r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 443a700f85619f4fd8a548421c5c23e2
a58764a07feafb2bb4b340c020b5104c55b35195
0bc80613f3d493ea081bf5672ab76f6f33a1dcc0710fe1431de83c46d7e8d31d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0BC80613F3D493EA081BF5672AB76F6F33A1DCC0710FE1431DE83C46D7E8D31D"
Last-Modified: Fri, 17 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14406
Expires: Fri, 17 Mar 2023 17:07:38 GMT
Date: Fri, 17 Mar 2023 13:07:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1424d2734290cfd767b86da0ee0da3bc
875b1243bca41177411ac6af710d2bb96f45a0ac
70b5bb76774526a0cf131445ae2f8639085c3449812497df457f4bc78089917b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "70B5BB76774526A0CF131445AE2F8639085C3449812497DF457F4BC78089917B"
Last-Modified: Wed, 15 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13325
Expires: Fri, 17 Mar 2023 16:49:37 GMT
Date: Fri, 17 Mar 2023 13:07:32 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bc86ef2a0cee04915bc360f5821adc8f
3658f9028cce204d38f7f48fcfaa2a8e4f54383a
aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 17 Mar 2023 12:14:27 GMT
content-type: application/json
age: 3185
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 12cdbcb1b0785dc0423386448ac68c9c
08cff6b76fd708f0cef3c5bdb8fc72570c4536bd
bb7622a85d32cbff40abd2995055e03dbac05dd841b9a84d9023a5510d89e534
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BB7622A85D32CBFF40ABD2995055E03DBAC05DD841B9A84D9023A5510D89E534"
Last-Modified: Fri, 17 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3019
Expires: Fri, 17 Mar 2023 13:57:51 GMT
Date: Fri, 17 Mar 2023 13:07:32 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: WZ1y4w76bMuJ+G/fKE1z6iS0OnPzv+QpaObWZqudrRfGBPXV/rJshEQQiliBtJJ3O1+sURCZS1g=
x-amz-request-id: KSSGJJM49F8R52SX
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 17 Mar 2023 12:23:37 GMT
age: 2635
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:32 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
200 OK 17 kB URL HTTP/1.1 www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
IP
ASN #205072 Layershift Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4591)
Hash a7fc60e32ef9f55e0d32593cf7da4597
a3928642b315a0aec94732d987997acaec0a2bf7
3807a7727832acb15955422ffc18624096e59925527ca4212dfcd2413038784c
NIDS Severity Alert suricata medium ET HUNTING Suspicious GET Request with Possible COVID-19 URI M1
GET /covid-19/?recid=28941683&sid=117&sendid=4534115 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:32 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Link: <https://www.kbscorporate.com/wp-json/>; rel="https://api.w.org/", <https://www.kbscorporate.com/wp-json/wp/v2/pages/9860>; rel="alternate"; type="application/json", <https://www.kbscorporate.com/?p=9860>; rel=shortlink
Set-Cookie: utm_source=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
utm_medium=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
gclid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
handl_original_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; expires=Sun, 16-Apr-2023 13:07:32 GMT; Max-Age=2592000; path=/; domain=.kbscorporate.com
handl_ip=91.90.42.154; expires=Sun, 16-Apr-2023 13:07:32 GMT; Max-Age=2592000; path=/; domain=.kbscorporate.com
handl_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; expires=Sun, 16-Apr-2023 13:07:32 GMT; Max-Age=2592000; path=/; domain=.kbscorporate.com
email=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
username=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
X-Powered-By: PHP/7.4.33, PleskLin
Content-Encoding: gzip
www.kbscorporate.com/wp-includes/css/classic-themes.min.css?ver=1
200 OK 217 B URL HTTP/1.1 www.kbscorporate.com/wp-includes/css/classic-themes.min.css?ver=1
IP
ASN #205072 Layershift Limited
Hash 95e891f28e44a9b314c09545d86be2b7
f9b13a8bd47273b086a0a07df15f314e0af0bc3e
5a5f39391fbf5b06db84b8f9716d53de575ee97a627d2c5f12f79a991a671eb5
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: text/css
Content-Length: 217
Connection: keep-alive
X-Accel-Version: 0.01
Last-Modified: Tue, 03 Jan 2023 15:40:11 GMT
ETag: "d9-5f15de225ccf1"
Accept-Ranges: bytes
X-Powered-By: PleskLin
www.kbscorporate.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.2
200 OK 996 B URL HTTP/1.1 www.kbscorporate.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.2
IP
ASN #205072 Layershift Limited
Hash 40b4c9407635aab8ae29afebf2101d84
38eda5de806e116aafc5078d150255da89bbc08a
98aa8af946fc88e8cc526dd16c78f5e08c071be559a51059992fe462b9093dcb
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.2 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: text/css
Last-Modified: Tue, 03 Jan 2023 15:40:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63b44c81-af3"
X-Powered-By: PleskLin
Content-Encoding: gzip
www.kbscorporate.com/wp-content/themes/kbs/css/add.css?ver=6.1.1
200 OK 2.3 kB URL HTTP/1.1 www.kbscorporate.com/wp-content/themes/kbs/css/add.css?ver=6.1.1
IP
ASN #205072 Layershift Limited
File type Unicode text, UTF-8 text, with very long lines (945)
Hash 14135bd89c85fe65809910c41ddb70b8
4c1c9fe10d583b781a8ae964033dbe3151db1d5d
198d20ef48bfc1626e9faf3d78c59fc8793b0ff974119ecff1b9c425c9c04753
GET /wp-content/themes/kbs/css/add.css?ver=6.1.1 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: text/css
Last-Modified: Thu, 25 Aug 2022 08:56:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6307392e-1c54"
X-Powered-By: PleskLin
Content-Encoding: gzip
www.kbscorporate.com/wp-content/plugins/cookie-notice/css/front.min.css?ver=6.1.1
200 OK 1.1 kB URL HTTP/1.1 www.kbscorporate.com/wp-content/plugins/cookie-notice/css/front.min.css?ver=6.1.1
IP
ASN #205072 Layershift Limited
File type ASCII text, with very long lines (5334), with no line terminators
Hash 8ea2086986daf814927f282527c2abda
37c803bd996f97f6fc837e28bc394fbecbc64dc7
34898abb1100b23f47f07b953be6c0fa56d9ec3a6759936324ace5262a970378
GET /wp-content/plugins/cookie-notice/css/front.min.css?ver=6.1.1 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: text/css
Last-Modified: Tue, 03 Jan 2023 15:40:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63b44c8b-14d6"
X-Powered-By: PleskLin
Content-Encoding: gzip
www.kbscorporate.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.2 kB URL HTTP/1.1 www.kbscorporate.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #205072 Layershift Limited
File type ASCII text, with very long lines (11126)
Hash 5f0c7c68ce291948081d8bc40b311a4d
52e9e66db13df06a18cb59905195d45ee80e466a
d0f639afed36e6a912a17a467beb71c7f3976cc9cfba3d105a76e985c487e62f
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: application/javascript
Last-Modified: Mon, 21 Dec 2020 11:07:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5fe081f9-2bd8"
X-Powered-By: PleskLin
Content-Encoding: gzip
www.kbscorporate.com/wp-content/uploads/pum/pum-site-styles.css?generated=1678288103&ver=1.17.1
200 OK 3.5 kB URL HTTP/1.1 www.kbscorporate.com/wp-content/uploads/pum/pum-site-styles.css?generated=1678288103&ver=1.17.1
IP
ASN #205072 Layershift Limited
File type ASCII text, with very long lines (7444), with CRLF, LF line terminators
Hash a793ea6f7fda5efbd55a46d22eb792e5
b05d3275c819f392cf78371d09aeecaf00a2290e
74bea179c1b1765a9f2433df2214b7361d1b8ed0a1f597d0ef36a30a8c01606e
GET /wp-content/uploads/pum/pum-site-styles.css?generated=1678288103&ver=1.17.1 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: text/css
Last-Modified: Wed, 08 Mar 2023 15:08:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6408a4e7-447b"
X-Powered-By: PleskLin
Content-Encoding: gzip
www.kbscorporate.com/wp-content/plugins/handl-utm-grabber/js/js.cookie.js?ver=6.1.1
200 OK 1.4 kB URL HTTP/1.1 www.kbscorporate.com/wp-content/plugins/handl-utm-grabber/js/js.cookie.js?ver=6.1.1
IP
ASN #205072 Layershift Limited
File type ASCII text, with CRLF line terminators
Hash 24af3f646ff1d15c2cd687e89d1c113f
cd51a80111d8f0028c6dec7dcf4568a858a8d7ab
6b577067cf8353a389a7cddab5a5c0e5cb258853c0137ad9436d68fe69e1bcbc
GET /wp-content/plugins/handl-utm-grabber/js/js.cookie.js?ver=6.1.1 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: application/javascript
Last-Modified: Tue, 07 Feb 2023 16:03:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63e2764e-df1"
X-Powered-By: PleskLin
Content-Encoding: gzip
www.kbscorporate.com/wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.4
200 OK 2.1 kB URL HTTP/1.1 www.kbscorporate.com/wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.4
IP
ASN #205072 Layershift Limited
File type C source, ASCII text, with very long lines (8750), with no line terminators
Hash ffe1a137ea70712b3d4992571d94784b
81f9c50767edd2afdf7abb3b92f00c53795a3bd7
f4ccf10b3d5e30a2f48072096c57177918dd7af1736beeaf53fb38efee46d2fb
GET /wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.4 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: application/javascript
Last-Modified: Tue, 03 Jan 2023 15:40:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63b44c8b-222e"
X-Powered-By: PleskLin
Content-Encoding: gzip
www.kbscorporate.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.2
200 OK 3.0 kB URL HTTP/1.1 www.kbscorporate.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.2
IP
ASN #205072 Layershift Limited
File type ASCII text, with very long lines (10565), with no line terminators
Hash e8d71b31b0b96efba7ee94a5a74d01f3
55d13dc46cbb9fc0ccdcca32f4cbfc164ffa6ae0
4a8e4c2d8bb3d0369668d8cdade797dc9da794b5602c20e22eaf7a401761e618
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.2 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: application/javascript
Last-Modified: Tue, 03 Jan 2023 15:40:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63b44c81-2945"
X-Powered-By: PleskLin
Content-Encoding: gzip
www.kbscorporate.com/wp-content/plugins/handl-utm-grabber/js/handl-utm-grabber.js?ver=6.1.1
200 OK 680 B URL HTTP/1.1 www.kbscorporate.com/wp-content/plugins/handl-utm-grabber/js/handl-utm-grabber.js?ver=6.1.1
IP
ASN #205072 Layershift Limited
Hash f63b2007f73209d436a41f7db31ec0b7
a4ef596ff5c6f088fdcdd60f2608e1703e61d7b0
d6c511c4d0aa4a5bcfe04d24f50d90c95a05c5f4a38b31810527e2175445e1d3
GET /wp-content/plugins/handl-utm-grabber/js/handl-utm-grabber.js?ver=6.1.1 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: application/javascript
Last-Modified: Tue, 07 Feb 2023 16:03:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63e2764e-5f5"
X-Powered-By: PleskLin
Content-Encoding: gzip
www.kbscorporate.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 31 kB URL HTTP/1.1 www.kbscorporate.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
ASN #205072 Layershift Limited
File type ASCII text, with very long lines (65447)
Hash eda1ad07d376932c38bea7853285aab4
df156c37682462dd3d6d3f48e97453ac5a783f57
c07ff656ac950fa1c0455328ae57afe1bad3e33295eee670af2038fc7d82c795
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: application/javascript
Last-Modified: Tue, 03 Jan 2023 15:40:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63b44c5c-15e54"
X-Powered-By: PleskLin
Content-Encoding: gzip
www.kbscorporate.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.2
200 OK 4.1 kB URL HTTP/1.1 www.kbscorporate.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.2
IP
ASN #205072 Layershift Limited
File type HTML document, ASCII text, with very long lines (12652), with no line terminators
Hash 4dee2bf8379e8a054a7aaa66c04f24fd
6c550ccbc59de826eae0eaeb266927b350469f65
e024d913585e33af27faf564dec4f130ba1696a2b2e94eca3d87ecf700861c6e
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.2 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: application/javascript
Last-Modified: Tue, 03 Jan 2023 15:40:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63b44c81-316c"
X-Powered-By: PleskLin
Content-Encoding: gzip
www.kbscorporate.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
200 OK 7.1 kB URL HTTP/1.1 www.kbscorporate.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
