| krestonmenon.com/giovanni-volkman/LiamSmith-22.zip |  172.67.175.12 | 301 Moved Permanently | 0 B |
URL HTTP/1.1krestonmenon.com/giovanni-volkman/LiamSmith-22.zip IP172.67.175.12:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /giovanni-volkman/LiamSmith-22.zip HTTP/1.1
Host: krestonmenon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 01 Feb 2023 08:58:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 01 Feb 2023 09:58:12 GMT
Location: https://www.krestonmenon.com
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FCsx67gn%2BDAchI1OegRymiNCk8Iwzu9ZIPK%2FZkHFFVwVRLKh9UsrEHpI4OJwz4%2FK5Rq1xIvDeHL8ggwtjCTrDCQsHhEYqfuE2xGIcIKuqzhinL1kGZk%2BusjVorVbASoZVH%2BA"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79297be47ff5b4f9-OSL
alt-svc: h2=":443"; ma=60
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7e05c8461bd2dc5a149f71e2c465ea29 705983959c887e243cb55a8a1796757b579ee977 4d9ea085d5dda9dabed11af9847c2b0aa6182358673b356a4e2bd631e22a9922
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4D9EA085D5DDA9DABED11AF9847C2B0AA6182358673B356A4E2BD631E22A9922"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14245
Expires: Wed, 01 Feb 2023 12:55:37 GMT
Date: Wed, 01 Feb 2023 08:58:12 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash62de35a6c8e4efd7633fc5236b5b086f 6a92912a86dfcd0330d040cef06bef36889c76ab ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5284
Expires: Wed, 01 Feb 2023 10:26:16 GMT
Date: Wed, 01 Feb 2023 08:58:12 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashff250d3ef3fa45322bf05039a0122a9f b3e7a2c383bce1bab807dbe1a03c375258b51f1d d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 01 Feb 2023 08:43:25 GMT
content-type: application/json
age: 887
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash09ee4b0fe6cf4ca5ed31b24452338d00 7e62b6e20f0d4737f4a8d94f9818a0883027839e 56da08e18a408d7313de4e598984a251a0ecf85bbba98b421be9aebeb98835af
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56DA08E18A408D7313DE4E598984A251A0ECF85BBBA98B421BE9AEBEB98835AF"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10076
Expires: Wed, 01 Feb 2023 11:46:08 GMT
Date: Wed, 01 Feb 2023 08:58:12 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: AA2FK7NUuVOJ3VBaY/SKLMD/CdiRinmA/OEFrOrNGY0xuCEYog/a84UCk41pqkEVKCPTnRZ3gRbk0xwxS0BfVw==
x-amz-request-id: 0DKYHQWWXJAENC11
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 01 Feb 2023 08:51:30 GMT
age: 402
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:12 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash0dea93a9adb1e26a6ebfaf2e12c22cd5 e286810b718e374858f11adf0aae18dc65f27d66 73dafa5cd629cdf850ca05894932507c209713024ef27ce7597cb25365f2150e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 08:58:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashc004ef398fc2138876eac9e202e6e7c9 9b695108fe043113ee8dc3369be58234f1a73323 ab71d4c6d64f3c7a0114070414615b26843c22de34b0f04c9ad932ca112031c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 08:58:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.googletagmanager.com/gtag/js?id=G-CJ5ES6P8YX | 142.250.74.40 | 200 OK | 80 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=G-CJ5ES6P8YX IP142.250.74.40:0
File typeASCII text, with very long lines (25680) Hash86988ce3d12319ed768682a267f92187 5d13098c38ca84b209f3e746050a9e158dbe693d 93d20692f4d11e65793542ed1b8cb8ceb9736aa946aa833e8e10c1f27784dd0b
GET /gtag/js?id=G-CJ5ES6P8YX HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 01 Feb 2023 08:58:13 GMT
expires: Wed, 01 Feb 2023 08:58:13 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79883
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 727 B |
IP93.184.220.29:0
Hashe049ecf355134c0c80c73e245ba110a0 58a19b51b379e63f9aee4f4acc57635813bb7d73 985bbf7741679f3ab306af09a5f7037b03cc5786349f85cbaa3f7cf6675200b9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 8
Cache-Control: max-age=170429
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 08:58:13 GMT
Etag: "63da205a-2d7"
Expires: Fri, 03 Feb 2023 08:18:42 GMT
Last-Modified: Wed, 01 Feb 2023 08:18:34 GMT
Server: ECS (amb/6BB7)
X-Cache: HIT
Content-Length: 727
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 727 B |
IP93.184.220.29:0
Hashe049ecf355134c0c80c73e245ba110a0 58a19b51b379e63f9aee4f4acc57635813bb7d73 985bbf7741679f3ab306af09a5f7037b03cc5786349f85cbaa3f7cf6675200b9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 8
Cache-Control: max-age=170429
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 08:58:13 GMT
Etag: "63da205a-2d7"
Expires: Fri, 03 Feb 2023 08:18:42 GMT
Last-Modified: Wed, 01 Feb 2023 08:18:34 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 727
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 727 B |
IP93.184.220.29:0
Hashe049ecf355134c0c80c73e245ba110a0 58a19b51b379e63f9aee4f4acc57635813bb7d73 985bbf7741679f3ab306af09a5f7037b03cc5786349f85cbaa3f7cf6675200b9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 8
Cache-Control: max-age=170429
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 08:58:13 GMT
Etag: "63da205a-2d7"
Expires: Fri, 03 Feb 2023 08:18:42 GMT
Last-Modified: Wed, 01 Feb 2023 08:18:34 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 727
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 727 B |
IP93.184.220.29:0
Hashe049ecf355134c0c80c73e245ba110a0 58a19b51b379e63f9aee4f4acc57635813bb7d73 985bbf7741679f3ab306af09a5f7037b03cc5786349f85cbaa3f7cf6675200b9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 60
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 08:58:13 GMT
Last-Modified: Wed, 01 Feb 2023 08:57:13 GMT
Server: ECS (amb/6B7B)
X-Cache: HIT
Content-Length: 727
|
|
| www.googletagmanager.com/gtag/js?id=UA-150765594-1 | 142.250.74.40 | 200 OK | 45 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=UA-150765594-1 IP142.250.74.40:0
File typeASCII text, with very long lines (1759) Hash1f1f61503d24b66154468dbf4022dbed 453fc74e8093c17b864719d1b54902cf4d2f383b 8361c1c2f20f589a78149c4672dce32a7f49e758f592142e232ec2963013e5db
GET /gtag/js?id=UA-150765594-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 01 Feb 2023 08:58:13 GMT
expires: Wed, 01 Feb 2023 08:58:13 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44981
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash0dea93a9adb1e26a6ebfaf2e12c22cd5 e286810b718e374858f11adf0aae18dc65f27d66 73dafa5cd629cdf850ca05894932507c209713024ef27ce7597cb25365f2150e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 08:58:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash22b9916fc1fafc9bdc9bb37f9eac8a9a 86f640e134a741a0f906a8e3a0f5c6659dd0e394 a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7468
Expires: Wed, 01 Feb 2023 11:02:41 GMT
Date: Wed, 01 Feb 2023 08:58:13 GMT
Connection: keep-alive
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashc004ef398fc2138876eac9e202e6e7c9 9b695108fe043113ee8dc3369be58234f1a73323 ab71d4c6d64f3c7a0114070414615b26843c22de34b0f04c9ad932ca112031c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 08:58:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 01 Feb 2023 08:41:42 GMT
age: 991
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash789b41f1f8027d4275a66ac9cb2f124d c5eff6750f9a50fc52a7a6ec6e30a7afaf28fc79 e053b0b29fc44721473ed39ddfe41064f09b56b3531c765228fa322d599e770f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 08:58:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/css/home-banner-menu-icons/ifrs-advisory.png |  139.162.154.220 | 200 OK | 1.0 kB |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/css/home-banner-menu-icons/ifrs-advisory.png IP139.162.154.220:0
File typePNG image data, 37 x 37, 8-bit colormap, non-interlaced\012- data Hash074a56cf122409487017291a3814286a af7c2b3a579e04f3f027c903ac2e25dd41288266 15bd7c70c94faae10f46e79254948a1e62ca815a4f0bb67d679ecfe6213e4ad5
GET /wp-content/themes/divi-child/css/home-banner-menu-icons/ifrs-advisory.png HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: image/png
last-modified: Thu, 01 Jul 2021 15:12:33 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 168000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lysajhtz9BCbSgkF%2FPAvZ6z%2F4ffePBnTTVpGf57eFkaao%2FMDxMFBIizVQrbjW3jAU8LfUiZwZ4RKrUBZsoNFs53BwMTgu3ttnLGCzgAwYeuWITkhTSYXua7dOY8o%2BOI0iAd1stRcZw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79281eaf3bb921a5-DUS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: HIT
pragma: public
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash789b41f1f8027d4275a66ac9cb2f124d c5eff6750f9a50fc52a7a6ec6e30a7afaf28fc79 e053b0b29fc44721473ed39ddfe41064f09b56b3531c765228fa322d599e770f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 08:58:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi/core/admin/fonts/modules/all/modules.ttf | 139.162.154.220 | 200 OK | 38 kB |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi/core/admin/fonts/modules/all/modules.ttf IP139.162.154.220:0
File typeTrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, modules \012- data Hashbc17b36c75ba53be124af8a50d73d8d1 3620dc029c70b29a3c61a34d8a77b891b5f77cc9 aa7878baad73a77539d25867ded6c3dc00d77962d7f7001deb08e59035de36fd
GET /wp-content/themes/divi/core/admin/fonts/modules/all/modules.ttf HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.krestonmenon.com
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: font/ttf
last-modified: Tue, 24 May 2022 08:06:31 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 127225
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jj55Hu5ahtpDR6c8dp4yy2LajKvD8P%2B%2BEQ2xv6auaMLSgfJVmPLiYbfA5PmSzuYzvq7onsJlrNqpwdpRJKdJlSM6p5cFA%2FQiEzLoSjgA%2F4cjAjq6EPrHTFa%2Fp8QX3XHgkpSdK00uFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79281eaf3e007264-HAM
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: HIT
pragma: public
X-Firefox-Spdy: h2
|
|
| c0.wp.com/c/6.1.1/wp-includes/js/jquery/jquery-migrate.min.js | 192.0.77.37 | 200 OK | 50 kB |
URL HTTP/2c0.wp.com/c/6.1.1/wp-includes/js/jquery/jquery-migrate.min.js IP192.0.77.37:0
File typeASCII text, with very long lines (11126) Hash50e8d168a47f55f586730d9671384c93 a183c0664c5e4453e465b62c1bb1cc3942446c84 1be58d1855ea339f3229adb41b60bbedf357f3164787b83c7102fe78637ce32a
GET /c/6.1.1/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
content-encoding: br
expires: Thu, 01 Feb 2024 08:58:13 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| c0.wp.com/p/jetpack/11.3/_inc/build/carousel/jetpack-carousel.min.js | 192.0.77.37 | 200 OK | 52 kB |
URL HTTP/2c0.wp.com/p/jetpack/11.3/_inc/build/carousel/jetpack-carousel.min.js IP192.0.77.37:0
File typeASCII text, with very long lines (24378), with no line terminators Hash70176e1676113527ff3a911429742ede 72aaef4287f72d15691701cfe0892bc234cce315 6b487ebe9b11eeeeff68429a65f6b49595f259d66088784258da81c876f9ed84
GET /p/jetpack/11.3/_inc/build/carousel/jetpack-carousel.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 06 Sep 2022 17:22:56 GMT
content-encoding: br
expires: Thu, 01 Feb 2024 08:58:13 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 | 142.250.74.35 | 200 OK | 48 kB |
URL HTTP/2fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 47952, version 1.0\012- data Hash17b406b7b8caa297435fa358e194f5a1 e2132f0e97781af56fa966c0fabb49132f2af203 84161c46238fff2c6920ebc28f02cddd7b710cf3d1107853f540b084320f6afd
GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.krestonmenon.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47952
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 09:41:19 GMT
expires: Wed, 31 Jan 2024 09:41:19 GMT
cache-control: public, max-age=31536000
