campaign.kabaun.com/api/t/c/usr_2JHnoqEapnZSffxj2/tsk_7CqxrZSEJevM2Jvgj/enc_U2FsdGVkX19Wqh-k9GeDfB8kXD8beGCU-GcS__S0lobqvwDH4P_uqYMNqLmsLU4L
51.254.243.65200 OK 490 B URL HTTP/1.1 campaign.kabaun.com/api/t/c/usr_2JHnoqEapnZSffxj2/tsk_7CqxrZSEJevM2Jvgj/enc_U2FsdGVkX19Wqh-k9GeDfB8kXD8beGCU-GcS__S0lobqvwDH4P_uqYMNqLmsLU4L
IP 51.254.243.65:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 8725686c45bee2165a2c688081593f1c
0a5714a61174f842d5defa0ac06bedcef9376288
6373dcdd718505f3c9c6e3042fce6f571822ca29d18db28e645b6c9c2adf30dc
Analyzer Verdict Alert fortinet Malware
GET /api/t/c/usr_2JHnoqEapnZSffxj2/tsk_7CqxrZSEJevM2Jvgj/enc_U2FsdGVkX19Wqh-k9GeDfB8kXD8beGCU-GcS__S0lobqvwDH4P_uqYMNqLmsLU4L HTTP/1.1
Host: campaign.kabaun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Length: 490
Content-Type: text/html
Date: Wed, 26 Oct 2022 15:15:05 GMT
Server:
X-Cache-Debug: custom.track
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e36c852b5e145f2f09fe73111fb162e1
e439c6a462f86a3003d6464a8b9999b1c4d1e210
52a721168d0c41cb0854ff8c730fce3b79db2e804b383238e95ff1401922bd74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52A721168D0C41CB0854FF8C730FCE3B79DB2E804B383238E95FF1401922BD74"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6071
Expires: Wed, 26 Oct 2022 16:56:17 GMT
Date: Wed, 26 Oct 2022 15:15:06 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 45bfdf3b823cd24564c8ac296a8b5b19
b0c442eb4f87556b3beb18ca8039dd4399b73f16
32113c679dda1f710ba67e537fdd0d435ccc186a238e3b14e48deb7b0700c693
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6094
Cache-Control: max-age=158250
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 15:15:06 GMT
Etag: "6358fe56-1d7"
Expires: Fri, 28 Oct 2022 11:12:36 GMT
Last-Modified: Wed, 26 Oct 2022 09:31:02 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 45bfdf3b823cd24564c8ac296a8b5b19
b0c442eb4f87556b3beb18ca8039dd4399b73f16
32113c679dda1f710ba67e537fdd0d435ccc186a238e3b14e48deb7b0700c693
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5646
Cache-Control: max-age=157802
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 15:15:06 GMT
Etag: "6358fe56-1d7"
Expires: Fri, 28 Oct 2022 11:05:08 GMT
Last-Modified: Wed, 26 Oct 2022 09:31:02 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash a39eea1096852891690eaee02a64383e
c273000f799fc3676e8e3ef3617611a31252cffc
d9d95319013d64bc2ef6d9870f4adba902ee970b6f9e96279c9ed86f556e0001
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D9D95319013D64BC2EF6D9870F4ADBA902EE970B6F9E96279C9ED86F556E0001"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4829
Expires: Wed, 26 Oct 2022 16:35:35 GMT
Date: Wed, 26 Oct 2022 15:15:06 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: uBrk5jIKvpWEsPF7Nq5W6zcTVMEBD/s5sVgqwq+FcEwtStfuU+ePPtWnGEOzxyUH0oMIF3G9Qak=
x-amz-request-id: RWY814ZMEG7NT07X
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 26 Oct 2022 14:39:14 GMT
age: 2152
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 15:15:06 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7f14a900d7d7c92c1cd3838a85631ba3
0e1e5b808c13d8ac5a3e9ae18c73cdeaea7fd0d6
6b241402497f2fb5b704846cf1027931ac7012b04662ed0e5d6b14b29bdd4dae
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6B241402497F2FB5B704846CF1027931AC7012B04662ED0E5D6B14B29BDD4DAE"
Last-Modified: Tue, 25 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20416
Expires: Wed, 26 Oct 2022 20:55:22 GMT
Date: Wed, 26 Oct 2022 15:15:06 GMT
Connection: keep-alive
campaign.kabaun.com/favicon.ico
51.254.243.65404 Not Found 0 B URL HTTP/1.1 campaign.kabaun.com/favicon.ico
IP 51.254.243.65:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: campaign.kabaun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://campaign.kabaun.com/api/t/c/usr_2JHnoqEapnZSffxj2/tsk_7CqxrZSEJevM2Jvgj/enc_U2FsdGVkX19Wqh-k9GeDfB8kXD8beGCU-GcS__S0lobqvwDH4P_uqYMNqLmsLU4L
HTTP/1.1 404 Not Found
Cache-Control: max-age=86400
Server:
Strict-Transport-Security: max-age=31536000;
X-Cache-Debug: custom.cache
Date: Wed, 26 Oct 2022 15:15:06 GMT
Content-Length: 0
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash dd283dfc036535bdeb8a8be1310ef930
d3b1c300dd75d7af630e0f3112e49d7492d66c17
578f9256faa188facb3f2d68b02b0c7fb2e30e02e2e74234d015429563cba7aa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3572
Cache-Control: max-age=150672
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 15:15:07 GMT
Etag: "6358ea97-1d7"
Expires: Fri, 28 Oct 2022 09:06:19 GMT
Last-Modified: Wed, 26 Oct 2022 08:06:47 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 8e7c9996fd940ee46e5251ba4f82d0f8
7be1c4bab1f596fb306587e9ebb5546353602e97
dbd38a485bd31b2a9cca65ecd688f2f5dbe009ce99900662ec20a82ab27e7e29
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 15:15:07 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2022 20:16:27 GMT
Expires: Tue, 01 Nov 2022 20:16:26 GMT
Etag: "7be1c4bab1f596fb306587e9ebb5546353602e97"
Cache-Control: max-age=535878,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 760425413fe0b51b-OSL
static.wixstatic.com/media/34436a_2a0f7ade4d1d4a4093f251859623e684%7Emv2.png/v1/fill/w_32%2Ch_32%2Clg_1%2Cusm_0.66_1.00_0.01/34436a_2a0f7ade4d1d4a4093f251859623e684%7Emv2.png
34.102.176.152200 OK 730 B URL HTTP/2 static.wixstatic.com/media/34436a_2a0f7ade4d1d4a4093f251859623e684%7Emv2.png/v1/fill/w_32%2Ch_32%2Clg_1%2Cusm_0.66_1.00_0.01/34436a_2a0f7ade4d1d4a4093f251859623e684%7Emv2.png
IP 34.102.176.152:0
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 104bb9b05f5ba363912502b59eb05330
cf117881ba76de8f91410e43b2fae76e8bf76dec
fa7bab438bb2c69b9cf6356a7c9e9872ae205a8f753ea1a04ffcdc1be938092a
GET /media/34436a_2a0f7ade4d1d4a4093f251859623e684%7Emv2.png/v1/fill/w_32%2Ch_32%2Clg_1%2Cusm_0.66_1.00_0.01/34436a_2a0f7ade4d1d4a4093f251859623e684%7Emv2.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty/1.21.4.1
content-length: 730
access-control-allow-origin: *
wix-tracer: 2Gg2zudfLTW4rjhIoURNMUG380p
x-seen-by: image-manipulator-5cdc794f79-5vbg9
timing-allow-origin: *
via: 1.1 google
date: Wed, 26 Oct 2022 14:56:12 GMT
cache-control: public, max-age=2592000, immutable
content-type: image/png
age: 1135
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 8e7c9996fd940ee46e5251ba4f82d0f8
7be1c4bab1f596fb306587e9ebb5546353602e97
dbd38a485bd31b2a9cca65ecd688f2f5dbe009ce99900662ec20a82ab27e7e29
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 15:15:07 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2022 20:16:27 GMT
Expires: Tue, 01 Nov 2022 20:16:26 GMT
Etag: "7be1c4bab1f596fb306587e9ebb5546353602e97"
Cache-Control: max-age=535878,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76042541cd08b52d-OSL
static.parastorage.com/services/tag-manager-client/1.427.0/siteTags.bundle.min.js
151.101.85.91200 OK 3.9 kB URL HTTP/2 static.parastorage.com/services/tag-manager-client/1.427.0/siteTags.bundle.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (11168)
Hash 5d436a29345aa2e8c4a824fa19f4ecc7
2b479a24b7f7bc5d556f93a0599bbe7104acf467
242529af773ec259f51763a104f5d5ef45715558d932b1b91ff39680269a783f
GET /services/tag-manager-client/1.427.0/siteTags.bundle.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 25 May 2021 09:37:42 GMT
etag: W/"74b64900831a2e814a8ff0cdedcf80cb"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjBLy8P45DoDO4LnRm+zqsP,aVxMblM8KFG3we5NLvyVcyzve4L4qo9dv8TvlcgmZhMQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1661824722.2696518981706122520
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:07 GMT
age: 5105825
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 4795
x-timer: S1666797307.315602,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3858
X-Firefox-Spdy: h2
static.parastorage.com/unpkg/react@16.14.0/umd/react.production.min.js
151.101.85.91200 OK 4.7 kB URL HTTP/2 static.parastorage.com/unpkg/react@16.14.0/umd/react.production.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (574)
Hash 98af04861581703b8f33819f777e19f5
68333056e788b1276646537149661537143ddc8a
9b4dce05c51788fcb566e1b8bbfc8f9df48249035b9d2cb8633011b7bd26c5dc
GET /unpkg/react@16.14.0/umd/react.production.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-max-age: 3000
last-modified: Thu, 15 Oct 2020 02:11:22 GMT
etag: W/"63d498e143f421cc44dfb64f22fef270"
access-control-allow-methods: GET, GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciexeHcfy36aNagyZbZBL0eWIHlCalF7YnfvOr2cMPpyw==,aVxMblM8KFG3we5NLvyVc0g5Kz7nWLaChx0hkFXPsQ8ghGES6Jsix+7j8qfOfk1L
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1660710573.6746456715006120999