IP
ASN #205072 Layershift Limited
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash 7024235ea991d986fb1f6b5dab20f5c7
df3af18873eeaa29566d2b308be68785c21cac35
ca74d3111c52d9d141c943dc94a11d70ebddf08e42402800e11c96e574115a51
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: application/javascript
Last-Modified: Tue, 03 Jan 2023 15:40:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63b44c5c-53c0"
X-Powered-By: PleskLin
Content-Encoding: gzip
www.kbscorporate.com/wp-content/plugins/wpcf7-redirect/build/js/wpcf7r-fe.js?ver=1.1
200 OK 1.6 kB URL HTTP/1.1 www.kbscorporate.com/wp-content/plugins/wpcf7-redirect/build/js/wpcf7r-fe.js?ver=1.1
IP
ASN #205072 Layershift Limited
Hash 6893419a5a7ea24f664edda801eca081
87081e5fb4dedcc7cf36b726d09e61d9c856b99d
761ee1e77a9a7f59eef4d060d57cd12ccd8484ff201021247c01a684b9fbda4a
GET /wp-content/plugins/wpcf7-redirect/build/js/wpcf7r-fe.js?ver=1.1 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: application/javascript
Last-Modified: Wed, 31 Aug 2022 10:08:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"630f330c-1f8a"
X-Powered-By: PleskLin
Content-Encoding: gzip
www.kbscorporate.com/wp-content/plugins/popup-maker/assets/js/vendor/mobile-detect.min.js?ver=1.3.3
200 OK 16 kB URL HTTP/1.1 www.kbscorporate.com/wp-content/plugins/popup-maker/assets/js/vendor/mobile-detect.min.js?ver=1.3.3
IP
ASN #205072 Layershift Limited
File type ASCII text, with very long lines (33237)
Hash 77e75c73e7d9d1bf45299d01c6ed3883
69a79b5f2ee281eb40edaba3d0fac1934c5ed8ce
858600305239ee534e317aacfe5588a11413eb571badc038930a7b0e3b032a31
GET /wp-content/plugins/popup-maker/assets/js/vendor/mobile-detect.min.js?ver=1.3.3 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: application/javascript
Last-Modified: Tue, 03 Jan 2023 15:45:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63b44da2-981e"
X-Powered-By: PleskLin
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7e35a37363796a7d892702c070d88c62
8a15a894f7f1c391cf199d49a90346b1992c44b1
9d818bbfaa2b4e9b0f994cc014294f51003de23c743d9bf5dde86f9dcc102126
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 17 Mar 2023 13:07:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Montserrat:100
200 OK 499 B URL HTTP/1.1 fonts.googleapis.com/css?family=Montserrat:100
IP
Hash 155dcc479e51c544fc5d12abcbe66dce
d8c808dbb26839ebf983225cbb5851645ef3feca
985f17e31532ff9fa81a0ad79a1e890a634f4d06bfeadeb604e116a7dd390d81
GET /css?family=Montserrat:100 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 17 Mar 2023 13:07:33 GMT
Date: Fri, 17 Mar 2023 13:07:33 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
www.kbscorporate.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 6.6 kB URL HTTP/1.1 www.kbscorporate.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
ASN #205072 Layershift Limited
File type Unicode text, UTF-8 text, with very long lines (17819), with no line terminators
Hash 75e8f41c65a3e3e831af30bc6e7290ed
7a8f55e42b8c45b46a7022a4e990404ae79493c1
c930b671e3bff16cebc7cd7ed295a1d3fa259029abeac1db00415faa17d1bb6b
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: application/javascript
Last-Modified: Tue, 03 Jan 2023 15:40:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63b44c5c-459f"
X-Powered-By: PleskLin
Content-Encoding: gzip
www.kbscorporate.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.7.2
200 OK 507 B URL HTTP/1.1 www.kbscorporate.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.7.2
IP
ASN #205072 Layershift Limited
File type ASCII text, with very long lines (999), with no line terminators
Hash 22f32f77e17fa7640cda0a401c2b0844
019765feeed7ea2a9e9e506ce000978ea3ecd171
269c0f075ceb9464731b25afc21ae41536b76ef76bf0cf856c42e3e6311ec6ce
GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.7.2 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Accel-Version: 0.01
Last-Modified: Tue, 03 Jan 2023 15:40:49 GMT
ETag: W/"3e7-5f15de463615b"
X-Powered-By: PleskLin
Content-Encoding: gzip
www.kbscorporate.com/wp-content/uploads/pum/pum-site-scripts.js?defer&generated=1678288103&ver=1.17.1
200 OK 18 kB URL HTTP/1.1 www.kbscorporate.com/wp-content/uploads/pum/pum-site-scripts.js?defer&generated=1678288103&ver=1.17.1
IP
ASN #205072 Layershift Limited
File type Unicode text, UTF-8 text, with very long lines (65398)
Hash a8115a3ba9f4baf23ad9da8cda65fd15
4ef743d8bb39d0d224a7230af9143489f33e3948
57e6fcea531a0bd117b31db9721868c387255ef18367acd78917c14182bb9730
GET /wp-content/uploads/pum/pum-site-scripts.js?defer&generated=1678288103&ver=1.17.1 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: application/javascript
Last-Modified: Wed, 08 Mar 2023 15:08:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6408a4e7-110dc"
X-Powered-By: PleskLin
Content-Encoding: gzip
www.kbscorporate.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 2.5 kB URL HTTP/1.1 www.kbscorporate.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
ASN #205072 Layershift Limited
File type ASCII text, with very long lines (6475), with no line terminators
Hash 9334d4eb7bb2e5e06eb0d25ae44e4d56
65429a16fb638254327e8ddbe6c8d17ca8792dbd
b570a6cd7931c189303d8c9f06c1fad60df6de317e1731ace9bdd8e8368c3987
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: application/javascript
Last-Modified: Tue, 14 Jun 2022 14:11:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62a8972c-194b"
X-Powered-By: PleskLin
Content-Encoding: gzip
www.kbscorporate.com/wp-content/plugins/wpcf7-redirect/build/css/wpcf7-redirect-frontend.min.css?ver=6.1.1
200 OK 124 B URL HTTP/1.1 www.kbscorporate.com/wp-content/plugins/wpcf7-redirect/build/css/wpcf7-redirect-frontend.min.css?ver=6.1.1
IP
ASN #205072 Layershift Limited
File type ASCII text, with CRLF, CR line terminators
Hash 893dd4d34591cb544851b5a41747cdfd
e8585a3187cfaa2288f0cb48e5696929306b7615
1de5e3983dd9d63c6d92bc1543a4ae8978b38fbaa8d79fbbc2035c62a68cd7cf
GET /wp-content/plugins/wpcf7-redirect/build/css/wpcf7-redirect-frontend.min.css?ver=6.1.1 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Accel-Version: 0.01
Last-Modified: Wed, 31 Aug 2022 10:08:12 GMT
ETag: W/"13c-5e786acb682c5"
X-Powered-By: PleskLin
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ad9728e9366f067a73c2c8684981004b
e63ac04e96abd08afe02e4c81ccccf845e9a7963
1a5bf6c7e03e0d3dda9d76d17859f6c8dfccb1dccf4d69028b3b4f525d457947
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 17 Mar 2023 13:07:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.kbscorporate.com/wp-content/themes/kbs/js/scripts.min.js
200 OK 64 kB URL HTTP/1.1 www.kbscorporate.com/wp-content/themes/kbs/js/scripts.min.js
IP
ASN #205072 Layershift Limited
File type ASCII text, with very long lines (360)
Hash 46219951814c10684a3b8654b4e8f002
bb1da502fa1c4811ab2e48d7dbe557ac4358a1ba
eba62ecc9884275ddbeb5d8a7130031190775a9fb21d932316e0abc3057d43e0
GET /wp-content/themes/kbs/js/scripts.min.js HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: application/javascript
Last-Modified: Mon, 30 May 2022 20:56:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62952f8a-3ac7a"
X-Powered-By: PleskLin
Content-Encoding: gzip
www.google.com/recaptcha/api.js?render=6LfY1qkUAAAAAHEuKw-sfo0c1q4TYqSXAGzuDHlg&ver=3.0
200 OK 584 B URL HTTP/2 www.google.com/recaptcha/api.js?render=6LfY1qkUAAAAAHEuKw-sfo0c1q4TYqSXAGzuDHlg&ver=3.0
IP
File type ASCII text, with very long lines (884), with no line terminators
Hash 51cf3d6a2add7a784e181129a23360ec
299c80843bbf5e8a8476f365c15166d38e01cd32
40656a1ca49daa34883ca9e3087d940709500ea14acf8c2bd096396c51ca9a7b
GET /recaptcha/api.js?render=6LfY1qkUAAAAAHEuKw-sfo0c1q4TYqSXAGzuDHlg&ver=3.0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Fri, 17 Mar 2023 13:07:33 GMT
date: Fri, 17 Mar 2023 13:07:33 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 584
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.kbscorporate.com/wp-content/themes/kbs/css/main.min.css?ver=6.1.1
200 OK 33 kB URL HTTP/1.1 www.kbscorporate.com/wp-content/themes/kbs/css/main.min.css?ver=6.1.1
IP
ASN #205072 Layershift Limited
Hash c41bf37c8c4bdcf0b4e80fbc19852fc6
3b7ba9ca1acdf21e1ea17b7c9febe2578210ea87
ab18060006dfd5b62a41e8bcd5684f4de9a47ee0caefe037bcd6503d0e08d487
GET /wp-content/themes/kbs/css/main.min.css?ver=6.1.1 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: text/css
Last-Modified: Thu, 16 Mar 2023 16:18:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6413414a-4be93"
X-Powered-By: PleskLin
Content-Encoding: gzip
www.googletagmanager.com/gtm.js?id=GTM-WV5NMZV
200 OK 82 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WV5NMZV
IP
File type ASCII text, with very long lines (12895)
Hash 9ae40d1725cc8ea9d61b020cc4a1aced
9bfb913835a443c1a1a6236eef065dbb83caec86
71a805ad7e4caec05b61cf49fe386ef98b4aa36d3f59c2b28508eb4f178c0101
GET /gtm.js?id=GTM-WV5NMZV HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 17 Mar 2023 13:07:33 GMT
expires: Fri, 17 Mar 2023 13:07:33 GMT
cache-control: private, max-age=900
last-modified: Fri, 17 Mar 2023 12:44:36 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 82465
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ad9728e9366f067a73c2c8684981004b
e63ac04e96abd08afe02e4c81ccccf845e9a7963
1a5bf6c7e03e0d3dda9d76d17859f6c8dfccb1dccf4d69028b3b4f525d457947
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 17 Mar 2023 13:07:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0f03f2ce91e1cf44a2e3a955f1d03594
2bd3421ebdffd191c65c5cc0e533dd5695c409dc
76e7b283f89fa271371ca30032dd7ea5f8bc59c78b92e52b6c272c6b14613377
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 17 Mar 2023 13:07:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
secure.leadforensics.com/js/13616.js
200 OK 12 kB URL HTTP/1.1 secure.leadforensics.com/js/13616.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (24216), with CRLF line terminators
Hash 46849cc016e8e4f74740320a81087876
f1838182041db622a09abb990e9feeb23d7a4bd0
6411ff53c68779f3025c04c56d6fc638f5cc4ba48918b9894ee7032c77b4fcde
GET /js/13616.js HTTP/1.1
Host: secure.leadforensics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-store, must-revalidate
Pragma: no-cache
Content-Type: text/javascript
Content-Encoding: gzip
Expires: 0
Vary: Accept-Encoding
Server: Kestrel
Request-Context: appId=cid-v1:abe8a76f-f1a2-4b2e-9017-0ea36ffb5c20
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Length: 11603
www.kbscorporate.com/wp-content/themes/kbs/img/tw.svg
200 OK 1.2 kB URL HTTP/1.1 www.kbscorporate.com/wp-content/themes/kbs/img/tw.svg
IP
ASN #205072 Layershift Limited
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1796)
Hash 4d9ad1558786b1597fbeefee412c1513
13ea10da8595179aee667bbb7901a28b482c72b9
190d89dbfb631e024e0bda6edc4d0886e4c2d5a3728f8aa6c6365f59fa3f965b
GET /wp-content/themes/kbs/img/tw.svg HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: image/svg+xml
Last-Modified: Thu, 07 Nov 2019 15:54:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5dc43e35-a1c"
X-Powered-By: PleskLin
Content-Encoding: gzip
www.kbscorporate.com/wp-content/themes/kbs/img/in.svg
200 OK 703 B URL HTTP/1.1 www.kbscorporate.com/wp-content/themes/kbs/img/in.svg
IP
ASN #205072 Layershift Limited
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1125)
Hash ecf29ccbb80ab31d4bfdef59636bf47d
7bf78092c67d4fa03f3d64c83c61d86d78263057
8995652ab73c338405ef7fcc2594c42f39379b0e50a11d8a53e37ae25b8f72ee
GET /wp-content/themes/kbs/img/in.svg HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: image/svg+xml
Last-Modified: Thu, 07 Nov 2019 15:54:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5dc43e32-614"
X-Powered-By: PleskLin
Content-Encoding: gzip
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: OAkHUl4q/Ox3hAxc+M2J7g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8qt8Go4HmNQQubeL9gYhxoTuA0g=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4754d0387193d23e029054c25159a08a
748149a6a292204bee4d3d58d5bf2cd9f63a5989