age: 83814
last-modified: Mon, 15 Aug 2022 18:22:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 727 B |
IP93.184.220.29:0
Hashe049ecf355134c0c80c73e245ba110a0 58a19b51b379e63f9aee4f4acc57635813bb7d73 985bbf7741679f3ab306af09a5f7037b03cc5786349f85cbaa3f7cf6675200b9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 08:58:13 GMT
Server: ECS (amb/6B7C)
Content-Length: 727
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash789b41f1f8027d4275a66ac9cb2f124d c5eff6750f9a50fc52a7a6ec6e30a7afaf28fc79 e053b0b29fc44721473ed39ddfe41064f09b56b3531c765228fa322d599e770f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 08:58:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| push.services.mozilla.com/ | 52.38.227.80 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.38.227.80:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 1b48tHEBVVQSxiIAKn92ow==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Kc8VwniIK+LZjQEq2NKdyPp0zeM=
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/schema-and-structured-data-for-wp/modules/divi-builder/styles/style.min-1.0.0.css | 139.162.154.220 | 200 OK | 35 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/schema-and-structured-data-for-wp/modules/divi-builder/styles/style.min-1.0.0.css IP139.162.154.220:0
File typeASCII text, with no line terminators Hashd77b75a4ea4cfbbbb3ed5077fbc3b10d 81c16c7d5a47565171134ce565923673522744be 4ccc27337cb5e80e6509daacc7b8d18b77c26bcfe3443722ec5ecc468d8da172
GET /wp-content/cache/busting/1/wp-content/plugins/schema-and-structured-data-for-wp/modules/divi-builder/styles/style.min-1.0.0.css HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: text/css; charset=utf-8
content-length: 35
last-modified: Mon, 21 Nov 2022 12:07:57 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l%2Be5TEEIhtskFVyZso2ZbBOggpFkqwWXTRIe0KTNAqBpUPgzWf0cziG0jMOwqOJh6aDdaz8NKdqwWf0R30bCh%2BK32rZQdWQ6V63JRKWiLUrdm2zc4MIcEhNwSU84mpNYGbLVQPVjaXO0ikF9SySihyI2dw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 79297beb6c6d1bd5-MUC
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| i0.wp.com/www.krestonmenon.com/wp-content/uploads/2022/08/New-site-slides-2022-07.png?w=1026&ssl=1 | 192.0.77.2 | 200 OK | 54 kB |
URL HTTP/2i0.wp.com/www.krestonmenon.com/wp-content/uploads/2022/08/New-site-slides-2022-07.png?w=1026&ssl=1 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1026x640, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash08ebbca7d42a2883510b63686bf77d2f 411bc373459ca00f2fe97c00084d38ac4227c93d 19921dc11824874019379e249182007a78853e71ffc94ee791efbdb43691e611
GET /www.krestonmenon.com/wp-content/uploads/2022/08/New-site-slides-2022-07.png?w=1026&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:14 GMT
content-type: image/webp
content-length: 54402
last-modified: Thu, 26 Jan 2023 07:10:40 GMT
expires: Sat, 25 Jan 2025 19:10:40 GMT
cache-control: public, max-age=63115200
link: <https://www.krestonmenon.com/wp-content/uploads/2022/08/New-site-slides-2022-07.png>; rel="canonical"
x-content-type-options: nosniff
etag: "9137267f4359ad25"
vary: Accept
x-nc: HIT arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| i0.wp.com/ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/logo-side-banner-slides.png?resize=300%2C147&ssl=1 | 192.0.77.2 | 200 OK | 11 kB |
URL HTTP/2i0.wp.com/ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/logo-side-banner-slides.png?resize=300%2C147&ssl=1 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image\012- data Hashb80e66a8c6bba3ce17ba8d435a5b65ba 414a125f27fa1265beb41612b3a8174ee3ac8a58 59d24d139d9239d882f0abcd5b199e591e26fef99f358a32c3e15b0cf6edc23b
GET /ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/logo-side-banner-slides.png?resize=300%2C147&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:14 GMT
content-type: image/webp
content-length: 11156
last-modified: Tue, 17 Jan 2023 08:40:53 GMT
expires: Thu, 16 Jan 2025 20:40:53 GMT
cache-control: public, max-age=63115200
link: <https://ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/logo-side-banner-slides.png>; rel="canonical"
x-content-type-options: nosniff
etag: "943f935d13539670"
vary: Accept
x-nc: HIT arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| region1.google-analytics.com/g/collect?v=2&tid=G-CJ5ES6P8YX>m=2oe1u0&_p=271020885&gdid=dZGIzZG&cid=1385836552.1675241914&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675241914&sct=1&seg=0&dl=https%3A%2F%2Fwww.krestonmenon.com%2F&dt=Business%20Advisory%20%26%20Consulting%20Firm%20in%20dubai%2C%20Abu%20Dhabi%2C%20Sharjah%20-%20Kreston%20Menon&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.forceSSL=true&ep.link_attribution=true | 216.239.34.36 | 204 No Content | 0 B |
URL HTTP/2region1.google-analytics.com/g/collect?v=2&tid=G-CJ5ES6P8YX>m=2oe1u0&_p=271020885&gdid=dZGIzZG&cid=1385836552.1675241914&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675241914&sct=1&seg=0&dl=https%3A%2F%2Fwww.krestonmenon.com%2F&dt=Business%20Advisory%20%26%20Consulting%20Firm%20in%20dubai%2C%20Abu%20Dhabi%2C%20Sharjah%20-%20Kreston%20Menon&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.forceSSL=true&ep.link_attribution=true IP216.239.34.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-CJ5ES6P8YX>m=2oe1u0&_p=271020885&gdid=dZGIzZG&cid=1385836552.1675241914&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675241914&sct=1&seg=0&dl=https%3A%2F%2Fwww.krestonmenon.com%2F&dt=Business%20Advisory%20%26%20Consulting%20Firm%20in%20dubai%2C%20Abu%20Dhabi%2C%20Sharjah%20-%20Kreston%20Menon&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.forceSSL=true&ep.link_attribution=true HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.krestonmenon.com
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.krestonmenon.com
date: Wed, 01 Feb 2023 08:58:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| snap.licdn.com/li.lms-analytics/insight.min.js | 95.101.11.48 | 200 OK | 4.8 kB |
URL HTTP/2snap.licdn.com/li.lms-analytics/insight.min.js IP95.101.11.48:0 ASN#20940 Akamai International B.V.
File typeASCII text, with very long lines (13351) Hash74f72658f6efd10c4c286ab07cd5e452 9fa4dfc644b6e818914f2f2c4fe4bdf791fd6d39 6681619d5962f95b3fccfa34a7f035664edb66522d237ea0c28a05851f9d295c
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 10 Jan 2023 17:22:56 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=61376
date: Wed, 01 Feb 2023 08:58:14 GMT
content-length: 4777
x-content-type-options: nosniff
x-cdn: AKAM
X-Firefox-Spdy: h2
|
|
| i0.wp.com/www.krestonmenon.com/wp-content/uploads/2022/12/cropped-krestonmenon-icon.png?fit=32%2C32&ssl=1 | 192.0.77.2 | 200 OK | 350 B |
URL HTTP/2i0.wp.com/www.krestonmenon.com/wp-content/uploads/2022/12/cropped-krestonmenon-icon.png?fit=32%2C32&ssl=1 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 32x32, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hashc9f6764aa2fe0d02c247d7df712829a8 1e83dd625a11ee7f795f5e7a09d5d741984d26e5 534b644df8f731fc54dac73bf60161949568bf824ea08df57b6d0805aade7ec3
GET /www.krestonmenon.com/wp-content/uploads/2022/12/cropped-krestonmenon-icon.png?fit=32%2C32&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:14 GMT
content-type: image/webp
content-length: 350
last-modified: Wed, 25 Jan 2023 15:14:51 GMT
expires: Sat, 25 Jan 2025 03:14:51 GMT
cache-control: public, max-age=63115200
link: <https://www.krestonmenon.com/wp-content/uploads/2022/12/cropped-krestonmenon-icon.png>; rel="canonical"
x-content-type-options: nosniff
etag: "e16a5946ea731724"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| i0.wp.com/www.krestonmenon.com/wp-content/uploads/2022/12/cropped-krestonmenon-icon.png?fit=192%2C192&ssl=1 | 192.0.77.2 | 200 OK | 1.5 kB |
URL HTTP/2i0.wp.com/www.krestonmenon.com/wp-content/uploads/2022/12/cropped-krestonmenon-icon.png?fit=192%2C192&ssl=1 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash681e38bbe55ad6b6db277b9fc73afb8f 9ccc5682864a64f5477b4632ba3602ad7b50971d 1add8663f6a1d4bd038a57b2fc85c39b11056e8c3c28fc1d38c6e9413921991f
GET /www.krestonmenon.com/wp-content/uploads/2022/12/cropped-krestonmenon-icon.png?fit=192%2C192&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:14 GMT
content-type: image/webp
content-length: 1512
last-modified: Sat, 28 Jan 2023 19:19:46 GMT
expires: Tue, 28 Jan 2025 07:19:46 GMT
cache-control: public, max-age=63115200
link: <https://www.krestonmenon.com/wp-content/uploads/2022/12/cropped-krestonmenon-icon.png>; rel="canonical"
x-content-type-options: nosniff
etag: "7100fdaa5f48b305"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| px.ads.linkedin.com/collect?v=2&fmt=js&pid=4460473&time=1675241915267&url=https%3A%2F%2Fwww.krestonmenon.com%2F | 13.107.42.14 | 302 Found | 0 B |
URL HTTP/2px.ads.linkedin.com/collect?v=2&fmt=js&pid=4460473&time=1675241915267&url=https%3A%2F%2Fwww.krestonmenon.com%2F IP13.107.42.14:0 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=4460473&time=1675241915267&url=https%3A%2F%2Fwww.krestonmenon.com%2F HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4460473%26time%3D1675241915267%26url%3Dhttps%253A%252F%252Fwww.krestonmenon.com%252F%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQITbO4Z7-yHqgAAAYYMMrMtkgBCsJABwPU8O4WhvyJjtwAHWAWb8XkKSj6QQiVje7DoyCh7L81W4g; Max-Age=2592000; Expires=Fri, 03 Mar 2023 08:58:14 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQJihiNOE-tPWQAAAYYMMrMtKzIp9309TIBKHMaXot59xfF7_SJEm_Rr61MxMX-TMeBCtdVEdDPXe5pcY8YFhw; Max-Age=2592000; Expires=Fri, 03 Mar 2023 08:58:14 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&ca3fdcee-308b-4dfd-8503-f62ca34005e6"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 01-Feb-2024 08:58:14 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2453:u=1:x=1:i=1675241894:t=1675328294:v=2:sig=AQHPkWe1I7M36koLpZBzEclX0YOLc2iz"; Expires=Thu, 02 Feb 2023 08:58:14 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXzn6YLzvosar+tx9gUcA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 4B622850010645F2BE63B86D256A12D1 Ref B: OSL30EDGE0222 Ref C: 2023-02-01T08:58:14Z
date: Wed, 01 Feb 2023 08:58:13 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4460473%26time%3D1675241915267%26url%3Dhttps%253A%252F%252Fwww.krestonmenon.com%252F%26liSync%3Dtrue | 13.107.42.14 | 302 Found | 0 B |
URL HTTP/2www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4460473%26time%3D1675241915267%26url%3Dhttps%253A%252F%252Fwww.krestonmenon.com%252F%26liSync%3Dtrue IP13.107.42.14:0 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4460473%26time%3D1675241915267%26url%3Dhttps%253A%252F%252Fwww.krestonmenon.com%252F%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.krestonmenon.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=4460473&time=1675241915267&url=https%3A%2F%2Fwww.krestonmenon.com%2F&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&8269ce7b-191e-49cb-805a-fe8935ebd574"; Domain=.linkedin.com; Expires=Thu, 01-Feb-2024 08:58:14 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&2023020108581403f1c57f-0209-4387-84fb-f4ab7c84c38dAQElP_2SNa5BmrYQCXKFZ_FAqvadX8CQ"; Domain=.www.linkedin.com; Expires=Thu, 01-Feb-2024 08:58:14 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzUyNDE4OTQ7MjswMjESqEpDcwzaGOs+ZDVldarDn/avqoknOCd3HoyvVHWS4Q==; Domain=.linkedin.com; Expires=Mon, 31 Jul 2023 08:58:14 GMT; Path=/; Secure; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2480:u=1:x=1:i=1675241894:t=1675328294:v=2:sig=AQHb-RKLPEXyP0yfDVRY7-YCIv9KrNDR"; Expires=Thu, 02 Feb 2023 08:58:14 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXzn6YN+WMKr4Ho1EcTyA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: D3FA30CAEC57462BB57C6AE3A9A6E078 Ref B: OSL30EDGE0222 Ref C: 2023-02-01T08:58:14Z