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:07 GMT
age: 6098270
x-served-by: cache-bma1669-BMA
x-cache: HIT
x-cache-hits: 11579
x-timer: S1666797307.320550,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4703
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 1ccad1ac0c6e2bc43f9a22ed129d0966
543c2185098b7a7bf349a9fdd5fe312597f36462
784def5108d45548b3e80ab9fa4af8b6ae29b53aea2fbeb16daf6a368ac8ef42
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 15:15:07 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 23 Oct 2022 12:31:09 GMT
Expires: Sun, 30 Oct 2022 12:31:08 GMT
Etag: "543c2185098b7a7bf349a9fdd5fe312597f36462"
Cache-Control: max-age=335160,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76042541b884b51b-OSL
siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&deviceType=Desktop&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=d94d83c8.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=true&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=Subdomain&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-features&originalLanguage=fr&pageId=34436a_f1273ecf1ea5022d57d0c1933016d8b5_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&staticHTMLComponentUrl=https%3A%2F%2Fen-kabaun-com.filesusr.com%2F&useSandboxInHTMLComp=false&viewMode=desktop
151.101.85.91200 OK 26 kB URL HTTP/2 siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&deviceType=Desktop&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=d94d83c8.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=true&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=Subdomain&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-features&originalLanguage=fr&pageId=34436a_f1273ecf1ea5022d57d0c1933016d8b5_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&staticHTMLComponentUrl=https%3A%2F%2Fen-kabaun-com.filesusr.com%2F&useSandboxInHTMLComp=false&viewMode=desktop
IP 151.101.85.91:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 2a006a0f24a4a66428134f0e4413fb69
4ffa8bfd871799bffd171b93fecd7fae1b020ef9
678392ab0c16b5f619bd83e888ea13155973a36ddc21a4d84e4f385eba88cf86
GET /pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&deviceType=Desktop&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=d94d83c8.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=true&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=Subdomain&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-features&originalLanguage=fr&pageId=34436a_f1273ecf1ea5022d57d0c1933016d8b5_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&staticHTMLComponentUrl=https%3A%2F%2Fen-kabaun-com.filesusr.com%2F&useSandboxInHTMLComp=false&viewMode=desktop HTTP/1.1
Host: siteassets.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
access-control-expose-headers: age,via,x-cache-status,X-cache-status
etag: W/"21131-A8ox6SVj+dFKNvJW1ZcbwNqFDgM"
content-encoding: gzip
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-seen-by: 2iuX5LYwvZa9CoGaG8ZUZjb5j8fWnvnycWNmjdvR374oY2zU79pEAhejviKsJzGd,/SoSYmefJLK2hiZpy2XaYlN1tYMUtM33SkDcJDaLDqlk8wpCZTi5fJ6xlwcitpUE,ZUT6NeJ/NsDmQ9DMGnwT1GihxWSwwRuEyAPn9AiO8BYQXT2AyjWfyxKagyd4/pDD
server: Pepyaka/1.19.10
cache-control: public, max-age=7776000, immutable
x-wix-request-id: 1666609929.2108967905084415897
timing-allow-origin: *
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:07 GMT
age: 187378
x-served-by: cache-bma1673-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1666797307.330878,VS0,VE1
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25766
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/bootstrap-features.b793dad5.bundle.min.js
151.101.85.91200 OK 53 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/bootstrap-features.b793dad5.bundle.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (54966)
Hash 7ca4b35f91885ecded83c95d939a7149
1b36ce548baf2f38b0d09c33bf2b01390a05893c
308c90c9478b1225e6adb56ccdadd702cec767c8a2b451591b1fb46b95feb2cb
GET /services/wix-thunderbolt/dist/bootstrap-features.b793dad5.bundle.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Thu, 20 Oct 2022 08:03:34 GMT
etag: W/"79e83293d9ef33e8a1738707f80ce1e3"
x-amz-version-id: YWBVsbILtwgbtK0beODq5Cu.lk8FUnUl
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrchkavE0ZtMXws1mfakihq4B,aVxMblM8KFG3we5NLvyVcwnP9a1Ia0LRvqhhntyPznoQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.0
x-wix-request-id: 1666253589.2245045232083013719
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:07 GMT
age: 544115
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 4629
x-timer: S1666797307.318766,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 52795
X-Firefox-Spdy: h2
static.parastorage.com/unpkg/lodash@4.17.21/lodash.min.js
151.101.85.91200 OK 25 kB URL HTTP/2 static.parastorage.com/unpkg/lodash@4.17.21/lodash.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (4143)
Hash 9661f391f69ddbf1e8bbf879c1c69660
60e78567cd82d5dec158be4ae4d365f45412fb36
59fe3fa5daacb2b18c734a563d4e8e9df1f51eb24672249ca4962f3132149191
GET /unpkg/lodash@4.17.21/lodash.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Sun, 21 Feb 2021 02:37:42 GMT
etag: W/"9becc40fb1d85d21d0ca38e2f7069511"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjMXxQm1EY0IGoQ+Aul+AXR,aVxMblM8KFG3we5NLvyVc5a79avpR2DZCk9xnuoLql1jPZTuGyYqVhtmEIgJUb4w
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1661228868.541712333382513129
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:07 GMT
age: 5644664
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 6519
x-timer: S1666797307.323970,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25102
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/main.852ebca7.bundle.min.js
151.101.85.91200 OK 47 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/main.852ebca7.bundle.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (47703)
Hash f4a39779cf490c49e2c25f4e5743de59
0281a6d81b340822fd9317fd0eb3a2c9951152fc
8a9c32d2211d3b8b81344d68de255f7c42127f166afdb1665fb3abf19c39b86e
GET /services/wix-thunderbolt/dist/main.852ebca7.bundle.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: PENDING
last-modified: Tue, 18 Oct 2022 15:17:00 GMT
etag: W/"769b631f15e097d6935d9b01a35b723f"
x-amz-version-id: C3Y0iCrgGmLupuLM1N.GDcyUXYDm7qji
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrchkavE0ZtMXws1mfakihq4B,aVxMblM8KFG3we5NLvyVc0Sqk9+MZwtm2RdjD28LmUcQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.0
x-wix-request-id: 1666170986.9944071998041013718
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:07 GMT
age: 690885
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 4998
x-timer: S1666797307.328426,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 47046
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-perf-measure/1.1042.0/wix-perf-measure.bundle.min.js
151.101.85.91200 OK 12 kB URL HTTP/2 static.parastorage.com/services/wix-perf-measure/1.1042.0/wix-perf-measure.bundle.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (41116)
Hash eff084a5748e8e0f2a7ec583b470a688
ebbf9733448bb4ce7f5666a8ab387776e721d8f0
bc5d488a06103bf405f79c3f7915e4bfd713b27c9cd9406c98e6885e4238b037
GET /services/wix-perf-measure/1.1042.0/wix-perf-measure.bundle.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 15 Sep 2022 10:21:30 GMT
etag: W/"72cd3e3e90088aa5acd84acd0d7346c6"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciexeHcfy36aNagyZbZBL0eWIHlCalF7YnfvOr2cMPpyw==,aVxMblM8KFG3we5NLvyVc5a79avpR2DZCk9xnuoLql1jPZTuGyYqVhtmEIgJUb4w
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1663237935.0068719354608228454
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:07 GMT
age: 3559927
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 4799
x-timer: S1666797307.378641,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 11956
X-Firefox-Spdy: h2
push.services.mozilla.com/
35.162.217.251101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.162.217.251:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3kQ47s+YVRI1ckOl7HcVZw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zTkR2ZnaqNwrd5GJ53bf5C0SsMs=
siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&deviceType=Desktop&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=d94d83c8.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=true&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=Subdomain&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-features&originalLanguage=fr&pageId=34436a_1104abb76932c2bceaa3186cb5f61e87_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&staticHTMLComponentUrl=https%3A%2F%2Fen-kabaun-com.filesusr.com%2F&useSandboxInHTMLComp=false&viewMode=desktop