52480301d838e1b2147595caf19212ad46b0edc0a1da1d1098e1118c943bfceb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52480301D838E1B2147595CAF19212AD46B0EDC0A1DA1D1098E1118C943BFCEB"
Last-Modified: Wed, 15 Mar 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9253
Expires: Fri, 17 Mar 2023 15:41:46 GMT
Date: Fri, 17 Mar 2023 13:07:33 GMT
Connection: keep-alive
www.kbscorporate.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
200 OK 5.1 kB URL HTTP/1.1 www.kbscorporate.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP
ASN #205072 Layershift Limited
File type ASCII text, with very long lines (15660)
Hash 8592048ec656e41d4797240e7df5ac38
5ed5d9f50f67b9283dc78d0f0ad9e4ab53af595b
0865155ebddd7c505b677182ab113cc5f1ba66ccc7bd085c3aa8f94403fdc6cd
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/covid-19/?recid=28941683&sid=117&sendid=4534115
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: application/javascript
Last-Modified: Tue, 14 Jun 2022 14:11:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62a8972c-48b9"
X-Powered-By: PleskLin
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4754d0387193d23e029054c25159a08a
748149a6a292204bee4d3d58d5bf2cd9f63a5989
52480301d838e1b2147595caf19212ad46b0edc0a1da1d1098e1118c943bfceb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52480301D838E1B2147595CAF19212AD46B0EDC0A1DA1D1098E1118C943BFCEB"
Last-Modified: Wed, 15 Mar 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9253
Expires: Fri, 17 Mar 2023 15:41:46 GMT
Date: Fri, 17 Mar 2023 13:07:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4754d0387193d23e029054c25159a08a
748149a6a292204bee4d3d58d5bf2cd9f63a5989
52480301d838e1b2147595caf19212ad46b0edc0a1da1d1098e1118c943bfceb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52480301D838E1B2147595CAF19212AD46B0EDC0A1DA1D1098E1118C943BFCEB"
Last-Modified: Wed, 15 Mar 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9253
Expires: Fri, 17 Mar 2023 15:41:46 GMT
Date: Fri, 17 Mar 2023 13:07:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4754d0387193d23e029054c25159a08a
748149a6a292204bee4d3d58d5bf2cd9f63a5989
52480301d838e1b2147595caf19212ad46b0edc0a1da1d1098e1118c943bfceb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52480301D838E1B2147595CAF19212AD46B0EDC0A1DA1D1098E1118C943BFCEB"
Last-Modified: Wed, 15 Mar 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9253
Expires: Fri, 17 Mar 2023 15:41:46 GMT
Date: Fri, 17 Mar 2023 13:07:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4754d0387193d23e029054c25159a08a
748149a6a292204bee4d3d58d5bf2cd9f63a5989
52480301d838e1b2147595caf19212ad46b0edc0a1da1d1098e1118c943bfceb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52480301D838E1B2147595CAF19212AD46B0EDC0A1DA1D1098E1118C943BFCEB"
Last-Modified: Wed, 15 Mar 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9253
Expires: Fri, 17 Mar 2023 15:41:46 GMT
Date: Fri, 17 Mar 2023 13:07:33 GMT
Connection: keep-alive
www.kbscorporate.com/wp-content/uploads/2023/01/web-thumbnail-jan-23-70x90.png
200 OK 5.8 kB URL HTTP/2 www.kbscorporate.com/wp-content/uploads/2023/01/web-thumbnail-jan-23-70x90.png
IP
ASN #205072 Layershift Limited
File type PNG image data, 70 x 90, 8-bit/color RGB, non-interlaced\012- data
Hash c33cdad21b11c0233ba3624fda9e517c
7a4ca14412a18734d90a4b706b9ce2119a573b79
d4e4692afdd01cfe8c0b6743edbbe32efd7c417a78c043ef98a55e73c41130b2
GET /wp-content/uploads/2023/01/web-thumbnail-jan-23-70x90.png HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:33 GMT
content-type: image/png
content-length: 5757
last-modified: Tue, 10 Jan 2023 11:58:45 GMT
etag: "63bd52f5-167d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.kbscorporate.com/wp-content/themes/kbs/img/arrow-nav.svg
200 OK 322 B URL HTTP/1.1 www.kbscorporate.com/wp-content/themes/kbs/img/arrow-nav.svg
IP
ASN #205072 Layershift Limited
File type HTML document text\012- exported SGML document, ASCII text
Hash 1fe17890ba8bc77644a7829cb372c14d
9954e8015d7f9fa104827987e3accd03ea60263e
6840a58afc4564ee57f698c18ba16bec3a724000dcf2f6e7655bf78dbf0ca132
GET /wp-content/themes/kbs/img/arrow-nav.svg HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kbscorporate.com/wp-content/themes/kbs/css/add.css?ver=6.1.1
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Accel-Version: 0.01
Last-Modified: Thu, 07 Nov 2019 15:54:22 GMT
ETag: W/"1c0-596c3add488f3"
X-Powered-By: PleskLin
Content-Encoding: gzip
www.kbscorporate.com/wp-content/themes/kbs/fonts/Europa-Regular.woff
200 OK 13 kB URL HTTP/1.1 www.kbscorporate.com/wp-content/themes/kbs/fonts/Europa-Regular.woff
IP
ASN #205072 Layershift Limited
File type Web Open Font Format, TrueType, length 12996, version 0.0\012- data
Hash 8a8657d6409fb565082367338d56dca3
46df4bd3d054a090a63dba51fe484af368b2f2e3
e9769fc1dbf6e9443d913ca76602b4ab232936c5dc3b45cc80dabf00f9be94d5
GET /wp-content/themes/kbs/fonts/Europa-Regular.woff HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.kbscorporate.com/wp-content/themes/kbs/css/main.min.css?ver=6.1.1
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: application/font-woff
Content-Length: 12996
Last-Modified: Thu, 07 Nov 2019 15:54:21 GMT
Connection: keep-alive
ETag: "5dc43e2d-32c4"
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.kbscorporate.com/wp-content/themes/kbs/fonts/Europa-Bold.woff
200 OK 13 kB URL HTTP/1.1 www.kbscorporate.com/wp-content/themes/kbs/fonts/Europa-Bold.woff
IP
ASN #205072 Layershift Limited
File type Web Open Font Format, TrueType, length 12876, version 0.0\012- data
Hash 9f7535f1ef6414a30c71155a97f1de4a
31d63083cad7faa30233943b6facff04528a51ef
2529755c0bfeb8e7ee68f5b1bf51f432be7c0effe95baa8c148e36588eb6d94f
GET /wp-content/themes/kbs/fonts/Europa-Bold.woff HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.kbscorporate.com/wp-content/themes/kbs/css/main.min.css?ver=6.1.1
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: application/font-woff
Content-Length: 12876
Last-Modified: Thu, 07 Nov 2019 15:54:20 GMT
Connection: keep-alive
ETag: "5dc43e2c-324c"
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.kbscorporate.com/wp-content/themes/kbs/fonts/proximanova-semibold-webfont.woff
200 OK 25 kB URL HTTP/1.1 www.kbscorporate.com/wp-content/themes/kbs/fonts/proximanova-semibold-webfont.woff
IP
ASN #205072 Layershift Limited
File type Web Open Font Format, TrueType, length 25208, version 1.0\012- data
Hash d044fe65c09ea3a6b6f64df41e376da9
2f293c5d6e6081e072604fc3e04779e156c77c79
e4f85d57caa3a2703c098b6071538c3c47db7e09604cafb57ba57628584c657d
GET /wp-content/themes/kbs/fonts/proximanova-semibold-webfont.woff HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.kbscorporate.com/wp-content/themes/kbs/css/main.min.css?ver=6.1.1
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: application/font-woff
Content-Length: 25208
Last-Modified: Thu, 07 Nov 2019 15:54:22 GMT
Connection: keep-alive
ETag: "5dc43e2e-6278"
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.kbscorporate.com/wp-content/themes/kbs/fonts/proximanova-bold-webfont.woff
200 OK 25 kB URL HTTP/1.1 www.kbscorporate.com/wp-content/themes/kbs/fonts/proximanova-bold-webfont.woff
IP
ASN #205072 Layershift Limited
File type Web Open Font Format, TrueType, length 25380, version 1.0\012- data
Hash 688cc5073ad77031c04da6bff2720a9e
082b96ed368e9e50cd5a3317ad466e859e953a1f
4292165d51430e5ce175d6742d560306b9c570bac249de894d50a6ac1ef4f04e
GET /wp-content/themes/kbs/fonts/proximanova-bold-webfont.woff HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.kbscorporate.com/wp-content/themes/kbs/css/main.min.css?ver=6.1.1
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: application/font-woff
Content-Length: 25380
Last-Modified: Thu, 07 Nov 2019 15:54:21 GMT
Connection: keep-alive
ETag: "5dc43e2d-6324"
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.kbscorporate.com/wp-content/themes/kbs/fonts/proximanova-regular-webfont.woff
200 OK 25 kB URL HTTP/1.1 www.kbscorporate.com/wp-content/themes/kbs/fonts/proximanova-regular-webfont.woff
IP
ASN #205072 Layershift Limited
File type Web Open Font Format, TrueType, length 25312, version 1.0\012- data
Hash daddfd3f9d9a79b09b107246a96e8e72
58d310338e23c5852e91059066fe396736c4ef32
d69f04cc33b8f0890e824926558a05309f17b3415a4ecf8175a1e8ca1995aaff
GET /wp-content/themes/kbs/fonts/proximanova-regular-webfont.woff HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.kbscorporate.com/wp-content/themes/kbs/css/main.min.css?ver=6.1.1
Cookie: handl_landing_page=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115; handl_ip=91.90.42.154; handl_url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Type: application/font-woff
Content-Length: 25312
Last-Modified: Thu, 07 Nov 2019 15:54:21 GMT
Connection: keep-alive
ETag: "5dc43e2d-62e0"
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.kbscorporate.com/wp-content/uploads/2020/04/reception-530pix.jpg
200 OK 76 kB URL HTTP/2 www.kbscorporate.com/wp-content/uploads/2020/04/reception-530pix.jpg
IP
ASN #205072 Layershift Limited
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=4773, bps=182, PhotometricIntepretation=RGB, manufacturer=NIKON CORPORATION, model=NIKON D810, orientation=upper-left, width=7159], baseline, precision 8, 530x517, components 3\012- data
Hash 520fd31244c790a24556d43835818a20
801461228cff50b2de49212fea16a06f2d595a0d
803b5e018dd137569463774e1ce238530fd3339f772f5d260d85e859608ebba9
GET /wp-content/uploads/2020/04/reception-530pix.jpg HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:33 GMT
content-type: image/jpeg
content-length: 75658
last-modified: Mon, 06 Apr 2020 11:05:47 GMT
etag: "5e8b0d0b-1278a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.kbscorporate.com/wp-content/uploads/2019/11/KBS-Corporate-Brochure-Icon_2.jpg
200 OK 3.4 kB URL HTTP/2 www.kbscorporate.com/wp-content/uploads/2019/11/KBS-Corporate-Brochure-Icon_2.jpg
IP
ASN #205072 Layershift Limited
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 70x90, components 3\012- data
Hash 02eed68e05b3ebb5697c4907e0d45781
6eed96592d8f2e9901f7f896df4b0603c446b645
fe509d6838a42709c9d97862264c5e74e7a2e51782b9299b61e6bb2fca3d0d91
GET /wp-content/uploads/2019/11/KBS-Corporate-Brochure-Icon_2.jpg HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:33 GMT
content-type: image/jpeg
content-length: 3422
last-modified: Thu, 07 Nov 2019 16:08:39 GMT
etag: "5dc44187-d5e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.kbscorporate.com/wp-content/uploads/2019/11/KBS-Corporate-Brochure-Cover-1.jpg
200 OK 20 kB URL HTTP/2 www.kbscorporate.com/wp-content/uploads/2019/11/KBS-Corporate-Brochure-Cover-1.jpg
IP
ASN #205072 Layershift Limited
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2019:11:07 16:21:57], baseline, precision 8, 165x220, components 3\012- data
Hash 5f0e8daa96cceaf6f8aa719e6d436289
f906daaa9374995fbfa4102b80ad7812b6633eb4
533be5a6c537652416a703c4754e411ae9543fbafdee2eb906dd696e70173b15
GET /wp-content/uploads/2019/11/KBS-Corporate-Brochure-Cover-1.jpg HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:33 GMT
content-type: image/jpeg
content-length: 19993
last-modified: Thu, 07 Nov 2019 17:03:49 GMT
etag: "5dc44e75-4e19"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.kbscorporate.com/wp-content/uploads/2019/02/about-1.jpg
200 OK 26 kB URL HTTP/2 www.kbscorporate.com/wp-content/uploads/2019/02/about-1.jpg
IP
ASN #205072 Layershift Limited
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x400, components 3\012- data
Hash ec9f0f894ddbf5612485427dc1dad085
b9f7e99fe44549b8a9f715c0ca358b046491f5f3
1fec23b72b2c458128e0057d7e4653f64764ca74807c9b8a4e920dbe85625d0e
GET /wp-content/uploads/2019/02/about-1.jpg HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:33 GMT
content-type: image/jpeg
content-length: 25915
last-modified: Thu, 07 Nov 2019 15:59:00 GMT
etag: "5dc43f44-653b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.kbscorporate.com/wp-content/uploads/2019/03/John_Rigby.jpg
200 OK 97 kB URL HTTP/2 www.kbscorporate.com/wp-content/uploads/2019/03/John_Rigby.jpg
IP
ASN #205072 Layershift Limited
