campaign.kabaun.com/api/t/c/usr_2JHnoqEapnZSffxj2/tsk_ooDmM3aWfrvQN2QYq/enc_U2FsdGVkX19LrB-277UsunLcEeIBFTbaZ4oH1bTfhNtYws_fI69DorHhKjSRcNA9Av67bxz4Zu0fyWgNAd3qk1YuditDWn-44M3XLQmqHKK6pIxf7mnYIj1SIWhQFzO4a_Ui2KuVq131lzxOY3W48iN2qWfNbzz-GcHRgw2A8vZMzUrEpsP6zK0D4Y1KSskiMxQZ6pZqBXcpO_R6PdFksNdT6QUGW3s-uoooAvIETN4oOmGY0ZqauCLOfUmQwpeiIe8kL_YSxPjFsl4xfCxu5Xa0xfQjNQR3cHgKmdiEm_R2zQcro6lAQbiJeOZP6KPZrODlBYwLu0MDYZtJQIt0xNObZ1gLYN3rnUEBJMEvLk50gVyUIEzmyN0pJ5bfMkKLWOumoqG1__Htl0J9AMySI36q4JVVMSU2Z6_hRHWaLsNl5eYiPXk66RoiHeu98S221UW915WDNdws--1bpL_xKzVsh0ngjfapyWkjR9mlmjcQV_FQ6TTMHp54A043kAP6Tw5r3GrfAn2liS-MhNZVAAq-dGnhFT9qiWEKkhVEXHpEwSlW4c_7N6mJdy-vtf-XQfrceGBG5LZIonS8U10-PgnxiXqTYgKbkajouSJkW6lQMWhlRQy16CwGJVitxk-_qLLn9YLbvaNSugPKCD1pXLhdTbCVEawFt8fpWoSqnpqUuPB-Zqs7rjHn_WwE2P18WmAGjz8CjZdlzV-qYsOUNmjb27tqyQ5I5tEWIZovm0k=
51.254.243.65200 OK 1.5 kB URL HTTP/1.1 campaign.kabaun.com/api/t/c/usr_2JHnoqEapnZSffxj2/tsk_ooDmM3aWfrvQN2QYq/enc_U2FsdGVkX19LrB-277UsunLcEeIBFTbaZ4oH1bTfhNtYws_fI69DorHhKjSRcNA9Av67bxz4Zu0fyWgNAd3qk1YuditDWn-44M3XLQmqHKK6pIxf7mnYIj1SIWhQFzO4a_Ui2KuVq131lzxOY3W48iN2qWfNbzz-GcHRgw2A8vZMzUrEpsP6zK0D4Y1KSskiMxQZ6pZqBXcpO_R6PdFksNdT6QUGW3s-uoooAvIETN4oOmGY0ZqauCLOfUmQwpeiIe8kL_YSxPjFsl4xfCxu5Xa0xfQjNQR3cHgKmdiEm_R2zQcro6lAQbiJeOZP6KPZrODlBYwLu0MDYZtJQIt0xNObZ1gLYN3rnUEBJMEvLk50gVyUIEzmyN0pJ5bfMkKLWOumoqG1__Htl0J9AMySI36q4JVVMSU2Z6_hRHWaLsNl5eYiPXk66RoiHeu98S221UW915WDNdws--1bpL_xKzVsh0ngjfapyWkjR9mlmjcQV_FQ6TTMHp54A043kAP6Tw5r3GrfAn2liS-MhNZVAAq-dGnhFT9qiWEKkhVEXHpEwSlW4c_7N6mJdy-vtf-XQfrceGBG5LZIonS8U10-PgnxiXqTYgKbkajouSJkW6lQMWhlRQy16CwGJVitxk-_qLLn9YLbvaNSugPKCD1pXLhdTbCVEawFt8fpWoSqnpqUuPB-Zqs7rjHn_WwE2P18WmAGjz8CjZdlzV-qYsOUNmjb27tqyQ5I5tEWIZovm0k=
IP 51.254.243.65:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1190)
Hash 62365a6dfc71187125a488d0cb10591b
c739e3a9b179b211efec8fff55b98075c28d41e3
2d894843900f60c1cc03aff60370db8a0cf24fd29b764492fb01b735a822de38
Analyzer Verdict Alert fortinet Malware
GET /api/t/c/usr_2JHnoqEapnZSffxj2/tsk_ooDmM3aWfrvQN2QYq/enc_U2FsdGVkX19LrB-277UsunLcEeIBFTbaZ4oH1bTfhNtYws_fI69DorHhKjSRcNA9Av67bxz4Zu0fyWgNAd3qk1YuditDWn-44M3XLQmqHKK6pIxf7mnYIj1SIWhQFzO4a_Ui2KuVq131lzxOY3W48iN2qWfNbzz-GcHRgw2A8vZMzUrEpsP6zK0D4Y1KSskiMxQZ6pZqBXcpO_R6PdFksNdT6QUGW3s-uoooAvIETN4oOmGY0ZqauCLOfUmQwpeiIe8kL_YSxPjFsl4xfCxu5Xa0xfQjNQR3cHgKmdiEm_R2zQcro6lAQbiJeOZP6KPZrODlBYwLu0MDYZtJQIt0xNObZ1gLYN3rnUEBJMEvLk50gVyUIEzmyN0pJ5bfMkKLWOumoqG1__Htl0J9AMySI36q4JVVMSU2Z6_hRHWaLsNl5eYiPXk66RoiHeu98S221UW915WDNdws--1bpL_xKzVsh0ngjfapyWkjR9mlmjcQV_FQ6TTMHp54A043kAP6Tw5r3GrfAn2liS-MhNZVAAq-dGnhFT9qiWEKkhVEXHpEwSlW4c_7N6mJdy-vtf-XQfrceGBG5LZIonS8U10-PgnxiXqTYgKbkajouSJkW6lQMWhlRQy16CwGJVitxk-_qLLn9YLbvaNSugPKCD1pXLhdTbCVEawFt8fpWoSqnpqUuPB-Zqs7rjHn_WwE2P18WmAGjz8CjZdlzV-qYsOUNmjb27tqyQ5I5tEWIZovm0k= HTTP/1.1
Host: campaign.kabaun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Length: 1506
Content-Type: text/html
Date: Wed, 26 Oct 2022 14:56:05 GMT
Server:
X-Cache-Debug: custom.track
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e36c852b5e145f2f09fe73111fb162e1
e439c6a462f86a3003d6464a8b9999b1c4d1e210
52a721168d0c41cb0854ff8c730fce3b79db2e804b383238e95ff1401922bd74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52A721168D0C41CB0854FF8C730FCE3B79DB2E804B383238E95FF1401922BD74"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7212
Expires: Wed, 26 Oct 2022 16:56:17 GMT
Date: Wed, 26 Oct 2022 14:56:05 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 45bfdf3b823cd24564c8ac296a8b5b19
b0c442eb4f87556b3beb18ca8039dd4399b73f16
32113c679dda1f710ba67e537fdd0d435ccc186a238e3b14e48deb7b0700c693
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5799
Cache-Control: max-age=159096
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 14:56:05 GMT
Etag: "6358fe56-1d7"
Expires: Fri, 28 Oct 2022 11:07:41 GMT
Last-Modified: Wed, 26 Oct 2022 09:31:02 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 45bfdf3b823cd24564c8ac296a8b5b19
b0c442eb4f87556b3beb18ca8039dd4399b73f16
32113c679dda1f710ba67e537fdd0d435ccc186a238e3b14e48deb7b0700c693
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5799
Cache-Control: max-age=159096
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 14:56:05 GMT
Etag: "6358fe56-1d7"
Expires: Fri, 28 Oct 2022 11:07:41 GMT
Last-Modified: Wed, 26 Oct 2022 09:31:02 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash a39eea1096852891690eaee02a64383e
c273000f799fc3676e8e3ef3617611a31252cffc
d9d95319013d64bc2ef6d9870f4adba902ee970b6f9e96279c9ed86f556e0001
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D9D95319013D64BC2EF6D9870F4ADBA902EE970B6F9E96279C9ED86F556E0001"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5969
Expires: Wed, 26 Oct 2022 16:35:35 GMT
Date: Wed, 26 Oct 2022 14:56:06 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: uBrk5jIKvpWEsPF7Nq5W6zcTVMEBD/s5sVgqwq+FcEwtStfuU+ePPtWnGEOzxyUH0oMIF3G9Qak=
x-amz-request-id: RWY814ZMEG7NT07X
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 26 Oct 2022 14:39:14 GMT
age: 1012
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 14:56:06 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
campaign.kabaun.com/favicon.ico
51.254.243.65404 Not Found 0 B URL HTTP/1.1 campaign.kabaun.com/favicon.ico
IP 51.254.243.65:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: campaign.kabaun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://campaign.kabaun.com/api/t/c/usr_2JHnoqEapnZSffxj2/tsk_ooDmM3aWfrvQN2QYq/enc_U2FsdGVkX19LrB-277UsunLcEeIBFTbaZ4oH1bTfhNtYws_fI69DorHhKjSRcNA9Av67bxz4Zu0fyWgNAd3qk1YuditDWn-44M3XLQmqHKK6pIxf7mnYIj1SIWhQFzO4a_Ui2KuVq131lzxOY3W48iN2qWfNbzz-GcHRgw2A8vZMzUrEpsP6zK0D4Y1KSskiMxQZ6pZqBXcpO_R6PdFksNdT6QUGW3s-uoooAvIETN4oOmGY0ZqauCLOfUmQwpeiIe8kL_YSxPjFsl4xfCxu5Xa0xfQjNQR3cHgKmdiEm_R2zQcro6lAQbiJeOZP6KPZrODlBYwLu0MDYZtJQIt0xNObZ1gLYN3rnUEBJMEvLk50gVyUIEzmyN0pJ5bfMkKLWOumoqG1__Htl0J9AMySI36q4JVVMSU2Z6_hRHWaLsNl5eYiPXk66RoiHeu98S221UW915WDNdws--1bpL_xKzVsh0ngjfapyWkjR9mlmjcQV_FQ6TTMHp54A043kAP6Tw5r3GrfAn2liS-MhNZVAAq-dGnhFT9qiWEKkhVEXHpEwSlW4c_7N6mJdy-vtf-XQfrceGBG5LZIonS8U10-PgnxiXqTYgKbkajouSJkW6lQMWhlRQy16CwGJVitxk-_qLLn9YLbvaNSugPKCD1pXLhdTbCVEawFt8fpWoSqnpqUuPB-Zqs7rjHn_WwE2P18WmAGjz8CjZdlzV-qYsOUNmjb27tqyQ5I5tEWIZovm0k=
HTTP/1.1 404 Not Found
Cache-Control: max-age=86400
Server:
Strict-Transport-Security: max-age=31536000;
X-Cache-Debug: custom.cache
Date: Wed, 26 Oct 2022 14:56:06 GMT
Content-Length: 0
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash dd283dfc036535bdeb8a8be1310ef930
d3b1c300dd75d7af630e0f3112e49d7492d66c17
578f9256faa188facb3f2d68b02b0c7fb2e30e02e2e74234d015429563cba7aa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6097
Cache-Control: max-age=154338
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 14:56:06 GMT
Etag: "6358ea97-1d7"
Expires: Fri, 28 Oct 2022 09:48:24 GMT
Last-Modified: Wed, 26 Oct 2022 08:06:47 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
54.200.107.47101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.200.107.47:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: TiPsQfthLhpmTJ7RZIbecw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: waa6vUFAYrPaG89sEa53IQYrIfU=
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13671
Expires: Wed, 26 Oct 2022 18:43:59 GMT
Date: Wed, 26 Oct 2022 14:56:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13671
Expires: Wed, 26 Oct 2022 18:43:59 GMT
Date: Wed, 26 Oct 2022 14:56:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13671
Expires: Wed, 26 Oct 2022 18:43:59 GMT
Date: Wed, 26 Oct 2022 14:56:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13671
Expires: Wed, 26 Oct 2022 18:43:59 GMT
Date: Wed, 26 Oct 2022 14:56:08 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg
34.120.237.76200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 91ee720c15dc69de45080d0c951353af
5292b31a99d90bcb7071f327b93d52034bdf9dcb
7fbe9f0f6db08fd539f2e8d4ac22e3b4d5ca14f7cde69f8424cce8b361d026e6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4524
x-amzn-requestid: a493efe7-11c7-4032-b36b-7f838f8180bc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aljicH_6IAMFqpQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63587fa9-0f15eae7680ea7b15e5e47ec;Sampled=0
x-amzn-remapped-date: Wed, 26 Oct 2022 00:30:33 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OV7g4Y4fcQGijljebzHQtnpKdcPKw6LTxqORxxBJL2lFPYQLLoyNuQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 26 Oct 2022 00:34:40 GMT
age: 51688
etag: "5292b31a99d90bcb7071f327b93d52034bdf9dcb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc635673e-499c-4d9c-8bc5-a713fb19e221.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc635673e-499c-4d9c-8bc5-a713fb19e221.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b946c4f2f177828cf7b76c5764e97157
c3856686b98e1883133aa1824c496d34512769a0
be818a015fc9c745ea561a0b9c2aca6ba25ade24acd696fa651163d47b195371
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc635673e-499c-4d9c-8bc5-a713fb19e221.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13796
x-amzn-requestid: 90b1e032-78c6-499d-b564-f25c15e20304
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alJ2OG0SoAMFx-w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6358568e-599d0f526fc6a01f77b67dcf;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:35:10 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qxBQMJAnYNJVLBf5LSOTC7v3hPl9sh-G-OIqrK7d5KpdVITaQCcGMA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:47:18 GMT
age: 61730
etag: "c3856686b98e1883133aa1824c496d34512769a0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae122c0f-a41b-4abc-a703-a5de223ae39a.png
34.120.237.76200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae122c0f-a41b-4abc-a703-a5de223ae39a.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash db946866312c734e0c5f91ca76255b2f
e8b8236baab9106a426a415eb01494cc4cc91ad1
a695e7bc87da2c6d9f5669c09e662fe22982e69cb139466efa5093429fe19866
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae122c0f-a41b-4abc-a703-a5de223ae39a.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8439
x-amzn-requestid: e0eed725-0725-4f5a-9c91-fec13ad0ebe5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ajKYQGWhIAMFdhw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63578a9b-2a0115120e75f5271cea992f;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 07:04:59 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: WVz4PqWqT9Pk1juQ95Xzi-7HcEDBqKb5VAncjXxOYFfKTnjRbmodoA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Wed, 26 Oct 2022 04:44:59 GMT
age: 36669
etag: "e8b8236baab9106a426a415eb01494cc4cc91ad1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fe27cf2-33a8-42cc-a8cd-f5e804e60e26.jpeg
34.120.237.76200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fe27cf2-33a8-42cc-a8cd-f5e804e60e26.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c3ae78510434fd68063fc144bf614382
3bb87ca5274ce9f6d81da60ab940d23ccd12843b
f42d89328435cb37cba1111903a6bd5e900857d0942e1506ea2115b4e6301541
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fe27cf2-33a8-42cc-a8cd-f5e804e60e26.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7929
x-amzn-requestid: 6324abd6-8e27-4903-8bfc-a0fc6a8625be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alK9LEeoIAMF5mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63585854-2900343b1ae208a903fe58fd;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:42:44 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5MR4UzoW6rVsSpEyPAWrcFb2LCRICaG-toy3JflaXRrzZwcgMs48VQ==
via: 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:49:35 GMT
age: 61593
etag: "3bb87ca5274ce9f6d81da60ab940d23ccd12843b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F057530b7-f6b8-4f9b-b6fc-8fdc4a101f36.webp
34.120.237.76200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F057530b7-f6b8-4f9b-b6fc-8fdc4a101f36.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1cc61ad4b1d66ab4bce27288ee690e12
324e13ad5c99f628d713e55a2994ad4042ece70e
62cd88bc19bc1f0be2a37c3e990897158acd3d55aa3ddd299144d4f9596ba34e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F057530b7-f6b8-4f9b-b6fc-8fdc4a101f36.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6831
x-amzn-requestid: cc6f38ff-ab33-4b18-8cae-aa6bc061962f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alKjPH7ToAMFSiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635857ae-3db2790d0e6c5fab6c4bc81f;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:39:58 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: tiWbOUwlRzaT2EnCWIgoFaT_ho55s3tgRxalb7yBbI21Pv0BhfLJOg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:52:53 GMT
age: 61395
etag: "324e13ad5c99f628d713e55a2994ad4042ece70e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5da11cdb-c8be-46f4-95b0-792c49d930a7.jpeg
34.120.237.76200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5da11cdb-c8be-46f4-95b0-792c49d930a7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5987bcd44ab0db5313aa4f409a8a212f
691a36cde98a9fe1660745dd811e0be2ae67036c
e47ce3587c647b52669f675dc7e84e21555f82138091fb04febc951b4c06ba30
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5da11cdb-c8be-46f4-95b0-792c49d930a7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8553
x-amzn-requestid: 69931a9c-027e-428e-a88d-61c5fac64daa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alJ2iEnzoAMFZAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63585690-12c78c5157fb3fa41a13548c;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:35:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: E4t7XezEVl1x_4sbidtDPjCuZoCh7N01y7ZeYZWlAL1w8ut4Qx95TA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:46:50 GMT
age: 61758
etag: "691a36cde98a9fe1660745dd811e0be2ae67036c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcampaign.kabaun.com%2Fapi%2Ft%2Fc%2Fusr_gWH8qhHTSPjZeqMRC%2Ftsk_4Sqhe6gDr9m2Yr32L%2Fenc_U2FsdGVkX1-ZuIKYfbdkXZ5oguyauRXPB6_2s998vye-xGb-l2CfIB-c4IgfLd7r&data=05%7C01%7Cmbhat%40semi.org%7C9db37036fd564438a24908da90020803%7Ccca80bdd74bd4f178e6deecd0bac5a02%7C0%7C0%7C637980635672920978%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=%2FE0DM4kf%2Fr3gp6GlHg%2Bz%2FEKFf5ZmaDNZBV0v%2Bg197hM%3D&reserved=0
104.47.59.156302 Found 265 B URL HTTP/1.1 nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcampaign.kabaun.com%2Fapi%2Ft%2Fc%2Fusr_gWH8qhHTSPjZeqMRC%2Ftsk_4Sqhe6gDr9m2Yr32L%2Fenc_U2FsdGVkX1-ZuIKYfbdkXZ5oguyauRXPB6_2s998vye-xGb-l2CfIB-c4IgfLd7r&data=05%7C01%7Cmbhat%40semi.org%7C9db37036fd564438a24908da90020803%7Ccca80bdd74bd4f178e6deecd0bac5a02%7C0%7C0%7C637980635672920978%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=%2FE0DM4kf%2Fr3gp6GlHg%2Bz%2FEKFf5ZmaDNZBV0v%2Bg197hM%3D&reserved=0
IP 104.47.59.156:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash fc5151a789dbc2ea89eb2556715aeb29
b3d0b87d3942bd177de44e757adc593a9464b24c
35e49f30978d70446321f19959c3a25eee38ae5a0be49e00503c95cc6c077131
GET /?url=https%3A%2F%2Fcampaign.kabaun.com%2Fapi%2Ft%2Fc%2Fusr_gWH8qhHTSPjZeqMRC%2Ftsk_4Sqhe6gDr9m2Yr32L%2Fenc_U2FsdGVkX1-ZuIKYfbdkXZ5oguyauRXPB6_2s998vye-xGb-l2CfIB-c4IgfLd7r&data=05%7C01%7Cmbhat%40semi.org%7C9db37036fd564438a24908da90020803%7Ccca80bdd74bd4f178e6deecd0bac5a02%7C0%7C0%7C637980635672920978%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=%2FE0DM4kf%2Fr3gp6GlHg%2Bz%2FEKFf5ZmaDNZBV0v%2Bg197hM%3D&reserved=0 HTTP/1.1
Host: nam12.safelinks.protection.outlook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://campaign.kabaun.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://campaign.kabaun.com/api/t/c/usr_gWH8qhHTSPjZeqMRC/tsk_4Sqhe6gDr9m2Yr32L/enc_U2FsdGVkX1-ZuIKYfbdkXZ5oguyauRXPB6_2s998vye-xGb-l2CfIB-c4IgfLd7r
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 4.0
X-SL-GetUrlReputation-Verdict: Good
X-SL-UrlRepTTL: 30
X-Robots-Tag: noindex, nofollow
X-AspNet-Version: 4.0.30319
X-ServerName: DM6NAM12WS035
X-ServerVersion: 15.20.5769.007
X-ServerLat: 689
X-SafeLinks-Tracking-Id: a07f2b86-717d-4aa2-5db8-08dab76236a4
X-Powered-By: ASP.NET
X-Content-Type-Options: nosniff
X-UA-Compatible: IE=Edge
Date: Wed, 26 Oct 2022 14:56:08 GMT
Connection: close
Content-Length: 265
campaign.kabaun.com/api/t/c/usr_gWH8qhHTSPjZeqMRC/tsk_4Sqhe6gDr9m2Yr32L/enc_U2FsdGVkX1-ZuIKYfbdkXZ5oguyauRXPB6_2s998vye-xGb-l2CfIB-c4IgfLd7r
51.254.243.65200 OK 484 B URL HTTP/2 campaign.kabaun.com/api/t/c/usr_gWH8qhHTSPjZeqMRC/tsk_4Sqhe6gDr9m2Yr32L/enc_U2FsdGVkX1-ZuIKYfbdkXZ5oguyauRXPB6_2s998vye-xGb-l2CfIB-c4IgfLd7r
IP 51.254.243.65:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 65672b30746f534083419e67d2a91a98
00f14fbc348331e358d6ccf7bd4bceec5d61e15e
b8a099f2aad3eecd511445bd1b91b735bcf685bb5f80e6f43a3d269296955f21
Analyzer Verdict Alert fortinet Malware
GET /api/t/c/usr_gWH8qhHTSPjZeqMRC/tsk_4Sqhe6gDr9m2Yr32L/enc_U2FsdGVkX1-ZuIKYfbdkXZ5oguyauRXPB6_2s998vye-xGb-l2CfIB-c4IgfLd7r HTTP/1.1
Host: campaign.kabaun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://campaign.kabaun.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
date: Wed, 26 Oct 2022 14:56:08 GMT
server:
x-cache-debug: custom.track
content-length: 484
X-Firefox-Spdy: h2
campaign.kabaun.com/favicon.ico