151.101.85.91200 OK 27 kB URL HTTP/2 siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&deviceType=Desktop&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=d94d83c8.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=true&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=Subdomain&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-features&originalLanguage=fr&pageId=34436a_1104abb76932c2bceaa3186cb5f61e87_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&staticHTMLComponentUrl=https%3A%2F%2Fen-kabaun-com.filesusr.com%2F&useSandboxInHTMLComp=false&viewMode=desktop
IP 151.101.85.91:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65459), with no line terminators
Hash 6e6cab35d35f782f25d593cd59d6bfc4
5a1339d601ea8130dae33bb3a91121dcb6aea930
0abe1a725a0a83d0f7868f55546f1f79aa3e69e5cd37e31a785dd6cd2b7aafb8
GET /pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&deviceType=Desktop&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=d94d83c8.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=true&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=Subdomain&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-features&originalLanguage=fr&pageId=34436a_1104abb76932c2bceaa3186cb5f61e87_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&staticHTMLComponentUrl=https%3A%2F%2Fen-kabaun-com.filesusr.com%2F&useSandboxInHTMLComp=false&viewMode=desktop HTTP/1.1
Host: siteassets.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
access-control-expose-headers: age,via,x-cache-status,X-cache-status
etag: W/"26736-OjyufjDC63dJFSUhrgkTeKouDF8"
content-encoding: gzip
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-seen-by: 2iuX5LYwvZa9CoGaG8ZUZjb5j8fWnvnycWNmjdvR375doDcb+JuzLucmWkKUGZxh,/SoSYmefJLK2hiZpy2XaYlN1tYMUtM33SkDcJDaLDqnlAfryXFjWv8m6nrmkcQ5H,ZUT6NeJ/NsDmQ9DMGnwT1Nx61v0XQ9VxU5xVU8/H7tYQXT2AyjWfyxKagyd4/pDD
server: Pepyaka/1.19.0
cache-control: public, max-age=7776000, immutable
x-wix-request-id: 1666609929.2099197305151627088
timing-allow-origin: *
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:07 GMT
age: 187378
x-served-by: cache-bma1673-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1666797307.330923,VS0,VE2
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 26580
X-Firefox-Spdy: h2
static.parastorage.com/services/linguist-flags/1.663.0/assets/flags/round/GBR.png
151.101.85.91200 OK 1.7 kB URL HTTP/2 static.parastorage.com/services/linguist-flags/1.663.0/assets/flags/round/GBR.png
IP 151.101.85.91:0
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 2899075f586b13262dd9fa3597eb7bcb
5c8bb30923143323f73589c4b92c4689be66beb9
a7b5d6d9bffae96249d31bb9b0da3cc95774e455f6bef8a617a1ff5671ce3b49
GET /services/linguist-flags/1.663.0/assets/flags/round/GBR.png HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Thu, 10 Jun 2021 13:10:09 GMT
etag: "2899075f586b13262dd9fa3597eb7bcb"
x-goog-meta-wix-basic: eyJ3aWR0aCI6IDMyLCAiaGVpZ2h0IjogMzIsICJmb3JtYXQiOiAicG5nIiwgImNvbG9yc3BhY2UiOiAic1JHQiIsICJvcmllbnRhdGlvbiI6IDB9
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciDgmy1x1bk0T2mMblm59aj,aVxMblM8KFG3we5NLvyVc5U6nDV0Sthqh2jmVbYx0F4QXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000
server: Pepyaka/1.19.10
x-wix-request-id: 1666061937.980280028131515896
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:07 GMT
age: 762637
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 5
x-timer: S1666797307.431805,VS0,VE0
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1746
X-Firefox-Spdy: h2
static.parastorage.com/services/linguist-flags/1.663.0/assets/flags/round/FRA.png
151.101.85.91200 OK 1.2 kB URL HTTP/2 static.parastorage.com/services/linguist-flags/1.663.0/assets/flags/round/FRA.png
IP 151.101.85.91:0
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 4c05a7d33d63441710b6584a51bbc205
3cc81cf4628cafedbbe2d28b7a3508ad6c452084
f290e4d63f63c47a9b233b64ea47e55cd9851f366977ced350483df4664d3df6
GET /services/linguist-flags/1.663.0/assets/flags/round/FRA.png HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Thu, 10 Jun 2021 13:09:55 GMT
etag: "4c05a7d33d63441710b6584a51bbc205"
x-goog-meta-wix-basic: eyJ3aWR0aCI6IDMyLCAiaGVpZ2h0IjogMzIsICJmb3JtYXQiOiAicG5nIiwgImNvbG9yc3BhY2UiOiAic1JHQiIsICJvcmllbnRhdGlvbiI6IDB9
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrchkavE0ZtMXws1mfakihq4B,aVxMblM8KFG3we5NLvyVc5U6nDV0Sthqh2jmVbYx0F4QXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000
server: Pepyaka/1.19.0
x-wix-request-id: 1666067353.411289746166413718
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:07 GMT
age: 762913
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1666797307.437155,VS0,VE1
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1193
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
104.18.20.226200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP 104.18.20.226:0
Hash d8de7dc6e32c90d6a97488b2a7357fcd
03b74627e604c7a2702fce159fde4f4e1683b4a2
685403dfd63a7e0226f18294f954e5f794fa6c5cff82abfbab8fac36bdc8e0dc
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 15:15:07 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "7B13997A6839B15032960F8BC53B670F99BA8987"
Expires: Thu, 27 Oct 2022 02:00:00 GMT
Last-Modified: Wed, 26 Oct 2022 14:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 3246
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 760425437a26b51b-OSL
frog.wix.com/bolt-performance?src=72&evid=21&appName=thunderbolt&is_rollout=0&is_sav_rollout=0&is_dac_rollout=0&dc=uw2-pub-1µPop=uw2-pub-1&is_cached=true&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&session_id=10de0379-18ef-40ec-a97e-3fd80926df36&ish=false&isb=false&vsi=e614f683-15d8-474a-a05f-28910c101483&caching=hit,hit&pv=visible&pn=1&v=1.11146.0&url=https%3A%2F%2Fen.kabaun.com%2F&st=2&ts=32&tsn=649
23.20.49.116204 No Content 0 B URL HTTP/2 frog.wix.com/bolt-performance?src=72&evid=21&appName=thunderbolt&is_rollout=0&is_sav_rollout=0&is_dac_rollout=0&dc=uw2-pub-1µPop=uw2-pub-1&is_cached=true&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&session_id=10de0379-18ef-40ec-a97e-3fd80926df36&ish=false&isb=false&vsi=e614f683-15d8-474a-a05f-28910c101483&caching=hit,hit&pv=visible&pn=1&v=1.11146.0&url=https%3A%2F%2Fen.kabaun.com%2F&st=2&ts=32&tsn=649
IP 23.20.49.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bolt-performance?src=72&evid=21&appName=thunderbolt&is_rollout=0&is_sav_rollout=0&is_dac_rollout=0&dc=uw2-pub-1µPop=uw2-pub-1&is_cached=true&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&session_id=10de0379-18ef-40ec-a97e-3fd80926df36&ish=false&isb=false&vsi=e614f683-15d8-474a-a05f-28910c101483&caching=hit,hit&pv=visible&pn=1&v=1.11146.0&url=https%3A%2F%2Fen.kabaun.com%2F&st=2&ts=32&tsn=649 HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 15:15:07 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
static.parastorage.com/services/santa-resources/dist/viewer/user-site-fonts/fonts/Poppins-semibold/v5/aDjpMND83pDErGXlVEr-Sfk_vArhqVIZ0nv9q090hN8.woff2
151.101.85.91200 OK 10 kB URL HTTP/2 static.parastorage.com/services/santa-resources/dist/viewer/user-site-fonts/fonts/Poppins-semibold/v5/aDjpMND83pDErGXlVEr-Sfk_vArhqVIZ0nv9q090hN8.woff2
IP 151.101.85.91:0
File type Web Open Font Format (Version 2), TrueType, length 10504, version 1.0\012- data
Hash 1ad68bab8e0ccf5db3d631141850dcd5
46c9ae77c89b75c49cccf175b3332c77081f5bac
f5decc210dbe7320771b5ddf86e95be8c6d74d09ac53ab756d4bebcca49c5d3f
GET /services/santa-resources/dist/viewer/user-site-fonts/fonts/Poppins-semibold/v5/aDjpMND83pDErGXlVEr-Sfk_vArhqVIZ0nv9q090hN8.woff2 HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
x-amz-replication-status: COMPLETED
last-modified: Sun, 23 Oct 2022 11:07:15 GMT
etag: "1ad68bab8e0ccf5db3d631141850dcd5"
x-amz-version-id: alBSHBpc2WiQ0pF3DhSjQ8CNvap_3WRK
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciDgmy1x1bk0T2mMblm59aj,aVxMblM8KFG3we5NLvyVcwnP9a1Ia0LRvqhhntyPznoQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1666756673.8791080662692115896
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:07 GMT
age: 73512
x-served-by: cache-bma1669-BMA
x-cache: HIT
x-cache-hits: 106
x-timer: S1666797308.502456,VS0,VE0
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10504
X-Firefox-Spdy: h2
static.parastorage.com/services/santa-resources/dist/viewer/user-site-fonts/fonts/Poppins-extralight/v5/h3r77AwDsldr1E_2g4qqGPk_vArhqVIZ0nv9q090hN8.woff2