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=6000, bps=182, PhotometricIntepretation=RGB, manufacturer=NIKON CORPORATION, model=NIKON D810, orientation=upper-left, width=4004], baseline, precision 8, 303x417, components 3\012- data
Hash ac070cecab4306b29437ce2b454dd778
310d624a6808656477e99b26f20e6f58bf63e4c6
3507a0a647fa1a1c0c4446b05f3877e2cb7fad90d81b8d0ad693e985ea832be4
GET /wp-content/uploads/2019/03/John_Rigby.jpg HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:33 GMT
content-type: image/jpeg
content-length: 97085
last-modified: Thu, 07 Nov 2019 16:02:45 GMT
etag: "5dc44025-17b3d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.kbscorporate.com/wp-content/uploads/2020/04/office530-431x517.jpg
200 OK 107 kB URL HTTP/2 www.kbscorporate.com/wp-content/uploads/2020/04/office530-431x517.jpg
IP
ASN #205072 Layershift Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 17x17, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=3533, bps=182, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 5D Mark II, orientation=upper-left, width=5300], baseline, precision 8, 431x517, components 3\012- data
Size 107 kB (106853 bytes)
Hash bfc4980015981905f15c24d2c3e222d5
fc68a2f31c081aec03d426e7763dc822dcf5e9db
0ba7d77c2e29158c91b4da585da9a594d2ea9ce09e04e1b8d7a0fe4a505320a6
GET /wp-content/uploads/2020/04/office530-431x517.jpg HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:33 GMT
content-type: image/jpeg
content-length: 106853
last-modified: Mon, 06 Apr 2020 11:19:58 GMT
etag: "5e8b105e-1a165"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.googleoptimize.com/optimize.js?id=OPT-NJT9GHT
200 OK 45 kB URL HTTP/2 www.googleoptimize.com/optimize.js?id=OPT-NJT9GHT
IP
File type ASCII text, with very long lines (2206)
Hash aba76c434970827363c9885e723f6bba
07d1ad9045532599326b3496c308e4b8f8d533c4
ec5837286e1941e706bea5821721765bd76198c234a5bcb39bf5b1072680582b
GET /optimize.js?id=OPT-NJT9GHT HTTP/1.1
Host: www.googleoptimize.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 17 Mar 2023 13:07:33 GMT
expires: Fri, 17 Mar 2023 13:07:33 GMT
cache-control: private, max-age=900
last-modified: Fri, 17 Mar 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44940
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tools.luckyorange.com/core/lo.js?site-id=306774bb
200 OK 4.3 kB URL HTTP/2 tools.luckyorange.com/core/lo.js?site-id=306774bb
IP
File type ASCII text, with very long lines (11708), with no line terminators
Hash 92348ac7e2644c515ebd0fd597e3823e
d553824437acb29ad7ec95b2cb911ec5a6948c5d
6f12b7dacd562d1f484f75002affb92c49fe603a09e15626448ef056ef40d405
GET /core/lo.js?site-id=306774bb HTTP/1.1
Host: tools.luckyorange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 4324
last-modified: Tue, 07 Mar 2023 18:48:11 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Fri, 17 Mar 2023 12:52:50 GMT
cache-control: max-age=3600
etag: "92348ac7e2644c515ebd0fd597e3823e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OPCyHfNcPl6DVqt7JbRQeRvKdbYuBjaaW6xaQknlzRyfvCSSMwY2OQ==
age: 883
X-Firefox-Spdy: h2
secure.leadforensics.com/Track/Capture.aspx?retType=js&trk_uid=&trk_user=13616&trk_sw=1280&trk_sh=1024&trk_ref=&trk_tit=&trk_loc=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115&trk_agn=Netscape&trk_agv=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0.lfcd24.lflngen-US&trk_dom=www.kbscorporate.com&trk_cookie=NA&trk_culid=01GVQTXGRFJZ0ZY3HF8ZEX20TR
200 OK 0 B URL HTTP/1.1 secure.leadforensics.com/Track/Capture.aspx?retType=js&trk_uid=&trk_user=13616&trk_sw=1280&trk_sh=1024&trk_ref=&trk_tit=&trk_loc=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115&trk_agn=Netscape&trk_agv=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0.lfcd24.lflngen-US&trk_dom=www.kbscorporate.com&trk_cookie=NA&trk_culid=01GVQTXGRFJZ0ZY3HF8ZEX20TR
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Track/Capture.aspx?retType=js&trk_uid=&trk_user=13616&trk_sw=1280&trk_sh=1024&trk_ref=&trk_tit=&trk_loc=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115&trk_agn=Netscape&trk_agv=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0.lfcd24.lflngen-US&trk_dom=www.kbscorporate.com&trk_cookie=NA&trk_culid=01GVQTXGRFJZ0ZY3HF8ZEX20TR HTTP/1.1
Host: secure.leadforensics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Kestrel
Request-Context: appId=cid-v1:abe8a76f-f1a2-4b2e-9017-0ea36ffb5c20
Date: Fri, 17 Mar 2023 13:07:33 GMT
Content-Length: 0
www.kbscorporate.com/wp-content/uploads/2019/04/cropped-Site-icon-192x192.png
200 OK 9.4 kB URL HTTP/2 www.kbscorporate.com/wp-content/uploads/2019/04/cropped-Site-icon-192x192.png
IP
ASN #205072 Layershift Limited
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash d4357ed0e10ed07e038f3ff83eac0497
5433fe873e4e5118a697f961f9dfc3b0b312d46c
5baa1337d77fcf994d48ccb94288c1cf68a6df71ecca5e85efd0eb2bb09e5f2b
GET /wp-content/uploads/2019/04/cropped-Site-icon-192x192.png HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:34 GMT
content-type: image/png
content-length: 9389
last-modified: Thu, 07 Nov 2019 16:04:46 GMT
etag: "5dc4409e-24ad"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.kbscorporate.com/wp-content/uploads/2019/04/cropped-Site-icon-32x32.png
200 OK 1.3 kB URL HTTP/2 www.kbscorporate.com/wp-content/uploads/2019/04/cropped-Site-icon-32x32.png
IP
ASN #205072 Layershift Limited
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 17ba34401139a3040fc2f9a66a8aa64f
6d7f22da19d862e391619d43bfb67728b6b77b16
1081292bb7575b1b2b76d9a2ec97781481c7be46be210a3f2dc9355c126bd0ac
GET /wp-content/uploads/2019/04/cropped-Site-icon-32x32.png HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:34 GMT
content-type: image/png
content-length: 1343
last-modified: Thu, 07 Nov 2019 16:04:46 GMT
etag: "5dc4409e-53f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.8 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13351)
Hash 74f72658f6efd10c4c286ab07cd5e452
9fa4dfc644b6e818914f2f2c4fe4bdf791fd6d39
6681619d5962f95b3fccfa34a7f035664edb66522d237ea0c28a05851f9d295c
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 10 Jan 2023 17:22:56 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=36250
date: Fri, 17 Mar 2023 13:07:34 GMT
content-length: 4777
x-content-type-options: nosniff
x-cdn: AKAM
X-Firefox-Spdy: h2
www.kbscorporate.com/wp-content/uploads/2019/03/Simon-Daniels-edit.png
200 OK 160 kB URL HTTP/2 www.kbscorporate.com/wp-content/uploads/2019/03/Simon-Daniels-edit.png
IP
ASN #205072 Layershift Limited
File type PNG image data, 303 x 417, 8-bit/color RGBA, non-interlaced\012- data
Size 160 kB (160303 bytes)
Hash 0a75099c485edee636e6b4ee6547b0e0
cfa759398d732ea19eb16598e795bdd93e45aab9
97ba3a1017b4dc432150e946e7616c75ecb93078db8947d516c8c22758e0a581
GET /wp-content/uploads/2019/03/Simon-Daniels-edit.png HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:34 GMT
content-type: image/png
content-length: 160303
last-modified: Tue, 22 Nov 2022 11:01:47 GMT
etag: "637cac1b-2722f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 845dc57b777433830ae9d64a4602a480
167889d8b7479e54619c1b14957f87537d8873a4
d301be6b0fa0700457258218bd1f39f2613c2a20ba428d16a7079f7a87c86447
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 17 Mar 2023 13:07:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d383b3dde684c9f65efa191540adf91b
3bac2dce80d946dd75395c5b7599c20a548b9381
a5a1b13ea8be166c70d741e5503ff5a2abeed14e2229e07d045a67621a4ab8fe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 17 Mar 2023 13:07:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/bat.js
200 OK 12 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (40607), with no line terminators
Hash 04651bf0c51742f9007b1ae2b4486dee
6ffc71fcb5db1cf0283b60150a62f2c219ac3dbd
5d7392c44731e52810337eb1a3eb3ae1ffab31b8f8d55daba20d658701604666
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11894
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 16 Feb 2023 18:31:53 GMT
accept-ranges: bytes
etag: "8072cff03442d91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D0CA1D14CB784BBEB23952EE4B3F5AAD Ref B: OSL30EDGE0519 Ref C: 2023-03-17T13:07:34Z
date: Fri, 17 Mar 2023 13:07:33 GMT
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Fri, 17 Mar 2023 11:53:25 GMT
expires: Fri, 17 Mar 2023 13:53:25 GMT
cache-control: public, max-age=7200
age: 4449
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1bfd6c5371488e28b2d6ffa2eb0ca02e
4a089c039d466cb6cab66ac3c89a61d884caeb81
2f9e48b09fc39417713be322a20987dc2304ccf5b0d35c828fd6b4b4028ab16f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2F9E48B09FC39417713BE322A20987DC2304CCF5B0D35C828FD6B4B4028AB16F"
Last-Modified: Fri, 17 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2727
Expires: Fri, 17 Mar 2023 13:53:01 GMT
Date: Fri, 17 Mar 2023 13:07:34 GMT
Connection: keep-alive
www.kbscorporate.com/wp-content/uploads/2019/03/Stuart_Lees_2.jpg
200 OK 78 kB URL HTTP/2 www.kbscorporate.com/wp-content/uploads/2019/03/Stuart_Lees_2.jpg
IP
ASN #205072 Layershift Limited
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 303x417, components 3\012- data
Hash 3bb0e0ce488c1c054ccf313f587b33d1
7111989ecd39eaa50b4a73bc211d917d5436a3ce
b5cd0d902521dc2e22a353ae5801c908c9ddadf73e6ff8bdabe5699b47a5acac
GET /wp-content/uploads/2019/03/Stuart_Lees_2.jpg HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:34 GMT
content-type: image/jpeg
content-length: 78503
last-modified: Thu, 07 Nov 2019 16:03:59 GMT
etag: "5dc4406f-132a7"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.kbscorporate.com/wp-content/uploads/2019/04/logo-sticky.svg
200 OK 80 kB URL HTTP/2 www.kbscorporate.com/wp-content/uploads/2019/04/logo-sticky.svg
IP
ASN #205072 Layershift Limited
Hash 681f3508620af8f06311873e5adee121
1ffeef22719f7b5bac502da1f5580f021cef9e9f
79a01629b9d97cebd0a8e00be184c46b848c7f2c841f54d9579f735e529e6538
GET /wp-content/uploads/2019/04/logo-sticky.svg HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:33 GMT
content-type: image/svg+xml
last-modified: Thu, 07 Nov 2019 16:05:00 GMT
vary: Accept-Encoding
etag: W/"5dc440ac-59b7"
x-powered-by: PleskLin
content-encoding: gzip
X-Firefox-Spdy: h2
www.kbscorporate.com/wp-content/uploads/2019/03/Dave_Gardner.jpg
200 OK 108 kB URL HTTP/2 www.kbscorporate.com/wp-content/uploads/2019/03/Dave_Gardner.jpg
IP
ASN #205072 Layershift Limited
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=6000, bps=182, PhotometricIntepretation=RGB, manufacturer=NIKON CORPORATION, model=NIKON D810, orientation=upper-left, width=4004], baseline, precision 8, 303x417, components 3\012- data
Size 108 kB (107597 bytes)
Hash 22a77493a06ad766cea1199b37e4ef31
3fc71f2b27e301f1ec808f834d2202f397f641e7
1a32952253a26bbed45fa985f277300bcdbc71f829d450ef964e5210c9d23b54
GET /wp-content/uploads/2019/03/Dave_Gardner.jpg HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:34 GMT
content-type: image/jpeg
content-length: 107597
last-modified: Thu, 07 Nov 2019 16:01:38 GMT
etag: "5dc43fe2-1a44d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.kbscorporate.com/wp-content/uploads/2019/03/Tony_Ford_1.jpg
200 OK 90 kB URL HTTP/2 www.kbscorporate.com/wp-content/uploads/2019/03/Tony_Ford_1.jpg
IP
ASN #205072 Layershift Limited
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 303x417, components 3\012- data
Hash 9d8173856407bcf5e51eaabba56a9c69
6e5231a22284a39469c8dcf46f6357137fc44686
d20189f386d366ade5070ae6fa2dad41561f30e20535f833f01541ab4e437089
GET /wp-content/uploads/2019/03/Tony_Ford_1.jpg HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:34 GMT
content-type: image/jpeg
content-length: 90459
last-modified: Thu, 07 Nov 2019 16:04:31 GMT
etag: "5dc4408f-1615b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1bfd6c5371488e28b2d6ffa2eb0ca02e
4a089c039d466cb6cab66ac3c89a61d884caeb81
2f9e48b09fc39417713be322a20987dc2304ccf5b0d35c828fd6b4b4028ab16f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2F9E48B09FC39417713BE322A20987DC2304CCF5B0D35C828FD6B4B4028AB16F"