51.254.243.65404 Not Found 0 B URL HTTP/2 campaign.kabaun.com/favicon.ico
IP 51.254.243.65:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: campaign.kabaun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://campaign.kabaun.com/api/t/c/usr_gWH8qhHTSPjZeqMRC/tsk_4Sqhe6gDr9m2Yr32L/enc_U2FsdGVkX1-ZuIKYfbdkXZ5oguyauRXPB6_2s998vye-xGb-l2CfIB-c4IgfLd7r
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
cache-control: max-age=86400
server:
strict-transport-security: max-age=31536000;
x-cache-debug: custom.cache
content-length: 0
date: Wed, 26 Oct 2022 14:56:08 GMT
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 0225982482892a6e03a003d2aeb49bf0
cc5d3fbd444c62e4d9c09de66c8620fcf19784df
8d86cb05c610624f461e07588a660e5c6a687525cfd7d4694696e474111b89ac
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 14:56:09 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 26 Oct 2022 06:42:02 GMT
Expires: Wed, 02 Nov 2022 06:42:01 GMT
Etag: "cc5d3fbd444c62e4d9c09de66c8620fcf19784df"
Cache-Control: max-age=574551,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 760409794e901c0e-OSL
kabaun.com/
23.236.62.147302 Found 0 B IP 23.236.62.147:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: kabaun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://campaign.kabaun.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/2 302 Found
date: Wed, 26 Oct 2022 14:56:09 GMT
content-length: 0
location: https://en.kabaun.com/
strict-transport-security: max-age=3600
cache-control: no-cache
x-wix-request-id: 1666796169.4552117248211315508
age: 0
x-seen-by: wmgbEcS9zOENaefw7bU4Yd993VMAmNF36HsHNGfOaG0=,vmPhUNXuQemvc7fjBI8NWewfbs+7qUVAqsIx00yI78k=,sHU62EDOGnH2FBkJkG/Wx8EeXWsWdHrhlvbxtlynkVg4ZJ4lc36GHcF546Fi6PWJ,m0j2EEknGIVUW/liY8BLLpSVz5Ut04MiBb9F+jj55SFGkFvVdT2Nq6f3Hedj7ewB,2d58ifebGbosy5xc+FRaltNmnRdu9FY2yY/9eCbC/Dfp3uoW/T0HGtp3gtT2DrqSNbHNe9mU3nRpgq3JWmfDPg==,2UNV7KOq4oGjA5+PKsX47Mf8s35TOGDl04KsxB8N+c0fbJaKSXYQ/lskq2jK6SGP,osV03DUdKaEVOGwoQFgPYnMgHqYG8sXFA/MlhM9fbb0=,sQ19iEk473qMiaixh4sATvN9dCH/N8Y3GhLOxlD5z7M=,hcIRt1xPGErdHY3PcxUvoweFlJLSWdLSSlYZL6U8d8np2UCOqt6XhG+1JVcltJaB
x-content-type-options: nosniff
server: Pepyaka/1.19.10
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7f14a900d7d7c92c1cd3838a85631ba3
0e1e5b808c13d8ac5a3e9ae18c73cdeaea7fd0d6
6b241402497f2fb5b704846cf1027931ac7012b04662ed0e5d6b14b29bdd4dae
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6B241402497F2FB5B704846CF1027931AC7012B04662ED0E5D6B14B29BDD4DAE"
Last-Modified: Tue, 25 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21553
Expires: Wed, 26 Oct 2022 20:55:22 GMT
Date: Wed, 26 Oct 2022 14:56:09 GMT
Connection: keep-alive
static.parastorage.com/unpkg/react@16.14.0/umd/react.production.min.js
151.101.85.91200 OK 4.7 kB URL HTTP/2 static.parastorage.com/unpkg/react@16.14.0/umd/react.production.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (574)
Hash 98af04861581703b8f33819f777e19f5
68333056e788b1276646537149661537143ddc8a
9b4dce05c51788fcb566e1b8bbfc8f9df48249035b9d2cb8633011b7bd26c5dc
GET /unpkg/react@16.14.0/umd/react.production.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-max-age: 3000
last-modified: Thu, 15 Oct 2020 02:11:22 GMT
etag: W/"63d498e143f421cc44dfb64f22fef270"
access-control-allow-methods: GET, GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciexeHcfy36aNagyZbZBL0eWIHlCalF7YnfvOr2cMPpyw==,aVxMblM8KFG3we5NLvyVc0g5Kz7nWLaChx0hkFXPsQ8ghGES6Jsix+7j8qfOfk1L
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1660710573.6746456715006120999
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 6097132
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 46767
x-timer: S1666796170.379277,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4703
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/main.852ebca7.bundle.min.js
151.101.85.91200 OK 47 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/main.852ebca7.bundle.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (47703)
Hash f4a39779cf490c49e2c25f4e5743de59
0281a6d81b340822fd9317fd0eb3a2c9951152fc
8a9c32d2211d3b8b81344d68de255f7c42127f166afdb1665fb3abf19c39b86e
GET /services/wix-thunderbolt/dist/main.852ebca7.bundle.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: PENDING
last-modified: Tue, 18 Oct 2022 15:17:00 GMT
etag: W/"769b631f15e097d6935d9b01a35b723f"
x-amz-version-id: C3Y0iCrgGmLupuLM1N.GDcyUXYDm7qji
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrchkavE0ZtMXws1mfakihq4B,aVxMblM8KFG3we5NLvyVc0Sqk9+MZwtm2RdjD28LmUcQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.0
x-wix-request-id: 1666170986.9944071998041013718
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 689748
x-served-by: cache-bma1650-BMA
x-cache: HIT
x-cache-hits: 1930
x-timer: S1666796170.361044,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 47046
X-Firefox-Spdy: h2
static.parastorage.com/unpkg/react-dom@16.14.0/umd/react-dom.production.min.js
151.101.85.91200 OK 36 kB URL HTTP/2 static.parastorage.com/unpkg/react-dom@16.14.0/umd/react-dom.production.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (682)
Hash c88aca3ce8fd7ec85ff55d835e476dcc
66f5f5ddcff30e3b7425ca4995c27ab19fee025f
c2c5ce710d0420daa825ffff8ade4628c84ab0dad9c066d356e91c47f5dec485
GET /unpkg/react-dom@16.14.0/umd/react-dom.production.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-max-age: 3000
last-modified: Thu, 15 Oct 2020 02:11:22 GMT
etag: W/"c5abc87541fe6bb0f43f22af475a8b20"
access-control-allow-methods: GET, GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjBLy8P45DoDO4LnRm+zqsP,aVxMblM8KFG3we5NLvyVc7eNHvhCRAbD7EPjVZvQO20fbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1664850078.709982629939212470
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 1981401
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 46828
x-timer: S1666796170.379293,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 36048
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/bootstrap-features.b793dad5.bundle.min.js
151.101.85.91200 OK 53 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/bootstrap-features.b793dad5.bundle.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (54966)
Hash 7ca4b35f91885ecded83c95d939a7149
1b36ce548baf2f38b0d09c33bf2b01390a05893c
308c90c9478b1225e6adb56ccdadd702cec767c8a2b451591b1fb46b95feb2cb
GET /services/wix-thunderbolt/dist/bootstrap-features.b793dad5.bundle.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Thu, 20 Oct 2022 08:03:34 GMT
etag: W/"79e83293d9ef33e8a1738707f80ce1e3"
x-amz-version-id: YWBVsbILtwgbtK0beODq5Cu.lk8FUnUl
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrchkavE0ZtMXws1mfakihq4B,aVxMblM8KFG3we5NLvyVcwnP9a1Ia0LRvqhhntyPznoQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.0
x-wix-request-id: 1666253589.2245045232083013719
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 542978
x-served-by: cache-bma1650-BMA
x-cache: HIT
x-cache-hits: 1804
x-timer: S1666796170.367834,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 52795
X-Firefox-Spdy: h2
static.parastorage.com/unpkg/lodash@4.17.21/lodash.min.js
151.101.85.91200 OK 25 kB URL HTTP/2 static.parastorage.com/unpkg/lodash@4.17.21/lodash.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (4143)
Hash 9661f391f69ddbf1e8bbf879c1c69660
60e78567cd82d5dec158be4ae4d365f45412fb36
59fe3fa5daacb2b18c734a563d4e8e9df1f51eb24672249ca4962f3132149191
GET /unpkg/lodash@4.17.21/lodash.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Sun, 21 Feb 2021 02:37:42 GMT
etag: W/"9becc40fb1d85d21d0ca38e2f7069511"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjMXxQm1EY0IGoQ+Aul+AXR,aVxMblM8KFG3we5NLvyVc5a79avpR2DZCk9xnuoLql1jPZTuGyYqVhtmEIgJUb4w
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1661228868.541712333382513129
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 5643527
x-served-by: cache-bma1650-BMA
x-cache: HIT
x-cache-hits: 2416
x-timer: S1666796170.371528,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25102
X-Firefox-Spdy: h2
static.parastorage.com/services/linguist-flags/1.663.0/assets/flags/round/GBR.png
151.101.85.91200 OK 1.7 kB URL HTTP/2 static.parastorage.com/services/linguist-flags/1.663.0/assets/flags/round/GBR.png
IP 151.101.85.91:0
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 2899075f586b13262dd9fa3597eb7bcb
5c8bb30923143323f73589c4b92c4689be66beb9
a7b5d6d9bffae96249d31bb9b0da3cc95774e455f6bef8a617a1ff5671ce3b49
GET /services/linguist-flags/1.663.0/assets/flags/round/GBR.png HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Thu, 10 Jun 2021 13:10:09 GMT
etag: "2899075f586b13262dd9fa3597eb7bcb"
x-goog-meta-wix-basic: eyJ3aWR0aCI6IDMyLCAiaGVpZ2h0IjogMzIsICJmb3JtYXQiOiAicG5nIiwgImNvbG9yc3BhY2UiOiAic1JHQiIsICJvcmllbnRhdGlvbiI6IDB9
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciDgmy1x1bk0T2mMblm59aj,aVxMblM8KFG3we5NLvyVc5U6nDV0Sthqh2jmVbYx0F4QXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000
server: Pepyaka/1.19.10
x-wix-request-id: 1666061937.980280028131515896
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 761501
x-served-by: cache-bma1650-BMA
x-cache: HIT
x-cache-hits: 6
x-timer: S1666796170.398230,VS0,VE0
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1746
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-perf-measure/1.1042.0/wix-perf-measure.bundle.min.js
151.101.85.91200 OK 12 kB URL HTTP/2 static.parastorage.com/services/wix-perf-measure/1.1042.0/wix-perf-measure.bundle.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (41116)
Hash eff084a5748e8e0f2a7ec583b470a688
ebbf9733448bb4ce7f5666a8ab387776e721d8f0
bc5d488a06103bf405f79c3f7915e4bfd713b27c9cd9406c98e6885e4238b037
GET /services/wix-perf-measure/1.1042.0/wix-perf-measure.bundle.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 15 Sep 2022 10:21:30 GMT
etag: W/"72cd3e3e90088aa5acd84acd0d7346c6"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciexeHcfy36aNagyZbZBL0eWIHlCalF7YnfvOr2cMPpyw==,aVxMblM8KFG3we5NLvyVc5a79avpR2DZCk9xnuoLql1jPZTuGyYqVhtmEIgJUb4w
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1663237935.0068719354608228454
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 3558790
x-served-by: cache-bma1650-BMA
x-cache: HIT
x-cache-hits: 1859
x-timer: S1666796170.398300,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 11956
X-Firefox-Spdy: h2
static.parastorage.com/services/tag-manager-client/1.427.0/siteTags.bundle.min.js
151.101.85.91200 OK 3.9 kB URL HTTP/2 static.parastorage.com/services/tag-manager-client/1.427.0/siteTags.bundle.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (11168)
Hash 5d436a29345aa2e8c4a824fa19f4ecc7
2b479a24b7f7bc5d556f93a0599bbe7104acf467
242529af773ec259f51763a104f5d5ef45715558d932b1b91ff39680269a783f
GET /services/tag-manager-client/1.427.0/siteTags.bundle.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 25 May 2021 09:37:42 GMT
etag: W/"74b64900831a2e814a8ff0cdedcf80cb"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjBLy8P45DoDO4LnRm+zqsP,aVxMblM8KFG3we5NLvyVcyzve4L4qo9dv8TvlcgmZhMQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1661824722.2696518981706122520
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 5104689
x-served-by: cache-bma1650-BMA
x-cache: HIT
x-cache-hits: 1868
x-timer: S1666796170.398259,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3858
X-Firefox-Spdy: h2
static.parastorage.com/services/linguist-flags/1.663.0/assets/flags/round/FRA.png
151.101.85.91200 OK 1.2 kB URL HTTP/2 static.parastorage.com/services/linguist-flags/1.663.0/assets/flags/round/FRA.png
IP 151.101.85.91:0
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 4c05a7d33d63441710b6584a51bbc205
3cc81cf4628cafedbbe2d28b7a3508ad6c452084
f290e4d63f63c47a9b233b64ea47e55cd9851f366977ced350483df4664d3df6
GET /services/linguist-flags/1.663.0/assets/flags/round/FRA.png HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Thu, 10 Jun 2021 13:09:55 GMT
etag: "4c05a7d33d63441710b6584a51bbc205"
x-goog-meta-wix-basic: eyJ3aWR0aCI6IDMyLCAiaGVpZ2h0IjogMzIsICJmb3JtYXQiOiAicG5nIiwgImNvbG9yc3BhY2UiOiAic1JHQiIsICJvcmllbnRhdGlvbiI6IDB9
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrchkavE0ZtMXws1mfakihq4B,aVxMblM8KFG3we5NLvyVc5U6nDV0Sthqh2jmVbYx0F4QXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000
server: Pepyaka/1.19.0
x-wix-request-id: 1666067353.411289746166413718
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 761776
x-served-by: cache-bma1650-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1666796170.399319,VS0,VE1
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1193
X-Firefox-Spdy: h2
siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&deviceType=Desktop&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=d94d83c8.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=true&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=Subdomain&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-features&originalLanguage=fr&pageId=34436a_1104abb76932c2bceaa3186cb5f61e87_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&staticHTMLComponentUrl=https%3A%2F%2Fen-kabaun-com.filesusr.com%2F&useSandboxInHTMLComp=false&viewMode=desktop
151.101.85.91200 OK 27 kB URL HTTP/2 siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&deviceType=Desktop&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=d94d83c8.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=true&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=Subdomain&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-features&originalLanguage=fr&pageId=34436a_1104abb76932c2bceaa3186cb5f61e87_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&staticHTMLComponentUrl=https%3A%2F%2Fen-kabaun-com.filesusr.com%2F&useSandboxInHTMLComp=false&viewMode=desktop
IP 151.101.85.91:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65459), with no line terminators
Hash 783527810a1c527a4dd0216d3500fb45
3129c39bd0de5cf69608449859f48ea371ee60b1
1cba19e6901c260f5a88b74ecb1d789e36bb2399c72f88de4733cdd9c904ecd0
GET /pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&deviceType=Desktop&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=d94d83c8.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=true&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=Subdomain&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-features&originalLanguage=fr&pageId=34436a_1104abb76932c2bceaa3186cb5f61e87_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&staticHTMLComponentUrl=https%3A%2F%2Fen-kabaun-com.filesusr.com%2F&useSandboxInHTMLComp=false&viewMode=desktop HTTP/1.1
Host: siteassets.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
access-control-expose-headers: age,via,x-cache-status,X-cache-status
etag: W/"26736-OjyufjDC63dJFSUhrgkTeKouDF8"
content-encoding: gzip
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-seen-by: 2iuX5LYwvZa9CoGaG8ZUZjb5j8fWnvnycWNmjdvR375xW9Ms9IQL2HG9X48emqdN,/SoSYmefJLK2hiZpy2XaYlN1tYMUtM33SkDcJDaLDqlk8wpCZTi5fJ6xlwcitpUE,ZUT6NeJ/NsDmQ9DMGnwT1LLDCxvM4S0vekmLfKGMs5Ya0sM5c8dDUFHeNaFq0qDu
server: Pepyaka/1.19.10
cache-control: public, max-age=7776000, immutable
x-wix-request-id: 1666796170.43711772283974627643
timing-allow-origin: *
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 0
x-served-by: cache-bma1640-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1666796170.391029,VS0,VE93
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 26579
X-Firefox-Spdy: h2
static.parastorage.com/services/santa-resources/dist/viewer/user-site-fonts/fonts/Poppins-semibold/v5/aDjpMND83pDErGXlVEr-Sfk_vArhqVIZ0nv9q090hN8.woff2
151.101.85.91200 OK 10 kB URL HTTP/2 static.parastorage.com/services/santa-resources/dist/viewer/user-site-fonts/fonts/Poppins-semibold/v5/aDjpMND83pDErGXlVEr-Sfk_vArhqVIZ0nv9q090hN8.woff2
IP 151.101.85.91:0
File type Web Open Font Format (Version 2), TrueType, length 10504, version 1.0\012- data
Hash 1ad68bab8e0ccf5db3d631141850dcd5
46c9ae77c89b75c49cccf175b3332c77081f5bac
f5decc210dbe7320771b5ddf86e95be8c6d74d09ac53ab756d4bebcca49c5d3f
GET /services/santa-resources/dist/viewer/user-site-fonts/fonts/Poppins-semibold/v5/aDjpMND83pDErGXlVEr-Sfk_vArhqVIZ0nv9q090hN8.woff2 HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
x-amz-replication-status: COMPLETED
last-modified: Sun, 23 Oct 2022 11:07:15 GMT
etag: "1ad68bab8e0ccf5db3d631141850dcd5"
x-amz-version-id: alBSHBpc2WiQ0pF3DhSjQ8CNvap_3WRK
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciDgmy1x1bk0T2mMblm59aj,aVxMblM8KFG3we5NLvyVcwnP9a1Ia0LRvqhhntyPznoQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1666756673.8791080662692115896
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 72375
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 100
x-timer: S1666796170.494084,VS0,VE0
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10504
X-Firefox-Spdy: h2
siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&deviceType=Desktop&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=d94d83c8.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=true&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=Subdomain&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-features&originalLanguage=fr&pageId=34436a_f1273ecf1ea5022d57d0c1933016d8b5_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&staticHTMLComponentUrl=https%3A%2F%2Fen-kabaun-com.filesusr.com%2F&useSandboxInHTMLComp=false&viewMode=desktop