151.101.85.91200 OK 10 kB URL HTTP/2 static.parastorage.com/services/santa-resources/dist/viewer/user-site-fonts/fonts/Poppins-extralight/v5/h3r77AwDsldr1E_2g4qqGPk_vArhqVIZ0nv9q090hN8.woff2
IP 151.101.85.91:0
File type Web Open Font Format (Version 2), TrueType, length 10424, version 1.0\012- data
Hash f382578649df40093825e06a8c31d5b2
5fce857e340158deb6b656435116bac2d2f92e44
87d9ef0dde0568ba2c03802abd3dc99c3dfabb4bfa9d6a01fd6a1e301cac2f7a
GET /services/santa-resources/dist/viewer/user-site-fonts/fonts/Poppins-extralight/v5/h3r77AwDsldr1E_2g4qqGPk_vArhqVIZ0nv9q090hN8.woff2 HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
last-modified: Wed, 07 Sep 2022 13:53:07 GMT
etag: "f382578649df40093825e06a8c31d5b2"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjV0TBmJ+uLPQ4OZPC1VSMH,aVxMblM8KFG3we5NLvyVc1XEV11U4uj6EySGMcOeW2gfbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.0
x-wix-request-id: 1662895750.072139525604807426661
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:07 GMT
age: 4064932
x-served-by: cache-bma1669-BMA
x-cache: HIT
x-cache-hits: 111
x-timer: S1666797308.504617,VS0,VE0
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10424
X-Firefox-Spdy: h2
static.parastorage.com/services/third-party/fonts/user-site-fonts/fonts/0078f486-8e52-42c0-ad81-3c8d3d43f48e.woff2
151.101.85.91200 OK 17 kB URL HTTP/2 static.parastorage.com/services/third-party/fonts/user-site-fonts/fonts/0078f486-8e52-42c0-ad81-3c8d3d43f48e.woff2
IP 151.101.85.91:0
File type Web Open Font Format (Version 2), TrueType, length 17216, version 1.0\012- data
Hash fc02a3c78cac0f6ab99c6c19f004d02d
7bcc73042c63c86637084549daad26aed3621d64
0ddce0e617794fd30b60e5c829fe12b9d7eeba14e561e7d89da5fcaf2fe900c3
GET /services/third-party/fonts/user-site-fonts/fonts/0078f486-8e52-42c0-ad81-3c8d3d43f48e.woff2 HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
access-control-max-age: 3000
last-modified: Tue, 17 Apr 2018 11:11:01 GMT
etag: "ef4257ccfa0fce4d914b23a28aa6fdf4-1"
x-amz-version-id: ZJhEgw5338rDGW18OcyggGHIv4bi5qCO
access-control-allow-methods: GET, GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjV0TBmJ+uLPQ4OZPC1VSMH,aVxMblM8KFG3we5NLvyVc1XEV11U4uj6EySGMcOeW2gfbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.0
x-wix-request-id: 1666061044.834287344356527090
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:07 GMT
age: 776494
x-served-by: cache-bma1669-BMA
x-cache: HIT
x-cache-hits: 4905
x-timer: S1666797308.507214,VS0,VE0
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 17216
X-Firefox-Spdy: h2
static.parastorage.com/services/santa-resources/dist/viewer/user-site-fonts/fonts/Poppins-semibold/v5/9VWMTeb5jtXkNoTv949Npfk_vArhqVIZ0nv9q090hN8.woff2
151.101.85.91200 OK 10 kB URL HTTP/2 static.parastorage.com/services/santa-resources/dist/viewer/user-site-fonts/fonts/Poppins-semibold/v5/9VWMTeb5jtXkNoTv949Npfk_vArhqVIZ0nv9q090hN8.woff2
IP 151.101.85.91:0
File type Web Open Font Format (Version 2), TrueType, length 10400, version 1.0\012- data
Hash fd88a4e0f78acd1481cba622eb0ada7e
8242beb884b0c0ada3cdaedb9386d9ce5d9a7acc
5654b0e267ff835ebdb0b8f09e24b7a393bd0818b68d475e1729c3dd59af4f67
GET /services/santa-resources/dist/viewer/user-site-fonts/fonts/Poppins-semibold/v5/9VWMTeb5jtXkNoTv949Npfk_vArhqVIZ0nv9q090hN8.woff2 HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
last-modified: Thu, 06 Oct 2022 13:01:58 GMT
etag: "fd88a4e0f78acd1481cba622eb0ada7e"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciDgmy1x1bk0T2mMblm59aj,aVxMblM8KFG3we5NLvyVc0swuQg4e4Ft3RZminzdoKEQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1665447275.85511783687723123312
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:07 GMT
age: 1468948
x-served-by: cache-bma1669-BMA
x-cache: HIT
x-cache-hits: 187
x-timer: S1666797308.507678,VS0,VE0
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10400
X-Firefox-Spdy: h2
static.parastorage.com/services/third-party/fonts/user-site-fonts/fonts/open-source/opensans-regular-webfont.woff
151.101.85.91200 OK 85 kB URL HTTP/2 static.parastorage.com/services/third-party/fonts/user-site-fonts/fonts/open-source/opensans-regular-webfont.woff
IP 151.101.85.91:0
File type Web Open Font Format, TrueType, length 84928, version 1.0\012- data
Hash 55b8ce1f9a32bb0f83f14813eac0b7ca
c0d0478dc16d58a02f169198d862e684a2b591eb
33637fa0826291bfe2cf8cd916c1e0e96a0e6f9f7fbb9a7e93c183e5448d1774
GET /services/third-party/fonts/user-site-fonts/fonts/open-source/opensans-regular-webfont.woff HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-font-woff
last-modified: Tue, 17 Apr 2018 11:11:05 GMT
etag: "16bf2b9a3c1d6cbc8582db67dcb66146-1"
x-amz-version-id: lbXdWSehMaKYxDRkfPaG5H9M4INGtVs6
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrchkavE0ZtMXws1mfakihq4B,aVxMblM8KFG3we5NLvyVcyeTzFUhjLKPB6lD0luXXHcfbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.0
x-wix-request-id: 1662510348.471135112212571728478
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:07 GMT
age: 4330463
x-served-by: cache-bma1669-BMA
x-cache: HIT
x-cache-hits: 313
x-timer: S1666797308.513819,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 84928
X-Firefox-Spdy: h2
static.parastorage.com/services/santa-resources/dist/viewer/user-site-fonts/fonts/Poppins-extralight/v5/rijG6I_IOXJjsH07UEo2mw.woff2
151.101.85.91200 OK 10 kB URL HTTP/2 static.parastorage.com/services/santa-resources/dist/viewer/user-site-fonts/fonts/Poppins-extralight/v5/rijG6I_IOXJjsH07UEo2mw.woff2
IP 151.101.85.91:0
File type Web Open Font Format (Version 2), TrueType, length 10464, version 1.0\012- data
Hash 6fc407b725b0f9f3c7bd99efe9c9b232
ed72d23629744e348b9cfdda745306f6a2ba1262
091bb0de0a818620d0fa529df0edee88a5ac2244b5396edbac0a527035cf4af7
GET /services/santa-resources/dist/viewer/user-site-fonts/fonts/Poppins-extralight/v5/rijG6I_IOXJjsH07UEo2mw.woff2 HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Sun, 02 Oct 2022 11:26:56 GMT
etag: "6fc407b725b0f9f3c7bd99efe9c9b232"
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjBLy8P45DoDO4LnRm+zqsP,aVxMblM8KFG3we5NLvyVcwnP9a1Ia0LRvqhhntyPznoQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1664850479.799982680327532470
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:07 GMT
age: 1984855
x-served-by: cache-bma1669-BMA
x-cache: HIT
x-cache-hits: 141
x-timer: S1666797308.526239,VS0,VE0
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10464
X-Firefox-Spdy: h2
static.parastorage.com/services/third-party/fonts/user-site-fonts/fonts/open-source/opensans-bold-webfont.woff
151.101.85.91200 OK 85 kB URL HTTP/2 static.parastorage.com/services/third-party/fonts/user-site-fonts/fonts/open-source/opensans-bold-webfont.woff
IP 151.101.85.91:0
File type Web Open Font Format, TrueType, length 84696, version 1.0\012- data
Hash 57988d1e313ced044867ac305c58ce7b
991c74f36c41082dc72ca21d1ca5e108406102c3
ff94376e9e04cda1655d1ff43c9901722491edf7cc2f5b27f1eb2e8e10bd0696
GET /services/third-party/fonts/user-site-fonts/fonts/open-source/opensans-bold-webfont.woff HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-font-woff
last-modified: Tue, 17 Apr 2018 11:11:04 GMT
etag: "7362fe704ffe18ad6ee9282752177dc1-1"
x-amz-version-id: TGxDTQqxw8duj8ma99Q.N9eJvN58v5v6
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjEM4kaaS6QH/itsJwI9pla,aVxMblM8KFG3we5NLvyVcyzve4L4qo9dv8TvlcgmZhMQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1666673150.1401008089066127641
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:07 GMT
age: 293551
x-served-by: cache-bma1669-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1666797308.534206,VS0,VE1
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 84696
X-Firefox-Spdy: h2
frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=uw2-pub-1µPop=uw2-pub-1&et=12&event_name=Partially%20visible&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&pid=c1dmp&pn=1&sessionId=10de0379-18ef-40ec-a97e-3fd80926df36&siterev=2601-__siteCacheRevision__&st=2&ts=548&tts=1165&url=https%3A%2F%2Fen.kabaun.com%2F%3F&v=1.11146.0&vsi=e614f683-15d8-474a-a05f-28910c101483&_brandId=wix
23.20.49.116204 No Content 0 B URL HTTP/2 frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=uw2-pub-1µPop=uw2-pub-1&et=12&event_name=Partially%20visible&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&pid=c1dmp&pn=1&sessionId=10de0379-18ef-40ec-a97e-3fd80926df36&siterev=2601-__siteCacheRevision__&st=2&ts=548&tts=1165&url=https%3A%2F%2Fen.kabaun.com%2F%3F&v=1.11146.0&vsi=e614f683-15d8-474a-a05f-28910c101483&_brandId=wix