date: Wed, 01 Feb 2023 08:58:13 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| px.ads.linkedin.com/collect?v=2&fmt=js&pid=4460473&time=1675241915267&url=https%3A%2F%2Fwww.krestonmenon.com%2F&liSync=true | 13.107.42.14 | 200 OK | 0 B |
URL HTTP/2px.ads.linkedin.com/collect?v=2&fmt=js&pid=4460473&time=1675241915267&url=https%3A%2F%2Fwww.krestonmenon.com%2F&liSync=true IP13.107.42.14:0 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=4460473&time=1675241915267&url=https%3A%2F%2Fwww.krestonmenon.com%2F&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.krestonmenon.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&0ea84ad8-d322-4251-80d0-0622dbc0599c"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 01-Feb-2024 08:58:15 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2425:u=1:x=1:i=1675241895:t=1675328295:v=2:sig=AQG940TUbo01fFmGcAkaQwAmOtHLMujB"; Expires=Thu, 02 Feb 2023 08:58:15 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXzn6YQhr6XN56uva3WBw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 21B69CA3839D451E87F066CF2B3898FC Ref B: OSL30EDGE0222 Ref C: 2023-02-01T08:58:14Z
date: Wed, 01 Feb 2023 08:58:14 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2022/04/slide-3-a.jpg | 139.162.154.220 | 200 OK | 47 kB |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2022/04/slide-3-a.jpg IP139.162.154.220:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1280, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hashee6f365b003c4f0874eea4d781e528c2 89e229bf8e94168657a6052e497917c6dba3582b 7b8b99c40f1e5c7e02723db48dbd017e0a542b370e1a91d9841e5f548cdd46d5
GET /wp-content/uploads/2022/04/slide-3-a.jpg HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:14 GMT
content-type: image/webp
vary: Accept-Encoding, Accept,Accept-Encoding
last-modified: Tue, 10 May 2022 05:36:46 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:14 GMT
cf-cache-status: HIT
age: 11238
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8vAXMu3ktecTno9khw4HEzHcSk%2Fo3n7HBNYQzqRVTwDOcuB8Z1vgx3HB5SA4NmqhYzfQJJSWOuD6j4KGvR1rW5PeOo0eaE4Z6CpaU0BI00qERFghrL4BG7EseJ5jPMbD8vD266WDjA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beedf7a7276-HAM
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
content-encoding: br
X-Firefox-Spdy: h2
|
|
| i0.wp.com/ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2021.png?fit=400%2C419&ssl=1 | 192.0.77.2 | 200 OK | 20 kB |
URL HTTP/2i0.wp.com/ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2021.png?fit=400%2C419&ssl=1 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash7b7d676c04cad6946425fcf631e2b8c6 049915ed7ece8f167db480b4a931dd296ca52047 0f7ca7bc52d3325f437999be8b06fc9e7d527ba7710b19036d5739c2ae126df5
GET /ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2021.png?fit=400%2C419&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:15 GMT
content-type: image/webp
content-length: 19756
last-modified: Thu, 29 Dec 2022 13:33:38 GMT
expires: Sun, 29 Dec 2024 01:33:38 GMT
cache-control: public, max-age=63115200
link: <https://ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2021.png>; rel="canonical"
x-content-type-options: nosniff
etag: "0129cdb88c187964"
vary: Accept
x-nc: HIT arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| i0.wp.com/ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2022/04/2022-SB.png?fit=261%2C247&ssl=1 | 192.0.77.2 | 200 OK | 26 kB |
URL HTTP/2i0.wp.com/ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2022/04/2022-SB.png?fit=261%2C247&ssl=1 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image\012- data Hashf30c205d919e0b4c66b16355cebba654 d5759b2e7f1b737c337d48de1fb35b72f85410bd 94e9a105b7fa1483e050ebd24ccca202af5ae6d74d51aaf0dc415899b65cf1d0
GET /ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2022/04/2022-SB.png?fit=261%2C247&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:15 GMT
content-type: image/webp
content-length: 26146
last-modified: Sun, 22 Jan 2023 13:01:59 GMT
expires: Wed, 22 Jan 2025 01:01:59 GMT
cache-control: public, max-age=63115200
link: <https://ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2022/04/2022-SB.png>; rel="canonical"
x-content-type-options: nosniff
etag: "8a4b422cc4e65de6"
vary: Accept
x-nc: HIT arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| i0.wp.com/ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2020.png?fit=400%2C419&ssl=1 | 192.0.77.2 | 200 OK | 20 kB |
URL HTTP/2i0.wp.com/ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2020.png?fit=400%2C419&ssl=1 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash8890801e3b9b8d75ee23a2767fc1e585 c3950924c495b8abbb71ccec37d44a8a004897db 0ea4b63474f56bd1acf8828024255be3b91ca94101e43b9ea95cc74fec752b7b
GET /ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2020.png?fit=400%2C419&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:15 GMT
content-type: image/webp
content-length: 19530
last-modified: Sun, 22 Jan 2023 13:01:59 GMT
expires: Wed, 22 Jan 2025 01:01:59 GMT
cache-control: public, max-age=63115200
link: <https://ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2020.png>; rel="canonical"
x-content-type-options: nosniff
etag: "e614f3f4baf081d5"
vary: Accept
x-nc: HIT arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| i0.wp.com/ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2019.png?fit=400%2C419&ssl=1 | 192.0.77.2 | 200 OK | 20 kB |
URL HTTP/2i0.wp.com/ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2019.png?fit=400%2C419&ssl=1 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash2085d31898555a84e4e72c909afdf328 c5d99b40a5ff03ac5975c26c990e67243d33b06f 946c6441765aeb1c5cefa0a3637b5e9a37b45984476cd7e97b538be91f44f7c2
GET /ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2019.png?fit=400%2C419&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:15 GMT
content-type: image/webp
content-length: 19916
last-modified: Sun, 22 Jan 2023 13:01:59 GMT
expires: Wed, 22 Jan 2025 01:01:59 GMT
cache-control: public, max-age=63115200
link: <https://ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2019.png>; rel="canonical"
x-content-type-options: nosniff
etag: "f895b7490c4e49c3"
vary: Accept
x-nc: HIT arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| i0.wp.com/ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2018.png?fit=400%2C419&ssl=1 | 192.0.77.2 | 200 OK | 20 kB |
URL HTTP/2i0.wp.com/ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2018.png?fit=400%2C419&ssl=1 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image\012- data Hashe04e1081c20394fa6922b9a840b4da10 ecd36e3b59db9a0993743cfb755c976a9edf6543 6e8cf9af2a4cb549381ed492cb33c60b77aaada5d2c22d8b11b15044036efcd9
GET /ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2018.png?fit=400%2C419&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:15 GMT
content-type: image/webp
content-length: 19880
last-modified: Tue, 10 Jan 2023 13:14:00 GMT
expires: Fri, 10 Jan 2025 01:14:00 GMT
cache-control: public, max-age=63115200
link: <https://ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2018.png>; rel="canonical"
x-content-type-options: nosniff
etag: "ad3d1abc9c8ec603"
vary: Accept
x-nc: HIT arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| i0.wp.com/ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2017.png?fit=400%2C419&ssl=1 | 192.0.77.2 | 200 OK | 20 kB |
URL HTTP/2i0.wp.com/ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2017.png?fit=400%2C419&ssl=1 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image\012- data Hashdd774d8b4cdac646c2ff3cec4d882892 6d660057cfde26f36c5f8682c7524993be217022 e3a5b3e7684822e49512d577c132553a32e56d544fce5ea5586683b799aedcbc
GET /ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2017.png?fit=400%2C419&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:15 GMT
content-type: image/webp
content-length: 19746
last-modified: Tue, 10 Jan 2023 13:14:00 GMT
expires: Fri, 10 Jan 2025 01:14:00 GMT
cache-control: public, max-age=63115200
link: <https://ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2017.png>; rel="canonical"
x-content-type-options: nosniff
etag: "eb91b8c8b2d6d9ea"
vary: Accept
x-nc: HIT arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| i0.wp.com/ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2016.png?fit=400%2C419&ssl=1 | 192.0.77.2 | 200 OK | 20 kB |
URL HTTP/2i0.wp.com/ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2016.png?fit=400%2C419&ssl=1 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash5b890cf98f2a208b940062237656ae60 13ee4a7f3909f058602192dec4e3d237b5d8bd04 7543239715afbd456526527a0b306aa123062c0f350d997f163633072d63edc7
GET /ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2016.png?fit=400%2C419&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:15 GMT
content-type: image/webp
content-length: 19832
last-modified: Thu, 29 Dec 2022 13:33:38 GMT
expires: Sun, 29 Dec 2024 01:33:38 GMT
cache-control: public, max-age=63115200
link: <https://ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2016.png>; rel="canonical"
x-content-type-options: nosniff
etag: "75513ae25dbdfab7"
vary: Accept
x-nc: HIT arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| i0.wp.com/ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2015.png?fit=400%2C419&ssl=1 | 192.0.77.2 | 200 OK | 20 kB |
URL HTTP/2i0.wp.com/ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2015.png?fit=400%2C419&ssl=1 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash219df1ffd2850932774c1ec4f5efa6ac a524f3501f224975eb1a102d3a9f0d6f8fcc6328 06dc41e2615cb5bde589a76110aaa722bc88519808d2d5098beb77fe42d53fa0
GET /ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2015.png?fit=400%2C419&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:15 GMT
content-type: image/webp
content-length: 19888
last-modified: Tue, 10 Jan 2023 13:13:59 GMT
expires: Fri, 10 Jan 2025 01:13:59 GMT
cache-control: public, max-age=63115200
link: <https://ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2015.png>; rel="canonical"
x-content-type-options: nosniff
etag: "82b5fdda54307f3d"
vary: Accept
x-nc: HIT arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| i0.wp.com/ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2014.png?fit=400%2C419&ssl=1 | 192.0.77.2 | 200 OK | 20 kB |
URL HTTP/2i0.wp.com/ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2014.png?fit=400%2C419&ssl=1 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash11d369bf78e3134ec5caeec4f77b185c 52835fe793a7f2a1c9f1c254ffe0fb2d1e11e534 ee3a216e72616f080b3011f6577705e09d5dd66c6116117cc0a0b3edff770874
GET /ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2014.png?fit=400%2C419&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:15 GMT
content-type: image/webp
content-length: 19812
last-modified: Sun, 22 Jan 2023 13:01:59 GMT
expires: Wed, 22 Jan 2025 01:01:59 GMT
cache-control: public, max-age=63115200
link: <https://ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/SP-2014.png>; rel="canonical"
x-content-type-options: nosniff
etag: "d3fcc4db3b85eee7"
vary: Accept
x-nc: HIT arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash43bc5afe1d7330aa521e0efc78185a92 f53e9daa0a32e0acf7a10d9494fb383c1d039305 429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6949
Expires: Wed, 01 Feb 2023 10:54:04 GMT
Date: Wed, 01 Feb 2023 08:58:15 GMT
Connection: keep-alive
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/vendor/remixicon/remixicon.woff2?t=1590207869815 | 139.162.154.220 | 200 OK | 126 kB |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/vendor/remixicon/remixicon.woff2?t=1590207869815 IP139.162.154.220:0