151.101.85.91200 OK 26 kB URL HTTP/2 siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&deviceType=Desktop&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=d94d83c8.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=true&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=Subdomain&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-features&originalLanguage=fr&pageId=34436a_f1273ecf1ea5022d57d0c1933016d8b5_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&staticHTMLComponentUrl=https%3A%2F%2Fen-kabaun-com.filesusr.com%2F&useSandboxInHTMLComp=false&viewMode=desktop
IP 151.101.85.91:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 2a006a0f24a4a66428134f0e4413fb69
4ffa8bfd871799bffd171b93fecd7fae1b020ef9
678392ab0c16b5f619bd83e888ea13155973a36ddc21a4d84e4f385eba88cf86
GET /pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&deviceType=Desktop&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=d94d83c8.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=true&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=Subdomain&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-features&originalLanguage=fr&pageId=34436a_f1273ecf1ea5022d57d0c1933016d8b5_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&staticHTMLComponentUrl=https%3A%2F%2Fen-kabaun-com.filesusr.com%2F&useSandboxInHTMLComp=false&viewMode=desktop HTTP/1.1
Host: siteassets.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
access-control-expose-headers: age,via,x-cache-status,X-cache-status
etag: W/"21131-A8ox6SVj+dFKNvJW1ZcbwNqFDgM"
content-encoding: gzip
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-seen-by: 2iuX5LYwvZa9CoGaG8ZUZjb5j8fWnvnycWNmjdvR374F6VmO9/TBL1yPY1fyoS/D,/SoSYmefJLK2hiZpy2XaYlN1tYMUtM33SkDcJDaLDqk9ohduqgp+CiYH1GQw2S9S,ZUT6NeJ/NsDmQ9DMGnwT1Nx61v0XQ9VxU5xVU8/H7tYQXT2AyjWfyxKagyd4/pDD
server: Pepyaka/1.19.0
cache-control: public, max-age=7776000, immutable
x-wix-request-id: 1666796170.44911614708752913718
timing-allow-origin: *
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 0
x-served-by: cache-bma1640-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1666796170.394554,VS0,VE103
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25766
X-Firefox-Spdy: h2
static.parastorage.com/services/santa-resources/dist/viewer/user-site-fonts/fonts/Poppins-extralight/v5/h3r77AwDsldr1E_2g4qqGPk_vArhqVIZ0nv9q090hN8.woff2
151.101.85.91200 OK 10 kB URL HTTP/2 static.parastorage.com/services/santa-resources/dist/viewer/user-site-fonts/fonts/Poppins-extralight/v5/h3r77AwDsldr1E_2g4qqGPk_vArhqVIZ0nv9q090hN8.woff2
IP 151.101.85.91:0
File type Web Open Font Format (Version 2), TrueType, length 10424, version 1.0\012- data
Hash f382578649df40093825e06a8c31d5b2
5fce857e340158deb6b656435116bac2d2f92e44
87d9ef0dde0568ba2c03802abd3dc99c3dfabb4bfa9d6a01fd6a1e301cac2f7a
GET /services/santa-resources/dist/viewer/user-site-fonts/fonts/Poppins-extralight/v5/h3r77AwDsldr1E_2g4qqGPk_vArhqVIZ0nv9q090hN8.woff2 HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
last-modified: Wed, 07 Sep 2022 13:53:07 GMT
etag: "f382578649df40093825e06a8c31d5b2"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjV0TBmJ+uLPQ4OZPC1VSMH,aVxMblM8KFG3we5NLvyVc1XEV11U4uj6EySGMcOeW2gfbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.0
x-wix-request-id: 1662895750.072139525604807426661
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 4063795
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 140
x-timer: S1666796170.494164,VS0,VE0
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10424
X-Firefox-Spdy: h2
static.parastorage.com/services/third-party/fonts/user-site-fonts/fonts/0078f486-8e52-42c0-ad81-3c8d3d43f48e.woff2
151.101.85.91200 OK 17 kB URL HTTP/2 static.parastorage.com/services/third-party/fonts/user-site-fonts/fonts/0078f486-8e52-42c0-ad81-3c8d3d43f48e.woff2
IP 151.101.85.91:0
File type Web Open Font Format (Version 2), TrueType, length 17216, version 1.0\012- data
Hash fc02a3c78cac0f6ab99c6c19f004d02d
7bcc73042c63c86637084549daad26aed3621d64
0ddce0e617794fd30b60e5c829fe12b9d7eeba14e561e7d89da5fcaf2fe900c3
GET /services/third-party/fonts/user-site-fonts/fonts/0078f486-8e52-42c0-ad81-3c8d3d43f48e.woff2 HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
access-control-max-age: 3000
last-modified: Tue, 17 Apr 2018 11:11:01 GMT
etag: "ef4257ccfa0fce4d914b23a28aa6fdf4-1"
x-amz-version-id: ZJhEgw5338rDGW18OcyggGHIv4bi5qCO
access-control-allow-methods: GET, GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjV0TBmJ+uLPQ4OZPC1VSMH,aVxMblM8KFG3we5NLvyVc1XEV11U4uj6EySGMcOeW2gfbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.0
x-wix-request-id: 1666061044.834287344356527090
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 775358
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 4824
x-timer: S1666796170.494348,VS0,VE0
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 17216
X-Firefox-Spdy: h2
static.parastorage.com/services/santa-resources/dist/viewer/user-site-fonts/fonts/Poppins-extralight/v5/rijG6I_IOXJjsH07UEo2mw.woff2
151.101.85.91200 OK 10 kB URL HTTP/2 static.parastorage.com/services/santa-resources/dist/viewer/user-site-fonts/fonts/Poppins-extralight/v5/rijG6I_IOXJjsH07UEo2mw.woff2
IP 151.101.85.91:0
File type Web Open Font Format (Version 2), TrueType, length 10464, version 1.0\012- data
Hash 6fc407b725b0f9f3c7bd99efe9c9b232
ed72d23629744e348b9cfdda745306f6a2ba1262
091bb0de0a818620d0fa529df0edee88a5ac2244b5396edbac0a527035cf4af7
GET /services/santa-resources/dist/viewer/user-site-fonts/fonts/Poppins-extralight/v5/rijG6I_IOXJjsH07UEo2mw.woff2 HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Sun, 02 Oct 2022 11:26:56 GMT
etag: "6fc407b725b0f9f3c7bd99efe9c9b232"
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjBLy8P45DoDO4LnRm+zqsP,aVxMblM8KFG3we5NLvyVcwnP9a1Ia0LRvqhhntyPznoQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1664850479.799982680327532470
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 1983718
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 148
x-timer: S1666796171.500352,VS0,VE0
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10464
X-Firefox-Spdy: h2
static.parastorage.com/services/third-party/fonts/user-site-fonts/fonts/open-source/opensans-regular-webfont.woff
151.101.85.91200 OK 85 kB URL HTTP/2 static.parastorage.com/services/third-party/fonts/user-site-fonts/fonts/open-source/opensans-regular-webfont.woff
IP 151.101.85.91:0
File type Web Open Font Format, TrueType, length 84928, version 1.0\012- data
Hash 55b8ce1f9a32bb0f83f14813eac0b7ca
c0d0478dc16d58a02f169198d862e684a2b591eb
33637fa0826291bfe2cf8cd916c1e0e96a0e6f9f7fbb9a7e93c183e5448d1774
GET /services/third-party/fonts/user-site-fonts/fonts/open-source/opensans-regular-webfont.woff HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-font-woff
last-modified: Tue, 17 Apr 2018 11:11:05 GMT
etag: "16bf2b9a3c1d6cbc8582db67dcb66146-1"
x-amz-version-id: lbXdWSehMaKYxDRkfPaG5H9M4INGtVs6
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrchkavE0ZtMXws1mfakihq4B,aVxMblM8KFG3we5NLvyVcyeTzFUhjLKPB6lD0luXXHcfbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.0
x-wix-request-id: 1662510348.471135112212571728478
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 4329325
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 3
x-timer: S1666796171.500276,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 84928
X-Firefox-Spdy: h2
static.parastorage.com/services/third-party/fonts/user-site-fonts/fonts/open-source/opensans-bold-webfont.woff
151.101.85.91200 OK 85 kB URL HTTP/2 static.parastorage.com/services/third-party/fonts/user-site-fonts/fonts/open-source/opensans-bold-webfont.woff
IP 151.101.85.91:0
File type Web Open Font Format, TrueType, length 84696, version 1.0\012- data
Hash 57988d1e313ced044867ac305c58ce7b
991c74f36c41082dc72ca21d1ca5e108406102c3
ff94376e9e04cda1655d1ff43c9901722491edf7cc2f5b27f1eb2e8e10bd0696
GET /services/third-party/fonts/user-site-fonts/fonts/open-source/opensans-bold-webfont.woff HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-font-woff
last-modified: Tue, 17 Apr 2018 11:11:04 GMT
etag: "7362fe704ffe18ad6ee9282752177dc1-1"
x-amz-version-id: TGxDTQqxw8duj8ma99Q.N9eJvN58v5v6
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjEM4kaaS6QH/itsJwI9pla,aVxMblM8KFG3we5NLvyVcyzve4L4qo9dv8TvlcgmZhMQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1666673150.1401008089066127641
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 292414
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1666796171.509183,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 84696
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 1ccad1ac0c6e2bc43f9a22ed129d0966
543c2185098b7a7bf349a9fdd5fe312597f36462
784def5108d45548b3e80ab9fa4af8b6ae29b53aea2fbeb16daf6a368ac8ef42
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 14:56:10 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 23 Oct 2022 12:31:09 GMT
Expires: Sun, 30 Oct 2022 12:31:08 GMT
Etag: "543c2185098b7a7bf349a9fdd5fe312597f36462"
Cache-Control: max-age=336297,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76040980ee4a1c0e-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 1ccad1ac0c6e2bc43f9a22ed129d0966
543c2185098b7a7bf349a9fdd5fe312597f36462
784def5108d45548b3e80ab9fa4af8b6ae29b53aea2fbeb16daf6a368ac8ef42
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 14:56:10 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 23 Oct 2022 12:31:09 GMT
Expires: Sun, 30 Oct 2022 12:31:08 GMT
Etag: "543c2185098b7a7bf349a9fdd5fe312597f36462"
Cache-Control: max-age=336297,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76040981fca0b4eb-OSL
frog.wix.com/bolt-performance?src=72&evid=21&appName=thunderbolt&is_rollout=0&is_sav_rollout=0&is_dac_rollout=0&dc=42µPop=42&is_cached=true&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&session_id=6d8e1dcd-4e03-4afe-99f6-03fee4e735a2&ish=false&isb=false&vsi=34181de7-477d-41cc-9071-def4457f6ea1&caching=hit,hit&pv=visible&pn=1&v=1.11146.0&url=https%3A%2F%2Fen.kabaun.com%2F&st=2&ts=24&tsn=1422
44.208.152.117204 No Content 0 B URL HTTP/2 frog.wix.com/bolt-performance?src=72&evid=21&appName=thunderbolt&is_rollout=0&is_sav_rollout=0&is_dac_rollout=0&dc=42µPop=42&is_cached=true&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&session_id=6d8e1dcd-4e03-4afe-99f6-03fee4e735a2&ish=false&isb=false&vsi=34181de7-477d-41cc-9071-def4457f6ea1&caching=hit,hit&pv=visible&pn=1&v=1.11146.0&url=https%3A%2F%2Fen.kabaun.com%2F&st=2&ts=24&tsn=1422
IP 44.208.152.117:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bolt-performance?src=72&evid=21&appName=thunderbolt&is_rollout=0&is_sav_rollout=0&is_dac_rollout=0&dc=42µPop=42&is_cached=true&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&session_id=6d8e1dcd-4e03-4afe-99f6-03fee4e735a2&ish=false&isb=false&vsi=34181de7-477d-41cc-9071-def4457f6ea1&caching=hit,hit&pv=visible&pn=1&v=1.11146.0&url=https%3A%2F%2Fen.kabaun.com%2F&st=2&ts=24&tsn=1422 HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 14:56:10 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
frog.wix.com/bolt-performance?src=72&evid=28&appName=thunderbolt&is_rollout=0&is_sav_rollout=0&is_dac_rollout=0&dc=42µPop=42&is_cached=true&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&session_id=6d8e1dcd-4e03-4afe-99f6-03fee4e735a2&ish=false&isb=false&vsi=34181de7-477d-41cc-9071-def4457f6ea1&caching=hit,hit&pv=visible&pn=1&v=1.11146.0&url=https%3A%2F%2Fen.kabaun.com%2F&st=2&ts=24&tsn=1422&name=partially_visible&duration=1666796166916&pageId=c1dmp
44.208.152.117204 No Content 0 B URL HTTP/2 frog.wix.com/bolt-performance?src=72&evid=28&appName=thunderbolt&is_rollout=0&is_sav_rollout=0&is_dac_rollout=0&dc=42µPop=42&is_cached=true&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&session_id=6d8e1dcd-4e03-4afe-99f6-03fee4e735a2&ish=false&isb=false&vsi=34181de7-477d-41cc-9071-def4457f6ea1&caching=hit,hit&pv=visible&pn=1&v=1.11146.0&url=https%3A%2F%2Fen.kabaun.com%2F&st=2&ts=24&tsn=1422&name=partially_visible&duration=1666796166916&pageId=c1dmp
IP 44.208.152.117:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bolt-performance?src=72&evid=28&appName=thunderbolt&is_rollout=0&is_sav_rollout=0&is_dac_rollout=0&dc=42µPop=42&is_cached=true&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&session_id=6d8e1dcd-4e03-4afe-99f6-03fee4e735a2&ish=false&isb=false&vsi=34181de7-477d-41cc-9071-def4457f6ea1&caching=hit,hit&pv=visible&pn=1&v=1.11146.0&url=https%3A%2F%2Fen.kabaun.com%2F&st=2&ts=24&tsn=1422&name=partially_visible&duration=1666796166916&pageId=c1dmp HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 14:56:10 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
IP 104.18.21.226:0
Hash 3ee4b02e407d1943b44ca3f7a89f0fd8
e6595e909da4dafc65250afe5092a859bfb0293d
58038160a4227cb25a4369f7d32a50fd967475ef16e269f449118b2474853283
POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 14:56:10 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "A56DA3993658A4C64A3B2F5FEC8BB0282E32BFBE"
Expires: Thu, 27 Oct 2022 02:00:00 GMT
Last-Modified: Wed, 26 Oct 2022 14:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2829
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76040982cb4db4fd-OSL
frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=42µPop=42&et=12&event_name=Partially%20visible&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&pid=c1dmp&pn=1&sessionId=6d8e1dcd-4e03-4afe-99f6-03fee4e735a2&siterev=2601-__siteCacheRevision__&st=2&ts=295&tts=1693&url=https%3A%2F%2Fen.kabaun.com%2F%3F&v=1.11146.0&vsi=34181de7-477d-41cc-9071-def4457f6ea1&_brandId=wix
44.208.152.117204 No Content 0 B URL HTTP/2 frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=42µPop=42&et=12&event_name=Partially%20visible&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&pid=c1dmp&pn=1&sessionId=6d8e1dcd-4e03-4afe-99f6-03fee4e735a2&siterev=2601-__siteCacheRevision__&st=2&ts=295&tts=1693&url=https%3A%2F%2Fen.kabaun.com%2F%3F&v=1.11146.0&vsi=34181de7-477d-41cc-9071-def4457f6ea1&_brandId=wix
IP 44.208.152.117:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=42µPop=42&et=12&event_name=Partially%20visible&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&pid=c1dmp&pn=1&sessionId=6d8e1dcd-4e03-4afe-99f6-03fee4e735a2&siterev=2601-__siteCacheRevision__&st=2&ts=295&tts=1693&url=https%3A%2F%2Fen.kabaun.com%2F%3F&v=1.11146.0&vsi=34181de7-477d-41cc-9071-def4457f6ea1&_brandId=wix HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 14:56:10 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=42µPop=42&et=1&event_name=Init&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&ita=1&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&pn=1&sessionId=6d8e1dcd-4e03-4afe-99f6-03fee4e735a2&siterev=2601-__siteCacheRevision__&st=2&ts=181&tts=1579&url=https%3A%2F%2Fen.kabaun.com%2F%3F&v=1.11146.0&vsi=34181de7-477d-41cc-9071-def4457f6ea1&_brandId=wix
44.208.152.117204 No Content 0 B URL HTTP/2 frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=42µPop=42&et=1&event_name=Init&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&ita=1&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&pn=1&sessionId=6d8e1dcd-4e03-4afe-99f6-03fee4e735a2&siterev=2601-__siteCacheRevision__&st=2&ts=181&tts=1579&url=https%3A%2F%2Fen.kabaun.com%2F%3F&v=1.11146.0&vsi=34181de7-477d-41cc-9071-def4457f6ea1&_brandId=wix
IP 44.208.152.117:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=42µPop=42&et=1&event_name=Init&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&ita=1&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&pn=1&sessionId=6d8e1dcd-4e03-4afe-99f6-03fee4e735a2&siterev=2601-__siteCacheRevision__&st=2&ts=181&tts=1579&url=https%3A%2F%2Fen.kabaun.com%2F%3F&v=1.11146.0&vsi=34181de7-477d-41cc-9071-def4457f6ea1&_brandId=wix HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 14:56:10 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/page-features.72e6b32b.chunk.min.js
151.101.85.91200 OK 7.4 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/page-features.72e6b32b.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (20047)
Hash 3d161123f54e64663c996302de7f9023
10fffd6e9e75f0130167c49fbb06efe128757b13
366f04821236e8d1f53da2d3618dc41e96c9a25c946e6c9545a9907b6062a9c4
GET /services/wix-thunderbolt/dist/page-features.72e6b32b.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Thu, 20 Oct 2022 23:18:59 GMT
etag: W/"d41df2225725e1ce25cbc3aeffc20c02"
x-amz-version-id: ea1Yd1hCCGUu1ZXH5reN6nQZOeCfqN1E
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: MISS
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjEM4kaaS6QH/itsJwI9pla,aVxMblM8KFG3we5NLvyVcyzve4L4qo9dv8TvlcgmZhMQXT2AyjWfyxKagyd4/pDD,2iuX5LYwvZa9CoGaG8ZUZomYmPgSwc4aU7J40H7VRoqj9dBflAyFvPAD2t41Gwlp
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1666315301.295595794211127641