Last-Modified: Fri, 17 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2727
Expires: Fri, 17 Mar 2023 13:53:01 GMT
Date: Fri, 17 Mar 2023 13:07:34 GMT
Connection: keep-alive
www.kbscorporate.com/wp-content/uploads/2019/03/Andy_Melbourne.jpg
200 OK 106 kB URL HTTP/2 www.kbscorporate.com/wp-content/uploads/2019/03/Andy_Melbourne.jpg
IP
ASN #205072 Layershift Limited
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=4401, bps=182, PhotometricIntepretation=RGB, manufacturer=NIKON CORPORATION, model=NIKON D810, orientation=upper-left, width=2934], baseline, precision 8, 303x417, components 3\012- data
Size 106 kB (105952 bytes)
Hash 662a6a8b8749fa4ed0e23399c678a36d
77f2a91b49e2182f3aecbad5712b5c0a3f2cd63b
924ce0ec3773efb8acc4060111533f0d040cffc6ed4a92a5cea3952d95ecea24
GET /wp-content/uploads/2019/03/Andy_Melbourne.jpg HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:34 GMT
content-type: image/jpeg
content-length: 105952
last-modified: Thu, 07 Nov 2019 16:00:41 GMT
etag: "5dc43fa9-19de0"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-J9PNFRVXLN&cid=874470310.1679058454>m=45je33f0&aip=1&z=2047488776
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-J9PNFRVXLN&cid=874470310.1679058454>m=45je33f0&aip=1&z=2047488776
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-J9PNFRVXLN&cid=874470310.1679058454>m=45je33f0&aip=1&z=2047488776 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 17 Mar 2023 13:07:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.kbscorporate.com/wp-content/uploads/2019/03/Jay-Singh-Resized.jpg
200 OK 104 kB URL HTTP/2 www.kbscorporate.com/wp-content/uploads/2019/03/Jay-Singh-Resized.jpg
IP
ASN #205072 Layershift Limited
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=16, height=4000, bps=206, PhotometricIntepretation=RGB, manufacturer=SONY, model=ILCE-5100, orientation=upper-left, width=6000], baseline, precision 8, 303x417, components 3\012- data
Size 104 kB (103473 bytes)
Hash b4d5e210c2181c0d75d841036a0944c0
23d912f0a7881b5ec5e3b996790e78529b0ad603
6d7d63438063b02f7f968e6bedcc4a0090db4968460053fc1c2f3e93d3c5bc76
GET /wp-content/uploads/2019/03/Jay-Singh-Resized.jpg HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:34 GMT
content-type: image/jpeg
content-length: 103473
last-modified: Thu, 07 Nov 2019 16:02:41 GMT
etag: "5dc44021-19431"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.kbscorporate.com/wp-content/uploads/2019/03/John_Hunt_006.jpg
200 OK 96 kB URL HTTP/2 www.kbscorporate.com/wp-content/uploads/2019/03/John_Hunt_006.jpg
IP
ASN #205072 Layershift Limited
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=6352, bps=182, PhotometricIntepretation=RGB, manufacturer=NIKON CORPORATION, model=NIKON D810, orientation=upper-left, width=4235], baseline, precision 8, 303x417, components 3\012- data
Hash c521f3af6bd448bd1d280857aad13767
8b4c1507507adeebcbc7348f03e8b460d0d846c3
3de18b152b2c9c5551924db454c9cb24ceee19a98b3d3ab6fe144cec5353719d
GET /wp-content/uploads/2019/03/John_Hunt_006.jpg HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:34 GMT
content-type: image/jpeg
content-length: 96161
last-modified: Thu, 07 Nov 2019 16:02:44 GMT
etag: "5dc44024-177a1"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.kbscorporate.com/wp-content/uploads/2019/03/Simon-Daniels-edit-303x417.png
200 OK 159 kB URL HTTP/2 www.kbscorporate.com/wp-content/uploads/2019/03/Simon-Daniels-edit-303x417.png
IP
ASN #205072 Layershift Limited
File type PNG image data, 303 x 417, 8-bit/color RGBA, non-interlaced\012- data
Size 159 kB (159089 bytes)
Hash 0ca9643f0991b37da6ca8d4c9464b097
4d0307e3382138cee0cb8ca617186d9192a03434
26a8d2832dd4401b66e1bb7f49d01fd098d9890a52a3b491310e4ad7dee7c750
GET /wp-content/uploads/2019/03/Simon-Daniels-edit-303x417.png HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:34 GMT
content-type: image/png
content-length: 159089
last-modified: Tue, 22 Nov 2022 11:01:51 GMT
etag: "637cac1f-26d71"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/MuIyr8Ej74CrXhJDQy37RPBe/recaptcha__en.js
200 OK 164 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/MuIyr8Ej74CrXhJDQy37RPBe/recaptcha__en.js
IP
File type ASCII text, with very long lines (554)
Size 164 kB (163842 bytes)
Hash 67145d1dd8c7201ad506c8734df41708
9f10d87858deb8ee394d47a6268494905ee9f0c0
e0ebeeb232953726660519b937e1cadaf1cb2461e8c044044ff2e9a481f085a0
GET /recaptcha/releases/MuIyr8Ej74CrXhJDQy37RPBe/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.kbscorporate.com
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 163842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 23:56:15 GMT
expires: Thu, 14 Mar 2024 23:56:15 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 05 Mar 2023 21:03:42 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 133879
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j99&a=2142299290&t=pageview&_s=1&dl=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115&ul=en-us&de=UTF-8&dt=COVID-19%20Update%20-%20KBS%20Corporate&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YADAAEABQAAAACAAI~&jid=1087469161&gjid=1459958895&cid=874470310.1679058454&tid=UA-38207270-1&_gid=853504742.1679058454&_r=1&_slc=1>m=45He33f0n81WV5NMZV&z=688984046
200 OK 4 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&a=2142299290&t=pageview&_s=1&dl=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115&ul=en-us&de=UTF-8&dt=COVID-19%20Update%20-%20KBS%20Corporate&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YADAAEABQAAAACAAI~&jid=1087469161&gjid=1459958895&cid=874470310.1679058454&tid=UA-38207270-1&_gid=853504742.1679058454&_r=1&_slc=1>m=45He33f0n81WV5NMZV&z=688984046
IP
File type ASCII text, with no line terminators
Hash 9e92e190700c1af4539b40c2171320a9
209bcdb79e6067b51091ce8586d4b977f25b67d8
aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
POST /j/collect?v=1&_v=j99&a=2142299290&t=pageview&_s=1&dl=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115&ul=en-us&de=UTF-8&dt=COVID-19%20Update%20-%20KBS%20Corporate&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YADAAEABQAAAACAAI~&jid=1087469161&gjid=1459958895&cid=874470310.1679058454&tid=UA-38207270-1&_gid=853504742.1679058454&_r=1&_slc=1>m=45He33f0n81WV5NMZV&z=688984046 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.kbscorporate.com
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: http://www.kbscorporate.com
date: Fri, 17 Mar 2023 13:07:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d383b3dde684c9f65efa191540adf91b
3bac2dce80d946dd75395c5b7599c20a548b9381
a5a1b13ea8be166c70d741e5503ff5a2abeed14e2229e07d045a67621a4ab8fe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 17 Mar 2023 13:07:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/action/0?ti=23006786&tm=gtm002&Ver=2&mid=d48752d2-2020-463c-a434-cc7ad9789846&sid=ae967ca0c4c411ed8a4bd1ac702651d7&vid=ae969820c4c411ed9cc1956903990ae9&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=COVID-19%20Update%20-%20KBS%20Corporate&p=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115&r=<=1369&evt=pageLoad&sv=1&rn=522932
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=23006786&tm=gtm002&Ver=2&mid=d48752d2-2020-463c-a434-cc7ad9789846&sid=ae967ca0c4c411ed8a4bd1ac702651d7&vid=ae969820c4c411ed9cc1956903990ae9&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=COVID-19%20Update%20-%20KBS%20Corporate&p=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115&r=<=1369&evt=pageLoad&sv=1&rn=522932
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=23006786&tm=gtm002&Ver=2&mid=d48752d2-2020-463c-a434-cc7ad9789846&sid=ae967ca0c4c411ed8a4bd1ac702651d7&vid=ae969820c4c411ed9cc1956903990ae9&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=COVID-19%20Update%20-%20KBS%20Corporate&p=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115&r=<=1369&evt=pageLoad&sv=1&rn=522932 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=3F511AAF35F96A9D0A160878340C6B77; domain=.bing.com; expires=Wed, 10-Apr-2024 13:07:34 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BEC2D29FA7C442EA8FE45478F5D985DB Ref B: OSL30EDGE0519 Ref C: 2023-03-17T13:07:34Z
date: Fri, 17 Mar 2023 13:07:33 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 845dc57b777433830ae9d64a4602a480
167889d8b7479e54619c1b14957f87537d8873a4
d301be6b0fa0700457258218bd1f39f2613c2a20ba428d16a7079f7a87c86447
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 17 Mar 2023 13:07:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 882acbfdafb69c4613ef9f3ea0451cd0
25e1eef2730890b85ef2fdfb33aecad2abf3e8b0
a8a797f481a9939146daa15f94f211aad2bebc8ca4bed7546fa4a4f8e2bebd4b
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 17 Mar 2023 13:07:34 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 16 Mar 2023 20:49:06 GMT
Expires: Fri, 17 Mar 2023 20:49:06 GMT
ETag: "25e1eef2730890b85ef2fdfb33aecad2abf3e8b0"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ce.lijit.com/merge?pid=5055&3pid=01GVQTXGRFJZ0ZY3HF8ZEX20TR
204 No Content 0 B URL HTTP/1.1 ce.lijit.com/merge?pid=5055&3pid=01GVQTXGRFJZ0ZY3HF8ZEX20TR
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /merge?pid=5055&3pid=01GVQTXGRFJZ0ZY3HF8ZEX20TR HTTP/1.1
Host: ce.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Fri, 17 Mar 2023 13:07:34 GMT
X-MERGE: GDPR Optout true
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0
Pragma: no-cache
Expires: Fri, 20 Mar 2009 00:00:00 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
X-Sovrn-Pod: ad_ap2ams1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1bfd6c5371488e28b2d6ffa2eb0ca02e
4a089c039d466cb6cab66ac3c89a61d884caeb81
2f9e48b09fc39417713be322a20987dc2304ccf5b0d35c828fd6b4b4028ab16f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2F9E48B09FC39417713BE322A20987DC2304CCF5B0D35C828FD6B4B4028AB16F"
Last-Modified: Fri, 17 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2727
Expires: Fri, 17 Mar 2023 13:53:01 GMT
Date: Fri, 17 Mar 2023 13:07:34 GMT
Connection: keep-alive
bat.bing.com/p/action/23006786.js
200 OK 1.5 kB URL HTTP/2 bat.bing.com/p/action/23006786.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Hash 99c3aba082c792381e465642719854dc
318548b9a63e8d6f49a333e1c768a061d9f29fff
a3a4a5fcd91bca197ccd215279b1456debd3e2e444cbf637ea4dabe868482c97
GET /p/action/23006786.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private,max-age=60
content-length: 1497
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 21631E59CA724DDB9AC2A9F22A55646F Ref B: OSL30EDGE0519 Ref C: 2023-03-17T13:07:34Z
date: Fri, 17 Mar 2023 13:07:33 GMT
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=3953946&time=1679058453963&url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=3953946&time=1679058453963&url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=3953946&time=1679058453963&url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115 HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3953946%26time%3D1679058453963%26url%3Dhttp%253A%252F%252Fwww.kbscorporate.com%252Fcovid-19%252F%253Frecid%253D28941683%2526sid%253D117%2526sendid%253D4534115%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQLyls-gFDmHdAAAAYbvrsd48lIsYyqbP2vYpUEXTvKjdWzeX1YMuIPRmv6mSF7hRPMdst5eQZhd6A; Max-Age=2592000; Expires=Sun, 16 Apr 2023 13:07:34 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQIV-MBDX3VajAAAAYbvrsd4uAtTXT5R6Qz0kPmalArG9QhuoovqZdlxLVuzUzwtE0ds_6aHjwKjJeWbfzk97w; Max-Age=2592000; Expires=Sun, 16 Apr 2023 13:07:34 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
bcookie="v=2&5ddec703-22c4-4145-8aa5-4a0b21645cd6"; domain=.linkedin.com; Path=/; Secure; Expires=Sat, 16-Mar-2024 13:07:34 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2522:u=1:x=1:i=1679058454:t=1679144854:v=2:sig=AQGtYCRTplcy5EnE2G6pw2tsrkQhNjVG"; Expires=Sat, 18 Mar 2023 13:07:34 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAX3GEK7F4wXId2MwNCFeg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 811AD9D0F85F4E0BB38D1CD28D182D96 Ref B: OSL30EDGE0307 Ref C: 2023-03-17T13:07:34Z