File typeWeb Open Font Format (Version 2), TrueType, length 125268, version 1.0\012- data Size126 kB (125771 bytes) Hash4c6e589bbbf4531b48c900a710717c32 5b7df8871ce7c375395fe65cb5a9ebf2c2e68ffb 04eb0cf31bd11e9d35f0ac731ecc026acbcdd222a874913c362a005064cb4ce3
GET /wp-content/themes/divi-child/vendor/remixicon/remixicon.woff2?t=1590207869815 HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.krestonmenon.com
Connection: keep-alive
Referer: https://ghz2slxdm2dp.cdn.shift8web.ca/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:14 GMT
content-type: font/woff2
last-modified: Thu, 01 Jul 2021 15:12:33 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:14 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 211000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EvyisMiIQKVPxg7FK9oXzMjbMpMBIOkH49R2Vi%2Bsybm8pUx5MXN5d5b%2B0zvWJQn3jafWvKOU2I4kvLv1w%2BCtnSacYCt4N2F%2FYJ8nKsl4jR8BOe%2B46cb9xu9GEapcaZsbKwJpK%2BUCIdJPY6jl%2FAAm2sh3Gw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297bee6b4aca3b-HAM
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash43bc5afe1d7330aa521e0efc78185a92 f53e9daa0a32e0acf7a10d9494fb383c1d039305 429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6949
Expires: Wed, 01 Feb 2023 10:54:04 GMT
Date: Wed, 01 Feb 2023 08:58:15 GMT
Connection: keep-alive
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/css/home-banner-menu-icons/icv-consulting.png | 139.162.154.220 | 200 OK | 877 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/css/home-banner-menu-icons/icv-consulting.png IP139.162.154.220:0
File typePNG image data, 37 x 37, 8-bit colormap, non-interlaced\012- data Hash8903b02a390c9544ffa370662971cdd9 4be78ba0014da350d8e6320ae38d565445d3fdf0 c9cfd8be3435b092ef7561d93890b46ce28544cd067d0d7ec3ca28e494b39932
GET /wp-content/themes/divi-child/css/home-banner-menu-icons/icv-consulting.png HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: image/png
last-modified: Thu, 01 Jul 2021 15:12:33 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uxPodDM803QpBgIfMUQ0HFan9oQKXaqQqwkUO0JVys31xsaqbj9SPFsAplrkk%2BgbOQ%2BsWanOZ6MjKhKFZasQmDv2Rpr7PUWu23zIz8Bbd4%2F1FP44k%2FB39laWqdFm%2B4Oo3IwVjJhqwRaMH0iIT%2Fm%2BoWsbdw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79281eafdf3acab5-HAM
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: HIT
pragma: public
content-encoding: br
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash43bc5afe1d7330aa521e0efc78185a92 f53e9daa0a32e0acf7a10d9494fb383c1d039305 429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6949
Expires: Wed, 01 Feb 2023 10:54:04 GMT
Date: Wed, 01 Feb 2023 08:58:15 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg | 34.120.237.76 | 200 OK | 16 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4bb3a6fba496d54cdbbccaf2b9600386 8e30002699e9fbf2047f9ac11a36d2175fc9c591 927bf3a04b011b4e3bc8d8772a3d5813507f7f523312d43627767b64615562f3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15857
x-amzn-requestid: cfe36b9d-34f6-4f3f-896e-e70ec45c4a04
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmJ2JGGWoAMFSLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8bcf3-0dd68dd778b9aba268a129b0;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:02:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: pU_436f27nMZKPxZZWqZekERHFTvcG5NT5p_CYEXHRPtIWjDtSA-uA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 07:15:18 GMT
age: 6177
etag: "8e30002699e9fbf2047f9ac11a36d2175fc9c591"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2c0a4094-de1e-41f3-9e75-80a725d23095.jpeg | 34.120.237.76 | 200 OK | 9.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2c0a4094-de1e-41f3-9e75-80a725d23095.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc4ef3610dcd19f46f763e313d46e9df6 3cdf187d3923ec5084192adf2b0f73f8c9534a56 e67f0cf265912e3bebfa296cf4c71be24e619efb396d74432a8ff912bf6998ee
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2c0a4094-de1e-41f3-9e75-80a725d23095.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9841
x-amzn-requestid: 26093f6c-900b-425d-827c-4d70a2fa225a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPGMFHOeIAMF-4w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf83e6-29d957942dda79d0723d9e8f;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:08:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Chs87A3OGCMyp250Sz8F-sPoiOmDmlj8kUBrSrUtuEbYeD6we39KQg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 18:55:34 GMT
age: 50561
etag: "3cdf187d3923ec5084192adf2b0f73f8c9534a56"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb28b8703-d49a-4e2e-80e7-cf4d081d6dba.jpeg | 34.120.237.76 | 200 OK | 5.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb28b8703-d49a-4e2e-80e7-cf4d081d6dba.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash2998f7f50ac0eec931c348e8a0fb0c60 f5e411cda74cb7fb4a662f4787e9543b9749c8b5 0c81413a819e379212bf757b1c9469415aec2ac8fdf47f94ff23c420a1da20e1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb28b8703-d49a-4e2e-80e7-cf4d081d6dba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5736
x-amzn-requestid: 895ee89b-8d2e-42f9-a392-466557f8a0d3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffEtEGk_oAMFYPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e7ed-026a1b0d79dc7eb572317bd2;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:28:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 64EbarGrn6AIpXOE8TIfiBeGFQinx-P9lUIvmiQ1ivZgFrxl7_W4EQ==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:57:42 GMT
age: 39633
etag: "f5e411cda74cb7fb4a662f4787e9543b9749c8b5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30335cb7-009a-42f5-8186-d0c302adc827.jpeg | 34.120.237.76 | 200 OK | 6.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30335cb7-009a-42f5-8186-d0c302adc827.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashec7e808a5e82552c46c3417a5b32b836 f0a273292b47d7e2e33c9d77fd95abdcc9e31ddd f16d982224dfeb0753eaf9d4eb87d80fd1111f682fd8fa36f3177aad5bf926a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30335cb7-009a-42f5-8186-d0c302adc827.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6819
x-amzn-requestid: a0368695-4182-40bd-9a28-c50ae783a7a5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: foJaRHGnoAMF0Ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9890e-624285eb16110b8c2360dec5;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 21:33:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4MpUHqMYJoNA7QuRuQwbJIodNkhizq6EL5SPbIoSKFQjtoAKQgLuEg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:51:25 GMT
age: 40010
etag: "f0a273292b47d7e2e33c9d77fd95abdcc9e31ddd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc960001-158a-4a74-b6ce-f28cd110ca9c.jpeg | 34.120.237.76 | 200 OK | 8.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc960001-158a-4a74-b6ce-f28cd110ca9c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash23db22ce2120fbb0ae6109e1a046062d 2068c8d9a5bc30a17be658e198e26c64a80703cf f307ba6c4929d9f0c9354334b7baea878da379138489d9689bb777c4da308dab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc960001-158a-4a74-b6ce-f28cd110ca9c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8735
x-amzn-requestid: f466c962-7b12-4923-a4be-7ff9fce372a0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: foJaWFP_IAMF9wA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9890e-7a8c027d58f5b9132bb68a33;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 21:33:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hjIm9dNf6UE9rpIlKWeLwWuF7Pm6yJeAZgbwchvJcuDy-zkXEr502w==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:51:18 GMT
age: 40017
etag: "2068c8d9a5bc30a17be658e198e26c64a80703cf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg | 34.120.237.76 | 200 OK | 9.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash3366ef4f8733cb9c89a5c88f63a0a441 7da46843b6d885f38a4759a08e6c899906ab7b97 7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aZOeDFqBJQoGwLpIs-GpPvY0FKGCAOXY6MgzG32qzX-kVzUCKKv-kw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 22:03:43 GMT
age: 39272
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.14 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.14:0
File typeASCII text, with very long lines (1490) Hashca7fbbfd120e3e329633044190bbf134 d17f81e03dd827554ddd207ea081fb46b3415445 847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Wed, 01 Feb 2023 07:45:20 GMT
expires: Wed, 01 Feb 2023 09:45:20 GMT
cache-control: public, max-age=7200
age: 4376
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash717cf52cfdc9e790ae36f7a4e1d19d16 03b71415f75565d67d059f1046fa363be72245e5 f76f4406c8796751e4b51ecff884ff3b3ea2bff4c60b6a8941d68b31951b4541
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4549
Cache-Control: max-age=156620
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 08:58:16 GMT
Etag: "63d9d8af-1d7"
Expires: Fri, 03 Feb 2023 04:28:36 GMT
Last-Modified: Wed, 01 Feb 2023 03:12:47 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
|
|
| connect.facebook.net/en_US/sdk.js |  157.240.205.11 | 200 OK | 1.7 kB |
URL HTTP/2connect.facebook.net/en_US/sdk.js IP157.240.205.11:0
File typeASCII text, with very long lines (1957) Hash68061faab31e56fbdaafb1dded70c1a1 32b7307f14bbb072e5f96c09b316bb73b8c0da28 5498a0db3d4f6c3007368c07538586730a3e51921b745181fe52fe33f24ca2d4
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 4a3941442db07582489127bb8cdff972
etag: "f1a2a46de990992310d24efa9733b2a1"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 01 Feb 2023 09:14:42 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: aAYfqrMeVvvar7Hd7XDBoQ==
x-fb-debug: Gm15QTa3ikiiTIKoZZ3Wo6ZP48sJogQAEj2WmJz63x8NhjyxPSCMEhqVQWu6f0sKPfsoKvXavZDP+fkh9epf1w==
priority: u=3,i
content-length: 1685
x-fb-trip-id: 1679558926
date: Wed, 01 Feb 2023 08:58:16 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash717cf52cfdc9e790ae36f7a4e1d19d16 03b71415f75565d67d059f1046fa363be72245e5 f76f4406c8796751e4b51ecff884ff3b3ea2bff4c60b6a8941d68b31951b4541
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5225
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 08:58:16 GMT
Last-Modified: Wed, 01 Feb 2023 07:31:11 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash46e2bec06a11406d5cdcec9c0e76911d edc777878dca7029c70577edae741264a22ab010 21f7443ebf888a28fb0f0010d1c83ca833b42c06f7d2c755f83a4b418de96854
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 08:58:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| connect.facebook.net/en_US/sdk.js?hash=16cd20fad417b11edd9d837faae71f41 | 157.240.205.11 | 200 OK | 87 kB |
URL HTTP/2connect.facebook.net/en_US/sdk.js?hash=16cd20fad417b11edd9d837faae71f41 IP157.240.205.11:0
File typeASCII text, with very long lines (13192) Hash3ca63061c426dae1f6e1070df98db1ad 98ea6acc2aeb436ecbe1d5af81063be5ee6be8e0 1a5417755ad712500874a35e902c27e0b1cae93e32659941018333f5fccceaad
GET /en_US/sdk.js?hash=16cd20fad417b11edd9d837faae71f41 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.krestonmenon.com
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 2f728a9bf1ed90265e875274d130f170
etag: "7475cfa7dcf6b501fce30d14e3f13b40"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Thu, 01 Feb 2024 06:55:22 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: PKYwYcQm2uH24QcN+Y2xrQ==
x-fb-debug: kdiSXtGHa0T06i5kXI8E//3LWE6Lv4u0hIoYfAlIIVf7bo+rn0nJW+K2cHRvkSQjZfaiUNcpuNhALGuFSOMdsg==
priority: u=3,i
content-length: 86976
x-fb-trip-id: 1679558926
date: Wed, 01 Feb 2023 08:58:16 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-150765594-1&cid=1385836552.1675241914&jid=10313906&gjid=1927100898&_gid=64681922.1675241917&_u=YADAAUAAAAAAACAAI~&z=1535154011 | 64.233.162.156 | 200 OK | 1 B |