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 480869
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 4344
x-timer: S1666796171.733879,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7359
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/ooi.353be548.chunk.min.js
151.101.85.91200 OK 3.6 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/ooi.353be548.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (9498)
Hash 852af16f41a6cf338476df85b86e8ab1
24e4b1c6245a1340d8cc8634d6fc543eb59eab03
1e5285712696c89b60f96f9927ea13fecd0fa1590af596ba41fd8f7feb7b3abb
GET /services/wix-thunderbolt/dist/ooi.353be548.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
last-modified: Mon, 15 Aug 2022 18:55:47 GMT
etag: W/"d14db0d087e4b2847eea446fdb3d9990"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcgrlbPwrfJgfFY+bZe/zFVAWIHlCalF7YnfvOr2cMPpyw==,aVxMblM8KFG3we5NLvyVc5a79avpR2DZCk9xnuoLql1jPZTuGyYqVhtmEIgJUb4w
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1660614079.903632573130026724
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 6204632
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 40484
x-timer: S1666796171.734264,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3584
X-Firefox-Spdy: h2
en.kabaun.com/_partials/wix-thunderbolt/dist/clientWorker.32da5f18.bundle.min.js
199.15.163.138200 OK 146 kB URL HTTP/2 en.kabaun.com/_partials/wix-thunderbolt/dist/clientWorker.32da5f18.bundle.min.js
IP 199.15.163.138:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 146 kB (146118 bytes)
Hash f9ca5308c824a5f09cae8a842b8905be
3ccd608eb81733a913217b76a40b3ef2b1c4c390
cbea237275afe5836f3b38cd1e8b6d0d94b2406b44bf3d2359ba0817faa59f68
Analyzer Verdict Alert fortinet Malware
GET /_partials/wix-thunderbolt/dist/clientWorker.32da5f18.bundle.min.js HTTP/1.1
Host: en.kabaun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Cookie: ssr-caching=cache#desc=hit#varnish=hit#dc#desc=42; XSRF-TOKEN=1666796169|wvNtjb278nGh; TS01e85bed=01d72e6d16946ab94219841833567602e55abbeed215186516390a5f3b7e0746ae22e8a08e25af9a84ed6d576c669fdc4130b6dc25; TS01f4356e=01d72e6d16946ab94219841833567602e55abbeed215186516390a5f3b7e0746ae22e8a08e25af9a84ed6d576c669fdc4130b6dc25
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 14:56:10 GMT
content-type: application/javascript
content-length: 146118
accept-ranges: bytes
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-origin: *
age: 2805
cache-control: public, max-age=7776000, immutable
content-encoding: br
etag: "8d6c4dbde4917a2e3204a48646d7a690"
last-modified: Mon, 24 Oct 2022 11:05:21 GMT
timing-allow-origin: *
vary: Accept-Encoding
via: 1.1 varnish (Varnish/6.0)
x-amz-replication-status: COMPLETED
x-amz-version-id: O_a0CZA865DcFwBGjq.B_k9TWcP8J2vP
x-cache-status: HIT
x-seen-by: wmgbEcS9zOENaefw7bU4YRPnIabCQWJW461ERvTuE+U=,W1c2/pqHBqplxcWufHCkILxkNjrXdwdgtu6E0yACibU=,sHU62EDOGnH2FBkJkG/Wx8EeXWsWdHrhlvbxtlynkVjroMMadx85wv3+FoF26iow,m0j2EEknGIVUW/liY8BLLjBdxec7r7DHGEpZo2ij+25kavE0ZtMXws1mfakihq4B,zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjV0TBmJ+uLPQ4OZPC1VSMH,aVxMblM8KFG3we5NLvyVc1AtKGBpHBVRBa1WzqM3DuAfbJaKSXYQ/lskq2jK6SGP
x-varnish: 857340844 853356430
x-wix-request-id: 1666796170.44986835188571212051
x-content-type-options: nosniff
server: Pepyaka/1.19.10
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/captcha.ff763fa8.chunk.min.js
151.101.85.91200 OK 470 B URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/captcha.ff763fa8.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (673)
Hash 6672f362cdd184e3733068c5cd5fed9e
a07b6a11570c2a975956d9410ea2decb0d655920
b6279a590406470a2bdb6c37152baa7e68dc7dcdf96be20a307ed030b342e720
GET /services/wix-thunderbolt/dist/captcha.ff763fa8.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Sun, 28 Aug 2022 14:09:04 GMT
etag: W/"5ac55c590717fa11374288c903cd71c9"
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjBLy8P45DoDO4LnRm+zqsP,aVxMblM8KFG3we5NLvyVcyeTzFUhjLKPB6lD0luXXHcfbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1661846323.0476548133087122521
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 5100415
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 43306
x-timer: S1666796171.788571,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 470
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/cookiesManager.6723c46e.chunk.min.js
151.101.85.91200 OK 1.3 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/cookiesManager.6723c46e.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (2293)
Hash 99d796c5c056669465217ae7c5360ff4
05a5035fa36b30130dc214ae20cb52a0a8b33aec
7a3070bac457454354deb79c140acb723f7717873df0fff2c3fed4e5bc541a06
GET /services/wix-thunderbolt/dist/cookiesManager.6723c46e.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
last-modified: Sun, 14 Aug 2022 20:37:30 GMT
etag: W/"ad3c21f21dd7efb771eee995a2ae0ffa"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciexeHcfy36aNagyZbZBL0eWIHlCalF7YnfvOr2cMPpyw==,aVxMblM8KFG3we5NLvyVcz/fYSfKbw6+xesuKQMt4UgghGES6Jsix+7j8qfOfk1L
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1660632618.7466346491227220999
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 6279525
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 470
x-timer: S1666796171.791235,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1313
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/dashboardWixCodeSdk.f18da2da.chunk.min.js
151.101.85.91200 OK 4.6 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/dashboardWixCodeSdk.f18da2da.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (14237)
Hash b5070edf340abe80072043db2dfba8b5
e1fe4b824809e43673f7d7a41255484dbbe075d1
1b5adca3c9ec4cf9de45506a9cbf9b1dd87e0f8c59f404772ee802d001cce56b
GET /services/wix-thunderbolt/dist/dashboardWixCodeSdk.f18da2da.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
last-modified: Tue, 20 Sep 2022 07:59:56 GMT
etag: W/"816569845db6f44e7a50cecbc3e7c13b"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrchkavE0ZtMXws1mfakihq4B,aVxMblM8KFG3we5NLvyVc7eNHvhCRAbD7EPjVZvQO20fbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.0
x-wix-request-id: 1663680911.39115044438315728478
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 3134395
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 43585
x-timer: S1666796171.792237,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4613
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/dynamicPages.ea883e38.chunk.min.js
151.101.85.91200 OK 2.1 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/dynamicPages.ea883e38.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (4354)
Hash 1fe025f0724df594a71504978ee3c3a4
855d1598d8e3d5a2810d0fd31c792e1b734e880f
cb028f711398b73a8ef6c0253619e93e55315e27acd2e1fe26b40d9c441ac8fa
GET /services/wix-thunderbolt/dist/dynamicPages.ea883e38.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
last-modified: Tue, 23 Aug 2022 07:45:30 GMT
etag: W/"161d275fb543e164ec69dee741f9ce01"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciexeHcfy36aNagyZbZBL0eWIHlCalF7YnfvOr2cMPpyw==,aVxMblM8KFG3we5NLvyVc/5LLToOojZxL2HBjY1XAnAghGES6Jsix+7j8qfOfk1L
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1661316481.4857498042913120999
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 5555305
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 2073
x-timer: S1666796171.796574,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2108
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/wix-code-sdk-providers.562019cf.chunk.min.js
151.101.85.91200 OK 4.2 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/wix-code-sdk-providers.562019cf.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (11281)
Hash 035d84ae737b937eb4b737f205db824a
4adbe230f6e7024e877a978bd5f753cce61e7baf
4c39ccad8f92cea44dd9491b301fea9a8ec8ff59da54d0fba506e064fadd9993
GET /services/wix-thunderbolt/dist/wix-code-sdk-providers.562019cf.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
last-modified: Wed, 05 Oct 2022 15:09:30 GMT
etag: W/"f596e52e939de0b8475abd08d3f13399"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjEM4kaaS6QH/itsJwI9pla,aVxMblM8KFG3we5NLvyVc1AtKGBpHBVRBa1WzqM3DuAfbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1665029737.8361178672660217693
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 1805398
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 43475
x-timer: S1666796171.797727,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4194
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/multilingual.852ee276.chunk.min.js
151.101.85.91200 OK 1.5 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/multilingual.852ee276.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (3854)
Hash 28e681c029854661247ebe33695cfdf7
b89be7bfae2cc9425853c238ee028821723b4095
23b22c7e0f430342f630b58458506c17ba8d37dea3b869d14909b478412dc006
GET /services/wix-thunderbolt/dist/multilingual.852ee276.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 03 Oct 2022 16:56:31 GMT
etag: W/"e262001f56415600b32b8c9b30190c54"
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjBLy8P45DoDO4LnRm+zqsP,aVxMblM8KFG3we5NLvyVc1XEV11U4uj6EySGMcOeW2gfbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1664852400.978982917968612470
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 1972535
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 468
x-timer: S1666796171.799030,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1523
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/popups.5098a5a3.chunk.min.js
151.101.85.91200 OK 2.0 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/popups.5098a5a3.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (5038)
Hash 10fb68e71e85e20237c31a9127ebc890
19baeef422e6ca09582703a30f603200b59ce819
2bc233c14ac35b049c916670ffa09b07c9d34853764ad96fea4403dfe90d0fc2
GET /services/wix-thunderbolt/dist/popups.5098a5a3.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
last-modified: Tue, 16 Aug 2022 17:34:36 GMT
etag: W/"d6865c9c45078006c622d680bb1edc96"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciexeHcfy36aNagyZbZBL0eWIHlCalF7YnfvOr2cMPpyw==,aVxMblM8KFG3we5NLvyVc8EDFnkKlVvXae3jojBllJYghGES6Jsix+7j8qfOfk1L
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1660732181.0826481778199120999
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 6116944
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 1493
x-timer: S1666796171.799829,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1990
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/protectedPages.9a93f372.chunk.min.js
151.101.85.91200 OK 1.3 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/protectedPages.9a93f372.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (2807)
Hash 9fcb7335c75dc541488519004c91a996
d98bc2bb3ce974be97309c409e4165e214998b34
0ec55f243c2ac360e59466d418367feea8d057782ffc0b343cf5de95f4d5937f
GET /services/wix-thunderbolt/dist/protectedPages.9a93f372.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
last-modified: Mon, 03 Oct 2022 16:56:31 GMT
etag: W/"df7915f6bac9f3acea314eadeeb81bc6"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjBLy8P45DoDO4LnRm+zqsP,aVxMblM8KFG3we5NLvyVc0Sqk9+MZwtm2RdjD28LmUcQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1664850081.005982630245712470
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 1977108
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 38123
x-timer: S1666796171.801237,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1313
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/siteMembersWixCodeSdk.e49c7904.chunk.min.js
151.101.85.91200 OK 581 B URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/siteMembersWixCodeSdk.e49c7904.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (1044)
Hash 50febd77eda678c05ed658f88124777c
e8a5a65df1fb568aa2bfcf9c34542516ab22d5b0
4bb0a6b0cd6239d4195d2e99ce6cbf1e0f52ec0aa1c7841d67e8b9263c0b2eb1
GET /services/wix-thunderbolt/dist/siteMembersWixCodeSdk.e49c7904.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 20 Sep 2022 13:29:50 GMT
etag: W/"57f6b11aa7e6325ce31fe8af6e3f22fc"
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrchkavE0ZtMXws1mfakihq4B,aVxMblM8KFG3we5NLvyVcyzve4L4qo9dv8TvlcgmZhMQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.0
x-wix-request-id: 1663680911.552150439674283128478
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 3115387
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 43317
x-timer: S1666796171.803766,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 581
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/siteMembers.776e69a9.chunk.min.js
151.101.85.91200 OK 10 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/siteMembers.776e69a9.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (36073)
Hash dfdc987d1935b62c9a9f171a98997498
55a9938daa2684d853f3f78d36497c693bdc3b14
7e185c5d422296f80d0acffa007b544133b17b6b826b285e8175059e1e847821
GET /services/wix-thunderbolt/dist/siteMembers.776e69a9.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Thu, 20 Oct 2022 08:03:59 GMT
etag: W/"5f8a57c3da3f0a8b20cb8c350503731e"
x-amz-version-id: L3FZz1W7fFzRQOeztPLgAy1VW5kyNGJn
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjV0TBmJ+uLPQ4OZPC1VSMH,aVxMblM8KFG3we5NLvyVc5U6nDV0Sthqh2jmVbYx0F4QXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.0
x-wix-request-id: 1666253589.558509867137727088
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 542977
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 4307
x-timer: S1666796171.804506,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 9952
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/tpaCommons.3ed36768.chunk.min.js
151.101.85.91200 OK 5.5 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/tpaCommons.3ed36768.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (14805)
Hash 666be25e3e7a3df51a5f67cf100d4ec2
471f01703f9bd7af6f287060664b8f800e3aa075
dfb422b9da750c85a74fcf0d4a08dd6b989d208c2f70530ed3458e1564fadda7
GET /services/wix-thunderbolt/dist/tpaCommons.3ed36768.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 09 Sep 2022 15:10:18 GMT
etag: W/"2e063816d7d2b42f6b80f5e3920126df"
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciDgmy1x1bk0T2mMblm59aj,aVxMblM8KFG3we5NLvyVc5U6nDV0Sthqh2jmVbYx0F4QXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1662876733.10194534127581223312
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 4045082
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 43696
x-timer: S1666796171.805574,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5540
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/platform.429e9eb2.chunk.min.js
151.101.85.91200 OK 7.7 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/platform.429e9eb2.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (21380)
Hash 2ec3d438178f545a1695f005e12df7c0
a56852b34df4f0c761805a645bb74b0cc91555da
14b999645e334c317e682f58a7a9cdfe716b02ea739cbccf35f9fd7eb9829114
GET /services/wix-thunderbolt/dist/platform.429e9eb2.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Sat, 03 Sep 2022 04:57:26 GMT
etag: W/"505d1bfa6fdfa37355e14f00c671f111"
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciDgmy1x1bk0T2mMblm59aj,aVxMblM8KFG3we5NLvyVc1XEV11U4uj6EySGMcOeW2gfbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1662272939.4948621567198223312
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:10 GMT
age: 4601822
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 43188
x-timer: S1666796171.807323,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7682
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 8e7c9996fd940ee46e5251ba4f82d0f8
7be1c4bab1f596fb306587e9ebb5546353602e97
dbd38a485bd31b2a9cca65ecd688f2f5dbe009ce99900662ec20a82ab27e7e29
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 14:56:10 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2022 20:16:27 GMT
Expires: Tue, 01 Nov 2022 20:16:26 GMT
Etag: "7be1c4bab1f596fb306587e9ebb5546353602e97"
Cache-Control: max-age=537015,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 760409831c00b4ee-OSL
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP 104.18.21.226:0
Hash d8de7dc6e32c90d6a97488b2a7357fcd
03b74627e604c7a2702fce159fde4f4e1683b4a2
685403dfd63a7e0226f18294f954e5f794fa6c5cff82abfbab8fac36bdc8e0dc
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 14:56:10 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "7B13997A6839B15032960F8BC53B670F99BA8987"
Expires: Thu, 27 Oct 2022 02:00:00 GMT
Last-Modified: Wed, 26 Oct 2022 14:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2109
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76040983fdd8b4fd-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 8e7c9996fd940ee46e5251ba4f82d0f8
7be1c4bab1f596fb306587e9ebb5546353602e97
dbd38a485bd31b2a9cca65ecd688f2f5dbe009ce99900662ec20a82ab27e7e29
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 14:56:10 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2022 20:16:27 GMT
Expires: Tue, 01 Nov 2022 20:16:26 GMT
Etag: "7be1c4bab1f596fb306587e9ebb5546353602e97"