date: Fri, 17 Mar 2023 13:07:34 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5861c2a8322fb6fa8a121acbf79b37be
c5519b383ed49f345f83e6103336ad16e27188b1
6dcce5b3f72728ee56720e7a8be1b8c8528da5a15b30e43fd85756d48f7b21e6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 17 Mar 2023 13:07:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-38207270-1&cid=874470310.1679058454&jid=1087469161&gjid=1459958895&_gid=853504742.1679058454&_u=YADAAEAAQAAAACAAI~&z=1129712987
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-38207270-1&cid=874470310.1679058454&jid=1087469161&gjid=1459958895&_gid=853504742.1679058454&_u=YADAAEAAQAAAACAAI~&z=1129712987
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-38207270-1&cid=874470310.1679058454&jid=1087469161&gjid=1459958895&_gid=853504742.1679058454&_u=YADAAEAAQAAAACAAI~&z=1129712987 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.kbscorporate.com
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://www.kbscorporate.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 17 Mar 2023 13:07:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.kbscorporate.com/wp-json/contact-form-7/v1/contact-forms/54/feedback/schema
200 OK 164 kB URL HTTP/2 www.kbscorporate.com/wp-json/contact-form-7/v1/contact-forms/54/feedback/schema
IP
ASN #205072 Layershift Limited
File type JSON data\012- , ASCII text, with very long lines (554)
Size 164 kB (164029 bytes)
Hash e2f51c077d440fd4374d6a8b4fcb1a76
42aba5b0aa3d5ba3674685f41dd4c24e189b71c0
f87380eaf1fc89c09746dd869841087b33b2d1d408316bbd69b7b1eeb87c98ff
GET /wp-json/contact-form-7/v1/contact-forms/54/feedback/schema HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, */*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.kbscorporate.com/
Origin: http://www.kbscorporate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:34 GMT
content-type: application/json; charset=UTF-8
x-robots-tag: noindex
link: <https://www.kbscorporate.com/wp-json/>; rel="https://api.w.org/"
x-content-type-options: nosniff
access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link
access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
allow: GET
access-control-allow-origin: http://www.kbscorporate.com
access-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE
access-control-allow-credentials: true
vary: Accept-Encoding, Origin
set-cookie: utm_source=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
utm_medium=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
gclid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
handl_original_ref=http%3A%2F%2Fwww.kbscorporate.com%2F; expires=Sun, 16-Apr-2023 13:07:33 GMT; Max-Age=2592000; path=/; domain=.kbscorporate.com
handl_landing_page=https%3A%2F%2Fwww.kbscorporate.com%2Fwp-json%2Fcontact-form-7%2Fv1%2Fcontact-forms%2F54%2Ffeedback%2Fschema; expires=Sun, 16-Apr-2023 13:07:33 GMT; Max-Age=2592000; path=/; domain=.kbscorporate.com
handl_ip=91.90.42.154; expires=Sun, 16-Apr-2023 13:07:33 GMT; Max-Age=2592000; path=/; domain=.kbscorporate.com
handl_ref=http%3A%2F%2Fwww.kbscorporate.com%2F; expires=Sun, 16-Apr-2023 13:07:33 GMT; Max-Age=2592000; path=/; domain=.kbscorporate.com
handl_url=https%3A%2F%2Fwww.kbscorporate.com%2Fwp-json%2Fcontact-form-7%2Fv1%2Fcontact-forms%2F54%2Ffeedback%2Fschema; expires=Sun, 16-Apr-2023 13:07:33 GMT; Max-Age=2592000; path=/; domain=.kbscorporate.com
email=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
username=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
x-powered-by: PHP/7.4.33, PleskLin
content-encoding: gzip
X-Firefox-Spdy: h2
settings.luckyorange.com/306774bb
200 OK 472 B URL HTTP/2 settings.luckyorange.com/306774bb
IP
Hash 5861c2a8322fb6fa8a121acbf79b37be
c5519b383ed49f345f83e6103336ad16e27188b1
6dcce5b3f72728ee56720e7a8be1b8c8528da5a15b30e43fd85756d48f7b21e6
OPTIONS /306774bb HTTP/1.1
Host: settings.luckyorange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-lucky-referrer,x-lucky-uid
Referer: http://www.kbscorporate.com/
Origin: http://www.kbscorporate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://www.kbscorporate.com
access-control-allow-credentials: true
access-control-allow-methods: POST,GET,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Access-Control-Allow-Origin,Authorization,Content-Type,X-Lucky-Uid,X-Lucky-Site-Id,X-Lucky-Impersonate,X-Lucky-Session-Id,X-Lucky-Referrer
access-control-max-age: 86400
date: Fri, 17 Mar 2023 13:07:34 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3953946%26time%3D1679058453963%26url%3Dhttp%253A%252F%252Fwww.kbscorporate.com%252Fcovid-19%252F%253Frecid%253D28941683%2526sid%253D117%2526sendid%253D4534115%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3953946%26time%3D1679058453963%26url%3Dhttp%253A%252F%252Fwww.kbscorporate.com%252Fcovid-19%252F%253Frecid%253D28941683%2526sid%253D117%2526sendid%253D4534115%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3953946%26time%3D1679058453963%26url%3Dhttp%253A%252F%252Fwww.kbscorporate.com%252Fcovid-19%252F%253Frecid%253D28941683%2526sid%253D117%2526sendid%253D4534115%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.kbscorporate.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=3953946&time=1679058453963&url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115&liSync=true
set-cookie: bcookie="v=2&95ae72f2-1c3d-4618-8de6-74a654c4df73"; Domain=.linkedin.com; Expires=Sat, 16-Mar-2024 13:07:34 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20230317130734bd00f3ea-2e0a-47de-8ce4-372372c8b201AQE7_fpiNJ11s9NnnHAAUsFFzBGK067B"; Domain=.www.linkedin.com; Expires=Sat, 16-Mar-2024 13:07:34 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzkwNTg0NTQ7MjswMjHzeDQGrHEwIH1wJN1SZNeBsLovkbC3gNICNdT9/IHVkA==; Domain=.linkedin.com; Expires=Wed, 13 Sep 2023 13:07:34 GMT; Path=/; Secure; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2483:u=1:x=1:i=1679058454:t=1679144854:v=2:sig=AQEDzDir5sLoKioMT53UaU0ElH1FnMYO"; Expires=Sat, 18 Mar 2023 13:07:34 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src 'self' blob: static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAX3GEK9Py0rHj8l+GtVPg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: D6841244D3C14F1AA4351434DB878284 Ref B: OSL30EDGE0307 Ref C: 2023-03-17T13:07:34Z
date: Fri, 17 Mar 2023 13:07:34 GMT
content-length: 0
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Mar 2023 21:48:03 GMT
expires: Fri, 15 Mar 2024 21:48:03 GMT
cache-control: public, max-age=31536000
age: 55171
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Mar 2023 17:56:42 GMT
expires: Fri, 15 Mar 2024 17:56:42 GMT
cache-control: public, max-age=31536000
age: 69052
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.clarity.ms/eus-f-sc/s/0.7.4/clarity.js
200 OK 19 kB URL HTTP/2 www.clarity.ms/eus-f-sc/s/0.7.4/clarity.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (56437)
Hash 006e07a4d3750b86888c2fc76b73f686
c4af91902b2289fb8cc117473d35c992d2d263c2
75e2e2ef02c96440f91265e9a405129e72f0d2fc60a39b381358fd1fded5718e
GET /eus-f-sc/s/0.7.4/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d9581e219711cd"
server: nginx/1.18.0 (Ubuntu)
x-cache: TCP_HIT
request-context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0
x-azure-ref-originshield: 0BKsTZAAAAAD3E87XWE/0Tq2RB7t0OXRvQU1TMDRFREdFMTgxMgA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
x-azure-ref: 0FmYUZAAAAADlHsJrZZGzSrDqcKDyj8zDU1ZHMjBFREdFMDYxMgA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Fri, 17 Mar 2023 13:07:34 GMT
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-J9PNFRVXLN>m=45je33f0&_p=2142299290&_gaz=1&cid=874470310.1679058454&ul=en-us&sr=1280x1024&_s=1&sid=1679058453&sct=1&seg=0&dl=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115&dt=COVID-19%20Update%20-%20KBS%20Corporate&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-J9PNFRVXLN>m=45je33f0&_p=2142299290&_gaz=1&cid=874470310.1679058454&ul=en-us&sr=1280x1024&_s=1&sid=1679058453&sct=1&seg=0&dl=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115&dt=COVID-19%20Update%20-%20KBS%20Corporate&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-J9PNFRVXLN>m=45je33f0&_p=2142299290&_gaz=1&cid=874470310.1679058454&ul=en-us&sr=1280x1024&_s=1&sid=1679058453&sct=1&seg=0&dl=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115&dt=COVID-19%20Update%20-%20KBS%20Corporate&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.kbscorporate.com
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://www.kbscorporate.com
date: Fri, 17 Mar 2023 13:07:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tools.luckyorange.com/core/core.js?v=cd79b92
200 OK 64 kB URL HTTP/2 tools.luckyorange.com/core/core.js?v=cd79b92
IP
File type Unicode text, UTF-8 text, with very long lines (49283), with NEL line terminators
Hash a5e86208a8f69882f408eff1536a47eb
8b00b13c0a40b0f79a99093372bfd83ac82b7988
7d51f37712ababa256131c27fbe55e84a00d05903b38628ce169079b5a0a367e
GET /core/core.js?v=cd79b92 HTTP/1.1
Host: tools.luckyorange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.kbscorporate.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 63463
date: Thu, 16 Mar 2023 07:35:22 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
last-modified: Tue, 07 Mar 2023 18:48:11 GMT
etag: "a5e86208a8f69882f408eff1536a47eb"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: B-_oz0l4kBo1lQW-5P5jH_GDTAWxwhYD_OfKMmZnvbhoCKKfRDSqaQ==
age: 106333
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=3953946&time=1679058453963&url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=3953946&time=1679058453963&url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=3953946&time=1679058453963&url=http%3A%2F%2Fwww.kbscorporate.com%2Fcovid-19%2F%3Frecid%3D28941683%26sid%3D117%26sendid%3D4534115&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.kbscorporate.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: bcookie="v=2&3ca48e3e-d0ef-4330-8b00-3fd89971d631"; domain=.linkedin.com; Path=/; Secure; Expires=Sat, 16-Mar-2024 13:07:34 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2467:u=1:x=1:i=1679058454:t=1679144854:v=2:sig=AQESnoNQwb8-kzqZjO0Av_m6mmTwptw3"; Expires=Sat, 18 Mar 2023 13:07:34 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAX3GELA/7curBouy1JFpw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 97E62E2B3EEC49CF99B26F4826DE222B Ref B: OSL30EDGE0307 Ref C: 2023-03-17T13:07:34Z
date: Fri, 17 Mar 2023 13:07:34 GMT
content-length: 0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 84762efcb2e1535ae49fca6c1523df33
93e7f138a491d4276a793c2e5b947195ae69a88c
920778735cfb5f0395bbfa1391cb4e90c547d455cac77c8bb161a0c3b55a6a3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18383
Expires: Fri, 17 Mar 2023 18:13:57 GMT
Date: Fri, 17 Mar 2023 13:07:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 84762efcb2e1535ae49fca6c1523df33
93e7f138a491d4276a793c2e5b947195ae69a88c
920778735cfb5f0395bbfa1391cb4e90c547d455cac77c8bb161a0c3b55a6a3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18383
Expires: Fri, 17 Mar 2023 18:13:57 GMT
Date: Fri, 17 Mar 2023 13:07:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 84762efcb2e1535ae49fca6c1523df33
93e7f138a491d4276a793c2e5b947195ae69a88c
920778735cfb5f0395bbfa1391cb4e90c547d455cac77c8bb161a0c3b55a6a3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18382
Expires: Fri, 17 Mar 2023 18:13:57 GMT
Date: Fri, 17 Mar 2023 13:07:35 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6f2431c-a8dc-417b-a69d-872c1926357e.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6f2431c-a8dc-417b-a69d-872c1926357e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 59b4d5ead77a00c1fa0f931de2e2cd5a
a1d4c0ff3f3a161c76a0059811b4cd5fc5a5afc2
b2cff32e66aaac5308bc63c01e1d3f7e7e52e9aa7bf5e4f83e4c92c3a43966a6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6f2431c-a8dc-417b-a69d-872c1926357e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7236