URL HTTP/2stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-150765594-1&cid=1385836552.1675241914&jid=10313906&gjid=1927100898&_gid=64681922.1675241917&_u=YADAAUAAAAAAACAAI~&z=1535154011 IP64.233.162.156:0
File typevery short file (no magic) Hashc4ca4238a0b923820dcc509a6f75849b 356a192b7913b04c54574d18c28d46e6395428ab 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-150765594-1&cid=1385836552.1675241914&jid=10313906&gjid=1927100898&_gid=64681922.1675241917&_u=YADAAUAAAAAAACAAI~&z=1535154011 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.krestonmenon.com
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.krestonmenon.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 01 Feb 2023 08:58:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash46e2bec06a11406d5cdcec9c0e76911d edc777878dca7029c70577edae741264a22ab010 21f7443ebf888a28fb0f0010d1c83ca833b42c06f7d2c755f83a4b418de96854
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 08:58:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| i0.wp.com/www.krestonmenon.com/wp-content/uploads/2022/02/New-site-slides-2022-01.png?resize=1024%2C682&ssl=1 | 192.0.77.2 | 200 OK | 42 kB |
URL HTTP/2i0.wp.com/www.krestonmenon.com/wp-content/uploads/2022/02/New-site-slides-2022-01.png?resize=1024%2C682&ssl=1 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1024x682, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash1a401ecafeb5b08a2b3d15a336b07a54 7d6893f3b32ba2d6270429607291850dfa2a3ec7 0e72190812d5a292b92cc9b2c69407416623c6e36c5096806cfc041edd41c477
GET /www.krestonmenon.com/wp-content/uploads/2022/02/New-site-slides-2022-01.png?resize=1024%2C682&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:19 GMT
content-type: image/webp
content-length: 41628
last-modified: Wed, 25 Jan 2023 10:56:10 GMT
expires: Fri, 24 Jan 2025 22:56:10 GMT
cache-control: public, max-age=63115200
link: <https://www.krestonmenon.com/wp-content/uploads/2022/02/New-site-slides-2022-01.png>; rel="canonical"
x-content-type-options: nosniff
etag: "9b56b645358f1792"
vary: Accept
x-nc: HIT arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.100 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.100:0
Hash89911e858d33801f27a19fa11a7e40dd f7d90dc50d9db64032cdd3bda5a0b63a42a6bc7f d1da2e58f7bba248e0238d5285dd5ed3a98b91379d2f536bf5b081c83e75e89c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=106409
Date: Wed, 01 Feb 2023 08:58:20 GMT
Etag: "63d90cbe-1d7"
Expires: Thu, 02 Feb 2023 14:31:49 GMT
Last-Modified: Tue, 31 Jan 2023 12:42:38 GMT
Server: ECS (nyb/1D15)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: i7GgccqgedxzXXB44J4uYrQxMd4RgX-0ccRFDUwQovsMP1Hcw3R-gw==
Age: 6551
|
|
| widgetapi.purechat.com/api/visitorwidget/widgetversions/8b7d9c11-5b3e-486d-ae4c-e6d39dff28dc | 18.188.100.108 | 200 OK | 407 B |
URL HTTP/2widgetapi.purechat.com/api/visitorwidget/widgetversions/8b7d9c11-5b3e-486d-ae4c-e6d39dff28dc IP18.188.100.108:0
File typeJSON data\012- , ASCII text, with very long lines (407), with no line terminators Hash5ff5b1ba676ced28a862cf76dede0c95 18d138f39aba41f26dc5bccd37ff8ed1c8b621fc c474373cd4590295bf0fec3fac71bcc0dfe303a1ad3df88cb49ac4da1a11a177
GET /api/visitorwidget/widgetversions/8b7d9c11-5b3e-486d-ae4c-e6d39dff28dc HTTP/1.1
Host: widgetapi.purechat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.krestonmenon.com
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:20 GMT
content-type: application/json; charset=utf-8
content-length: 407
server: Kestrel
cache-control: max-age=60
set-cookie: thirdPartyCookiesEnabled=true; expires=Thu, 02 Feb 2023 08:58:20 GMT; domain=purechat.com; path=/
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.krestonmenon.com
access-control-expose-headers: X-Requires-Auth
X-Firefox-Spdy: h2
|
|
| app.purechat.com/version?_=_&callback=_WidgetJPCB_Version | 54.230.111.61 | 200 OK | 234 B |
URL HTTP/2app.purechat.com/version?_=_&callback=_WidgetJPCB_Version IP54.230.111.61:0
File typeASCII text, with no line terminators Hashb4a0d7af6df32f8107e975582c098ef3 f279529c58935943c51d2a5b8a38db1ff10ade04 643f76818cce37b7ab044eadec562ad4abbdc9db1416cbb3ecef58ce15c3f38b
GET /version?_=_&callback=_WidgetJPCB_Version HTTP/1.1
Host: app.purechat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 234
last-modified: Tue, 31 Jan 2023 03:55:44 GMT
x-amz-version-id: null
server: AmazonS3
date: Wed, 01 Feb 2023 08:52:52 GMT
cache-control: public,max-age=900
etag: "b4a0d7af6df32f8107e975582c098ef3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Fu8Rqxw3GHktyEL56yW8K6NKjwroVtKzFTxyjUShAy5hXpBNUQqGAg==
age: 330
X-Firefox-Spdy: h2
|
|
| api-cdn.purechat.com/api/visitorwidget/widget/8b7d9c11-5b3e-486d-ae4c-e6d39dff28dc/7 | 54.230.111.114 | 200 OK | 3.1 kB |
URL HTTP/2api-cdn.purechat.com/api/visitorwidget/widget/8b7d9c11-5b3e-486d-ae4c-e6d39dff28dc/7 IP54.230.111.114:0
Hashd933b8e4291d7775df183c65c52fc709 aa0bdaf7781b1cf16303cab99d6ccf75a6f2f5d2 52f23d1a5f20b2c053403318d3ccc0d4471540aeee9ee78464c965f7b8b5a5ad
GET /api/visitorwidget/widget/8b7d9c11-5b3e-486d-ae4c-e6d39dff28dc/7 HTTP/1.1
Host: api-cdn.purechat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.krestonmenon.com
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sun, 15 Jan 2023 09:22:58 GMT
server: Kestrel
cache-control: public, max-age=31536000
access-control-allow-credentials: true
access-control-allow-origin: https://www.krestonmenon.com
access-control-expose-headers: X-Requires-Auth
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KDg2my8_TTf5vkS5VUQ3dWbyRAfHS0QW9R67YGJUSc53O-W8LoBy2g==
age: 1467322
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 278 B |
IP93.184.220.29:0
Hash32d8f2a82749bee5c0a42f85f37ace17 16765029cc45fde9c86b742c566d534cc0655d9e dae0e29d728b274405fbcb510732ceb03be006490edda579b37f555ae020ac13
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5016
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 08:58:20 GMT
Last-Modified: Wed, 01 Feb 2023 07:34:44 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 278
|
|
| api.purechat.com/api/visitorwidget/chatavailable/584858/8b7d9c11-5b3e-486d-ae4c-e6d39dff28dc?externalRequest=false&getAvailableOperators=true | 18.188.100.108 | 204 No Content | 291 kB |
URL HTTP/2api.purechat.com/api/visitorwidget/chatavailable/584858/8b7d9c11-5b3e-486d-ae4c-e6d39dff28dc?externalRequest=false&getAvailableOperators=true IP18.188.100.108:0
Size291 kB (291290 bytes) Hashe20e04429c3bb5d83703131a7ee67287 d1fd62fc8af6c1533caa5342733c1b8b0c4fdda6 6240394f1bfdfa2e404450638bb91dbc5e357f1e9174b0d1d5461006d5332e86
OPTIONS /api/visitorwidget/chatavailable/584858/8b7d9c11-5b3e-486d-ae4c-e6d39dff28dc?externalRequest=false&getAvailableOperators=true HTTP/1.1
Host: api.purechat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.krestonmenon.com/
Origin: https://www.krestonmenon.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 01 Feb 2023 08:58:21 GMT
server: Kestrel
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: https://www.krestonmenon.com
X-Firefox-Spdy: h2
|
|
| api.purechat.com/api/visitorwidget/chatavailable/584858/8b7d9c11-5b3e-486d-ae4c-e6d39dff28dc?externalRequest=false&getAvailableOperators=true | 18.188.100.108 | 200 OK | 20 B |
URL HTTP/2api.purechat.com/api/visitorwidget/chatavailable/584858/8b7d9c11-5b3e-486d-ae4c-e6d39dff28dc?externalRequest=false&getAvailableOperators=true IP18.188.100.108:0
File typeJSON data\012- , ASCII text, with no line terminators Hashd3ac5eedc6360a1877f09d7b2f5e6df4 a75f519958ac058fa135c42ea0f248ebfa0303d6 a4d5c712c6ea170fe80e4e13806878ec5f04b70a9a6800d9a9e41a18ebdd7d87
GET /api/visitorwidget/chatavailable/584858/8b7d9c11-5b3e-486d-ae4c-e6d39dff28dc?externalRequest=false&getAvailableOperators=true HTTP/1.1
Host: api.purechat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.krestonmenon.com/
Content-Type: application/json
Origin: https://www.krestonmenon.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:21 GMT
content-type: application/json; charset=utf-8
content-length: 20
server: Kestrel
access-control-allow-credentials: true
access-control-allow-origin: https://www.krestonmenon.com
access-control-expose-headers: X-Requires-Auth
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi/core/admin/js/common-4.17.4.js | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi/core/admin/js/common-4.17.4.js IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/themes/divi/core/admin/js/common-4.17.4.js HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 21 Nov 2022 12:07:57 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tfSvdY1oXRCEKPUZG1yb6NKwBSfLaSOcdyJeRzIgBiLCzZF4YBX6TmpxVAGAf%2Bf6AuoPLRNF6arbtQvqqMzq0Rq3NoFWf9tKpqxUvh53IDVTmKXi3Ny0QR2c2PJSUS7do4QetiPI9g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb3a4a6d7f-MUC
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2022/04/slide-1.jpeg | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2022/04/slide-1.jpeg IP139.162.154.220:0
GET /wp-content/uploads/2022/04/slide-1.jpeg HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: image/webp
vary: Accept-Encoding, Accept,Accept-Encoding
last-modified: Wed, 13 Apr 2022 15:13:41 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y3YfUg0O5HOsbnomGPCP8IuW5bGTas2fu%2FIxZF9Nf7TMbyEKC6YvMULpevWjx4ZlykBjqxJ7oRZTkXxXCws1ijw7Oys3hm8sQc2D%2B%2BrMSVPtGlrg%2BiiBqSjoL6JB3NhxHXfU4k9Jsg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb4c601bd5-MUC
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/wpcf7-redirect/build/css/wpcf7-redirect-frontend.min-73f60d58f8fbca50692f9a7b1959d91f.css | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/wpcf7-redirect/build/css/wpcf7-redirect-frontend.min-73f60d58f8fbca50692f9a7b1959d91f.css IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/plugins/wpcf7-redirect/build/css/wpcf7-redirect-frontend.min-73f60d58f8fbca50692f9a7b1959d91f.css HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:14 GMT
content-type: text/css; charset=utf-8
last-modified: Wed, 11 Jan 2023 10:09:53 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:14 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FsiuixfeWZrMcG%2B5%2B5RUZkQ%2BA8RPoqSLfJrjh8lrkV1cYcvWbVNRH%2FBLgCmSx13CUwJ5EvhuruXRMhgGR1N5nOoj8k4x6ACQOebdbmhQ%2ByFNWMuxe9crkNaEpxIXhxJ1FXeb9nQAZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297bec2fe7cabd-HAM
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/css/home-banner-menu-icons/audit-assurance.png | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/css/home-banner-menu-icons/audit-assurance.png IP139.162.154.220:0
GET /wp-content/themes/divi-child/css/home-banner-menu-icons/audit-assurance.png HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: image/png
last-modified: Thu, 01 Jul 2021 15:12:33 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 69229
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8%2BXdYQgDVyWwwYWhy8cgMHlMsa47%2FxSpFWuksblfSb7qE5w%2Fjql4ce2NtZfubzniF0zFc9rCz5gypwhoVm1usSw2rI40UtHQTIWjah1eLN2HL47nydVg5Awq0B3TZJ4K%2BV6t6xD6kQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79281eaf296d7a54-DUS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: HIT
pragma: public
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/css/home-banner-menu-icons/corporate-finance-consulting.png | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/css/home-banner-menu-icons/corporate-finance-consulting.png IP139.162.154.220:0
GET /wp-content/themes/divi-child/css/home-banner-menu-icons/corporate-finance-consulting.png HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: image/png