Cache-Control: max-age=537015,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76040982d8561c0e-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 8e7c9996fd940ee46e5251ba4f82d0f8
7be1c4bab1f596fb306587e9ebb5546353602e97
dbd38a485bd31b2a9cca65ecd688f2f5dbe009ce99900662ec20a82ab27e7e29
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 14:56:10 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2022 20:16:27 GMT
Expires: Tue, 01 Nov 2022 20:16:26 GMT
Etag: "7be1c4bab1f596fb306587e9ebb5546353602e97"
Cache-Control: max-age=537015,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7604098308450af6-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 8e7c9996fd940ee46e5251ba4f82d0f8
7be1c4bab1f596fb306587e9ebb5546353602e97
dbd38a485bd31b2a9cca65ecd688f2f5dbe009ce99900662ec20a82ab27e7e29
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 14:56:10 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2022 20:16:27 GMT
Expires: Tue, 01 Nov 2022 20:16:26 GMT
Etag: "7be1c4bab1f596fb306587e9ebb5546353602e97"
Cache-Control: max-age=537015,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 760409834baa0b3d-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 8e7c9996fd940ee46e5251ba4f82d0f8
7be1c4bab1f596fb306587e9ebb5546353602e97
dbd38a485bd31b2a9cca65ecd688f2f5dbe009ce99900662ec20a82ab27e7e29
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 14:56:10 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2022 20:16:27 GMT
Expires: Tue, 01 Nov 2022 20:16:26 GMT
Etag: "7be1c4bab1f596fb306587e9ebb5546353602e97"
Cache-Control: max-age=537015,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76040982fdc1b4eb-OSL
static.wixstatic.com/media/34436a_e3ce71c494ed435884445fb8b1f20fbc~mv2.png/v1/fill/w_84,h_44,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Logo-facebook-open-graph_edited.png
34.102.176.152200 OK 1.1 kB URL HTTP/2 static.wixstatic.com/media/34436a_e3ce71c494ed435884445fb8b1f20fbc~mv2.png/v1/fill/w_84,h_44,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Logo-facebook-open-graph_edited.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 5b5b0a398a4ff8537828a19e7e7564d2
8cde071536e2e1c37c1b3b85c977201000006b33
ab012d8f2acc304cf00bee1e0d35d680ed2bf12698bc90035d9c29a24816285f
GET /media/34436a_e3ce71c494ed435884445fb8b1f20fbc~mv2.png/v1/fill/w_84,h_44,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Logo-facebook-open-graph_edited.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:10 GMT
content-type: image/webp
content-length: 1120
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zhXUU4FoAHT03P50QgOEVWh
x-seen-by: image-manipulator-5cdc794f79-xj9z5
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/0d3689_d35739352074468d9cdff7eeefe8149c~mv2.jpeg/v1/crop/x_0,y_8,w_228,h_206/fill/w_72,h_65,al_c,q_80,usm_0.66_1.00_0.01,blur_3,enc_auto/Amaury%20Courlet-Hodyg%C3%A9.jpeg
34.102.176.152200 OK 506 B URL HTTP/2 static.wixstatic.com/media/0d3689_d35739352074468d9cdff7eeefe8149c~mv2.jpeg/v1/crop/x_0,y_8,w_228,h_206/fill/w_72,h_65,al_c,q_80,usm_0.66_1.00_0.01,blur_3,enc_auto/Amaury%20Courlet-Hodyg%C3%A9.jpeg
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash a64b3a8c2195e8fd4979efcb29eff6c3
906d3c4bf1ddb87ecfccf3ec0e63828e89ea8d6c
c1334731b7a5aa7487fd6f19c5fedd1880d42979951868772175f261a272eedc
GET /media/0d3689_d35739352074468d9cdff7eeefe8149c~mv2.jpeg/v1/crop/x_0,y_8,w_228,h_206/fill/w_72,h_65,al_c,q_80,usm_0.66_1.00_0.01,blur_3,enc_auto/Amaury%20Courlet-Hodyg%C3%A9.jpeg HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:10 GMT
content-type: image/webp
content-length: 506
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zli333ferzlev4FQWubUNhR
x-seen-by: image-manipulator-5cdc794f79-4jcfh
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/34436a_aca846c592ff4347874d3271976381af~mv2.png/v1/fill/w_59,h_23,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Logo-Stone-and-wood-Retina_edited.png
34.102.176.152200 OK 992 B URL HTTP/2 static.wixstatic.com/media/34436a_aca846c592ff4347874d3271976381af~mv2.png/v1/fill/w_59,h_23,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Logo-Stone-and-wood-Retina_edited.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 582d0a19e7749f13ad3f550cc4f14af4
78d326597fc82891cffbb98581ef71107ac53bd2
e6220e62deb9107c9e98388bc370a67de6faff923c3bae2b9bfd21db4f03cb49
GET /media/34436a_aca846c592ff4347874d3271976381af~mv2.png/v1/fill/w_59,h_23,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Logo-Stone-and-wood-Retina_edited.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:10 GMT
content-type: image/webp
content-length: 992
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zlsyMRvIxbObYXUvVLRWrTx
x-seen-by: image-manipulator-5cdc794f79-r67gj
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/34436a_4814d4fb8eea4140af4c44e83c4e92fa~mv2.png/v1/fill/w_73,h_44,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/logo-frenchtech.png
34.102.176.152200 OK 2.9 kB URL HTTP/2 static.wixstatic.com/media/34436a_4814d4fb8eea4140af4c44e83c4e92fa~mv2.png/v1/fill/w_73,h_44,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/logo-frenchtech.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4f5beab45660b0fc0270337e27afed35
428b5918d296da01e263d9521c3c34b782b99b8b
21fc387214198b5b529cb23b4e6c70355a0cffc926362f7d32a5dd1b3d353fba
GET /media/34436a_4814d4fb8eea4140af4c44e83c4e92fa~mv2.png/v1/fill/w_73,h_44,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/logo-frenchtech.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:10 GMT
content-type: image/webp
content-length: 2894
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2ziO79OEb6YvUWgiiCIeiVW2
x-seen-by: image-manipulator-5cdc794f79-rp49m
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/34436a_eabf103c28104ff0a00d6a775307a7ac~mv2.png/v1/fill/w_64,h_32,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Hodyge-Logo_Blanc.png
34.102.176.152200 OK 868 B URL HTTP/2 static.wixstatic.com/media/34436a_eabf103c28104ff0a00d6a775307a7ac~mv2.png/v1/fill/w_64,h_32,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Hodyge-Logo_Blanc.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 93f34240ec66aadb7f9df49d54999c1a
e9204a0591625d9994bf0d0768dbd20da7164343
70c62068fc4ade99fe76529e8c54a58162af10905aa30c5b40c89bd67c952ed9
GET /media/34436a_eabf103c28104ff0a00d6a775307a7ac~mv2.png/v1/fill/w_64,h_32,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Hodyge-Logo_Blanc.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:10 GMT
content-type: image/webp
content-length: 868
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zkI53gNjU2qxegZZH1bu6Yf
x-seen-by: image-manipulator-5cdc794f79-2c6nx
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/34436a_a6bac98d17054da9b0693b28122d3414~mv2.png/v1/crop/x_0,y_0,w_840,h_260/fill/w_61,h_19,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/mist-logo-full_edited.png
34.102.176.152200 OK 962 B URL HTTP/2 static.wixstatic.com/media/34436a_a6bac98d17054da9b0693b28122d3414~mv2.png/v1/crop/x_0,y_0,w_840,h_260/fill/w_61,h_19,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/mist-logo-full_edited.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9dda9268a033d47f1d3328c934c89197
e6d0bd71cfc0e588a2f7bdb7977a40514f3f23c7
72a7e4ac02f7bd3a335ef6cd20a4cd05618c309dfacac6e245a91f623bf973a1
GET /media/34436a_a6bac98d17054da9b0693b28122d3414~mv2.png/v1/crop/x_0,y_0,w_840,h_260/fill/w_61,h_19,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/mist-logo-full_edited.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:10 GMT
content-type: image/webp
content-length: 962
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zn2NDG99tcTuI3B8RiHcnEI
x-seen-by: image-manipulator-5cdc794f79-c2qd5
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/34436a_565f3999d3cf43b5b8e1b0c2e1b00e9d~mv2.png/v1/fill/w_97,h_32,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/logos-impact-francevv.png
34.102.176.152200 OK 2.7 kB URL HTTP/2 static.wixstatic.com/media/34436a_565f3999d3cf43b5b8e1b0c2e1b00e9d~mv2.png/v1/fill/w_97,h_32,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/logos-impact-francevv.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 356cef7e542cb0064f7ed70f8f814161
f85c3d31f2a4794299eb6ad452e9e7e7d7dbf882
a48b54ebf81212522ed968342daae0cb41527669d4896f02f265fac7f9fee03e
GET /media/34436a_565f3999d3cf43b5b8e1b0c2e1b00e9d~mv2.png/v1/fill/w_97,h_32,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/logos-impact-francevv.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:10 GMT
content-type: image/webp
content-length: 2704
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zl6E58e21TukdyicIJqV41u
x-seen-by: image-manipulator-5cdc794f79-7dkbn
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/34436a_1ef836dfefed4e34ba904c28a1974ed0~mv2.png/v1/fill/w_65,h_65,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/MBS-logo-bleu-1.png
34.102.176.152200 OK 2.0 kB URL HTTP/2 static.wixstatic.com/media/34436a_1ef836dfefed4e34ba904c28a1974ed0~mv2.png/v1/fill/w_65,h_65,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/MBS-logo-bleu-1.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 655b51ddec2ace80fc50ce6a96c0a8e1
eeafb5b80b3f225823f6b5b954160ef24ff4d87e
00939db0ab416cfcfcb6c63bd4b0a768f0bf233d77f38b954f68beca772754c5
GET /media/34436a_1ef836dfefed4e34ba904c28a1974ed0~mv2.png/v1/fill/w_65,h_65,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/MBS-logo-bleu-1.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:10 GMT
content-type: image/webp
content-length: 2040
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zinydcuO6rn2ioDctLufq1W
x-seen-by: image-manipulator-5cdc794f79-qshrb
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/34436a_1c49c52d3b934ba589140a5293eefa8a~mv2.png/v1/fill/w_106,h_44,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Dataswati_logo_10-2019_edited.png
34.102.176.152200 OK 1.4 kB URL HTTP/2 static.wixstatic.com/media/34436a_1c49c52d3b934ba589140a5293eefa8a~mv2.png/v1/fill/w_106,h_44,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Dataswati_logo_10-2019_edited.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash f49d39d6f55f24b638187ee3877a10c6
d43a87347dda1d8ec322116fdb436159089b4699
0e6d29d7b7e40557eeedf63670a89b5cbd9d95f404afc8c7a6a2c3d5441577c5
GET /media/34436a_1c49c52d3b934ba589140a5293eefa8a~mv2.png/v1/fill/w_106,h_44,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Dataswati_logo_10-2019_edited.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:10 GMT
content-type: image/webp
content-length: 1420
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zmGHCXqEjXJJuvjlGvSrIHF
x-seen-by: image-manipulator-5cdc794f79-tbdb6
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/34436a_2dc7d3e3881942928f9d200f623424c1~mv2.png/v1/fill/w_59,h_26,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/1024px-Spie_edited.png
34.102.176.152200 OK 1.0 kB URL HTTP/2 static.wixstatic.com/media/34436a_2dc7d3e3881942928f9d200f623424c1~mv2.png/v1/fill/w_59,h_26,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/1024px-Spie_edited.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4bc50f0a8371190dabd0f2db5cc2b985
b2d8bac6d4cf112a502aa8d5d3fcf89b3823b8c3
85c5320ddff0b97a9754ff29b221f739aafdb418bef6ab346cb1cd9872ab9677
GET /media/34436a_2dc7d3e3881942928f9d200f623424c1~mv2.png/v1/fill/w_59,h_26,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/1024px-Spie_edited.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:10 GMT
content-type: image/webp
content-length: 1048
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zj4wzQ9oN3ueQjk0qdetND1
x-seen-by: image-manipulator-5cdc794f79-g4phd
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/34436a_50e6f51029a14f1f815df2e649097793~mv2.png/v1/fill/w_78,h_73,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/1_%20Membre%20actif%20couleur%202021.png
34.102.176.152200 OK 3.3 kB URL HTTP/2 static.wixstatic.com/media/34436a_50e6f51029a14f1f815df2e649097793~mv2.png/v1/fill/w_78,h_73,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/1_%20Membre%20actif%20couleur%202021.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 5da258c4b98f591ba02189cb15c1e0a4
3b89d3581d1f625275b0f5696b26373604e1c391
08233026af8e0fa8aa5d66beb2fc9aa41365ed4d5cd2fa34c369bf07a1d634bf
GET /media/34436a_50e6f51029a14f1f815df2e649097793~mv2.png/v1/fill/w_78,h_73,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/1_%20Membre%20actif%20couleur%202021.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:11 GMT
content-type: image/webp
content-length: 3292
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zmYkRxwkiXZgNbbtxPzWh0F
x-seen-by: image-manipulator-5cdc794f79-xc446
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/34436a_b5d4309e6c68494c96fe285b28172104~mv2.png/v1/fill/w_96,h_25,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/47268881_2129111364084612_2443381670351470592_n%20(1).png
34.102.176.152200 OK 1.1 kB URL HTTP/2 static.wixstatic.com/media/34436a_b5d4309e6c68494c96fe285b28172104~mv2.png/v1/fill/w_96,h_25,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/47268881_2129111364084612_2443381670351470592_n%20(1).png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0e856d2ecfd52b3b5b95fa647b8facfc
deaaea896c99a12ab028cb1b6b8658104ad04013
d07e41d311ba4133127452ea4967e125c506d8ed1827bd84dee08c83f7a5146c
GET /media/34436a_b5d4309e6c68494c96fe285b28172104~mv2.png/v1/fill/w_96,h_25,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/47268881_2129111364084612_2443381670351470592_n%20(1).png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:11 GMT
content-type: image/webp
content-length: 1126
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zoXXJ5KiuFwkA5MkoJO1Wpa
x-seen-by: image-manipulator-5cdc794f79-c5xdr
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/34436a_b5177035254c4a98b41abc2a3bb28b77~mv2.png/v1/fill/w_60,h_33,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Layer-2-300x163_edited.png
34.102.176.152200 OK 1.2 kB URL HTTP/2 static.wixstatic.com/media/34436a_b5177035254c4a98b41abc2a3bb28b77~mv2.png/v1/fill/w_60,h_33,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Layer-2-300x163_edited.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 12b09be9617199b9a27cb71191ce5ab4
34635c25054c2ab4109583fb7f8b6b454a5bdac9
497c50d059ad9d9e8a01b6c4a10060e5e7b015f8aa670ca1c01661fac538ad36
GET /media/34436a_b5177035254c4a98b41abc2a3bb28b77~mv2.png/v1/fill/w_60,h_33,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Layer-2-300x163_edited.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:11 GMT
content-type: image/webp
content-length: 1240
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zj0L1kquqjFgUjsYeOed46h
x-seen-by: image-manipulator-5cdc794f79-wzplg
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/34436a_b03b0979e83d4053a6218268314efda9~mv2.png/v1/fill/w_56,h_10,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/2560px-Salto_edited_edited.png
34.102.176.152200 OK 556 B URL HTTP/2 static.wixstatic.com/media/34436a_b03b0979e83d4053a6218268314efda9~mv2.png/v1/fill/w_56,h_10,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/2560px-Salto_edited_edited.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1cb10cdc4d089b79715a8fbae5dec5c9
0b793108eaec34021a4569d6d8ef5615b3b5f8dd
3cde4cc7961a43be3749b2f9b7da1e806cc3bfc499ad7d042865e19e7726542f
GET /media/34436a_b03b0979e83d4053a6218268314efda9~mv2.png/v1/fill/w_56,h_10,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/2560px-Salto_edited_edited.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:11 GMT
content-type: image/webp
content-length: 556
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zlQWFPnjA3S7yQYhmvNtav0
x-seen-by: image-manipulator-5cdc794f79-kmjr6
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/34436a_d2a9a768512144e09789d6c026d6e281~mv2.png/v1/fill/w_458,h_348,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/Impact%20management%20(4).png
34.102.176.152200 OK 32 kB URL HTTP/2 static.wixstatic.com/media/34436a_d2a9a768512144e09789d6c026d6e281~mv2.png/v1/fill/w_458,h_348,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/Impact%20management%20(4).png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8bbc8bbbbfaaffd660ff25a492802262
167a27fcee91f685aa28087654ae1ad74b9370cf
7c643e1dfc33b0f0968013b95474fcf89b02f896cbf59dcde664bed988a6d3fb
GET /media/34436a_d2a9a768512144e09789d6c026d6e281~mv2.png/v1/fill/w_458,h_348,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/Impact%20management%20(4).png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:11 GMT
content-type: image/webp
content-length: 31490
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2ziJkEht14UbiJ5K3MYYF3KT
x-seen-by: image-manipulator-5cdc794f79-7pctx
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/34436a_8e9c762f62774e6bb72a22d4e3496d4a~mv2.jpg/v1/crop/x_0,y_19,w_400,h_361/fill/w_72,h_65,al_c,q_80,usm_0.66_1.00_0.01,blur_3,enc_auto/Mathieu%20Piron-Lafleur%20-%20CEO%20Persil%20%26%20Romarin.jpg