x-amzn-requestid: d95168ad-60bc-4bd3-91c2-c91ce7e07fd9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B14DcGSHoAMFS8g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64123a15-5773b4b257788e1f342c9057;Sampled=0
x-amzn-remapped-date: Wed, 15 Mar 2023 21:35:17 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: a1t3ONoUNZZw7jigQ-hpS--1OKB9IbNvJNe73WdDFggFoJ9kfBhx1A==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 f268a165a18929fd0a24a3189fbd16b2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 16 Mar 2023 22:06:50 GMT
age: 54045
etag: "a1d4c0ff3f3a161c76a0059811b4cd5fc5a5afc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c430116-4c4a-4cbe-a4c1-6cee0cf31cbf.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c430116-4c4a-4cbe-a4c1-6cee0cf31cbf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 99611078e63b35986624d721d8ba48f1
57f365716740483e46a92003d6071bd3b315c136
b090b215e3fb36b27a8a50e66011921b79ecee8d9a5a95b69f8ec6df3d17a610
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c430116-4c4a-4cbe-a4c1-6cee0cf31cbf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7629
x-amzn-requestid: 4a2d3d08-f0ed-4715-be41-23ce8558dfb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B5LSBHmPIAMFXpQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64138c0c-5012c14d576dd6380799371d;Sampled=0
x-amzn-remapped-date: Thu, 16 Mar 2023 21:37:16 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: bDc-UMUZBFe_3umxvs6XEiZ4cDPJDZXORekI-qQfLmXJYqydL89R0g==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 82893cc36087a50f9a150a621d10e740.cloudfront.net (CloudFront), 1.1 google
date: Thu, 16 Mar 2023 21:53:22 GMT
etag: "57f365716740483e46a92003d6071bd3b315c136"
content-type: image/jpeg
age: 54853
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 78453ba98b72eff3879ef163b59c86ed
80519bb3726ee1f9f211344cd433cefaed3a7f2e
61adfeff11af9583355ac7d1500e8a8d97357b2846f151f2421001994fb06655
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10338
x-amzn-requestid: 9f880b5b-056c-44bb-a811-36ea27c232aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BvSgFGENoAMFuVw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640f9799-2318d444248f7610300c658f;Sampled=0
x-amzn-remapped-date: Mon, 13 Mar 2023 21:37:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: bka10YWXvoKBRkwgvJNMzm1SSv_J1USzdugO9lPduHxe2uYFYkXh4w==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 e11ee4e3208082d534c251b36bbee268.cloudfront.net (CloudFront), 1.1 google
date: Fri, 17 Mar 2023 07:02:34 GMT
age: 21901
etag: "80519bb3726ee1f9f211344cd433cefaed3a7f2e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6272d07-0ccd-41ba-a86f-72932f0783bd.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6272d07-0ccd-41ba-a86f-72932f0783bd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 05b82ec8d7e99e9499e8b5a980008c60
280fe711e384d60749c6225ddcc7f57c48845719
305b82d6aa40f5af58100de5007ac484c73c0a49ab7c5715b8ab6e83e10270f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6272d07-0ccd-41ba-a86f-72932f0783bd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5828
x-amzn-requestid: 8361aeb7-1c8a-491d-b50d-59b3d6a061ab
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B5K4lGhXIAMFlFA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64138b69-7b1d2aa5075294e04d976ad9;Sampled=0
x-amzn-remapped-date: Thu, 16 Mar 2023 21:34:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: VYAI-v5_r6-RO5c5aTrA4JJnM1iRUtwDL349__B7TVNKYs_XqfiEhA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 618052a0d9c86c1a3bf663f82d041d1c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 16 Mar 2023 22:06:15 GMT
age: 54080
etag: "280fe711e384d60749c6225ddcc7f57c48845719"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F283cce37-c692-4203-ad27-597093d4e1d7.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F283cce37-c692-4203-ad27-597093d4e1d7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ab1194f894e79ce8de9c4a02925415e8
b06c689355301378aedbe12d01782debc8e2559e
1113a17eb74f317f3879f781f7b2fcb86f7e7da9ff6e18b44288f379cd5a21c2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F283cce37-c692-4203-ad27-597093d4e1d7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5906
x-amzn-requestid: 81b47546-f999-40fc-887b-1f8e3d9e49b0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Bz5_JGH2oAMF_Mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64117060-303925a47d9431f63bf5afaa;Sampled=0
x-amzn-remapped-date: Wed, 15 Mar 2023 07:14:40 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: yhJQJKgvv9AxHjr1CFyDo6t5owgihxDs9W-HLMSV2bOb32s8KFFkAw==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 2c6b5dd77f1abe60653ce0454f344b64.cloudfront.net (CloudFront), 1.1 google
date: Fri, 17 Mar 2023 01:19:03 GMT
age: 42512
etag: "b06c689355301378aedbe12d01782debc8e2559e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32661b66-c29d-4fb2-8a6d-e8d32af65c0c.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32661b66-c29d-4fb2-8a6d-e8d32af65c0c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b237b4b09287ed50ed4b41b5a4bfb339
5114fb56e5d9847562d2c493dbe684ee1057ffba
a78555499f140649e47a5c0a561f36a8002abbceb2ab13189e91faefa6dd298c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32661b66-c29d-4fb2-8a6d-e8d32af65c0c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6291
x-amzn-requestid: 55afe02a-821a-48a1-ab71-77d42ae4adf8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B3lUdFqIoAMFQqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6412e8e9-7f5e230e44eac3b31e963b38;Sampled=0
x-amzn-remapped-date: Thu, 16 Mar 2023 10:01:13 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 7OQVogzC2etvZVgTCnc4vf3SnOuKRE0ouTzDK-vWZlzExAraw_Bwhg==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 6af3b573d8970d5db2a4d03354335b84.cloudfront.net (CloudFront), 1.1 google
date: Thu, 16 Mar 2023 13:50:51 GMT
age: 83804
etag: "5114fb56e5d9847562d2c493dbe684ee1057ffba"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f5f52b7ab836a10fb5580620e5e1f108
b7ef522ff7254401f8fae6129e0f72a0cde84228
da28bb1e9f7b31f01bfbc792d7afcd59108940deef28e123d1b501d7fe807646
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA28BB1E9F7B31F01BFBC792D7AFCD59108940DEEF28E123D1B501D7FE807646"
Last-Modified: Wed, 15 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2920
Expires: Fri, 17 Mar 2023 13:56:15 GMT
Date: Fri, 17 Mar 2023 13:07:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3dd4ad57d6af6020d734710b9bb0a399
11a6796eb96ab8410064b429d35ef53ccf2248fb
f469cd52890bb9d149b3569f05f217bb5d23d5075caa937484284b6976053628
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F469CD52890BB9D149B3569F05F217BB5D23D5075CAA937484284B6976053628"
Last-Modified: Fri, 17 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9075
Expires: Fri, 17 Mar 2023 15:38:50 GMT
Date: Fri, 17 Mar 2023 13:07:35 GMT
Connection: keep-alive
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?ctsa=mr&CtsSyncId=1994FB18F3294A1FB99BA242EFF323E6&RedC=c.clarity.ms&MXFR=37B3CB77D57B68540E37D9A0D17B66A4
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=37B3CB77D57B68540E37D9A0D17B66A4; domain=.clarity.ms; expires=Wed, 10-Apr-2024 13:07:35 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Fri, 17 Mar 2023 13:07:35 GMT
content-length: 0
X-Firefox-Spdy: h2
in.visitors.live/socket.io/?EIO=3&transport=websocket
101 Switching Protocols 0 B URL HTTP/1.1 in.visitors.live/socket.io/?EIO=3&transport=websocket
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=3&transport=websocket HTTP/1.1
Host: in.visitors.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: http://www.kbscorporate.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: BowEWFgFhIGrv8iGPffxRg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Upgrade: websocket
Connection: Upgrade
Sec-WebSocket-Accept: ivSw4Frqi3F7BYLZy+sq1yVe5Bc=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
Date: Fri, 17 Mar 2023 13:07:35 GMT
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 75c246f740816b6276ba352d536b5b75
b9470c629960a0718a4fcb8ee0c4d175f17fb2e4
8c51a3937b4e810d856be2129623a4c266da7b7ef2832e41202f8ea0045bbb75
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 17 Mar 2023 13:07:35 GMT
Last-Modified: Fri, 17 Mar 2023 12:17:27 GMT
Server: ECAcc (bsa/EA9D)
X-Cache: Miss from cloudfront
Via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: lEcGvBmhh768CdLNp4v2MaBwIObDteLLRLPwA5P0Sn2XWkxMKVOrHg==
Age: 3008
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f5f52b7ab836a10fb5580620e5e1f108
b7ef522ff7254401f8fae6129e0f72a0cde84228
da28bb1e9f7b31f01bfbc792d7afcd59108940deef28e123d1b501d7fe807646
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA28BB1E9F7B31F01BFBC792D7AFCD59108940DEEF28E123D1B501D7FE807646"
Last-Modified: Wed, 15 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2920
Expires: Fri, 17 Mar 2023 13:56:15 GMT
Date: Fri, 17 Mar 2023 13:07:35 GMT
Connection: keep-alive
c.bing.com/c.gif?ctsa=mr&CtsSyncId=1994FB18F3294A1FB99BA242EFF323E6&RedC=c.clarity.ms&MXFR=37B3CB77D57B68540E37D9A0D17B66A4
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?ctsa=mr&CtsSyncId=1994FB18F3294A1FB99BA242EFF323E6&RedC=c.clarity.ms&MXFR=37B3CB77D57B68540E37D9A0D17B66A4
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?ctsa=mr&CtsSyncId=1994FB18F3294A1FB99BA242EFF323E6&RedC=c.clarity.ms&MXFR=37B3CB77D57B68540E37D9A0D17B66A4 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.kbscorporate.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?ctsa=mr&CtsSyncId=1994FB18F3294A1FB99BA242EFF323E6&MUID=37381C6F4EAD630A024A0EB84F5862E3
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: MUID=37381C6F4EAD630A024A0EB84F5862E3; domain=.bing.com; expires=Wed, 10-Apr-2024 13:07:35 GMT; path=/; SameSite=None; Secure; Priority=High;
MR=0; domain=c.bing.com; expires=Fri, 24-Mar-2023 13:07:35 GMT; path=/; SameSite=None; Secure;
SRM_B=37381C6F4EAD630A024A0EB84F5862E3; domain=c.bing.com; expires=Wed, 10-Apr-2024 13:07:35 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 4A0EF1BF6DCE42FAB7F090EA4EE5DE08 Ref B: OSL30EDGE0519 Ref C: 2023-03-17T13:07:35Z
date: Fri, 17 Mar 2023 13:07:34 GMT
content-length: 0
X-Firefox-Spdy: h2
realtime.luckyorange.com/mqtt
101 Switching Protocols 0 B URL HTTP/1.1 realtime.luckyorange.com/mqtt
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mqtt HTTP/1.1
Host: realtime.luckyorange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: http://www.kbscorporate.com
Sec-WebSocket-Protocol: mqtt
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: QqCuotJe49lAaIkG/AcyFw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
connection: Upgrade
date: Fri, 17 Mar 2023 13:07:34 GMT
sec-websocket-accept: DAw+kVxRCVLlrkYTTmDsCw+RUi0=
sec-websocket-protocol: mqtt
server: Cowboy
upgrade: websocket
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
c.clarity.ms/c.gif?ctsa=mr&CtsSyncId=1994FB18F3294A1FB99BA242EFF323E6&MUID=37381C6F4EAD630A024A0EB84F5862E3
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?ctsa=mr&CtsSyncId=1994FB18F3294A1FB99BA242EFF323E6&MUID=37381C6F4EAD630A024A0EB84F5862E3
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?ctsa=mr&CtsSyncId=1994FB18F3294A1FB99BA242EFF323E6&MUID=37381C6F4EAD630A024A0EB84F5862E3 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.kbscorporate.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Thu, 16 Mar 2023 17:16:22 GMT
accept-ranges: bytes
etag: "c4b6d572b58d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Fri, 17-Mar-2023 13:17:35 GMT; path=/; SameSite=None; Secure;
date: Fri, 17 Mar 2023 13:07:35 GMT
content-length: 42
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3dd4ad57d6af6020d734710b9bb0a399
11a6796eb96ab8410064b429d35ef53ccf2248fb
f469cd52890bb9d149b3569f05f217bb5d23d5075caa937484284b6976053628
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F469CD52890BB9D149B3569F05F217BB5D23D5075CAA937484284B6976053628"
Last-Modified: Fri, 17 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9075
Expires: Fri, 17 Mar 2023 15:38:50 GMT
Date: Fri, 17 Mar 2023 13:07:35 GMT