IP 23.20.49.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=uw2-pub-1µPop=uw2-pub-1&et=12&event_name=Partially%20visible&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&pid=c1dmp&pn=1&sessionId=10de0379-18ef-40ec-a97e-3fd80926df36&siterev=2601-__siteCacheRevision__&st=2&ts=548&tts=1165&url=https%3A%2F%2Fen.kabaun.com%2F%3F&v=1.11146.0&vsi=e614f683-15d8-474a-a05f-28910c101483&_brandId=wix HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 15:15:07 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
104.18.20.226200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
IP 104.18.20.226:0
Hash 507b0cec93f2b4fde7192db90fc5f89c
74987311cc77001bc88a112079875f0f071e596e
ffd55de52871b0c6aab5f0fd815d8b6345925084bd554a6f806f0772fb9303ad
POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 15:15:07 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "D0978595B1297C0043C7529026AF8C2FA27DEEE7"
Expires: Thu, 27 Oct 2022 03:00:00 GMT
Last-Modified: Wed, 26 Oct 2022 15:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 296
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 760425443aeeb51b-OSL
frog.wix.com/bolt-performance?src=72&evid=28&appName=thunderbolt&is_rollout=0&is_sav_rollout=0&is_dac_rollout=0&dc=uw2-pub-1µPop=uw2-pub-1&is_cached=true&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&session_id=10de0379-18ef-40ec-a97e-3fd80926df36&ish=false&isb=false&vsi=e614f683-15d8-474a-a05f-28910c101483&caching=hit,hit&pv=visible&pn=1&v=1.11146.0&url=https%3A%2F%2Fen.kabaun.com%2F&st=2&ts=32&tsn=649&name=partially_visible&duration=1666797303951&pageId=c1dmp
23.20.49.116204 No Content 0 B URL HTTP/2 frog.wix.com/bolt-performance?src=72&evid=28&appName=thunderbolt&is_rollout=0&is_sav_rollout=0&is_dac_rollout=0&dc=uw2-pub-1µPop=uw2-pub-1&is_cached=true&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&session_id=10de0379-18ef-40ec-a97e-3fd80926df36&ish=false&isb=false&vsi=e614f683-15d8-474a-a05f-28910c101483&caching=hit,hit&pv=visible&pn=1&v=1.11146.0&url=https%3A%2F%2Fen.kabaun.com%2F&st=2&ts=32&tsn=649&name=partially_visible&duration=1666797303951&pageId=c1dmp
IP 23.20.49.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bolt-performance?src=72&evid=28&appName=thunderbolt&is_rollout=0&is_sav_rollout=0&is_dac_rollout=0&dc=uw2-pub-1µPop=uw2-pub-1&is_cached=true&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&session_id=10de0379-18ef-40ec-a97e-3fd80926df36&ish=false&isb=false&vsi=e614f683-15d8-474a-a05f-28910c101483&caching=hit,hit&pv=visible&pn=1&v=1.11146.0&url=https%3A%2F%2Fen.kabaun.com%2F&st=2&ts=32&tsn=649&name=partially_visible&duration=1666797303951&pageId=c1dmp HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 15:15:07 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12532
Expires: Wed, 26 Oct 2022 18:43:59 GMT
Date: Wed, 26 Oct 2022 15:15:07 GMT
Connection: keep-alive
en.kabaun.com/
199.15.163.128200 OK 2.0 kB IP 199.15.163.128:0
Hash 655b51ddec2ace80fc50ce6a96c0a8e1
eeafb5b80b3f225823f6b5b954160ef24ff4d87e
00939db0ab416cfcfcb6c63bd4b0a768f0bf233d77f38b954f68beca772754c5
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: en.kabaun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://campaign.kabaun.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 15:15:06 GMT
content-type: text/html; charset=UTF-8
link: <https://static.parastorage.com/>; rel=preconnect; crossorigin;,<https://static.parastorage.com/>; rel=preconnect;,<https://static.wixstatic.com/>; rel=preconnect; crossorigin;,<https://static.wixstatic.com/>; rel=preconnect;,<https://siteassets.parastorage.com>; rel=preconnect; crossorigin;,
etag: W/"e958b53176b8e4a808f4b9d7bcd6aa63"
content-language: en
strict-transport-security: max-age=3600
age: 188225
server-timing: cache;desc=hit, varnish;desc=hit, dc;desc=uw2-pub-1
x-seen-by: wmgbEcS9zOENaefw7bU4YW8SH3gLjNZZjVt64yZ/SqY=,GilIRCy+Ky2nI9KZaDKzWLxkNjrXdwdgtu6E0yACibU=,GXNXSWFXisshliUcwO20Naon851uhK6HRsxREnrEO9a3J7KfdiQDDBc3NNc5yr0pmuOkfcTSJaUOHlD2KQbqrA==,m0j2EEknGIVUW/liY8BLLobvpBxZwPJNQ0feMg3idHAG/hKs8AeY1T4OIbgnD+yx,2d58ifebGbosy5xc+FRalv+KIYPBT90/IRul3qKoHiDjpNP9yQM+jp23b57qIkhmgiNFufkHd/rw5bhTOjKfVA==,2UNV7KOq4oGjA5+PKsX47O6uVG6buAunlWjI2L90d5VjPZTuGyYqVhtmEIgJUb4w
vary: Accept-Encoding
x-wix-request-id: 1666797306.7461328643715928110
set-cookie: ssr-caching=cache#desc=hit#varnish=hit#dc#desc=uw2-pub-1; Max-Age=20; Expires=Mon, 24 Oct 2022 10:58:20 GMT
XSRF-TOKEN=1666797306|clN2az2zi0kN; Path=/; Domain=en.kabaun.com; Secure; SameSite=None
TS01e85bed=01d72e6d161fd172f6a444b1b7f0d394c397c186227c2ac5dc03ba5ee1ec408b4ba4f5a2af26420cc089afb5c7eb39307a329df522; Path=/; SameSite=none; Secure
TS01f4356e=01d72e6d161fd172f6a444b1b7f0d394c397c186227c2ac5dc03ba5ee1ec408b4ba4f5a2af26420cc089afb5c7eb39307a329df522; path=/; domain=en.kabaun.com; SameSite=none; Secure
cache-control: private,max-age=0,must-revalidate
x-content-type-options: nosniff
content-encoding: br
server: Pepyaka/1.19.10
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12532
Expires: Wed, 26 Oct 2022 18:43:59 GMT
Date: Wed, 26 Oct 2022 15:15:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12532
Expires: Wed, 26 Oct 2022 18:43:59 GMT
Date: Wed, 26 Oct 2022 15:15:07 GMT
Connection: keep-alive
frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=uw2-pub-1µPop=uw2-pub-1&et=1&event_name=Init&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&ita=1&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&pn=1&sessionId=10de0379-18ef-40ec-a97e-3fd80926df36&siterev=2601-__siteCacheRevision__&st=2&ts=318&tts=935&url=https%3A%2F%2Fen.kabaun.com%2F%3F&v=1.11146.0&vsi=e614f683-15d8-474a-a05f-28910c101483&_brandId=wix
23.20.49.116204 No Content 0 B URL HTTP/2 frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=uw2-pub-1µPop=uw2-pub-1&et=1&event_name=Init&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&ita=1&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&pn=1&sessionId=10de0379-18ef-40ec-a97e-3fd80926df36&siterev=2601-__siteCacheRevision__&st=2&ts=318&tts=935&url=https%3A%2F%2Fen.kabaun.com%2F%3F&v=1.11146.0&vsi=e614f683-15d8-474a-a05f-28910c101483&_brandId=wix
IP 23.20.49.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=uw2-pub-1µPop=uw2-pub-1&et=1&event_name=Init&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&ita=1&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&pn=1&sessionId=10de0379-18ef-40ec-a97e-3fd80926df36&siterev=2601-__siteCacheRevision__&st=2&ts=318&tts=935&url=https%3A%2F%2Fen.kabaun.com%2F%3F&v=1.11146.0&vsi=e614f683-15d8-474a-a05f-28910c101483&_brandId=wix HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 15:15:07 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12532
Expires: Wed, 26 Oct 2022 18:43:59 GMT
Date: Wed, 26 Oct 2022 15:15:07 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg
34.120.237.76200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 91ee720c15dc69de45080d0c951353af
5292b31a99d90bcb7071f327b93d52034bdf9dcb
7fbe9f0f6db08fd539f2e8d4ac22e3b4d5ca14f7cde69f8424cce8b361d026e6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4524
x-amzn-requestid: a493efe7-11c7-4032-b36b-7f838f8180bc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aljicH_6IAMFqpQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63587fa9-0f15eae7680ea7b15e5e47ec;Sampled=0
x-amzn-remapped-date: Wed, 26 Oct 2022 00:30:33 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OV7g4Y4fcQGijljebzHQtnpKdcPKw6LTxqORxxBJL2lFPYQLLoyNuQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 26 Oct 2022 00:34:40 GMT
age: 52827
etag: "5292b31a99d90bcb7071f327b93d52034bdf9dcb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12532
Expires: Wed, 26 Oct 2022 18:43:59 GMT
Date: Wed, 26 Oct 2022 15:15:07 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc635673e-499c-4d9c-8bc5-a713fb19e221.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc635673e-499c-4d9c-8bc5-a713fb19e221.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b946c4f2f177828cf7b76c5764e97157
c3856686b98e1883133aa1824c496d34512769a0
be818a015fc9c745ea561a0b9c2aca6ba25ade24acd696fa651163d47b195371
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc635673e-499c-4d9c-8bc5-a713fb19e221.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13796
x-amzn-requestid: 90b1e032-78c6-499d-b564-f25c15e20304
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alJ2OG0SoAMFx-w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6358568e-599d0f526fc6a01f77b67dcf;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:35:10 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qxBQMJAnYNJVLBf5LSOTC7v3hPl9sh-G-OIqrK7d5KpdVITaQCcGMA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:47:18 GMT