34.102.176.152200 OK 1.1 kB URL HTTP/2 static.wixstatic.com/media/34436a_8e9c762f62774e6bb72a22d4e3496d4a~mv2.jpg/v1/crop/x_0,y_19,w_400,h_361/fill/w_72,h_65,al_c,q_80,usm_0.66_1.00_0.01,blur_3,enc_auto/Mathieu%20Piron-Lafleur%20-%20CEO%20Persil%20%26%20Romarin.jpg
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 08da71269370f7168ac5235278ee2f8e
5bed98292b96df2a9d01153fbd9b6e5e5df21324
4fe7a2cb0e5577fbfbf41cced740cd0dc0430ab723a0a638a1191adea52da27e
GET /media/34436a_8e9c762f62774e6bb72a22d4e3496d4a~mv2.jpg/v1/crop/x_0,y_19,w_400,h_361/fill/w_72,h_65,al_c,q_80,usm_0.66_1.00_0.01,blur_3,enc_auto/Mathieu%20Piron-Lafleur%20-%20CEO%20Persil%20%26%20Romarin.jpg HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:11 GMT
content-type: image/webp
content-length: 1072
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zluH2x0ZjfAd8lHzpdlxpth
x-seen-by: image-manipulator-5cdc794f79-5mgmx
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 8e7c9996fd940ee46e5251ba4f82d0f8
7be1c4bab1f596fb306587e9ebb5546353602e97
dbd38a485bd31b2a9cca65ecd688f2f5dbe009ce99900662ec20a82ab27e7e29
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 14:56:11 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2022 20:16:27 GMT
Expires: Tue, 01 Nov 2022 20:16:26 GMT
Etag: "7be1c4bab1f596fb306587e9ebb5546353602e97"
Cache-Control: max-age=537014,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 760409851e49b4ee-OSL
static.wixstatic.com/media/34436a_148ae9338bbe4a02998c7bf9e5e489bb~mv2.png/v1/fill/w_60,h_18,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Beebs_edited.png
34.102.176.152200 OK 996 B URL HTTP/2 static.wixstatic.com/media/34436a_148ae9338bbe4a02998c7bf9e5e489bb~mv2.png/v1/fill/w_60,h_18,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Beebs_edited.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8670fec39ecafd5fe65b29e714b397ad
f5f7fb2f9aeeb289ef0179559a19285c9c9fb69c
a35bbd5e50bb914577807f09acff58fb246f1dfcedc49a5fe3217426f7b82d3d
GET /media/34436a_148ae9338bbe4a02998c7bf9e5e489bb~mv2.png/v1/fill/w_60,h_18,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Beebs_edited.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:11 GMT
content-type: image/webp
content-length: 996
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2znklnSlyqlj9A0b7aEP4FIZ
x-seen-by: image-manipulator-5cdc794f79-f2sq9
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/34436a_2888b00ddf4a43dd918f3e5ae438e0ae~mv2.png/v1/fill/w_71,h_71,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/1598537810084-StartupProgram-Logo-Stacked.png
34.102.176.152200 OK 2.3 kB URL HTTP/2 static.wixstatic.com/media/34436a_2888b00ddf4a43dd918f3e5ae438e0ae~mv2.png/v1/fill/w_71,h_71,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/1598537810084-StartupProgram-Logo-Stacked.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash a9457327dafa69bdc6897fb06788329b
eb3cfefd39d043ab4be4e1f9eb7ee33af4dac997
8b14ab083b554196a1e467a2b821210e265210b60a0cad0a41fd4f5fc54f13b9
GET /media/34436a_2888b00ddf4a43dd918f3e5ae438e0ae~mv2.png/v1/fill/w_71,h_71,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/1598537810084-StartupProgram-Logo-Stacked.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:11 GMT
content-type: image/webp
content-length: 2312
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zt3iyBZacSoqa964DxhjrUy
x-seen-by: image-manipulator-5cdc794f79-lmtx8
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
frog.wix.com/bpm
44.208.152.117204 No Content 0 B IP 44.208.152.117:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bpm HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1756
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 14:56:11 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
static.wixstatic.com/media/34436a_7ad56b869d7146e2bea770d1a1e5067f~mv2.png/v1/crop/x_0,y_182,w_1671,h_800/fill/w_52,h_25,al_c,q_85,usm_0.66_1.00_0.01,blur_2,enc_auto/API%20First.png
34.102.176.152200 OK 1.1 kB URL HTTP/2 static.wixstatic.com/media/34436a_7ad56b869d7146e2bea770d1a1e5067f~mv2.png/v1/crop/x_0,y_182,w_1671,h_800/fill/w_52,h_25,al_c,q_85,usm_0.66_1.00_0.01,blur_2,enc_auto/API%20First.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash c02ea28825ce9eefb5f43e18ae590f6a
27137e59399e11083a9cf306edb34a3e01cb8dff
874bf17fd557e4c602c47c0c6bae042f529810b7c7877880967a03bfb8844d83
GET /media/34436a_7ad56b869d7146e2bea770d1a1e5067f~mv2.png/v1/crop/x_0,y_182,w_1671,h_800/fill/w_52,h_25,al_c,q_85,usm_0.66_1.00_0.01,blur_2,enc_auto/API%20First.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:11 GMT
content-type: image/webp
content-length: 1116
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zqD2xgENxGP2l95JIFM79mE
x-seen-by: image-manipulator-5cdc794f79-d4xff
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/0d3689_d5a72ffe7ca94e5eb8977db4ccef9db9~mv2.png/v1/fill/w_70,h_65,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Logo-LPT-web-01.png
34.102.176.152200 OK 3.7 kB URL HTTP/2 static.wixstatic.com/media/0d3689_d5a72ffe7ca94e5eb8977db4ccef9db9~mv2.png/v1/fill/w_70,h_65,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Logo-LPT-web-01.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 815d68de8243249dbf4d87949eebb621
3493ff90b2d1ee877b0a553d5415a2c66027cf21
87eaf966cba26d79266fa082381570e6e619e4815a76e35964f9bdb8e129d3db
GET /media/0d3689_d5a72ffe7ca94e5eb8977db4ccef9db9~mv2.png/v1/fill/w_70,h_65,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Logo-LPT-web-01.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:11 GMT
content-type: image/webp
content-length: 3680
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zt7ki0HWu7s2yRtjten0HsO
x-seen-by: image-manipulator-5cdc794f79-tc8f7
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/0d3689_882160317d3448018665f28fe773b6a6~mv2.png/v1/crop/x_0,y_4,w_3000,h_792/fill/w_142,h_38,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/Logo%20kabaun%20white_edited.png
34.102.176.152200 OK 2.1 kB URL HTTP/2 static.wixstatic.com/media/0d3689_882160317d3448018665f28fe773b6a6~mv2.png/v1/crop/x_0,y_4,w_3000,h_792/fill/w_142,h_38,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/Logo%20kabaun%20white_edited.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash c511bcbf682d5e27369180620fefc61e
212980955b10bb8be4f56f4774bd826c9f175975
ae0ac888358213bf10c6c1d9a0bef3dcf9595dcb54412b0923f43f5494b4b5cf
GET /media/0d3689_882160317d3448018665f28fe773b6a6~mv2.png/v1/crop/x_0,y_4,w_3000,h_792/fill/w_142,h_38,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/Logo%20kabaun%20white_edited.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:11 GMT
content-type: image/webp
content-length: 2088
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zw7Ji0Ey0jgLN8xFCBt34zV
x-seen-by: image-manipulator-5cdc794f79-lf42n
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/0d3689_e5107da25e2d4a8eac6547d4b21ac75b~mv2.png/v1/crop/x_65,y_0,w_2869,h_797/fill/w_144,h_40,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Logo%20kabaun%20white_edited.png
34.102.176.152200 OK 2.8 kB URL HTTP/2 static.wixstatic.com/media/0d3689_e5107da25e2d4a8eac6547d4b21ac75b~mv2.png/v1/crop/x_65,y_0,w_2869,h_797/fill/w_144,h_40,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Logo%20kabaun%20white_edited.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 91d4a7784e156e87103ce896b6c71cb5
39ad2fcc8a359f2c5b0d4a74ea6307f07ed816d5
039bb73d17117ad61cd73887407965d304d0ef9b6797b67da8f78a8d28a3639b
GET /media/0d3689_e5107da25e2d4a8eac6547d4b21ac75b~mv2.png/v1/crop/x_65,y_0,w_2869,h_797/fill/w_144,h_40,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/Logo%20kabaun%20white_edited.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:11 GMT
content-type: image/webp
content-length: 2806
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zrVQaVkgizDjkjHCx0m6Baf
x-seen-by: image-manipulator-5cdc794f79-llccq
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/34436a_e1815539602745569c605a04607367b2~mv2.jpeg/v1/crop/x_167,y_106,w_635,h_574/fill/w_72,h_65,al_c,q_80,usm_0.66_1.00_0.01,blur_3,enc_auto/Lonni%20Carteron%20-%20CEO%20Stone%20%26%20Wood.jpeg
34.102.176.152200 OK 556 B URL HTTP/2 static.wixstatic.com/media/34436a_e1815539602745569c605a04607367b2~mv2.jpeg/v1/crop/x_167,y_106,w_635,h_574/fill/w_72,h_65,al_c,q_80,usm_0.66_1.00_0.01,blur_3,enc_auto/Lonni%20Carteron%20-%20CEO%20Stone%20%26%20Wood.jpeg
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash ab439bb58c5f65c07e531bf57270dd80
d8ec2c3ee6919acfc681fec80b7b72bb0ab16234
84cb78a3da899ad7497b7ce71122679a5c5c08321c254a0c76a5610fc0df1941
GET /media/34436a_e1815539602745569c605a04607367b2~mv2.jpeg/v1/crop/x_167,y_106,w_635,h_574/fill/w_72,h_65,al_c,q_80,usm_0.66_1.00_0.01,blur_3,enc_auto/Lonni%20Carteron%20-%20CEO%20Stone%20%26%20Wood.jpeg HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:11 GMT
content-type: image/webp
content-length: 556
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zrU2e1u3vcPE4aaOc8PndvM
x-seen-by: image-manipulator-5cdc794f79-d9qpb
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/34436a_f8e22f1ae2d9475caaba0c81b3cb87aa~mv2.png/v1/fill/w_129,h_49,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/SF_TAG_MEMBER_OF_CMYK_edited.png
34.102.176.152200 OK 2.7 kB URL HTTP/2 static.wixstatic.com/media/34436a_f8e22f1ae2d9475caaba0c81b3cb87aa~mv2.png/v1/fill/w_129,h_49,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/SF_TAG_MEMBER_OF_CMYK_edited.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7ed4f378adffc630b53b926083c0ebb7
e1c7c6ef89da4c8ad0c4db0ceb2a52d7ef8b12f8
10d55a7d4f21cd78619944ce532fff3b34e081b9edc63fe5afdcddb6c13dec11
GET /media/34436a_f8e22f1ae2d9475caaba0c81b3cb87aa~mv2.png/v1/fill/w_129,h_49,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/SF_TAG_MEMBER_OF_CMYK_edited.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:11 GMT
content-type: image/webp
content-length: 2680
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zvQGm5C8bi5gK6b609pjFkm
x-seen-by: image-manipulator-5cdc794f79-cjfn7
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/34436a_32ad6d16ad6942dc83d8ecae6c52da39~mv2.jpg/v1/fill/w_103,h_38,al_c,q_80,usm_0.66_1.00_0.01,blur_3,enc_auto/8dc869ac2f3242c4a356f2e2cef1e9781e7e6d73-1_edited.jpg
34.102.176.152200 OK 1.0 kB URL HTTP/2 static.wixstatic.com/media/34436a_32ad6d16ad6942dc83d8ecae6c52da39~mv2.jpg/v1/fill/w_103,h_38,al_c,q_80,usm_0.66_1.00_0.01,blur_3,enc_auto/8dc869ac2f3242c4a356f2e2cef1e9781e7e6d73-1_edited.jpg
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash f4a17c1e2b26086d57dbcca82be0f38a
abc7b481255475bf7c7044b01ee9148449677325
5570b4a1c03bb72f23922aea2ac74e2572fbb4a9ee1276463e3100a9f3462520
GET /media/34436a_32ad6d16ad6942dc83d8ecae6c52da39~mv2.jpg/v1/fill/w_103,h_38,al_c,q_80,usm_0.66_1.00_0.01,blur_3,enc_auto/8dc869ac2f3242c4a356f2e2cef1e9781e7e6d73-1_edited.jpg HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:11 GMT
content-type: image/webp
content-length: 1040
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zpl0g7M3IwWBGsTGzIp2ghi
x-seen-by: image-manipulator-5cdc794f79-fb4dq
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/nsplsh_5276336563496d4c34616b~mv2_d_3456_2304_s_2.jpg/v1/fill/w_99,h_66,al_c,q_80,usm_0.66_1.00_0.01,blur_2,enc_auto/nsplsh_5276336563496d4c34616b~mv2_d_3456_2304_s_2.jpg
34.102.176.152200 OK 1.5 kB URL HTTP/2 static.wixstatic.com/media/nsplsh_5276336563496d4c34616b~mv2_d_3456_2304_s_2.jpg/v1/fill/w_99,h_66,al_c,q_80,usm_0.66_1.00_0.01,blur_2,enc_auto/nsplsh_5276336563496d4c34616b~mv2_d_3456_2304_s_2.jpg
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 71dfe36ef41f167c6d342f4f59c58a71
fb77ccf33208a6f407b9d863b4e00efa462499a4
952222765b474808026ea22a5f6412857ea3f976c61bfb16bc9aba88f466ad73
GET /media/nsplsh_5276336563496d4c34616b~mv2_d_3456_2304_s_2.jpg/v1/fill/w_99,h_66,al_c,q_80,usm_0.66_1.00_0.01,blur_2,enc_auto/nsplsh_5276336563496d4c34616b~mv2_d_3456_2304_s_2.jpg HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:11 GMT
content-type: image/webp
content-length: 1454
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zuxyWqFNGE2ifpBeP4WX87P
x-seen-by: image-manipulator-5cdc794f79-nd4st
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.wixstatic.com/media/34436a_11bc53fc7a4d4ffeb44826dab0afc6e2~mv2.png/v1/crop/x_0,y_77,w_478,h_107/fill/w_112,h_25,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/1_GP6Wvotoo_q9XIqqCGtUcA_2x.png
34.102.176.152200 OK 2.0 kB URL HTTP/2 static.wixstatic.com/media/34436a_11bc53fc7a4d4ffeb44826dab0afc6e2~mv2.png/v1/crop/x_0,y_77,w_478,h_107/fill/w_112,h_25,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/1_GP6Wvotoo_q9XIqqCGtUcA_2x.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash c2229c95064357f8dfe28e5a7e9bee10
2f39cfcd0bfc09b013bdb0b6465302aa5021cd6b
7a140a6f92500e4d0e3da47c7ca429290f54bc6e79f321e9bc0c789dc33c6fe1
GET /media/34436a_11bc53fc7a4d4ffeb44826dab0afc6e2~mv2.png/v1/crop/x_0,y_77,w_478,h_107/fill/w_112,h_25,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/1_GP6Wvotoo_q9XIqqCGtUcA_2x.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:11 GMT
content-type: image/webp
content-length: 1974
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zp5G4GHkIxcM1X3YdQQuW9r
x-seen-by: image-manipulator-5cdc794f79-z8t5z
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=fef045cf.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-platform-simple&originalLanguage=fr&pageId=34436a_f1273ecf1ea5022d57d0c1933016d8b5_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&viewMode=desktop
151.101.85.91200 OK 7.4 kB URL HTTP/2 siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=fef045cf.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-platform-simple&originalLanguage=fr&pageId=34436a_f1273ecf1ea5022d57d0c1933016d8b5_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&viewMode=desktop
IP 151.101.85.91:0
File type JSON data\012- , ASCII text, with very long lines (58048), with no line terminators
Hash a63f7279c1acabd8b563ea555f3fa139
10e8000eb0a49c9bfc7e1e5fdd2764a2ae60526b
287c7e912ebc9b6c5b9fa73b231701a5040763a19087efbd90cc8523cc8f0af2
GET /pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=fef045cf.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-platform-simple&originalLanguage=fr&pageId=34436a_f1273ecf1ea5022d57d0c1933016d8b5_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&viewMode=desktop HTTP/1.1
Host: siteassets.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en.kabaun.com/
Origin: https://en.kabaun.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
access-control-expose-headers: age,via,x-cache-status,X-cache-status
etag: W/"e2c0-kqKZVJStR/pJrUMUJumu2dB1DTw"
content-encoding: gzip
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-seen-by: 2iuX5LYwvZa9CoGaG8ZUZjb5j8fWnvnycWNmjdvR375doDcb+JuzLucmWkKUGZxh,/SoSYmefJLK2hiZpy2XaYlN1tYMUtM33SkDcJDaLDqk9ohduqgp+CiYH1GQw2S9S,ZUT6NeJ/NsDmQ9DMGnwT1Cm3ognhHP5aLnE5Arklvw0a0sM5c8dDUFHeNaFq0qDu
server: Pepyaka/1.19.0
cache-control: public, max-age=7776000, immutable
x-wix-request-id: 1666796171.31611673516061827088
timing-allow-origin: *
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:11 GMT
age: 0
x-served-by: cache-bma1640-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1666796171.270155,VS0,VE93
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7447
X-Firefox-Spdy: h2
siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=fef045cf.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-platform-simple&originalLanguage=fr&pageId=34436a_1104abb76932c2bceaa3186cb5f61e87_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&viewMode=desktop
151.101.85.91200 OK 6.4 kB URL HTTP/2 siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=fef045cf.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-platform-simple&originalLanguage=fr&pageId=34436a_1104abb76932c2bceaa3186cb5f61e87_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&viewMode=desktop
IP 151.101.85.91:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (37843), with no line terminators
Hash 3242443dcce4183a2c51964af82b37c0
48a2fe5396a869e38cb8379aca227c48a007eea7
e77608735da349d755e2af11daa4b1910707bac49817f4f01cf727d04bcb7363
GET /pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=fef045cf.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-platform-simple&originalLanguage=fr&pageId=34436a_1104abb76932c2bceaa3186cb5f61e87_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9753.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&viewMode=desktop HTTP/1.1
Host: siteassets.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en.kabaun.com/
Origin: https://en.kabaun.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
access-control-expose-headers: age,via,x-cache-status,X-cache-status
etag: W/"93d7-sj60v4HNaULTntkKt09XpyMY9gA"
content-encoding: gzip
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-seen-by: 2iuX5LYwvZa9CoGaG8ZUZjb5j8fWnvnycWNmjdvR374F6VmO9/TBL1yPY1fyoS/D,/SoSYmefJLK2hiZpy2XaYlN1tYMUtM33SkDcJDaLDqk9ohduqgp+CiYH1GQw2S9S,ZUT6NeJ/NsDmQ9DMGnwT1A1wFCPgiO03HszvSVztcEMa0sM5c8dDUFHeNaFq0qDu
server: Pepyaka/1.19.0
cache-control: public, max-age=7776000, immutable