last-modified: Thu, 01 Jul 2021 15:12:33 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 168000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=anAM3%2FxmhBLODXTn%2Ft8t4jL2Jwd26olWq6eiAk1KhQlBJb0HTWgUAt6goidPdlcRqch1FQORiBTzGOfEhcqsVJOsXa7gNFe%2FsuznE6qXr0kAbM9qSDs3%2B1oDHhOCllDeK4QboEZfdQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79281eaf4b107276-HAM
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: HIT
pragma: public
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min-8.11.0.js | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min-8.11.0.js IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min-8.11.0.js HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 14 Dec 2022 10:32:16 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 141530
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xz241mlUtoefvfqEOym34xNOC16XfSQOIvDYepUhWymi%2BO73%2Bw8kTijU46I3Xz4M03hIEwLG2mJaFoyUyixINM02yW2quFYYm2pIVVWRaRCLvrF4Pr5g2s0m23rhWY5F%2FAhcaa%2FxNw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb4e3aca91-HAM
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| c0.wp.com/c/6.1.1/wp-includes/js/jquery/jquery.min.js | 192.0.77.37 | 200 OK | 0 B |
URL HTTP/2c0.wp.com/c/6.1.1/wp-includes/js/jquery/jquery.min.js IP192.0.77.37:0
GET /c/6.1.1/wp-includes/js/jquery/jquery.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 19 Sep 2022 14:16:24 GMT
content-encoding: br
expires: Thu, 01 Feb 2024 08:58:13 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-lazy-images/dist/lazy-images.js?minify=false&ver=54eb31dc971b63b49278 | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-lazy-images/dist/lazy-images.js?minify=false&ver=54eb31dc971b63b49278 IP139.162.154.220:0
GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-lazy-images/dist/lazy-images.js?minify=false&ver=54eb31dc971b63b49278 HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 08 Sep 2022 06:11:09 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 210981
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PX%2B9ktOOlnk698Hw16Xg7uYR7qygeWAbLhyWQ3GwbYitTd9p72%2Fe%2Ba0RAfVu2nEXVINJ6KQe0%2FlSCRgnhwVF4DPX22JUjlb6H1aiVmR1Qfo7QU8R%2FCrU0urktkHoGfut9xSmynWrsQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb49c2ca48-HAM
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2022/04/slide-2-1.jpg | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2022/04/slide-2-1.jpg IP139.162.154.220:0
GET /wp-content/uploads/2022/04/slide-2-1.jpg HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:14 GMT
content-type: image/webp
vary: Accept-Encoding, Accept,Accept-Encoding
last-modified: Wed, 13 Apr 2022 14:14:40 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:14 GMT
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dC3ojABsasKJ2%2BBLMscCDdiSkgljtPqdzCgmST6MzbvtufD8OCELwRmSa3Za0LKU%2BRCScZqo6qcZjWnZtV3S5fQiacViJFs3oqBYbp8VZ1P%2FdEBbIxw90uqZrlWoiCoHNGllodDx%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beedfa56d92-MUC
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Raleway:400,700,400italic,700italic|Open+Sans:400,700,400italic,700italic&subset=latin | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Raleway:400,700,400italic,700italic|Open+Sans:400,700,400italic,700italic&subset=latin IP142.250.74.106:0
GET /css?family=Raleway:400,700,400italic,700italic|Open+Sans:400,700,400italic,700italic&subset=latin HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 01 Feb 2023 08:58:13 GMT
date: Wed, 01 Feb 2023 08:58:13 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/creame-whatsapp-me/public/css/joinchat-btn.min-4.5.9.css | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/creame-whatsapp-me/public/css/joinchat-btn.min-4.5.9.css IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/plugins/creame-whatsapp-me/public/css/joinchat-btn.min-4.5.9.css HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: text/css; charset=utf-8
last-modified: Tue, 10 Jan 2023 14:30:09 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 211005
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T1BHLXctPdujstMJ7QM6NJjw1OCs%2F%2F1qVj5eGF7TvzRfEHng4eM1aBeAcFzQb%2F%2FVji3ai2qo2ZE1tSBC6mad9CDT1KLfU3k%2BWd5U1arGtNOny6ML7ANH4J2LWsroVlTaFxknGfZRWg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb38736d8f-MUC
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids-4.17.4.js | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids-4.17.4.js IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/themes/divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids-4.17.4.js HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 21 Nov 2022 12:07:57 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7FTzJFzjzmjEerSD6FeiKP7i%2FuYWGy5vPwpIy4slwXsk22ZvDciRDe3m6TGgdlM5exu1fpV9CgcXZ2Tq6IHUuTDL1gc4%2FjFuZvotsAgBTruDvWaDMSF763UVaLtqxmtf2%2BajoPC9rA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb4edf416e-HAM
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/mediaelement-migrate.min.js | 192.0.77.37 | 200 OK | 0 B |
URL HTTP/2c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/mediaelement-migrate.min.js IP192.0.77.37:0
GET /c/6.1.1/wp-includes/js/mediaelement/mediaelement-migrate.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
content-encoding: br
expires: Thu, 01 Feb 2024 08:58:13 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/css/home-banner-menu-icons/esr-compliance.png | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/css/home-banner-menu-icons/esr-compliance.png IP139.162.154.220:0
GET /wp-content/themes/divi-child/css/home-banner-menu-icons/esr-compliance.png HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: image/png
last-modified: Thu, 01 Jul 2021 15:12:33 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 196690
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ef1uGmjns4OfDiJsES7osF1Z8LsSfs9sqoleBMVthpEl4dfaTb4wvD5LMgsR8lZ%2Fnl5fG0hgfugCq6laPVTKBSnAe8SWeWeU%2Bn%2FaLK1J8QmkaObx39b1rnZgaAFQrSYvybeqLDDLhg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79281eafcb3b1633-DUS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: HIT
pragma: public
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi/includes/builder/feature/dynamic-assets/assets/js/salvattore-4.17.4.js | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi/includes/builder/feature/dynamic-assets/assets/js/salvattore-4.17.4.js IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/themes/divi/includes/builder/feature/dynamic-assets/assets/js/salvattore-4.17.4.js HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 21 Nov 2022 12:07:57 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 210983
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=asR3EeUeO8PnH1FMLhnCOzPn1D4AcXClddvcfk%2Fi9B3uyNjNixdfnjUhzPD%2FQ3NteMCT7D%2FNVVX1LzYdtpbad7kXNM%2BY5NrOkXPQhf%2B4n3qJrV7jdgsr9EY0WfNgsNQ7hZaYmZLx4A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb4ac86d73-MUC
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi-child/vendor/remixicon/remixicon-1.0.0.css | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi-child/vendor/remixicon/remixicon-1.0.0.css IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/themes/divi-child/vendor/remixicon/remixicon-1.0.0.css HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: text/css; charset=utf-8
last-modified: Mon, 21 Nov 2022 12:07:57 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WDKBSDYiW8K%2FuwEYl9pJMYLFcLFGPR%2BuZO2ufM0r%2F9HfY6Q32tV2TwJIZmqi1mHGPGs0WBN0M6DQIix%2B0NCAL1%2BYizomaqBbOu%2BnVk12GY9rHwpd5td8l8FUBj%2FskgRv6JuIBIny2w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb3ac56d73-MUC
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/creame-whatsapp-me/public/js/joinchat.min-4.5.9.js | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/creame-whatsapp-me/public/js/joinchat.min-4.5.9.js IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/plugins/creame-whatsapp-me/public/js/joinchat.min-4.5.9.js HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 21 Nov 2022 12:07:57 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TirChRUi8VbGMUECM0h80%2FMAzaXaJGOMJD0MEiWa5JYrc3KND5EKYrHvHAQ4968dRTKguC6GaSkIM2mFoiRDV3xDfcQSYkOyzPyxwK8SKuIcBENjg7U0szG01epbsgNm93N1mxhOfw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb4e70cac9-HAM
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| app.purechat.com/VisitorWidget/WidgetScript | 54.230.111.61 | 200 OK | 0 B |
URL HTTP/2app.purechat.com/VisitorWidget/WidgetScript IP54.230.111.61:0
GET /VisitorWidget/WidgetScript HTTP/1.1
Host: app.purechat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
last-modified: Tue, 31 Jan 2023 03:55:18 GMT
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
date: Wed, 01 Feb 2023 07:56:15 GMT
cache-control: public,max-age=14400
etag: W/"6d472c54bbcb8a12a1f1d8f4906802b1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qCQ7AA-2edlfz-XLd7zzzTdIpdNK6p1EqvycxpRYB0Z8diK_DJch8A==
age: 3726
X-Firefox-Spdy: h2
|
|
| c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/wp-mediaelement.min.css | 192.0.77.37 | 200 OK | 0 B |
URL HTTP/2c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/wp-mediaelement.min.css IP192.0.77.37:0
GET /c/6.1.1/wp-includes/js/mediaelement/wp-mediaelement.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 07 Jun 2019 20:45:02 GMT
content-encoding: br
expires: Thu, 01 Feb 2024 08:58:13 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi/js/scripts.min-73f60d58f8fbca50692f9a7b1959d91f.js | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi/js/scripts.min-73f60d58f8fbca50692f9a7b1959d91f.js IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/themes/divi/js/scripts.min-73f60d58f8fbca50692f9a7b1959d91f.js HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 11 Jan 2023 10:09:53 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 210992
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9RcITh697Tq7YQA8owT04myIhbjcGkwACg4m4xSiK%2F%2FX5Aw0BAyEjF97uXDwnvqDUzg7TZ5HVAEg4qXgG3o9u63C2q1iaKvhxbAxLDh85Mfgx9RnCuRNSjS12KxNEk5nw%2F1tg2ULww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb4fa56d83-MUC
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/plugins/wp-rocket/assets/js/lazyload/11.0.6/lazyload.min.js | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/plugins/wp-rocket/assets/js/lazyload/11.0.6/lazyload.min.js IP139.162.154.220:0
GET /wp-content/plugins/wp-rocket/assets/js/lazyload/11.0.6/lazyload.min.js HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 16 May 2019 02:25:16 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JMnuMXQgoZBKnwU6V29RdvwztQ2KNKuy5J4v637bF%2BQZddyN8lsoBJU5d3Z3XLyjlTbHvN80xVqWJcVmZOB1YhflYiCLRU220%2BS%2FjytEns0aG3suPgu2ihux70ZXx0euGwrmQNS4jA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb3a467273-HAM
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/flexy-breadcrumb/public/css/font-awesome.min-4.7.0.css | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/flexy-breadcrumb/public/css/font-awesome.min-4.7.0.css IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/plugins/flexy-breadcrumb/public/css/font-awesome.min-4.7.0.css HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: text/css; charset=utf-8
last-modified: Mon, 02 Jan 2023 13:52:14 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dvFefxkX56cSQTnhrveig4L%2BdsrlBUYUnXLg5Yq%2BDFQTa6UwKiOSB5wEii6H%2FXc6VUvPlE5UOu5AdHgrb9zCoyhJLt3YPrnh6sP0YhoTM6fYhH%2BJgpbwlMbLpSMPQCaynMz%2BTjiuuw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb4d86ca75-HAM
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/logo-top-menu-bar.png | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/uploads/2021/07/logo-top-menu-bar.png IP139.162.154.220:0