age: 62869
etag: "c3856686b98e1883133aa1824c496d34512769a0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5da11cdb-c8be-46f4-95b0-792c49d930a7.jpeg
34.120.237.76200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5da11cdb-c8be-46f4-95b0-792c49d930a7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5987bcd44ab0db5313aa4f409a8a212f
691a36cde98a9fe1660745dd811e0be2ae67036c
e47ce3587c647b52669f675dc7e84e21555f82138091fb04febc951b4c06ba30
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5da11cdb-c8be-46f4-95b0-792c49d930a7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8553
x-amzn-requestid: 69931a9c-027e-428e-a88d-61c5fac64daa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alJ2iEnzoAMFZAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63585690-12c78c5157fb3fa41a13548c;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:35:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: E4t7XezEVl1x_4sbidtDPjCuZoCh7N01y7ZeYZWlAL1w8ut4Qx95TA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:46:50 GMT
age: 62897
etag: "691a36cde98a9fe1660745dd811e0be2ae67036c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F057530b7-f6b8-4f9b-b6fc-8fdc4a101f36.webp
34.120.237.76200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F057530b7-f6b8-4f9b-b6fc-8fdc4a101f36.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1cc61ad4b1d66ab4bce27288ee690e12
324e13ad5c99f628d713e55a2994ad4042ece70e
62cd88bc19bc1f0be2a37c3e990897158acd3d55aa3ddd299144d4f9596ba34e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F057530b7-f6b8-4f9b-b6fc-8fdc4a101f36.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6831
x-amzn-requestid: cc6f38ff-ab33-4b18-8cae-aa6bc061962f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alKjPH7ToAMFSiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635857ae-3db2790d0e6c5fab6c4bc81f;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:39:58 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: tiWbOUwlRzaT2EnCWIgoFaT_ho55s3tgRxalb7yBbI21Pv0BhfLJOg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:52:53 GMT
age: 62534
etag: "324e13ad5c99f628d713e55a2994ad4042ece70e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae122c0f-a41b-4abc-a703-a5de223ae39a.png
34.120.237.76200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae122c0f-a41b-4abc-a703-a5de223ae39a.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash db946866312c734e0c5f91ca76255b2f
e8b8236baab9106a426a415eb01494cc4cc91ad1
a695e7bc87da2c6d9f5669c09e662fe22982e69cb139466efa5093429fe19866
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae122c0f-a41b-4abc-a703-a5de223ae39a.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8439
x-amzn-requestid: e0eed725-0725-4f5a-9c91-fec13ad0ebe5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ajKYQGWhIAMFdhw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63578a9b-2a0115120e75f5271cea992f;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 07:04:59 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: WVz4PqWqT9Pk1juQ95Xzi-7HcEDBqKb5VAncjXxOYFfKTnjRbmodoA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Wed, 26 Oct 2022 04:44:59 GMT
age: 37808
etag: "e8b8236baab9106a426a415eb01494cc4cc91ad1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fe27cf2-33a8-42cc-a8cd-f5e804e60e26.jpeg
34.120.237.76200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fe27cf2-33a8-42cc-a8cd-f5e804e60e26.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c3ae78510434fd68063fc144bf614382
3bb87ca5274ce9f6d81da60ab940d23ccd12843b
f42d89328435cb37cba1111903a6bd5e900857d0942e1506ea2115b4e6301541
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fe27cf2-33a8-42cc-a8cd-f5e804e60e26.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7929
x-amzn-requestid: 6324abd6-8e27-4903-8bfc-a0fc6a8625be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alK9LEeoIAMF5mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63585854-2900343b1ae208a903fe58fd;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:42:44 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5MR4UzoW6rVsSpEyPAWrcFb2LCRICaG-toy3JflaXRrzZwcgMs48VQ==
via: 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:49:35 GMT
age: 62732
etag: "3bb87ca5274ce9f6d81da60ab940d23ccd12843b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/ooi.353be548.chunk.min.js
151.101.85.91200 OK 3.6 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/ooi.353be548.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (9498)
Hash 852af16f41a6cf338476df85b86e8ab1
24e4b1c6245a1340d8cc8634d6fc543eb59eab03
1e5285712696c89b60f96f9927ea13fecd0fa1590af596ba41fd8f7feb7b3abb
GET /services/wix-thunderbolt/dist/ooi.353be548.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
last-modified: Mon, 15 Aug 2022 18:55:47 GMT
etag: W/"d14db0d087e4b2847eea446fdb3d9990"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcgrlbPwrfJgfFY+bZe/zFVAWIHlCalF7YnfvOr2cMPpyw==,aVxMblM8KFG3we5NLvyVc5a79avpR2DZCk9xnuoLql1jPZTuGyYqVhtmEIgJUb4w
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1660614079.903632573130026724
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:07 GMT
age: 6205769
x-served-by: cache-bma1669-BMA
x-cache: HIT
x-cache-hits: 41018
x-timer: S1666797308.883708,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3584
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/page-features.72e6b32b.chunk.min.js
151.101.85.91200 OK 7.4 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/page-features.72e6b32b.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (20047)
Hash 3d161123f54e64663c996302de7f9023
10fffd6e9e75f0130167c49fbb06efe128757b13
366f04821236e8d1f53da2d3618dc41e96c9a25c946e6c9545a9907b6062a9c4
GET /services/wix-thunderbolt/dist/page-features.72e6b32b.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Thu, 20 Oct 2022 23:18:59 GMT
etag: W/"d41df2225725e1ce25cbc3aeffc20c02"
x-amz-version-id: ea1Yd1hCCGUu1ZXH5reN6nQZOeCfqN1E
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: MISS
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjEM4kaaS6QH/itsJwI9pla,aVxMblM8KFG3we5NLvyVcyzve4L4qo9dv8TvlcgmZhMQXT2AyjWfyxKagyd4/pDD,2iuX5LYwvZa9CoGaG8ZUZomYmPgSwc4aU7J40H7VRoqj9dBflAyFvPAD2t41Gwlp
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1666315301.295595794211127641
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:07 GMT
age: 482006
x-served-by: cache-bma1669-BMA
x-cache: HIT
x-cache-hits: 9263
x-timer: S1666797308.883598,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7359
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/captcha.ff763fa8.chunk.min.js
151.101.85.91200 OK 470 B URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/captcha.ff763fa8.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (673)
Hash 6672f362cdd184e3733068c5cd5fed9e
a07b6a11570c2a975956d9410ea2decb0d655920
b6279a590406470a2bdb6c37152baa7e68dc7dcdf96be20a307ed030b342e720
GET /services/wix-thunderbolt/dist/captcha.ff763fa8.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Sun, 28 Aug 2022 14:09:04 GMT
etag: W/"5ac55c590717fa11374288c903cd71c9"
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjBLy8P45DoDO4LnRm+zqsP,aVxMblM8KFG3we5NLvyVcyeTzFUhjLKPB6lD0luXXHcfbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1661846323.0476548133087122521
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:07 GMT
age: 5101552
x-served-by: cache-bma1669-BMA
x-cache: HIT
x-cache-hits: 43814
x-timer: S1666797308.900285,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 470
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/cookiesManager.6723c46e.chunk.min.js
151.101.85.91200 OK 1.3 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/cookiesManager.6723c46e.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (2293)
Hash 99d796c5c056669465217ae7c5360ff4
05a5035fa36b30130dc214ae20cb52a0a8b33aec
7a3070bac457454354deb79c140acb723f7717873df0fff2c3fed4e5bc541a06
GET /services/wix-thunderbolt/dist/cookiesManager.6723c46e.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
last-modified: Sun, 14 Aug 2022 20:37:30 GMT
etag: W/"ad3c21f21dd7efb771eee995a2ae0ffa"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciexeHcfy36aNagyZbZBL0eWIHlCalF7YnfvOr2cMPpyw==,aVxMblM8KFG3we5NLvyVcz/fYSfKbw6+xesuKQMt4UgghGES6Jsix+7j8qfOfk1L
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1660632618.7466346491227220999
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:07 GMT
age: 6280662
x-served-by: cache-bma1669-BMA
x-cache: HIT
x-cache-hits: 448
x-timer: S1666797308.900530,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1313
