5e429c450270a-gzip"
last-modified: Tue, 19 Jul 2022 15:02:01 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cache-control: max-age=31536000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4dQveSNDkkrg8oB6zTNmvxEQGHQXvrZ6hWxXsPsTJ6S07B5Dd6MKEjGd7CrXQYxJdrFsJP0hKnw5lGBrOPIZp9Obe1NqlVIziCKmzdTF4%2Bik0tYXx02xPgnvrEqFiftj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78a1045d1d01fab8-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /c/hotjar-1888963.js?sv=6 HTTP/1.1 
Host: static.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.98
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Sun, 15 Jan 2023 19:28:54 GMT
cache-control: max-age=60
etag: W/b316346f19d974d51c36c438283daf48
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tlgs1GPKQPL7AqUS4bmPh84XLw5w7abOKJmfHN_71t2o_LweQjGF6Q==
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            POST /api/v2/client/sites/1888963/visit-data?sv=6 HTTP/1.1 
Host: in.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 122
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.246.81.18
HTTP/2 200 OK
content-type: application/json
                                        
date: Sun, 15 Jan 2023 19:28:55 GMT
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /core/js/main.981da37ffc4ede4fbf7563d422ee18db.js HTTP/1.1 
Host: www.lorman.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.lorman.com/ds/the-paralegal-resource?p=19661
Cookie: PHPSESSID=iar9gnbo06ch1ouvpgm46ejrou; code=19661; click_id=610950660; _ga_D7FPWJXVQY=GS1.1.1673810934.1.0.1673810934.0.0.0; _ga=GA1.2.1317807014.1673810934; _ga_PNVL0DT00X=GS1.1.1673810934.1.0.1673810934.0.0.0; slireg=https://scout.us2.salesloft.com; _mkto_trk=id:840-UZQ-044&token:_mch-lorman.com-1673810934970-38733; _gid=GA1.2.955123819.1673810935; _gat_gtag_UA_2988884_3=1; sliguid=5e180f0d-486b-4c84-ae22-e8631f1a9149; slirequested=true; _hjSessionUser_1888963=eyJpZCI6IjhlYjBlMzFhLTM5YzktNTU4NC04MTljLTczNThiMjZhZGYzMCIsImNyZWF0ZWQiOjE2NzM4MTA5MzUxNzAsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1888963=eyJpZCI6IjEzOWY3MWJiLTJiZDktNDU2NC1hYmNiLTk3NjhlNDA3MzY4MSIsImNyZWF0ZWQiOjE2NzM4MTA5MzUyMTksImluU2FtcGxlIjpmYWxzZX0=; _hjIncludedInPageviewSample=1; _hjAbsoluteSessionInProgress=1; ln_or=eyIxNjE1ODg0IjoiZCJ9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.26.2.49
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 15 Jan 2023 19:28:55 GMT
cf-bgj: minify
cf-polished: origSize=80608
content-security-policy: report-uri https://lorman.report-uri.com/r/d/csp/wizard; frame-ancestors 'self'
etag: W/"13ae0-5f06c113724be-gzip"
last-modified: Thu, 22 Dec 2022 15:10:19 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cache-control: max-age=31536000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kwI%2FTCGu9hXq8dmAaPTv6zB4x6egrsEGYkOMZ4q3tVv1MBPbgzLwK5W%2FAIC72x50KNRmtVHhx%2BCrCMMPyABoUvcwl6SstbtOxSDn2MmpIFKIhEx5bbA0vyhFd13OTq5S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78a10469593dfab8-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /bin/v/widget_v2.334.js HTTP/1.1 
Host: v2.zopim.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.lorman.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.16.105.139
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
date: Sun, 15 Jan 2023 19:28:55 GMT
last-modified: Wed, 27 Jul 2022 03:35:19 GMT
vary: Accept-Encoding
etag: W/"62e0b277-10301f"
expires: Wed, 12 Jan 2033 19:28:55 GMT
cache-control: public, max-age=315360000
content-encoding: gzip
cf-cache-status: HIT
age: 320936
server: cloudflare
cf-ray: 78a1046aeb1efac0-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 HTTP/1.1 
Host: static.cloudflareinsights.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.16.56.101
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
                                        