GET /wp-content/uploads/2021/07/logo-top-menu-bar.png HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: image/png
last-modified: Sun, 11 Jul 2021 15:06:08 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 196696
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Um9D29G3b3hPDKa27Xka0PCkvcjkgS0FSKnsDFTYXsBb8%2BvUd7%2BUdXJlCJsQbSWhkhbddiFrDUyd4fogSXDDf0t71snoXb2GcUqtqBJZBqz6F%2FJQvARouGaFlbGpIxK7%2Bw%2F0IcTK3F60%2F0bnFUKb%2BkuYcQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79281eaf28867175-DUS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: HIT
pragma: public
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi/includes/builder/feature/dynamic-assets/assets/js/jquery.mobile-4.17.4.js | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi/includes/builder/feature/dynamic-assets/assets/js/jquery.mobile-4.17.4.js IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/themes/divi/includes/builder/feature/dynamic-assets/assets/js/jquery.mobile-4.17.4.js HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 21 Nov 2022 12:07:57 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 141530
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W8UZMXkyAMi9TFx0zgKpGvB7EVWHwjcBk0NfxdP6p3DwXTuVTdb4YX02oTobLNz9A9Ec%2FXz1wxn5f%2FcKseBVdNvQ%2FYKddgw5ey4tL2ZrfRSeGOfBkXjRNZzyc6yc3wQMmQDvC7hnjA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb4ad8b3aa-MUC
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi/includes/builder/feature/dynamic-assets/assets/js/magnific-popup-4.17.4.js | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi/includes/builder/feature/dynamic-assets/assets/js/magnific-popup-4.17.4.js IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/themes/divi/includes/builder/feature/dynamic-assets/assets/js/magnific-popup-4.17.4.js HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 21 Nov 2022 12:07:57 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 83534
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uEh%2FBMH73HLOKaFnPbYdtK4aDfJOI7UjvbR3EPnTi8YRk9Av8J5REh3sawxw4fal6AmdQzUAvvdqy%2F0kLVz%2BeOblo3GQ6gvW5Y0mY6t7WfJJhTTOEx049sBkRLxWQ2SGNiZRzeL5iw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb4a937266-HAM
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| prod.purechatcdn.com/assets/modern_initializer.13836.js | 172.67.206.246 | 200 OK | 0 B |
URL HTTP/2prod.purechatcdn.com/assets/modern_initializer.13836.js IP172.67.206.246:0
GET /assets/modern_initializer.13836.js HTTP/1.1
Host: prod.purechatcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:20 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=31536000
last-modified: Wed, 26 Oct 2022 22:15:02 GMT
x-amz-version-id: null
etag: W/"47ffa44a34a2af9c7f21609d19e46ae7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6535753e56582459e514c04b24458946.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: JEpVfgRR9a-O54LGV6icYebBkoavpP2BEKG0CCeIRHPIAQywkTO5rw==
age: 8419272
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V9eXW9vMKeQdzSXDh3Q0nWKHu3DDwYYEMUIZ2VxD6ncE8%2FYyu1tXaXXsaPWLwIrtozqd0HYdm%2B%2FfAS9AT46wvk6yphgpFhEEGFCz95ebzBVRNRWd14XTJdF8nftQ59S1aZx11VVR5A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79297c186f82b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/schema-and-structured-data-for-wp/modules/divi-builder/scripts/frontend-bundle.min-1.0.0.js | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/schema-and-structured-data-for-wp/modules/divi-builder/scripts/frontend-bundle.min-1.0.0.js IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/plugins/schema-and-structured-data-for-wp/modules/divi-builder/scripts/frontend-bundle.min-1.0.0.js HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 21 Nov 2022 12:07:57 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 210983
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6R66Rk9IxXy%2BuTweV6dk21E4VcCEElss5TSFma4GSMuWXmMWVYycowEloOf6NX0AWwdlVDKhuaKCEZrJKp0JaTRuPgOTSVbHJ2XWLAM11jcq1LfABehYpH8wblbLRrF%2Bx38gKn5XDw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb4ca64163-HAM
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/flexy-breadcrumb/public/css/flexy-breadcrumb-public-1.2.1.css | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/flexy-breadcrumb/public/css/flexy-breadcrumb-public-1.2.1.css IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/plugins/flexy-breadcrumb/public/css/flexy-breadcrumb-public-1.2.1.css HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: text/css; charset=utf-8
last-modified: Tue, 10 Jan 2023 14:30:09 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P9XiF1IwgeqXpnj6Ch6j79bnsZOAxu0i8kEstz3CTOnZnY4OalnZd451qY6TFmnszeDQ9t5LQVhOjAa1cRVh%2F0EL4NmrRcRt1sg%2FP%2FCnQ9NuR8BG5Vb8MKlssv4CYrdzW3P0ee6sSmj58pUhz5MZjcLJLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb4cccb3a7-MUC
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/vendor/boxicons/fonts/boxicons.woff2 | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/vendor/boxicons/fonts/boxicons.woff2 IP139.162.154.220:0
GET /wp-content/themes/divi-child/vendor/boxicons/fonts/boxicons.woff2 HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.krestonmenon.com
Connection: keep-alive
Referer: https://ghz2slxdm2dp.cdn.shift8web.ca/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:14 GMT
content-type: font/woff2
last-modified: Thu, 01 Jul 2021 15:12:33 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:14 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 211000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dI7Rf%2Bk%2Bp5gW0lY4ems0GEdJlVpTVpwhJHkrLmHHBseWgFSR9AKfbgmDPsK6uf%2BuoQiSj24j%2Bp10LK%2FBIId5L%2BatRM2JaaLEULj%2FbJug7EgMl2jqFF9dP0xGzYAMMT8WP3%2B4n5SzbdmGXs4f%2Fe05mnlgSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297bee6c7eb3b0-MUC
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css | 192.0.77.37 | 200 OK | 0 B |
URL HTTP/2c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css IP192.0.77.37:0
GET /c/6.1.1/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Tue, 29 Sep 2020 15:53:06 GMT
content-encoding: br
expires: Thu, 01 Feb 2024 08:58:13 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/css/home-banner-menu-icons/compliance-anti-money-laundering.png | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/css/home-banner-menu-icons/compliance-anti-money-laundering.png IP139.162.154.220:0
GET /wp-content/themes/divi-child/css/home-banner-menu-icons/compliance-anti-money-laundering.png HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: image/png
last-modified: Thu, 01 Jul 2021 15:12:33 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 167999
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ODX1Slk5DdTX%2BK4QoazazFK%2FMa5zRoRy689MtTUOTsXC9rNd%2Fuey%2BD%2B%2FCqP6izq9z7xlKs8PGvxrWa8yvNWbAMz5GTBHE1TntbHoIBFiHMP0hYdOV3GmzJLPedD9kj5UFOxKDWikZZvUT7zlWJ%2BxyTd60A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79281eaf3fe31638-DUS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: HIT
pragma: public
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-lazy-images/dist/intersection-observer.js?minify=false&ver=83ec8aa758f883d6da14 | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-lazy-images/dist/intersection-observer.js?minify=false&ver=83ec8aa758f883d6da14 IP139.162.154.220:0
GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-lazy-images/dist/intersection-observer.js?minify=false&ver=83ec8aa758f883d6da14 HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 08 Sep 2022 06:11:09 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 141530
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wHnvOV4KDj8oLjGXymDT5RWDWsQzVEucYROybLwsSIfrDq%2Bwbvk8KyQZygUIoSlovjuNdTxbx348pMhnlnQX%2BAeVlvqigK08kpfvsB3XRdtOe2EfjziW%2F7wPb6piRbLfXZG0NvnLtA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb3ac46d73-MUC
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi-child/js/custom-script-1.4.0.js | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi-child/js/custom-script-1.4.0.js IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/themes/divi-child/js/custom-script-1.4.0.js HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 10 Jan 2023 14:30:09 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a8rj%2F1BU3UCTe%2BizUH4x%2B4A6qwV7M7c%2BLwEe1jCx75d%2F6dJ970WMNibHr%2FJfIi1niBxil1nAvv01jDraFIPjVhvkl%2B%2BESWe1Yv8Vx0gyVMaFKjBK7O6vwCr1XiXCPKtq3wZnF5msHQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb3e45414a-HAM
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi-child/vendor/boxicons/css/boxicons.min-1.0.0.css | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi-child/vendor/boxicons/css/boxicons.min-1.0.0.css IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/themes/divi-child/vendor/boxicons/css/boxicons.min-1.0.0.css HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: text/css; charset=utf-8
last-modified: Tue, 10 Jan 2023 14:30:09 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M%2B5IpgXzsZGSHipDJMjGOPgauWLglYgwgGpA5MtI9wpa7begmnI1W8lyGqcSRpTIQ7Q8bzpujMt3n3%2FGyGsbkvEcByXlKhohl68iGxzyXqw2IQ86rSuRrO%2FbKDehL%2Fzb5%2BbFghFyng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb3aa0b398-MUC
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/css/home-banner-menu-icons/technology-consulting.png | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/css/home-banner-menu-icons/technology-consulting.png IP139.162.154.220:0
GET /wp-content/themes/divi-child/css/home-banner-menu-icons/technology-consulting.png HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: image/png
last-modified: Thu, 01 Jul 2021 15:12:33 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WlhLVl%2F%2FrHQD%2Fob6Z61SCwHvVvuh8cY5e5DpgiTcRnr1JICqDlmYhQdYWyX4AhsMe5Lzd3Mz7WGmujbaoldfVKP2h7cNvBVBwBvbx1IAf48Rb4DL0LE%2BByyH0rKj8KGFBXc9cBGNv%2BjVqguyWy%2FelsLjEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79281eaf38f5717a-DUS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: HIT
pragma: public
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/et-cache/28/et-divi-dynamic-28-1675061655.css | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/et-cache/28/et-divi-dynamic-28-1675061655.css IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/et-cache/28/et-divi-dynamic-28-1675061655.css HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: text/css; charset=utf-8
last-modified: Mon, 30 Jan 2023 06:54:18 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 179988
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z1hzZ0yCakNotM3lSbdW4XEv%2FOOh6g8LDHnSXUjxbkf7sJ9ILu5QRHnSPvuN52ChLCWn5JGWZUZDAvHDcMk0dilCaKgQbUHvoiLxEOROoJpt6bQJCoHi3JeUDiMJZu7nhW1F9elSmXkU6JoADIzjVjNhzQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb4aa5b398-MUC
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| cdn.linkedin.oribi.io/partner/4460473/domain/krestonmenon.com/token | 54.230.111.8 | 200 OK | 0 B |
URL HTTP/2cdn.linkedin.oribi.io/partner/4460473/domain/krestonmenon.com/token IP54.230.111.8:0
GET /partner/4460473/domain/krestonmenon.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.krestonmenon.com
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
date: Wed, 01 Feb 2023 08:05:44 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dNk7DDhAHEq8f-ydg1OfrIUv_Hxa250lerdTdM1mPim0W3KNsSLZwg==
age: 3149
X-Firefox-Spdy: h2
|
|
| c0.wp.com/p/jetpack/11.3/css/jetpack.css | 192.0.77.37 | 200 OK | 0 B |
URL HTTP/2c0.wp.com/p/jetpack/11.3/css/jetpack.css IP192.0.77.37:0
GET /p/jetpack/11.3/css/jetpack.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Tue, 19 Jul 2022 17:25:16 GMT