Connection: keep-alive
oneocsp.microsoft.com/ocsp
200 OK 1.8 kB URL HTTP/1.1 oneocsp.microsoft.com/ocsp
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 9d71cb7b76d14292ae1ad3c6bc1d593a
1f4308dad5e86779fcecfce22b7d9f2996665118
997203fe3d6ac8a46241e099150edadc1255a2b3b08da59d22aab74f9a62900d
POST /ocsp HTTP/1.1
Host: oneocsp.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=86400
Content-Length: 1777
Content-Type: application/ocsp-response
Expires: Wed, 22 Mar 2023 15:50:16 GMT
Last-Modified: Thu, 16 Mar 2023 21:08:22 GMT
ETag: "997203fe3d6ac8a46241e099150edadc1255a2b3b08da59d22aab74f9a62900d"
X-Powered-By: ASP.NET
x-content-type-options: nosniff
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: 3C9E6A0353AC488DA8FD06EF09CFEC8A Ref B: OSL30EDGE0414 Ref C: 2023-03-17T13:07:35Z
Date: Fri, 17 Mar 2023 13:07:34 GMT
idx.liadm.com/idex/unknown/any?gdpr=1&n3pc=1
200 OK 54 B URL HTTP/2 idx.liadm.com/idex/unknown/any?gdpr=1&n3pc=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 204147c43b9ca73417daac6c91946ba8
9d8ea0f151cfeac6dcaa763059170f1aa8dbd8b2
e0b4a608812bc5feee01f2aad6d7c3d55ecb5c7ff8e628b819aaae613c1dd7d4
GET /idex/unknown/any?gdpr=1&n3pc=1 HTTP/1.1
Host: idx.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.kbscorporate.com
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 17 Mar 2023 13:07:35 GMT
content-type: application/json
content-length: 54
trace-id: 904bef4284172889
vary: Origin
expires: Sat, 18 Mar 2023 13:07:35 GMT
request-time: 20
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: http://www.kbscorporate.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
secure.leadforensics.com/apollo/capture?trk_culid=01GVQTXGRFJZ0ZY3HF8ZEX20TR&trk_user=13616&trk_lfuuid=NA&liuid=uGD89Z1lMMOjWLxpcFtCBQj1fsXUx8xZWb8JEA
200 OK 0 B URL HTTP/1.1 secure.leadforensics.com/apollo/capture?trk_culid=01GVQTXGRFJZ0ZY3HF8ZEX20TR&trk_user=13616&trk_lfuuid=NA&liuid=uGD89Z1lMMOjWLxpcFtCBQj1fsXUx8xZWb8JEA
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /apollo/capture?trk_culid=01GVQTXGRFJZ0ZY3HF8ZEX20TR&trk_user=13616&trk_lfuuid=NA&liuid=uGD89Z1lMMOjWLxpcFtCBQj1fsXUx8xZWb8JEA HTTP/1.1
Host: secure.leadforensics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Kestrel
Date: Fri, 17 Mar 2023 13:07:35 GMT
Content-Length: 0
tools.luckyorange.com/core/frame.js?v=cd79b92
200 OK 18 kB URL HTTP/2 tools.luckyorange.com/core/frame.js?v=cd79b92
IP
File type Unicode text, UTF-8 text, with very long lines (34288), with NEL line terminators
Hash 8f3d870266a53f7be34fa3c5a388531e
91a51a0647c98c36782cf5f6fbf01aca6e8eafe4
e0f8655e89a017b672391102e66154c6c7d4b8e0373bec5a95d6ebbd4e55d837
GET /core/frame.js?v=cd79b92 HTTP/1.1
Host: tools.luckyorange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.kbscorporate.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 18395
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
last-modified: Tue, 07 Mar 2023 18:48:11 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Fri, 17 Mar 2023 13:07:36 GMT
cache-control: max-age=3600
etag: "8f3d870266a53f7be34fa3c5a388531e"
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: RefreshHit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UGlzT0W8-vtb7rzQcRs98rArwQnwEuKaA06LDIKyBAULJHUHn35Ktg==
X-Firefox-Spdy: h2
y.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: y.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1382
Origin: http://www.kbscorporate.com
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 17 Mar 2023 13:07:35 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://www.kbscorporate.com
Vary: Origin
Request-Context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0
y.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: y.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 77993
Origin: http://www.kbscorporate.com
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 17 Mar 2023 13:07:35 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://www.kbscorporate.com
Vary: Origin
Request-Context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0
y.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: y.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 521
Origin: http://www.kbscorporate.com
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 17 Mar 2023 13:07:37 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://www.kbscorporate.com
Vary: Origin
Request-Context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0
settings.luckyorange.com/306774bb
200 OK 0 B URL HTTP/2 settings.luckyorange.com/306774bb
IP
GET /306774bb HTTP/1.1
Host: settings.luckyorange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.kbscorporate.com/
x-lucky-uid: undefined
x-lucky-referrer:
Origin: http://www.kbscorporate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: http://www.kbscorporate.com
access-control-allow-credentials: true
content-type: application/json; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 17 Mar 2023 13:07:34 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.kbscorporate.com/wp-json/contact-form-7/v1/contact-forms/57/feedback/schema
200 OK 0 B URL HTTP/2 www.kbscorporate.com/wp-json/contact-form-7/v1/contact-forms/57/feedback/schema
IP
ASN #205072 Layershift Limited
GET /wp-json/contact-form-7/v1/contact-forms/57/feedback/schema HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, */*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.kbscorporate.com/
Origin: http://www.kbscorporate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:34 GMT
content-type: application/json; charset=UTF-8
x-robots-tag: noindex
link: <https://www.kbscorporate.com/wp-json/>; rel="https://api.w.org/"
x-content-type-options: nosniff
access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link
access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
allow: GET
access-control-allow-origin: http://www.kbscorporate.com
access-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE
access-control-allow-credentials: true
vary: Accept-Encoding, Origin
set-cookie: utm_source=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
utm_medium=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
gclid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
handl_original_ref=http%3A%2F%2Fwww.kbscorporate.com%2F; expires=Sun, 16-Apr-2023 13:07:33 GMT; Max-Age=2592000; path=/; domain=.kbscorporate.com
handl_landing_page=https%3A%2F%2Fwww.kbscorporate.com%2Fwp-json%2Fcontact-form-7%2Fv1%2Fcontact-forms%2F57%2Ffeedback%2Fschema; expires=Sun, 16-Apr-2023 13:07:33 GMT; Max-Age=2592000; path=/; domain=.kbscorporate.com
handl_ip=91.90.42.154; expires=Sun, 16-Apr-2023 13:07:33 GMT; Max-Age=2592000; path=/; domain=.kbscorporate.com
handl_ref=http%3A%2F%2Fwww.kbscorporate.com%2F; expires=Sun, 16-Apr-2023 13:07:33 GMT; Max-Age=2592000; path=/; domain=.kbscorporate.com
handl_url=https%3A%2F%2Fwww.kbscorporate.com%2Fwp-json%2Fcontact-form-7%2Fv1%2Fcontact-forms%2F57%2Ffeedback%2Fschema; expires=Sun, 16-Apr-2023 13:07:33 GMT; Max-Age=2592000; path=/; domain=.kbscorporate.com
email=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
username=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
x-powered-by: PHP/7.4.33, PleskLin
content-encoding: gzip
X-Firefox-Spdy: h2
www.clarity.ms/tag/uet/23006786
200 OK 0 B URL HTTP/2 www.clarity.ms/tag/uet/23006786
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /tag/uet/23006786 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=cbacb0528186424080071c97fbefa363.20230317.20240316; expires=Sat, 16 Mar 2024 13:07:34 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:3f60b293-70d6-4805-b0bb-3484f0a73bf0
x-cache: CONFIG_NOCACHE
x-azure-ref: 0FmYUZAAAAAAb5Uti6jpPSalgC1drcNiDU1ZHMjBFREdFMDYxMgA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Fri, 17 Mar 2023 13:07:34 GMT
X-Firefox-Spdy: h2
www.kbscorporate.com/wp-content/uploads/2019/04/logo.svg
200 OK 0 B URL HTTP/2 www.kbscorporate.com/wp-content/uploads/2019/04/logo.svg
IP
ASN #205072 Layershift Limited
GET /wp-content/uploads/2019/04/logo.svg HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:33 GMT
content-type: image/svg+xml
last-modified: Thu, 07 Nov 2019 16:05:00 GMT
vary: Accept-Encoding
etag: W/"5dc440ac-59b1"
x-powered-by: PleskLin
content-encoding: gzip
X-Firefox-Spdy: h2
www.kbscorporate.com/wp-json/contact-form-7/v1/contact-forms/9776/feedback/schema
200 OK 0 B URL HTTP/2 www.kbscorporate.com/wp-json/contact-form-7/v1/contact-forms/9776/feedback/schema
IP
ASN #205072 Layershift Limited
GET /wp-json/contact-form-7/v1/contact-forms/9776/feedback/schema HTTP/1.1
Host: www.kbscorporate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, */*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.kbscorporate.com/
Origin: http://www.kbscorporate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 13:07:34 GMT
content-type: application/json; charset=UTF-8
x-robots-tag: noindex
link: <https://www.kbscorporate.com/wp-json/>; rel="https://api.w.org/"
x-content-type-options: nosniff
access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link
access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
allow: GET
access-control-allow-origin: http://www.kbscorporate.com
access-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE
access-control-allow-credentials: true
vary: Accept-Encoding, Origin
set-cookie: utm_source=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
utm_medium=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
gclid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
handl_original_ref=http%3A%2F%2Fwww.kbscorporate.com%2F; expires=Sun, 16-Apr-2023 13:07:33 GMT; Max-Age=2592000; path=/; domain=.kbscorporate.com
handl_landing_page=https%3A%2F%2Fwww.kbscorporate.com%2Fwp-json%2Fcontact-form-7%2Fv1%2Fcontact-forms%2F9776%2Ffeedback%2Fschema; expires=Sun, 16-Apr-2023 13:07:33 GMT; Max-Age=2592000; path=/; domain=.kbscorporate.com
handl_ip=91.90.42.154; expires=Sun, 16-Apr-2023 13:07:33 GMT; Max-Age=2592000; path=/; domain=.kbscorporate.com
handl_ref=http%3A%2F%2Fwww.kbscorporate.com%2F; expires=Sun, 16-Apr-2023 13:07:33 GMT; Max-Age=2592000; path=/; domain=.kbscorporate.com
handl_url=https%3A%2F%2Fwww.kbscorporate.com%2Fwp-json%2Fcontact-form-7%2Fv1%2Fcontact-forms%2F9776%2Ffeedback%2Fschema; expires=Sun, 16-Apr-2023 13:07:33 GMT; Max-Age=2592000; path=/; domain=.kbscorporate.com
email=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
username=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.kbscorporate.com
x-powered-by: PHP/7.4.33, PleskLin
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/3953946/domain/kbscorporate.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/3953946/domain/kbscorporate.com/token
IP
GET /partner/3953946/domain/kbscorporate.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.kbscorporate.com
Connection: keep-alive
Referer: http://www.kbscorporate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
date: Fri, 17 Mar 2023 12:39:10 GMT
access-control-allow-origin: *
cache-control: public, max-age=34269
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rAbLlkTr8yTRWe-ebUryAyYQawKQP1xWHNt41tGlsd1HnPhdj8xcGg==
age: 1704
X-Firefox-Spdy: h2
tools.luckyorange.com/integrations/integration-google-analytics/core/main.js
200 OK 0 B URL HTTP/2 tools.luckyorange.com/integrations/integration-google-analytics/core/main.js
IP
GET /integrations/integration-google-analytics/core/main.js HTTP/1.1
Host: tools.luckyorange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.kbscorporate.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
last-modified: Tue, 04 Oct 2022 15:58:40 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 17 Mar 2023 13:07:36 GMT
cache-control: max-age=3600
etag: W/"d5f2e05ec9c195c0b9e68b3415a25fc7"
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: RefreshHit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GkNCSG7Ea8lLPfFqx8QiCKv4Vf6Ams_NAGaWlXutrnKxCOVzEoQmsg==
X-Firefox-Spdy: h2
87.239.23.160
34.160.144.191
23.36.76.210
0.0.0.0