To know if our victim user has visited the site, both the attack and normal request should resolve to 200 OK. So keep sending the two requests till its 200 OK for both.
Refresh the web page where the comment was posted and find the victims cookie value.
Press enter or click to view image in full size