content-encoding: br
expires: Thu, 01 Feb 2024 08:58:13 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/css/home-banner-menu-icons/taxation.png | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/css/home-banner-menu-icons/taxation.png IP139.162.154.220:0
GET /wp-content/themes/divi-child/css/home-banner-menu-icons/taxation.png HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: image/png
last-modified: Thu, 01 Jul 2021 15:12:33 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 127226
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6GNRwuWHOkOrFa%2FdM7%2BZy3gpFKKwfCRM%2BcgI6gA7NzoxBeyw3yzdHLOJX2EUkKnrUmXaun9mmxkaT8CNHzLJE36zVbhFgu4mPjXISygp%2B1k6g1WmWBif9cONVSK3SyMW6ywTSIX6nA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79281eaf4c4c7282-HAM
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: HIT
pragma: public
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/wpcf7-redirect/build/js/wpcf7r-fe-1.1.js | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/wpcf7-redirect/build/js/wpcf7r-fe-1.1.js IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/plugins/wpcf7-redirect/build/js/wpcf7r-fe-1.1.js HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 21 Nov 2022 12:07:57 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 210993
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=goTPQQEOSUIJ9l%2FtFd5TjTrhl6j%2BDLiLr8AK%2F7sRH2GJ6UA0ccRd5LW4iWBYPFo46fiH1eV%2Bvyl20u%2FovXPDff1q2GSXdygz%2FZERPWJvn5VgN1e%2FvtdaTjmW1MHDXpFBmlkSvNXD1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb3a236d85-MUC
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| www.krestonmenon.com/ | 172.67.175.12 | 200 OK | 0 B |
IP172.67.175.12:0
GET / HTTP/1.1
Host: www.krestonmenon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: text/html; charset=UTF-8
last-modified: Wed, 01 Feb 2023 07:34:34 GMT
cache-control: max-age=0
expires: Wed, 01 Feb 2023 08:58:12 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OiBGli22M%2F7klMBts7aWzuMxxdMCQ1B96BKhx78%2F4Pz%2FDn81NArIfDO4vHResS4YTge24rxaZYviHo9LN9MmlWSICqAwXjrUwl4AcNAtGVDzNrfKXRTmXj8m0TidZ9L8QqBD8WDa8w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79297be5ae870b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/wp-mediaelement.min.js | 192.0.77.37 | 200 OK | 0 B |
URL HTTP/2c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/wp-mediaelement.min.js IP192.0.77.37:0
GET /c/6.1.1/wp-includes/js/mediaelement/wp-mediaelement.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 20 Jan 2021 13:35:18 GMT
content-encoding: br
expires: Thu, 01 Feb 2024 08:58:13 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi-child/css/krestonmenon-1.3.7.css | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi-child/css/krestonmenon-1.3.7.css IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/themes/divi-child/css/krestonmenon-1.3.7.css HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: text/css; charset=utf-8
last-modified: Mon, 21 Nov 2022 12:07:57 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 14304
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W2nN2n3lXJlUPPeeLGy0ahaNM8C4T2qXCsydx3uPbNQuIYDnH3u81HU81WatLEHtu94OeGayidG4zv5GL4Dtm27jwAw3BqN9IPGG%2F6tt%2FhMKXJryf0GYVI7eodJh3%2BGrW0r0W2uhXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb4c3ecab1-HAM
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/flexy-breadcrumb/public/js/flexy-breadcrumb-public-1.2.1.js | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/flexy-breadcrumb/public/js/flexy-breadcrumb-public-1.2.1.js IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/plugins/flexy-breadcrumb/public/js/flexy-breadcrumb-public-1.2.1.js HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 21 Nov 2022 12:07:57 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
cf-cache-status: HIT
age: 14304
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E23aBPdikmo%2BPbQHRbQnxh%2FC%2F%2FXp3r4FG%2BsgdDr5fmaw2L7JHq41z9pGMtYTke1xUXXnFZVKYU3g4CqapsWUzD5uUcQayqv0CvIq0DYTJyX4zPSbIakIydGLEwcK8afnme7xVkT5Pw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 79297beb4fca7282-HAM
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/contact-form-7/includes/css/styles-5.6.3.css | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/contact-form-7/includes/css/styles-5.6.3.css IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/plugins/contact-form-7/includes/css/styles-5.6.3.css HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: text/css; charset=utf-8
last-modified: Mon, 21 Nov 2022 12:07:57 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 182305
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ItlzZuGNBrkppmTgPbWEULyLeZWKyU4gruGsY%2BIerACC2uDJRr1luGmcjNxE65WsDoHApjaGUm97q8Epqo44OcdXnDCCaUPiyaSr%2BMl%2B8xylXjCzL6ua8g8YRCdySZ97yE1zOSZKOw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb6bf71bbd-MUC
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/css/home-banner-menu-icons/grc.png | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/css/home-banner-menu-icons/grc.png IP139.162.154.220:0
GET /wp-content/themes/divi-child/css/home-banner-menu-icons/grc.png HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: image/png
last-modified: Thu, 01 Jul 2021 15:12:33 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 168000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bdtLHa1jq1361BvbEeYJbfvfCthiGA4yxIvqBv3V2JwqjWaoVhohlwLxf31WoakPuxOSVGeQqG%2BH%2FDH1L6g49pzcT1Q1ODR%2FjM7UEFVTI2l2spgfhF3jTfblpzMwIxY266hZ1JoPv%2B9gnATLxEgu8EJIAw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79281eaf4fcfcaa5-HAM
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: HIT
pragma: public
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/contact-form-7/includes/swv/js/index-5.6.3.js | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/contact-form-7/includes/swv/js/index-5.6.3.js IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/plugins/contact-form-7/includes/swv/js/index-5.6.3.js HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 02 Jan 2023 13:52:14 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 83534
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TaIHlmY%2FtEEO9aDn5Po4cLHhUlQak9ARnHxpOusK03ZeN7O7TYGSZOlgQQOAopfW0DjYddygtrEd8wQJEh9esa1P8BZ7VjXk5KAsKbY857i6fP3KwYsophnxdzFpkeUrQdPtbmmcXA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb3c436d92-MUC
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi/includes/builder/feature/dynamic-assets/assets/js/easypiechart-4.17.4.js | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi/includes/builder/feature/dynamic-assets/assets/js/easypiechart-4.17.4.js IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/themes/divi/includes/builder/feature/dynamic-assets/assets/js/easypiechart-4.17.4.js HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 10 Jan 2023 14:30:12 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 14304
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KK%2B%2F4kQehfArr0CRd%2BzykgUNDH75rCVyajaNV%2F%2BXKJhnHOsh%2B2GUqDdLbqbb%2FDN6AO6qwlKUVe4kLS6qQHWsRLUVx%2FU%2BNtsVVdsco7FX89YP9nsvPKC7x%2Fe6oRgrX1EmC8wwOowoZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb4954ca79-HAM
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/mediaelement-and-player.min.js | 192.0.77.37 | 200 OK | 0 B |
URL HTTP/2c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/mediaelement-and-player.min.js IP192.0.77.37:0
GET /c/6.1.1/wp-includes/js/mediaelement/mediaelement-and-player.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 29 Sep 2022 14:21:11 GMT
content-encoding: br
expires: Thu, 01 Feb 2024 08:58:13 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi-child/vendor/bootstrap-icons/bootstrap-icons-1.0.0.css | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi-child/vendor/bootstrap-icons/bootstrap-icons-1.0.0.css IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/themes/divi-child/vendor/bootstrap-icons/bootstrap-icons-1.0.0.css HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: text/css; charset=utf-8
last-modified: Tue, 10 Jan 2023 14:30:09 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 211003
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Cs9LqmvpeTHKKn8nqJSmqoIkhpbiidyURMEYi4s%2FeuuVcTX5WzokJayXFPY21X0JT3REWaoTDikwlxLNvrlKnop8nNkzhgbnOc7pXmEmRdlFuSLtvcdf4OsVl8EZIVdxNZA1duSPGg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb4f6bb3a3-MUC
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi-child/style-73f60d58f8fbca50692f9a7b1959d91f.css | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/themes/divi-child/style-73f60d58f8fbca50692f9a7b1959d91f.css IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/themes/divi-child/style-73f60d58f8fbca50692f9a7b1959d91f.css HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: text/css; charset=utf-8
last-modified: Wed, 11 Jan 2023 10:09:53 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 211002
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VdMDdPzLuCKJNnGrKwOoJSdO6PwLeR%2B2ZLHqIXn7El9xQfrffyo%2Fszf9YEVHX1SgER6MxgR83h6WRVX4LffCEbDwMa6EwdCEBUtmhSYbnHMfoICgyrihyf7hXtexqRuw9eHOYprJ4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb3e4f6d89-MUC
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/contact-form-7/includes/js/index-5.6.3.js | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/cache/busting/1/wp-content/plugins/contact-form-7/includes/js/index-5.6.3.js IP139.162.154.220:0
GET /wp-content/cache/busting/1/wp-content/plugins/contact-form-7/includes/js/index-5.6.3.js HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 21 Nov 2022 12:07:57 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I1dzKoEmJLe9fO0xfm%2FKsVVSfgNHlrqA2pn5jTWW9KLg5ltG%2B2MtHayoFPvq7PbOK4dP1SqWEA86Q4%2Fv%2BcQAdGiuFi1eFmCQgKMrxRgPTihECNlOs14TSkgHSE1oq6N4KRChUabFSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79297beb4f9b726c-HAM
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: MISS
pragma: public
X-Firefox-Spdy: h2
|
|
| c0.wp.com/p/jetpack/11.3/_inc/build/photon/photon.min.js | 192.0.77.37 | 200 OK | 0 B |
URL HTTP/2c0.wp.com/p/jetpack/11.3/_inc/build/photon/photon.min.js IP192.0.77.37:0
GET /p/jetpack/11.3/_inc/build/photon/photon.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 07 Dec 2021 16:56:47 GMT
content-encoding: br
expires: Thu, 01 Feb 2024 08:58:13 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/css/home-banner-menu-icons/accounting-services-payroll-services.png | 139.162.154.220 | 200 OK | 0 B |
URL HTTP/2ghz2slxdm2dp.cdn.shift8web.ca/wp-content/themes/divi-child/css/home-banner-menu-icons/accounting-services-payroll-services.png IP139.162.154.220:0
GET /wp-content/themes/divi-child/css/home-banner-menu-icons/accounting-services-payroll-services.png HTTP/1.1
Host: ghz2slxdm2dp.cdn.shift8web.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.krestonmenon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 08:58:13 GMT
content-type: image/png
last-modified: Thu, 01 Jul 2021 15:12:33 GMT
cache-control: max-age=31536000
expires: Thu, 01 Feb 2024 08:58:13 GMT
vary: Accept-Encoding, Accept-Encoding
cf-cache-status: HIT
age: 196691
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tNadbbCyxNucYpw%2FJ5Sd%2BvTejVi3k4Eho9Mstd8FO5RXSOyTjLNoBOquyV1sCKj73xAG2gMTicLT9DQ9MBnf5nntaeyca8nvV56Y00mIAlvrfW0Z2ESD6%2BH8jMhfsB5cb%2BU4ZiUP0vOfZNlW2Djvegoi3A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 79281eafcb91715d-DUS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
server: Shift8_CDN
access-control-allow-origin: https://www.krestonmenon.com
x-shift8cdn-cache: HIT
pragma: public
content-encoding: br
X-Firefox-Spdy: h2
|
|
188.114.96.1
0.0.0.0