date: Sun, 15 Jan 2023 19:28:53 GMT
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2022.10.1
last-modified: Fri, 21 Oct 2022 01:56:09 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 78a1045dcae1b506-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /ds/directory-sites.css HTTP/1.1 
Host: www.lorman.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/ds/the-paralegal-resource?p=19661
Cookie: PHPSESSID=iar9gnbo06ch1ouvpgm46ejrou; code=19661; click_id=610950660
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.26.2.49
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 15 Jan 2023 19:28:53 GMT
strict-transport-security: max-age=0
last-modified: Mon, 14 Nov 2022 19:00:17 GMT
etag: W/"1d7-5ed72d9a3d240-gzip"
vary: Accept-Encoding
content-security-policy: report-uri https://lorman.report-uri.com/r/d/csp/wizard; frame-ancestors 'self'
cache-control: max-age=31536000
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eX13%2BuceEHdBrjxL85dg8B1M20DqvoVA5R8I6fwIfylcWTi1zzIupihdAJKN5JzfOfToSI2RJ4TFnSe8COwl%2Ft4UCfwYyjpVdaboFvnvw96czPIKEES8MKBnLQJ22H%2Fe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78a1045d2d22fab8-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /core/js/vendor/zopim.min.js HTTP/1.1 
Host: www.lorman.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/ds/the-paralegal-resource?p=19661
Cookie: PHPSESSID=iar9gnbo06ch1ouvpgm46ejrou; code=19661; click_id=610950660
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.26.2.49
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 15 Jan 2023 19:28:53 GMT
strict-transport-security: max-age=0
last-modified: Fri, 07 Feb 2014 18:27:28 GMT
etag: W/"177-4f1d524688400-gzip"
vary: Accept-Encoding
content-security-policy: report-uri https://lorman.report-uri.com/r/d/csp/wizard; frame-ancestors 'self'
cache-control: max-age=31536000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l1%2BF2MmWbcmg%2FETpEYFtv8wsvgpQWvPfro3ao1gRAzSbOsRo20WJsoDUiRCfUp%2FB4EU1r6Y6GZMXMKNzXhIrStlFmKUTpmJvGtFQpAa6VVnmgwzyqzbTbDwecCcTeUO6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78a10460786ffab8-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /852c20d03a.js HTTP/1.1 
Host: kit.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.18.22.52
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Sun, 15 Jan 2023 19:28:53 GMT
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: FzmrK01oWFx0N9FllskC
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 78a1045d3d4bb4f9-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /cdn-cgi/challenge-platform/h/g/scripts/alpha/invisible.js?ts=1673798400 HTTP/1.1 
Host: www.lorman.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: PHPSESSID=iar9gnbo06ch1ouvpgm46ejrou; code=19661; click_id=610950660
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.26.2.49
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
date: Sun, 15 Jan 2023 19:28:53 GMT
x-control-type-options: nosniff
vary: accept-encoding
cache-control: max-age=14400, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7dRKUXW2DIMcfeB4FoJKeCPr0cZkkEP%2F%2BRXyt1Z5u9kSbG7SU9vL7Jc6A9xVh9xSS7fghHBpI7%2FEdkaDR0m6zy8dr4QaMK3Vt%2F0yAE1yy%2BGS1yD%2FA%2BUT6MKXS%2FSrUhFk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 78a10461393efab8-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /pixel/O8L0hTfXglUXRwE2ow1I HTTP/1.1 
Host: ws.zoominfo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.16.101.12
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Sun, 15 Jan 2023 19:28:54 GMT
vary: Accept-Encoding
x-powered-by: Express
x-content-type-options: nosniff
access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type
access-control-allow-credentials: true
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 google
cf-cache-status: DYNAMIC
set-cookie: visitorId=2251676ea23aff4aed3165aea0938bf5aa443fc1570dd6d2d80005bb42445ade; Max-Age=31536000; Domain=ws.zoominfo.com; Path=/; Expires=Mon, 15 Jan 2024 19:28:54 GMT; Secure; SameSite=None __cf_bm=s3AbueHnfZ6r90hSwYatB_2kls1Ru4XiChcY1FdiXEE-1673810934-0-AWTzQ+0dbiSSKJnyKeJQ0HZHqap6yGatN2ESo3ez0U6KUdeoXz4DVradBpLNJnKaYoZBA/Fr1bcTvWHUV324oSY=; path=/; expires=Sun, 15-Jan-23 19:58:54 GMT; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None _cfuvid=5f6Go.TJ3.z.vF23fdQHQbWI5Qvm6.Z36A109VGzGKM-1673810934333-0-604800000; path=/; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 78a104626a18b518-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /partner/1615884/domain/lorman.com/token HTTP/1.1 
Host: cdn.linkedin.oribi.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lorman.com
Connection: keep-alive
Referer: https://www.lorman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.42
HTTP/2 200 OK
content-type: application/json
                                        
date: Sun, 15 Jan 2023 19:24:28 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xF1fU5JTq433FajYf5YcueW5rDHY2fNAyU3qjacuXdFG3ZaM9-VTcA==
age: 266
X-Firefox-Spdy: h2


--- Additional Info ---