x-wix-request-id: 1666796171.32111602818048913718
timing-allow-origin: *
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
accept-ranges: bytes
date: Wed, 26 Oct 2022 14:56:11 GMT
age: 0
x-served-by: cache-bma1640-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1666796171.275131,VS0,VE94
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6375
X-Firefox-Spdy: h2
static.wixstatic.com/media/34436a_c9d9bf57386f4ee7b5fb4719dc2ea3cc~mv2.png/v1/fill/w_719,h_489,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/Group%2060640.png
34.102.176.152200 OK 100 kB URL HTTP/2 static.wixstatic.com/media/34436a_c9d9bf57386f4ee7b5fb4719dc2ea3cc~mv2.png/v1/fill/w_719,h_489,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/Group%2060640.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Size 100 kB (100048 bytes)
Hash fdf4582e6ca88e45918f8f03b41ca46d
a055d8b4d22e28d86cb0d98bf896a44e46a11f61
63a38e0c794f77fb0d781f79e2f81813813a622b2283e3f74d094eeb0411e997
GET /media/34436a_c9d9bf57386f4ee7b5fb4719dc2ea3cc~mv2.png/v1/fill/w_719,h_489,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/Group%2060640.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:11 GMT
content-type: image/webp
content-length: 100048
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2zrinAzV09pNEUMs98QKOO2d
x-seen-by: image-manipulator-5cdc794f79-zwbtv
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
frog.wix.com/bolt-performance
44.208.152.117204 No Content 0 B URL HTTP/2 frog.wix.com/bolt-performance
IP 44.208.152.117:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bolt-performance HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en.kabaun.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://en.kabaun.com
Content-Length: 1441
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 14:56:12 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=42µPop=42&et=33&event_name=page%20interactive&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&pid=c1dmp&pn=1&siterev=2601-__siteCacheRevision__&st=2&ts=1983&tts=3381&url=https%3A%2F%2Fen.kabaun.com%2F%3F&v=1.11146.0&vsi=34181de7-477d-41cc-9071-def4457f6ea1&_brandId=wix
44.208.152.117204 No Content 0 B URL HTTP/2 frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=42µPop=42&et=33&event_name=page%20interactive&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&pid=c1dmp&pn=1&siterev=2601-__siteCacheRevision__&st=2&ts=1983&tts=3381&url=https%3A%2F%2Fen.kabaun.com%2F%3F&v=1.11146.0&vsi=34181de7-477d-41cc-9071-def4457f6ea1&_brandId=wix
IP 44.208.152.117:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=42µPop=42&et=33&event_name=page%20interactive&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&pid=c1dmp&pn=1&siterev=2601-__siteCacheRevision__&st=2&ts=1983&tts=3381&url=https%3A%2F%2Fen.kabaun.com%2F%3F&v=1.11146.0&vsi=34181de7-477d-41cc-9071-def4457f6ea1&_brandId=wix HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 14:56:12 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
frog.wix.com/bolt-performance
44.208.152.117204 No Content 0 B URL HTTP/2 frog.wix.com/bolt-performance
IP 44.208.152.117:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bolt-performance HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en.kabaun.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://en.kabaun.com
Content-Length: 11246
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 14:56:12 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash c92eba03e4e32da25711e3e66d0fa395
c5a1c13f9316af6302aba6f36114b7e0e790746f
ca40c7022a2ca15f3d7bf20236cbeacce7aa77c5aa4c2149b7f30fd238f63b9b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 14:56:12 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 26 Oct 2022 09:17:35 GMT
Expires: Wed, 02 Nov 2022 09:17:34 GMT
Etag: "c5a1c13f9316af6302aba6f36114b7e0e790746f"
Cache-Control: max-age=583881,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7604098c9aab1c0e-OSL
frog.wix.com/bpm
44.208.152.117204 No Content 0 B IP 44.208.152.117:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bpm HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2017
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 14:56:12 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
static.wixstatic.com/media/0d3689_3864146c3e6b4826a878ab729576cca6~mv2.png/v1/fill/w_1140,h_836,al_c,q_90,usm_0.66_1.00_0.01,enc_auto/0d3689_3864146c3e6b4826a878ab729576cca6~mv2.png
34.102.176.152200 OK 143 kB URL HTTP/2 static.wixstatic.com/media/0d3689_3864146c3e6b4826a878ab729576cca6~mv2.png/v1/fill/w_1140,h_836,al_c,q_90,usm_0.66_1.00_0.01,enc_auto/0d3689_3864146c3e6b4826a878ab729576cca6~mv2.png
IP 34.102.176.152:0
File type RIFF (little-endian) data, Web/P image\012- data
Size 143 kB (143396 bytes)
Hash 3389b538ae2b9105f663d6b34a1d700b
e43c6922aeb660cca8ab2d643c2644645df3c1b9
7bbf28fd259f4e2ecd18c47535b4dbc8c336b6400f1bd9269e8e5419e0a735e1
GET /media/0d3689_3864146c3e6b4826a878ab729576cca6~mv2.png/v1/fill/w_1140,h_836,al_c,q_90,usm_0.66_1.00_0.01,enc_auto/0d3689_3864146c3e6b4826a878ab729576cca6~mv2.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 26 Oct 2022 14:56:12 GMT
content-type: image/webp
content-length: 143396
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Gg2znaXpKKMV4qzxBmDSUMYkcA
x-seen-by: image-manipulator-5cdc794f79-kc6pm
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
engage.wixapps.net/chat-widget-server/renderChatWidget/index?lang=en&dateNumberFormat=en-gb&isPrimaryLanguage=false&pageId=masterPage&compId=comp-kve7wtv7&viewerCompId=comp-kve7wtv7&siteRevision=2601&viewMode=site&deviceType=desktop&locale=fr&tz=Europe%2FParis®ionalLanguage=fr&width=94&height=94&instance=24eREIfjlym47KrTYqviB1aZtUR_O1ElnzEUYtQOivY.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¤cy=EUR¤tCurrency=EUR&commonConfig=%7B%22brand%22%3A%22wix%22%2C%22bsi%22%3A%22%22%2C%22BSI%22%3A%22%22%7D&consent-policy=%7B%22func%22%3A0%2C%22anl%22%3A0%2C%22adv%22%3A0%2C%22dt3%22%3A1%2C%22ess%22%3A1%7D&vsi=34181de7-477d-41cc-9071-def4457f6ea1
185.230.60.106200 OK 7.2 kB URL HTTP/1.1 engage.wixapps.net/chat-widget-server/renderChatWidget/index?lang=en&dateNumberFormat=en-gb&isPrimaryLanguage=false&pageId=masterPage&compId=comp-kve7wtv7&viewerCompId=comp-kve7wtv7&siteRevision=2601&viewMode=site&deviceType=desktop&locale=fr&tz=Europe%2FParis®ionalLanguage=fr&width=94&height=94&instance=24eREIfjlym47KrTYqviB1aZtUR_O1ElnzEUYtQOivY.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¤cy=EUR¤tCurrency=EUR&commonConfig=%7B%22brand%22%3A%22wix%22%2C%22bsi%22%3A%22%22%2C%22BSI%22%3A%22%22%7D&consent-policy=%7B%22func%22%3A0%2C%22anl%22%3A0%2C%22adv%22%3A0%2C%22dt3%22%3A1%2C%22ess%22%3A1%7D&vsi=34181de7-477d-41cc-9071-def4457f6ea1
IP 185.230.60.106:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6313)
Hash 5459fc1097567181d91a468becbc078f
3f9e4b1c27fc220ede053a6bc50214a8eca458a4
7ee30df91ed0fad755eeefba563ff7b08759c9096634ca5209c2e49dbd1afcca
GET /chat-widget-server/renderChatWidget/index?lang=en&dateNumberFormat=en-gb&isPrimaryLanguage=false&pageId=masterPage&compId=comp-kve7wtv7&viewerCompId=comp-kve7wtv7&siteRevision=2601&viewMode=site&deviceType=desktop&locale=fr&tz=Europe%2FParis®ionalLanguage=fr&width=94&height=94&instance=24eREIfjlym47KrTYqviB1aZtUR_O1ElnzEUYtQOivY.eyJpbnN0YW5jZUlkIjoiN2UxZjUzYTItMzFmNS00NzI0LTgwMWItYmU5NGJlZGUwOWUxIiwiYXBwRGVmSWQiOiIxNDUxN2UxYS0zZmYwLWFmOTgtNDA4ZS0yYmQ2OTUzYzM2YTIiLCJtZXRhU2l0ZUlkIjoiMzg2ZDFiNDAtMzc1MC00NGE2LTk4ODgtNzViODJmMGVhMGE5Iiwic2lnbkRhdGUiOiIyMDIyLTEwLTI2VDE0OjU2OjEwLjQyOVoiLCJkZW1vTW9kZSI6ZmFsc2UsIm9yaWdpbkluc3RhbmNlSWQiOiI1YmFmNTFkOS02NDNkLTQ0ZWEtODIwOC04ZTNlODNmMTk2YTEiLCJhaWQiOiI0MjAxY2Y5ZC0yNjE0LTQ2NGUtOTdkNS0xODkyMmFiYzkxOTMiLCJiaVRva2VuIjoiNDY3MjQ4ZTItMDZhNS0wMzgyLTE4OTMtY2IyYzkxZDBhOTQ4Iiwic2l0ZU93bmVySWQiOiIzNDQzNmE0MS0xN2U4LTQ5ZmUtOTYxMi00MjE4MGU0Y2U4N2QifQ¤cy=EUR¤tCurrency=EUR&commonConfig=%7B%22brand%22%3A%22wix%22%2C%22bsi%22%3A%22%22%2C%22BSI%22%3A%22%22%7D&consent-policy=%7B%22func%22%3A0%2C%22anl%22%3A0%2C%22adv%22%3A0%2C%22dt3%22%3A1%2C%22ess%22%3A1%7D&vsi=34181de7-477d-41cc-9071-def4457f6ea1 HTTP/1.1
Host: engage.wixapps.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 14:56:12 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
set-cookie: XSRF-TOKEN=1666796172|wpG93xxfOEW9; Domain=.wix.com; Path=/; Secure; SameSite=None
fedops.logger.defaultOverrides=%7B%22paramsOverridesForApp%22%3A%7B%22wix-databases-lazy-page-component-id%22%3A%7B%22is_rollout%22%3Atrue%7D%2C%22omni-setup-sidebar-lazy%22%3A%7B%22is_rollout%22%3Atrue%7D%2C%22dashboard-setup-app.components.dashboard-widget%22%3A%7B%22is_rollout%22%3Atrue%7D%7D%7D; Max-Age=60; Path=/; Expires=Wed, 26 Oct 2022 14:57:12 GMT
_wixAB3|34436a41-17e8-49fe-9612-42180e4ce87d=15161#1|82045#1|97651#2|236860#2|261000#1|287210#2|334951#1|357145#4|357146#4|551048#2|576877#1|682468#1|697753#1|801675#1|820513#1|835176#1|837541#2|837772#1|851765#1|991250#2|1021294#2|1042875#1|1053247#2|1064386#1|1069205#1|1076929#2|1077043#1|1081623#1|1082814#1|1091452#2; Max-Age=14400; Expires=Wed, 26 Oct 2022 18:56:12 GMT; Path=/; Domain=.wix.com
x-recruiting: Want to build world class business chat product that's used by millions of users? Join our AMAZING team! Visit us at https://www.wix.com/jobs/search?val=crm
etag: W/"5306-gl23EtuTT54/wc6HSL8upxpchfs"
pragma: no-cache
cache-control: no-store, no-cache
content-encoding: gzip
vary: Accept-Encoding
X-Seen-By: jeslxIFvDH4ulYwNNi+3Muwfbs+7qUVAqsIx00yI78k=,m0j2EEknGIVUW/liY8BLLm+RUUxFrhyTYE58WvxHjkkcm7On4dir39PTYYK13tG9,++r5XCRb/6cYf+PEtyYPdPguogNdy54tVR9z2+kd4sl6cOzKiLI0VmoWp9VHWyNnBFNjNRTmQgt5BwMmIVG00A==,osV03DUdKaEVOGwoQFgPYphAPHHvrq0SpxsV5plYw0c=,Odrt8F1EDvjOxRVUPESA59+TYAcZ6pLe0AKHouNrzLYCzbR/Afjinbhv0Gx8g1mhs9Ya9zQ5rZmxYhATn+mvDQ==,sQ19iEk473qMiaixh4sATkzNDBhquYpDjenV2FRgLQE=,sQ19iEk473qMiaixh4sATs55vcjl4Suz2yRFeK3XseE=,Tj5BxVkCjhX6S7vFNevVZYck3/Oc8m/KJAXt4m20WVMcft034/wTeGWtfyqkLnCVznm9yOXhK7PbJEV4rdex4Q==,sQ19iEk473qMiaixh4sATkJ4Bff+pT2nxQ+JIfYJN4w=,mvxQ9qSAmY38asKjFCcmG9cxZnA9ld12cV+F8KlU4mBjgrhWKo0W2RJ+uaSfsnTkSsiwfnkRR6wPsuyHr4/sug==,sQ19iEk473qMiaixh4sATuqFAKZZnSH6QLmRN9CSwkI=,LlHHrtdZwfqSTe7u8ayFI1RpayTcJuYRolPfk1l7Et6mpQPMaMs3rSQ296KeWK10+4RiiB31Z8Is/0OJc/zBTg==,sQ19iEk473qMiaixh4sATsxfuvARcOCS0DawN90pFI8=,Tj5BxVkCjhX6S7vFNevVZYck3/Oc8m/KJAXt4m20WVPcnqNEzqp+otD3m2IowcvbzF+68BFw4JLQNrA33SkUjw==,sQ19iEk473qMiaixh4sATixnq2MBoBGjc+CrOcmyyHY=,54sIEWKMiveDgi8EJdej79ccmm2aa1flW2IyJ9nmjgc+b+bA9AGf1YwRKgt2FfxeHI1ZixM7vv6PPKqAg/vCSQ==,NrLb3i/xpYXJ2OAS5Ls5WtnH9yT5XVf02A1azh/oY/qLRHHBiTpk1+y1AWAZahHIbKBfb5qoHWRnZvplJq8aHg==,sQ19iEk473qMiaixh4sATlB1URYXYay9jYjnxgFJpWI=,sQ19iEk473qMiaixh4sAThH/I3WmnOhqxiTIcaY1xLc=,xcng7sTk3ADdZYw5QlZiWqdFTZ10BrYlEnhmHE3dOYFJejbWJQ+ly6UYXd52xrR69oYvVJsWO13Z/47tMOEnbg==,xyDs8lRxScsatwnhQNE9m7bbTQGRKJImOGuA/xTZK9SD+B15/iqPZC79ejimF08DZ0fNsHRThaRHvnDdYTinXA==,sQ19iEk473qMiaixh4sATq9N5sgD44CO0VrsAT2RXyQ=,sQ19iEk473qMiaixh4sATgeigloxBcRfeaoPXK/A6uM=,2fKwxo2iHl5wyQOVdzqd1+VSb/61SVdhi9RcHC7VW66Co+SCzQqDT+rxzgadxH4ZorwIRKs83KMdd2oJj8YDPQ==,J1YhAWlcwZX0sh0bHV0MaGerxxuqOGjzEvNGZg/iVFQ=
X-Wix-Request-Id: 1666796172.3498678527478124668
Server: Pepyaka/1.19.10
X-Content-Type-Options: nosniff
frog.wix.com/fed?appName=chat-widget&src=72&evid=14&session_id=e8d2de1e-535e-4188-8755-05e677f5c881&_=0.43982292581925464&is_rollout=false
44.208.152.117204 No Content 0 B URL HTTP/2 frog.wix.com/fed?appName=chat-widget&src=72&evid=14&session_id=e8d2de1e-535e-4188-8755-05e677f5c881&_=0.43982292581925464&is_rollout=false
IP 44.208.152.117:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fed?appName=chat-widget&src=72&evid=14&session_id=e8d2de1e-535e-4188-8755-05e677f5c881&_=0.43982292581925464&is_rollout=false HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://engage.wixapps.net
Connection: keep-alive
Referer: https://engage.wixapps.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 14:56:12 GMT
server: nginx
access-control-allow-origin: https://engage.wixapps.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash e4f7139b125683bac76c2b5638a1a643
2f84ea7104d659754e5962f88f504a7189f6f914
c9c550489201a92e8bbe162bca49d4aa6b21fa22b254a6a29502186423b3b579
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 14:56:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/poppins/v5/9VWMTeb5jtXkNoTv949Npfk_vArhqVIZ0nv9q090hN8.woff2
216.58.207.195200 OK 10 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v5/9VWMTeb5jtXkNoTv949Npfk_vArhqVIZ0nv9q090hN8.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 10400, version 1.0\012- data
Hash fd88a4e0f78acd1481cba622eb0ada7e
8242beb884b0c0ada3cdaedb9386d9ce5d9a7acc
5654b0e267ff835ebdb0b8f09e24b7a393bd0818b68d475e1729c3dd59af4f67
GET /s/poppins/v5/9VWMTeb5jtXkNoTv949Npfk_vArhqVIZ0nv9q090hN8.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://engage.wixapps.net
Connection: keep-alive
Referer: https://static.parastorage.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 10400
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 22 Oct 2022 02:10:31 GMT
expires: Sun, 22 Oct 2023 02:10:31 GMT
cache-control: public, max-age=31536000
age: 391542
last-modified: Wed, 11 Oct 2017 18:22:43 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
frog.wix.com/fed
44.208.152.117204 No Content 0 B IP 44.208.152.117:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fed HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 927
Origin: https://engage.wixapps.net
Connection: keep-alive
Referer: https://engage.wixapps.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 14:56:13 GMT
server: nginx
access-control-allow-origin: https://engage.wixapps.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
engage.wixapps.net/_api/chat-web/v1/real-time-tokens
185.230.60.106200 OK 904 B URL HTTP/1.1 engage.wixapps.net/_api/chat-web/v1/real-time-tokens
IP 185.230.60.106:0
File type JSON data\012- , ASCII text, with very long lines (1224), with no line terminators
Hash c15c8ef54b4d702afe9998e494b0adbb
7ed762bac9f7a95b8424d148522e040ad34bdeb3
cc71ca0498586d0b03c3db71c49b100e328357ceb104d3ab8eb38475d95ac322
POST /_api/chat-web/v1/real-time-tokens HTTP/1.1
Host: engage.wixapps.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-wix-brand: wix
consent-policy: %7B%22func%22%3A0%2C%22anl%22%3A0%2C%22adv%22%3A0%2C%22dt3%22%3A1%2C%22ess%22%3A1%7D
X-Wix-Client-Artifact-Id: chat-widget
commonConfig: %7B%22brand%22%3A%22wix%22%2C%22BSI%22%3A%22%22%7D
Content-Length: 464
Origin: https://engage.wixapps.net
Connection: keep-alive
Referer: https://engage.wixapps.net/chat-widget-server/renderChatWidget/index?lang=en&dateNumberFormat=en-gb&isPrimaryLanguage=false&pageId=masterPage&compId=comp-kve7wtv7&viewerCompId=comp-kve7wtv7&siteRevision=2601&viewMode=site&deviceType=desktop&locale=fr&tz=Europe%2FParis®ionalLanguage=fr&width=94&height=94&instance=24eREIfjlym47KrTYqviB1aZtUR_O1ElnzEUYtQOivY.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¤cy=EUR¤tCurrency=EUR&commonConfig=%7B%22brand%22%3A%22wix%22%2C%22bsi%22%3A%22%22%2C%22BSI%22%3A%22%22%7D&consent-policy=%7B%22func%22%3A0%2C%22anl%22%3A0%2C%22adv%22%3A0%2C%22dt3%22%3A1%2C%22ess%22%3A1%7D&vsi=34181de7-477d-41cc-9071-def4457f6ea1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 14:56:13 GMT
Content-Type: application/json;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: no-cache
content-encoding: gzip
vary: Accept-Encoding
X-Seen-By: jeslxIFvDH4ulYwNNi+3Muwfbs+7qUVAqsIx00yI78k=,m0j2EEknGIVUW/liY8BLLm+RUUxFrhyTYE58WvxHjkkcm7On4dir39PTYYK13tG9,++r5XCRb/6cYf+PEtyYPdO8rKgnV+I85DMaC3o8y+cpLi4pj4pfxEwq7M4Iz9gD5OaI643jUuL1BZE1tjTz9BA==,osV03DUdKaEVOGwoQFgPYirCIX0r7AuLqQNdUTxtcn8=,sQ19iEk473qMiaixh4sATiSXQMjVQJOcLv9l/qWSUxg=,dEEl33DmWirEZ6YVD2/LVIj6WDuKqbeFQY362GNw0/qrmWRuM+UCr1gOvHGRiZbV
X-Wix-Request-Id: 1666796173.0878678527478224668
set-cookie: XSRF-TOKEN=1666796173|qTYg_0lY3lWN; Path=/; Domain=engage.wixapps.net; Secure; SameSite=None
Server: Pepyaka/1.19.10
X-Content-Type-Options: nosniff
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash e4f7139b125683bac76c2b5638a1a643
2f84ea7104d659754e5962f88f504a7189f6f914
c9c550489201a92e8bbe162bca49d4aa6b21fa22b254a6a29502186423b3b579
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 14:56:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 19132f29a8811a10f90eca2d81e5deb8
3b9e0bbf9f40f46b57dad5567b008e58b5770565
708aeab241760b108d60c1462b1979e59cf473242222e9270705ba70642b04f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 14:56:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash f046e6113dd1e5e499c765516be08b17
c2253055e09b46209469853cad8720e64f84a1bf
18663a8f0b5d4d7581b771da6c2dc897bc2b82d51d7dac1a56d22f9bebab6fb3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 14:56:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googleapis.com/identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyClcOX5Tut1uJylikpNbFzkW_qpiBFjNPM
142.250.74.10200 OK 0 B URL HTTP/2 www.googleapis.com/identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyClcOX5Tut1uJylikpNbFzkW_qpiBFjNPM
IP 142.250.74.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyClcOX5Tut1uJylikpNbFzkW_qpiBFjNPM HTTP/1.1