X-Firefox-Spdy: h2
static.parastorage.com/services/wix-thunderbolt/dist/dashboardWixCodeSdk.f18da2da.chunk.min.js
151.101.85.91200 OK 4.6 kB URL HTTP/2 static.parastorage.com/services/wix-thunderbolt/dist/dashboardWixCodeSdk.f18da2da.chunk.min.js
IP 151.101.85.91:0
File type ASCII text, with very long lines (14237)
Hash b5070edf340abe80072043db2dfba8b5
e1fe4b824809e43673f7d7a41255484dbbe075d1
1b5adca3c9ec4cf9de45506a9cbf9b1dd87e0f8c59f404772ee802d001cce56b
GET /services/wix-thunderbolt/dist/dashboardWixCodeSdk.f18da2da.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
last-modified: Tue, 20 Sep 2022 07:59:56 GMT
etag: W/"816569845db6f44e7a50cecbc3e7c13b"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrchkavE0ZtMXws1mfakihq4B,aVxMblM8KFG3we5NLvyVc7eNHvhCRAbD7EPjVZvQO20fbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.0
x-wix-request-id: 1663680911.39115044438315728478
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:07 GMT
age: 3135532
x-served-by: cache-bma1669-BMA
x-cache: HIT
x-cache-hits: 10766
x-timer: S1666797308.903480,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4613
X-Firefox-Spdy: h2
siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=fef045cf.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-platform-simple&originalLanguage=fr&pageId=34436a_1104abb76932c2bceaa3186cb5f61e87_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&viewMode=desktop
151.101.85.91200 OK 6.4 kB URL HTTP/2 siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=fef045cf.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-platform-simple&originalLanguage=fr&pageId=34436a_1104abb76932c2bceaa3186cb5f61e87_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&viewMode=desktop
IP 151.101.85.91:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (37843), with no line terminators
Hash 3242443dcce4183a2c51964af82b37c0
48a2fe5396a869e38cb8379aca227c48a007eea7
e77608735da349d755e2af11daa4b1910707bac49817f4f01cf727d04bcb7363
GET /pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=fef045cf.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-platform-simple&originalLanguage=fr&pageId=34436a_1104abb76932c2bceaa3186cb5f61e87_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&viewMode=desktop HTTP/1.1
Host: siteassets.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en.kabaun.com/
Origin: https://en.kabaun.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
access-control-expose-headers: age,via,x-cache-status,X-cache-status
etag: W/"93d7-sj60v4HNaULTntkKt09XpyMY9gA"
content-encoding: gzip
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-seen-by: 2iuX5LYwvZa9CoGaG8ZUZjb5j8fWnvnycWNmjdvR375doDcb+JuzLucmWkKUGZxh,/SoSYmefJLK2hiZpy2XaYlN1tYMUtM33SkDcJDaLDqk2L3rIiXWS4Ak19Cs1Z1P8,ZUT6NeJ/NsDmQ9DMGnwT1IVH81ZVTyi1I8F3T5PEPocQXT2AyjWfyxKagyd4/pDD
server: Pepyaka/1.19.0
cache-control: public, max-age=7776000, immutable
x-wix-request-id: 1666609932.3089195662523827088
timing-allow-origin: *
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:08 GMT
age: 187376
x-served-by: cache-bma1673-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1666797309.530149,VS0,VE27
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6375
X-Firefox-Spdy: h2
siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=fef045cf.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-platform-simple&originalLanguage=fr&pageId=34436a_f1273ecf1ea5022d57d0c1933016d8b5_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&viewMode=desktop
151.101.85.91200 OK 7.5 kB URL HTTP/2 siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=fef045cf.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-platform-simple&originalLanguage=fr&pageId=34436a_f1273ecf1ea5022d57d0c1933016d8b5_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&viewMode=desktop
IP 151.101.85.91:0
File type JSON data\012- , ASCII text, with very long lines (58048), with no line terminators
Hash ca62b3be47eb2ce2904d628a59aa9a4c
3c3550402e6dcd60ec3143ca95766c8e7087ee56
99436832c014a84c0755cc49d1e8c881bb5c0599a1c29edb00eaa4cb4f80b963
GET /pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%22222%22%2C%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%7D&beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.maskImageCSS%3Atrue%2Cspecs.thunderbolt.chat_landing_page%3Atrue&contentType=application%2Fjson&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fen.kabaun.com&fileId=fef045cf.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&metaSiteId=386d1b40-3750-44a6-9888-75b82f0ea0a9&module=thunderbolt-platform-simple&originalLanguage=fr&pageId=34436a_f1273ecf1ea5022d57d0c1933016d8b5_2601.json&quickActionsMenuEnabled=false®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9746.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=6a735ee1-756b-4cb2-afdc-f797f7a471cb&siteRevision=2601&viewMode=desktop HTTP/1.1
Host: siteassets.parastorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en.kabaun.com/
Origin: https://en.kabaun.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
access-control-expose-headers: age,via,x-cache-status,X-cache-status
etag: W/"e2c0-kqKZVJStR/pJrUMUJumu2dB1DTw"
content-encoding: gzip
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-seen-by: 2iuX5LYwvZa9CoGaG8ZUZjb5j8fWnvnycWNmjdvR3762Lfe2/h7EeN7+amziKINp8LbYimkcQbtDdfQeTz034Q==,/SoSYmefJLK2hiZpy2XaYlN1tYMUtM33SkDcJDaLDqnGvN0ZnmU/6/rpk7yve7RVYz2U7hsmKlYbZhCICVG+MA==,ZUT6NeJ/NsDmQ9DMGnwT1ETcP7GDAH01WM1YVvceHRIm++C2XkuTvnlRFg2XiSDL
server: Pepyaka/1.19.10
cache-control: public, max-age=7776000, immutable
x-wix-request-id: 1666797308.61320366166895917229
timing-allow-origin: *
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
accept-ranges: bytes
date: Wed, 26 Oct 2022 15:15:08 GMT
age: 0
x-served-by: cache-bma1673-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1666797309.524047,VS0,VE173
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7473
X-Firefox-Spdy: h2
frog.wix.com/bpm
23.20.49.116204 No Content 0 B IP 23.20.49.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bpm HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 16460
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 15:15:08 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
frog.wix.com/bolt-performance
23.20.49.116204 No Content 0 B URL HTTP/2 frog.wix.com/bolt-performance
IP 23.20.49.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bolt-performance HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en.kabaun.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://en.kabaun.com
Content-Length: 2255
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 15:15:08 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
frog.wix.com/bolt-performance
23.20.49.116204 No Content 0 B URL HTTP/2 frog.wix.com/bolt-performance
IP 23.20.49.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bolt-performance HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en.kabaun.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://en.kabaun.com
Content-Length: 1448
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 15:15:09 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=uw2-pub-1µPop=uw2-pub-1&et=33&event_name=page%20interactive&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&pid=c1dmp&pn=1&siterev=2601-__siteCacheRevision__&st=2&ts=2377&tts=2994&url=https%3A%2F%2Fen.kabaun.com%2F%3F&v=1.11146.0&vsi=e614f683-15d8-474a-a05f-28910c101483&_brandId=wix
23.20.49.116204 No Content 0 B URL HTTP/2 frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=uw2-pub-1µPop=uw2-pub-1&et=33&event_name=page%20interactive&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&pid=c1dmp&pn=1&siterev=2601-__siteCacheRevision__&st=2&ts=2377&tts=2994&url=https%3A%2F%2Fen.kabaun.com%2F%3F&v=1.11146.0&vsi=e614f683-15d8-474a-a05f-28910c101483&_brandId=wix
IP 23.20.49.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bt?src=29&evid=3&viewer_name=thunderbolt&caching=hit,hit&dc=uw2-pub-1µPop=uw2-pub-1&et=33&event_name=page%20interactive&is_cached=true&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&pid=c1dmp&pn=1&siterev=2601-__siteCacheRevision__&st=2&ts=2377&tts=2994&url=https%3A%2F%2Fen.kabaun.com%2F%3F&v=1.11146.0&vsi=e614f683-15d8-474a-a05f-28910c101483&_brandId=wix HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 15:15:09 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
frog.wix.com/bolt-performance
23.20.49.116204 No Content 0 B URL HTTP/2 frog.wix.com/bolt-performance