Host: www.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://engage.wixapps.net/
Origin: https://engage.wixapps.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://engage.wixapps.net
vary: origin, referer, x-origin
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type
access-control-max-age: 3600
date: Wed, 26 Oct 2022 14:56:13 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 19132f29a8811a10f90eca2d81e5deb8
3b9e0bbf9f40f46b57dad5567b008e58b5770565
708aeab241760b108d60c1462b1979e59cf473242222e9270705ba70642b04f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 14:56:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
engage.wixapps.net/serverless/chat-event-reporter/report-event
185.230.60.106200 OK 0 B URL HTTP/1.1 engage.wixapps.net/serverless/chat-event-reporter/report-event
IP 185.230.60.106:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /serverless/chat-event-reporter/report-event HTTP/1.1
Host: engage.wixapps.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Wix-Chat-Instance: 24eREIfjlym47KrTYqviB1aZtUR_O1ElnzEUYtQOivY.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
x-wix-brand: wix
consent-policy: %7B%22func%22%3A0%2C%22anl%22%3A0%2C%22adv%22%3A0%2C%22dt3%22%3A1%2C%22ess%22%3A1%7D
authorization: 24eREIfjlym47KrTYqviB1aZtUR_O1ElnzEUYtQOivY.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
X-Wix-Client-Artifact-Id: chat-widget
commonConfig: %7B%22brand%22%3A%22wix%22%2C%22BSI%22%3A%22%22%7D
x-wix-linguist: en|en-gb|false|7e1f53a2-31f5-4724-801b-be94bede09e1
X-XSRF-TOKEN: 1666796173|qTYg_0lY3lWN
Content-Length: 454
Origin: https://engage.wixapps.net
Connection: keep-alive
Referer: https://engage.wixapps.net/chat-widget-server/renderChatWidget/index?lang=en&dateNumberFormat=en-gb&isPrimaryLanguage=false&pageId=masterPage&compId=comp-kve7wtv7&viewerCompId=comp-kve7wtv7&siteRevision=2601&viewMode=site&deviceType=desktop&locale=fr&tz=Europe%2FParis®ionalLanguage=fr&width=94&height=94&instance=24eREIfjlym47KrTYqviB1aZtUR_O1ElnzEUYtQOivY.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¤cy=EUR¤tCurrency=EUR&commonConfig=%7B%22brand%22%3A%22wix%22%2C%22bsi%22%3A%22%22%2C%22BSI%22%3A%22%22%7D&consent-policy=%7B%22func%22%3A0%2C%22anl%22%3A0%2C%22adv%22%3A0%2C%22dt3%22%3A1%2C%22ess%22%3A1%7D&vsi=34181de7-477d-41cc-9071-def4457f6ea1
Cookie: XSRF-TOKEN=1666796173|qTYg_0lY3lWN
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 14:56:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 0
Connection: keep-alive
pragma: no-cache
cache-control: no-store, no-cache
X-Seen-By: jeslxIFvDH4ulYwNNi+3Muwfbs+7qUVAqsIx00yI78k=,m0j2EEknGIVUW/liY8BLLm+RUUxFrhyTYE58WvxHjkkcm7On4dir39PTYYK13tG9,++r5XCRb/6cYf+PEtyYPdFcbp9K81DagJm/nnHG8g6eMx3YMw5Rx9hIyg786NZXe8NcvWFliAQlJdPfG2fuO6g==,osV03DUdKaEVOGwoQFgPYjz2/WSpNtyeuc/EcxAHSDg=,sQ19iEk473qMiaixh4sATuAJBk447q+RRlLkyWz66w0=,PgrrMD+T/VLWpAP1f76DIoAXQ6fiMLN02eUSRBYJ5uDXtPj2tVRH1TuxExumcYFyHPAXvThK04oPo3/EtyIN+gRTYzUU5kILeQcDJiFRtNA=
X-Wix-Request-Id: 1666796173.2368678527478324668
Server: Pepyaka/1.19.10
X-Content-Type-Options: nosniff
frog.wix.com/bpm
44.208.152.117204 No Content 0 B IP 44.208.152.117:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bpm HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1810
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 14:56:13 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
www.googleapis.com/identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyClcOX5Tut1uJylikpNbFzkW_qpiBFjNPM
142.250.74.10200 OK 1.0 kB URL HTTP/2 www.googleapis.com/identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyClcOX5Tut1uJylikpNbFzkW_qpiBFjNPM
IP 142.250.74.10:0
File type JSON data\012- , ASCII text, with very long lines (952)
Hash db207b26befddda2b41bd2f70d27e863
dd1c5c9303612068609be940ab956b56f42576a7
27f82c9e050d496362f33430b7b6b1f71511b9f781d6acd8150df8332f99399c
POST /identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyClcOX5Tut1uJylikpNbFzkW_qpiBFjNPM HTTP/1.1
Host: www.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 956
Origin: https://engage.wixapps.net
Connection: keep-alive
Referer: https://engage.wixapps.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
date: Wed, 26 Oct 2022 14:56:13 GMT
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
server: ESF
content-length: 1011
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://engage.wixapps.net
access-control-expose-headers: date,vary,vary,vary,content-encoding,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
duplexer.wix.com/?v=2&instance=24eREIfjlym47KrTYqviB1aZtUR_O1ElnzEUYtQOivY.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
54.210.222.47101 Switching Protocols 0 B URL HTTP/1.1 duplexer.wix.com/?v=2&instance=24eREIfjlym47KrTYqviB1aZtUR_O1ElnzEUYtQOivY.eyJpbnN0YW5jZUlkIjoiN2UxZjUzYTItMzFmNS00NzI0LTgwMWItYmU5NGJlZGUwOWUxIiwiYXBwRGVmSWQiOiIxNDUxN2UxYS0zZmYwLWFmOTgtNDA4ZS0yYmQ2OTUzYzM2YTIiLCJtZXRhU2l0ZUlkIjoiMzg2ZDFiNDAtMzc1MC00NGE2LTk4ODgtNzViODJmMGVhMGE5Iiwic2lnbkRhdGUiOiIyMDIyLTEwLTI2VDE0OjU2OjEwLjQyOVoiLCJkZW1vTW9kZSI6ZmFsc2UsIm9yaWdpbkluc3RhbmNlSWQiOiI1YmFmNTFkOS02NDNkLTQ0ZWEtODIwOC04ZTNlODNmMTk2YTEiLCJhaWQiOiI0MjAxY2Y5ZC0yNjE0LTQ2NGUtOTdkNS0xODkyMmFiYzkxOTMiLCJiaVRva2VuIjoiNDY3MjQ4ZTItMDZhNS0wMzgyLTE4OTMtY2IyYzkxZDBhOTQ4Iiwic2l0ZU93bmVySWQiOiIzNDQzNmE0MS0xN2U4LTQ5ZmUtOTYxMi00MjE4MGU0Y2U4N2QifQ
IP 54.210.222.47:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?v=2&instance=24eREIfjlym47KrTYqviB1aZtUR_O1ElnzEUYtQOivY.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 HTTP/1.1
Host: duplexer.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://engage.wixapps.net
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: LAgcUTmQuhS0ON5wNtSCMg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Wed, 26 Oct 2022 14:56:13 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zPYzNaE93SPF+8CJ5v+m5rY9S20=
ocsp.pki.goog/s/gts1d4int/5EXjxzFGjgM
142.250.74.35200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4int/5EXjxzFGjgM
IP 142.250.74.35:0
Hash a3cf607598c74948cc43f98856504e89
a741df07b69f4e94a06a788a7b84b9170cae6b39
f6924a5e0b0b0083050bffdf393a5e0a3f3866a5c5edefa381eaf2657b529f12
POST /s/gts1d4int/5EXjxzFGjgM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 14:56:13 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
wix-engage-visitors-prod-19.firebaseio.com/core-chat/participants/4201cf9d-2614-464e-97d5-18922abc9193/events.json?auth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjNmNjcyNDYxOTk4YjJiMzMyYWQ4MTY0ZTFiM2JlN2VkYTY4NDZiMzciLCJ0eXAiOiJKV1QifQ.eyJwYXJ0aWNpcGFudElkIjoiNDIwMWNmOWQtMjYxNC00NjRlLTk3ZDUtMTg5MjJhYmM5MTkzIiwiaXNzIjoiaHR0cHM6Ly9zZWN1cmV0b2tlbi5nb29nbGUuY29tL3dpeC1lbmdhZ2UtdmlzaXRvcnMtcHJvZC0xNSIsImF1ZCI6IndpeC1lbmdhZ2UtdmlzaXRvcnMtcHJvZC0xNSIsImF1dGhfdGltZSI6MTY2Njc5NjE3MywidXNlcl9pZCI6IjhmMmVhYTc5LTMxN2MtNDQ4Zi1iMzJkLTZmZWExYjA3OWE0MCIsInN1YiI6IjhmMmVhYTc5LTMxN2MtNDQ4Zi1iMzJkLTZmZWExYjA3OWE0MCIsImlhdCI6MTY2Njc5NjE3MywiZXhwIjoxNjY2Nzk5NzczLCJmaXJlYmFzZSI6eyJpZGVudGl0aWVzIjp7fSwic2lnbl9pbl9wcm92aWRlciI6ImN1c3RvbSJ9fQ.iylZNP69hzcuDDYs3oG_xDbbQ-nknadu8sjssTtNXFaqUZf3O5I5PPT7MsAdX719ZGAdiTcdzGT7GOcMydHDZ8MKznYlwOFErtASHSVSNx-nm8SM7IEXzPlLkS_aIg9AZ2FyB_KZjdgLW4GTHJHBKXQ4Qve1xuVjCV-3mVhssEY5zhkU7m74aHw6agO36LJYQgumI61udQHWCG9KkLk2nTfGIWZtKma7dhaNwYjTHpW7t3jqwG88p6FtRyJg-fVEjylllIVs_FJ-CSfqbJwr-kmKM3wgnyEqIhatXMiUfuSeoz9tX7jKEFunl3iiUUlpWE_n-7tDX5IiDvaV0K-G2g
34.120.160.131200 OK 4 B URL HTTP/1.1 wix-engage-visitors-prod-19.firebaseio.com/core-chat/participants/4201cf9d-2614-464e-97d5-18922abc9193/events.json?auth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjNmNjcyNDYxOTk4YjJiMzMyYWQ4MTY0ZTFiM2JlN2VkYTY4NDZiMzciLCJ0eXAiOiJKV1QifQ.eyJwYXJ0aWNpcGFudElkIjoiNDIwMWNmOWQtMjYxNC00NjRlLTk3ZDUtMTg5MjJhYmM5MTkzIiwiaXNzIjoiaHR0cHM6Ly9zZWN1cmV0b2tlbi5nb29nbGUuY29tL3dpeC1lbmdhZ2UtdmlzaXRvcnMtcHJvZC0xNSIsImF1ZCI6IndpeC1lbmdhZ2UtdmlzaXRvcnMtcHJvZC0xNSIsImF1dGhfdGltZSI6MTY2Njc5NjE3MywidXNlcl9pZCI6IjhmMmVhYTc5LTMxN2MtNDQ4Zi1iMzJkLTZmZWExYjA3OWE0MCIsInN1YiI6IjhmMmVhYTc5LTMxN2MtNDQ4Zi1iMzJkLTZmZWExYjA3OWE0MCIsImlhdCI6MTY2Njc5NjE3MywiZXhwIjoxNjY2Nzk5NzczLCJmaXJlYmFzZSI6eyJpZGVudGl0aWVzIjp7fSwic2lnbl9pbl9wcm92aWRlciI6ImN1c3RvbSJ9fQ.iylZNP69hzcuDDYs3oG_xDbbQ-nknadu8sjssTtNXFaqUZf3O5I5PPT7MsAdX719ZGAdiTcdzGT7GOcMydHDZ8MKznYlwOFErtASHSVSNx-nm8SM7IEXzPlLkS_aIg9AZ2FyB_KZjdgLW4GTHJHBKXQ4Qve1xuVjCV-3mVhssEY5zhkU7m74aHw6agO36LJYQgumI61udQHWCG9KkLk2nTfGIWZtKma7dhaNwYjTHpW7t3jqwG88p6FtRyJg-fVEjylllIVs_FJ-CSfqbJwr-kmKM3wgnyEqIhatXMiUfuSeoz9tX7jKEFunl3iiUUlpWE_n-7tDX5IiDvaV0K-G2g
IP 34.120.160.131:0
File type ASCII text, with no line terminators
Hash 37a6259cc0c1dae299a7866489dff0bd
2be88ca4242c76e8253ac62474851065032d6833
74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b
GET /core-chat/participants/4201cf9d-2614-464e-97d5-18922abc9193/events.json?auth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjNmNjcyNDYxOTk4YjJiMzMyYWQ4MTY0ZTFiM2JlN2VkYTY4NDZiMzciLCJ0eXAiOiJKV1QifQ.eyJwYXJ0aWNpcGFudElkIjoiNDIwMWNmOWQtMjYxNC00NjRlLTk3ZDUtMTg5MjJhYmM5MTkzIiwiaXNzIjoiaHR0cHM6Ly9zZWN1cmV0b2tlbi5nb29nbGUuY29tL3dpeC1lbmdhZ2UtdmlzaXRvcnMtcHJvZC0xNSIsImF1ZCI6IndpeC1lbmdhZ2UtdmlzaXRvcnMtcHJvZC0xNSIsImF1dGhfdGltZSI6MTY2Njc5NjE3MywidXNlcl9pZCI6IjhmMmVhYTc5LTMxN2MtNDQ4Zi1iMzJkLTZmZWExYjA3OWE0MCIsInN1YiI6IjhmMmVhYTc5LTMxN2MtNDQ4Zi1iMzJkLTZmZWExYjA3OWE0MCIsImlhdCI6MTY2Njc5NjE3MywiZXhwIjoxNjY2Nzk5NzczLCJmaXJlYmFzZSI6eyJpZGVudGl0aWVzIjp7fSwic2lnbl9pbl9wcm92aWRlciI6ImN1c3RvbSJ9fQ.iylZNP69hzcuDDYs3oG_xDbbQ-nknadu8sjssTtNXFaqUZf3O5I5PPT7MsAdX719ZGAdiTcdzGT7GOcMydHDZ8MKznYlwOFErtASHSVSNx-nm8SM7IEXzPlLkS_aIg9AZ2FyB_KZjdgLW4GTHJHBKXQ4Qve1xuVjCV-3mVhssEY5zhkU7m74aHw6agO36LJYQgumI61udQHWCG9KkLk2nTfGIWZtKma7dhaNwYjTHpW7t3jqwG88p6FtRyJg-fVEjylllIVs_FJ-CSfqbJwr-kmKM3wgnyEqIhatXMiUfuSeoz9tX7jKEFunl3iiUUlpWE_n-7tDX5IiDvaV0K-G2g HTTP/1.1
Host: wix-engage-visitors-prod-19.firebaseio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://engage.wixapps.net
Connection: keep-alive
Referer: https://engage.wixapps.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 26 Oct 2022 14:56:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 4
Connection: keep-alive
Access-Control-Allow-Origin: https://engage.wixapps.net
Cache-Control: no-cache
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
engage.wixapps.net/_api/presence-service/v1/set-data
185.230.60.106200 OK 2 B URL HTTP/1.1 engage.wixapps.net/_api/presence-service/v1/set-data
IP 185.230.60.106:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /_api/presence-service/v1/set-data HTTP/1.1
Host: engage.wixapps.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://engage.wixapps.net/chat-widget-server/renderChatWidget/index?lang=en&dateNumberFormat=en-gb&isPrimaryLanguage=false&pageId=masterPage&compId=comp-kve7wtv7&viewerCompId=comp-kve7wtv7&siteRevision=2601&viewMode=site&deviceType=desktop&locale=fr&tz=Europe%2FParis®ionalLanguage=fr&width=94&height=94&instance=24eREIfjlym47KrTYqviB1aZtUR_O1ElnzEUYtQOivY.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¤cy=EUR¤tCurrency=EUR&commonConfig=%7B%22brand%22%3A%22wix%22%2C%22bsi%22%3A%22%22%2C%22BSI%22%3A%22%22%7D&consent-policy=%7B%22func%22%3A0%2C%22anl%22%3A0%2C%22adv%22%3A0%2C%22dt3%22%3A1%2C%22ess%22%3A1%7D&vsi=34181de7-477d-41cc-9071-def4457f6ea1
x-wix-brand: wix
consent-policy: %7B%22func%22%3A0%2C%22anl%22%3A0%2C%22adv%22%3A0%2C%22dt3%22%3A1%2C%22ess%22%3A1%7D
x-wix-client-artifact-id: chat-widget
commonconfig: %7B%22brand%22%3A%22wix%22%2C%22BSI%22%3A%22%22%7D
x-xsrf-token: 1666796173|qTYg_0lY3lWN
authorization: 24eREIfjlym47KrTYqviB1aZtUR_O1ElnzEUYtQOivY.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
content-type: application/json
Origin: https://engage.wixapps.net
Content-Length: 275
Connection: keep-alive
Cookie: XSRF-TOKEN=1666796173|qTYg_0lY3lWN
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 14:56:14 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 2
Connection: keep-alive
etag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"
pragma: no-cache
cache-control: no-store, no-cache
X-Seen-By: jeslxIFvDH4ulYwNNi+3Muwfbs+7qUVAqsIx00yI78k=,m0j2EEknGIVUW/liY8BLLm+RUUxFrhyTYE58WvxHjkkcm7On4dir39PTYYK13tG9,++r5XCRb/6cYf+PEtyYPdGbhS8JHenJeda4h5/OnoIUnfBBDgUoxecmf2mw3Xb7Yl4wnw7axogRT0gn2FG2pPg==,osV03DUdKaEVOGwoQFgPYsH3r8e1yjl86ko6apRbpO0=,sQ19iEk473qMiaixh4sATkn6lt5Rdwe7niLUR/PvCsg=,n7nfHveCLqFOR3soqbSfoyK3EkIcNpGm/WcgwmLGOmyr1NUAv0j2HtPIimXnjqfxkSsd7vZFpefNiaA+zwZ2dQ==
X-Wix-Request-Id: 1666796174.0738678527478424668
Server: Pepyaka/1.19.10
X-Content-Type-Options: nosniff
frog.wix.com/fed
44.208.152.117204 No Content 0 B IP 44.208.152.117:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fed HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 814
Origin: https://engage.wixapps.net
Connection: keep-alive
Referer: https://engage.wixapps.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 14:56:14 GMT
server: nginx
access-control-allow-origin: https://engage.wixapps.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
en.kabaun.com/
199.15.163.138200 OK 0 B IP 199.15.163.138:0
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: en.kabaun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://campaign.kabaun.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 14:56:10 GMT
content-type: text/html; charset=UTF-8
link: <https://static.parastorage.com/>; rel=preconnect; crossorigin;,<https://static.parastorage.com/>; rel=preconnect;,<https://static.wixstatic.com/>; rel=preconnect; crossorigin;,<https://static.wixstatic.com/>; rel=preconnect;,<https://siteassets.parastorage.com>; rel=preconnect; crossorigin;,
etag: W/"fe1aaea9a705d251c797abecbb1649ce"
content-language: en
strict-transport-security: max-age=3600
age: 33562
server-timing: cache;desc=hit, varnish;desc=hit, dc;desc=42
x-seen-by: wmgbEcS9zOENaefw7bU4YRPnIabCQWJW461ERvTuE+U=,W1c2/pqHBqplxcWufHCkILxkNjrXdwdgtu6E0yACibU=,sHU62EDOGnH2FBkJkG/Wx8EeXWsWdHrhlvbxtlynkVhYjH/dJabfxWmS+madRCnW,m0j2EEknGIVUW/liY8BLLseIu4dGXwqDk+m1otFKtK/V0TBmJ+uLPQ4OZPC1VSMH,2d58ifebGbosy5xc+FRalsIv+UP2q+CC/lk9mVpzeZKHsxsfd4GhZzsq46/mt3Nf8u3I3IW3hJGQBHjqs9xKSA==,2UNV7KOq4oGjA5+PKsX47Mf8s35TOGDl04KsxB8N+c0fbJaKSXYQ/lskq2jK6SGP
vary: Accept-Encoding
x-wix-request-id: 1666796169.98786864244461720650
set-cookie: ssr-caching=cache#desc=hit#varnish=hit#dc#desc=42; Max-Age=20; Expires=Wed, 26 Oct 2022 05:37:07 GMT
XSRF-TOKEN=1666796169|wvNtjb278nGh; Path=/; Domain=en.kabaun.com; Secure; SameSite=None
TS01e85bed=01d72e6d16946ab94219841833567602e55abbeed215186516390a5f3b7e0746ae22e8a08e25af9a84ed6d576c669fdc4130b6dc25; Path=/; SameSite=none; Secure
TS01f4356e=01d72e6d16946ab94219841833567602e55abbeed215186516390a5f3b7e0746ae22e8a08e25af9a84ed6d576c669fdc4130b6dc25; path=/; domain=en.kabaun.com; SameSite=none; Secure
cache-control: private,max-age=0,must-revalidate
x-content-type-options: nosniff
content-encoding: br
server: Pepyaka/1.19.10
X-Firefox-Spdy: h2
en.kabaun.com/_api/v2/dynamicmodel
199.15.163.138200 OK 0 B URL HTTP/2 en.kabaun.com/_api/v2/dynamicmodel
IP 199.15.163.138:0
Analyzer Verdict Alert fortinet Malware
GET /_api/v2/dynamicmodel HTTP/1.1
Host: en.kabaun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en.kabaun.com/
Connection: keep-alive
Cookie: ssr-caching=cache#desc=hit#varnish=hit#dc#desc=42; XSRF-TOKEN=1666796169|wvNtjb278nGh; TS01e85bed=01d72e6d16946ab94219841833567602e55abbeed215186516390a5f3b7e0746ae22e8a08e25af9a84ed6d576c669fdc4130b6dc25; TS01f4356e=01d72e6d16946ab94219841833567602e55abbeed215186516390a5f3b7e0746ae22e8a08e25af9a84ed6d576c669fdc4130b6dc25
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 14:56:10 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
strict-transport-security: max-age=3600
age: 33562
server-timing: cache;desc=hit, varnish;desc=hit, dc;desc=42
x-seen-by: wmgbEcS9zOENaefw7bU4YRPnIabCQWJW461ERvTuE+U=,W1c2/pqHBqplxcWufHCkILxkNjrXdwdgtu6E0yACibU=,sHU62EDOGnH2FBkJkG/Wx8EeXWsWdHrhlvbxtlynkVh801laWHTHfMuOO0gRLvp5,m0j2EEknGIVUW/liY8BLLk1Uxi5aVwrmRyfWZ8T7SgAMbwluI1yUDJty9McxOlfY,2d58ifebGbosy5xc+FRalrMRC4xkdBeH0ijFsKGYSBh2PKTjLrZ3PNjRjuunM9o0yKHVdV4a3rtrXJO+BVGCOw==,2UNV7KOq4oGjA5+PKsX47Mf8s35TOGDl04KsxB8N+c0fbJaKSXYQ/lskq2jK6SGP
cache-control: no-cache, no-store
vary: Accept-Encoding
x-wix-request-id: 1666796170.4218664008105316753
set-cookie: hs=1103538219; Path=/; Domain=en.kabaun.com; HTTPOnly
svSession=3f0b0b4fe1ca8ab688467b98211d26acb5f9fb824e5435cf537be435b2b41404ee63525c8935f36fe234372c1ec263fd1e60994d53964e647acf431e4f798bcd0821ad5acda30d3d01b5d90dc8f7ed5a9ad94594708737d2165c85600212541e049e85b0787661a04f601504dc8a53b05a114690d376446580719547752135c18778c4c6c7c536181b4c6d9b65c31eb3; Max-Age=63158400; Expires=Sat, 26 Oct 2024 14:56:10 GMT; Path=/; Domain=en.kabaun.com; Secure; HTTPOnly; SameSite=None
TS01e85bed=01d72e6d16946ab94219841833567602e55abbeed215186516390a5f3b7e0746ae22e8a08e25af9a84ed6d576c669fdc4130b6dc25; Path=/; SameSite=none; Secure
TS01f4356e=01d72e6d16946ab94219841833567602e55abbeed215186516390a5f3b7e0746ae22e8a08e25af9a84ed6d576c669fdc4130b6dc25; path=/; domain=en.kabaun.com; SameSite=none; Secure
x-content-type-options: nosniff
content-encoding: br
server: Pepyaka/1.19.10
X-Firefox-Spdy: h2