IP 23.20.49.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bolt-performance HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en.kabaun.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://en.kabaun.com
Content-Length: 24744
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 15:15:09 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
frog.wix.com/bpm
23.20.49.116204 No Content 0 B IP 23.20.49.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bpm HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 5210
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 15:15:09 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash c92eba03e4e32da25711e3e66d0fa395
c5a1c13f9316af6302aba6f36114b7e0e790746f
ca40c7022a2ca15f3d7bf20236cbeacce7aa77c5aa4c2149b7f30fd238f63b9b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 15:15:09 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 26 Oct 2022 09:17:35 GMT
Expires: Wed, 02 Nov 2022 09:17:34 GMT
Etag: "c5a1c13f9316af6302aba6f36114b7e0e790746f"
Cache-Control: max-age=582744,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 760425506ae4b52d-OSL
frog.wix.com/bpm?_msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&vsi=e614f683-15d8-474a-a05f-28910c101483&_av=thunderbolt-1.11146.0&isb=false&ts=3529&tsn=4146&dc=uw2-pub-1µPop=uw2-pub-1&caching=hit%2Chit&session_id=10de0379-18ef-40ec-a97e-3fd80926df36&st=2&url=https%3A%2F%2Fen.kabaun.com%2F&ish=false&pn=1&isFirstNavigation=true&pv=true&pageId=c1dmp&isServerSide=false&is_lightbox=false&is_cached=true&is_sav_rollout=0&is_dac_rollout=0&v=1.11146.0&_brandId=wix&_siteBranchId=undefined&_ms=4146&_lv=2.0.985%7CC&_mt_instance=kyy0lMwGJcDDljQCFopgtsZDC4n_wF5pOo5Mz10T8iY.eyJpbnN0YW5jZUlkIjoiMzg2ZDFiNDAtMzc1MC00NGE2LTk4ODgtNzViODJmMGVhMGE5IiwiYXBwRGVmSWQiOiIyMmJlZjM0NS0zYzViLTRjMTgtYjc4Mi03NGQ0MDg1MTEyZmYiLCJtZXRhU2l0ZUlkIjoiMzg2ZDFiNDAtMzc1MC00NGE2LTk4ODgtNzViODJmMGVhMGE5Iiwic2lnbkRhdGUiOiIyMDIyLTEwLTI2VDE1OjE1OjA3LjQ5MVoiLCJkZW1vTW9kZSI6ZmFsc2UsImFpZCI6IjQ2NzNhM2YyLWVjNzktNDRkNy04YTJiLTljZGUxYjIzZTUzNyIsInNpdGVPd25lcklkIjoiMzQ0MzZhNDEtMTdlOC00OWZlLTk2MTItNDIxODBlNGNlODdkIn0&src=72&evid=502&_=16667973069640&tti=2008&tbt=275&entryType=loaded&duration=2008&ttlb=1082&dcl=1381&transferSize=148416&decodedBodySize=889630&pageCaching=maybe%20CDN&isSsr=true&ssrDuration=260&ssrTimestamp=1666609081001&maybeBot=false&clientType=ugc&analytics=false&_isca=0&_iscf=0&_ispd=0&_ise=1
23.20.49.116204 No Content 0 B URL HTTP/2 frog.wix.com/bpm?_msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&vsi=e614f683-15d8-474a-a05f-28910c101483&_av=thunderbolt-1.11146.0&isb=false&ts=3529&tsn=4146&dc=uw2-pub-1µPop=uw2-pub-1&caching=hit%2Chit&session_id=10de0379-18ef-40ec-a97e-3fd80926df36&st=2&url=https%3A%2F%2Fen.kabaun.com%2F&ish=false&pn=1&isFirstNavigation=true&pv=true&pageId=c1dmp&isServerSide=false&is_lightbox=false&is_cached=true&is_sav_rollout=0&is_dac_rollout=0&v=1.11146.0&_brandId=wix&_siteBranchId=undefined&_ms=4146&_lv=2.0.985%7CC&_mt_instance=kyy0lMwGJcDDljQCFopgtsZDC4n_wF5pOo5Mz10T8iY.eyJpbnN0YW5jZUlkIjoiMzg2ZDFiNDAtMzc1MC00NGE2LTk4ODgtNzViODJmMGVhMGE5IiwiYXBwRGVmSWQiOiIyMmJlZjM0NS0zYzViLTRjMTgtYjc4Mi03NGQ0MDg1MTEyZmYiLCJtZXRhU2l0ZUlkIjoiMzg2ZDFiNDAtMzc1MC00NGE2LTk4ODgtNzViODJmMGVhMGE5Iiwic2lnbkRhdGUiOiIyMDIyLTEwLTI2VDE1OjE1OjA3LjQ5MVoiLCJkZW1vTW9kZSI6ZmFsc2UsImFpZCI6IjQ2NzNhM2YyLWVjNzktNDRkNy04YTJiLTljZGUxYjIzZTUzNyIsInNpdGVPd25lcklkIjoiMzQ0MzZhNDEtMTdlOC00OWZlLTk2MTItNDIxODBlNGNlODdkIn0&src=72&evid=502&_=16667973069640&tti=2008&tbt=275&entryType=loaded&duration=2008&ttlb=1082&dcl=1381&transferSize=148416&decodedBodySize=889630&pageCaching=maybe%20CDN&isSsr=true&ssrDuration=260&ssrTimestamp=1666609081001&maybeBot=false&clientType=ugc&analytics=false&_isca=0&_iscf=0&_ispd=0&_ise=1
IP 23.20.49.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bpm?_msid=386d1b40-3750-44a6-9888-75b82f0ea0a9&vsi=e614f683-15d8-474a-a05f-28910c101483&_av=thunderbolt-1.11146.0&isb=false&ts=3529&tsn=4146&dc=uw2-pub-1µPop=uw2-pub-1&caching=hit%2Chit&session_id=10de0379-18ef-40ec-a97e-3fd80926df36&st=2&url=https%3A%2F%2Fen.kabaun.com%2F&ish=false&pn=1&isFirstNavigation=true&pv=true&pageId=c1dmp&isServerSide=false&is_lightbox=false&is_cached=true&is_sav_rollout=0&is_dac_rollout=0&v=1.11146.0&_brandId=wix&_siteBranchId=undefined&_ms=4146&_lv=2.0.985%7CC&_mt_instance=kyy0lMwGJcDDljQCFopgtsZDC4n_wF5pOo5Mz10T8iY.eyJpbnN0YW5jZUlkIjoiMzg2ZDFiNDAtMzc1MC00NGE2LTk4ODgtNzViODJmMGVhMGE5IiwiYXBwRGVmSWQiOiIyMmJlZjM0NS0zYzViLTRjMTgtYjc4Mi03NGQ0MDg1MTEyZmYiLCJtZXRhU2l0ZUlkIjoiMzg2ZDFiNDAtMzc1MC00NGE2LTk4ODgtNzViODJmMGVhMGE5Iiwic2lnbkRhdGUiOiIyMDIyLTEwLTI2VDE1OjE1OjA3LjQ5MVoiLCJkZW1vTW9kZSI6ZmFsc2UsImFpZCI6IjQ2NzNhM2YyLWVjNzktNDRkNy04YTJiLTljZGUxYjIzZTUzNyIsInNpdGVPd25lcklkIjoiMzQ0MzZhNDEtMTdlOC00OWZlLTk2MTItNDIxODBlNGNlODdkIn0&src=72&evid=502&_=16667973069640&tti=2008&tbt=275&entryType=loaded&duration=2008&ttlb=1082&dcl=1381&transferSize=148416&decodedBodySize=889630&pageCaching=maybe%20CDN&isSsr=true&ssrDuration=260&ssrTimestamp=1666609081001&maybeBot=false&clientType=ugc&analytics=false&_isca=0&_iscf=0&_ispd=0&_ise=1 HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 15:15:10 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
engage.wixapps.net/chat-widget-server/renderChatWidget/index?lang=en&dateNumberFormat=en-gb&isPrimaryLanguage=false&pageId=masterPage&compId=comp-kve7wtv7&viewerCompId=comp-kve7wtv7&siteRevision=2601&viewMode=site&deviceType=desktop&locale=fr&tz=Europe%2FParis®ionalLanguage=fr&width=94&height=94&instance=i3-fXTH5zaPuXvZ5jwMFZLkFz0IzE0QLUbqoK6mKHqk.eyJpbnN0YW5jZUlkIjoiN2UxZjUzYTItMzFmNS00NzI0LTgwMWItYmU5NGJlZGUwOWUxIiwiYXBwRGVmSWQiOiIxNDUxN2UxYS0zZmYwLWFmOTgtNDA4ZS0yYmQ2OTUzYzM2YTIiLCJtZXRhU2l0ZUlkIjoiMzg2ZDFiNDAtMzc1MC00NGE2LTk4ODgtNzViODJmMGVhMGE5Iiwic2lnbkRhdGUiOiIyMDIyLTEwLTI2VDE1OjE1OjA3LjQ5MVoiLCJkZW1vTW9kZSI6ZmFsc2UsIm9yaWdpbkluc3RhbmNlSWQiOiI1YmFmNTFkOS02NDNkLTQ0ZWEtODIwOC04ZTNlODNmMTk2YTEiLCJhaWQiOiI0NjczYTNmMi1lYzc5LTQ0ZDctOGEyYi05Y2RlMWIyM2U1MzciLCJiaVRva2VuIjoiNDY3MjQ4ZTItMDZhNS0wMzgyLTE4OTMtY2IyYzkxZDBhOTQ4Iiwic2l0ZU93bmVySWQiOiIzNDQzNmE0MS0xN2U4LTQ5ZmUtOTYxMi00MjE4MGU0Y2U4N2QifQ¤cy=EUR¤tCurrency=EUR&commonConfig=%7B%22brand%22%3A%22wix%22%2C%22bsi%22%3A%22%22%2C%22BSI%22%3A%22%22%7D&consent-policy=%7B%22func%22%3A0%2C%22anl%22%3A0%2C%22adv%22%3A0%2C%22dt3%22%3A1%2C%22ess%22%3A1%7D&vsi=e614f683-15d8-474a-a05f-28910c101483
185.230.60.202200 OK 7.1 kB URL HTTP/1.1 engage.wixapps.net/chat-widget-server/renderChatWidget/index?lang=en&dateNumberFormat=en-gb&isPrimaryLanguage=false&pageId=masterPage&compId=comp-kve7wtv7&viewerCompId=comp-kve7wtv7&siteRevision=2601&viewMode=site&deviceType=desktop&locale=fr&tz=Europe%2FParis®ionalLanguage=fr&width=94&height=94&instance=i3-fXTH5zaPuXvZ5jwMFZLkFz0IzE0QLUbqoK6mKHqk.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¤cy=EUR¤tCurrency=EUR&commonConfig=%7B%22brand%22%3A%22wix%22%2C%22bsi%22%3A%22%22%2C%22BSI%22%3A%22%22%7D&consent-policy=%7B%22func%22%3A0%2C%22anl%22%3A0%2C%22adv%22%3A0%2C%22dt3%22%3A1%2C%22ess%22%3A1%7D&vsi=e614f683-15d8-474a-a05f-28910c101483
IP 185.230.60.202:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6088)
Hash b20b6e07d45c82d0a18b2f71dbc0798f
aa04d9ba739a2300f9e4b1b8ce8b9dce675656ba
37de9ad02035dc929520b5d2145bebd33ab7fe74f617c0a28cf66ceeebaee774
GET /chat-widget-server/renderChatWidget/index?lang=en&dateNumberFormat=en-gb&isPrimaryLanguage=false&pageId=masterPage&compId=comp-kve7wtv7&viewerCompId=comp-kve7wtv7&siteRevision=2601&viewMode=site&deviceType=desktop&locale=fr&tz=Europe%2FParis®ionalLanguage=fr&width=94&height=94&instance=i3-fXTH5zaPuXvZ5jwMFZLkFz0IzE0QLUbqoK6mKHqk.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¤cy=EUR¤tCurrency=EUR&commonConfig=%7B%22brand%22%3A%22wix%22%2C%22bsi%22%3A%22%22%2C%22BSI%22%3A%22%22%7D&consent-policy=%7B%22func%22%3A0%2C%22anl%22%3A0%2C%22adv%22%3A0%2C%22dt3%22%3A1%2C%22ess%22%3A1%7D&vsi=e614f683-15d8-474a-a05f-28910c101483 HTTP/1.1
Host: engage.wixapps.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 15:15:10 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
set-cookie: XSRF-TOKEN=1666797310|TIQeDGesXd1Z; Domain=.wix.com; Path=/; Secure; SameSite=None
fedops.logger.defaultOverrides=%7B%22paramsOverridesForApp%22%3A%7B%22triggers-page-component%22%3A%7B%22is_rollout%22%3Atrue%7D%2C%22omni-setup-sidebar-lazy%22%3A%7B%22is_rollout%22%3Atrue%7D%2C%22dashboard-setup-app.components.dashboard-widget%22%3A%7B%22is_rollout%22%3Atrue%7D%2C%22bookings-calendar-sync-pages%22%3A%7B%22is_rollout%22%3Atrue%7D%2C%22music-manager-my-albums%22%3A%7B%22is_rollout%22%3Atrue%7D%7D%7D; Max-Age=60; Path=/; Expires=Wed, 26 Oct 2022 15:16:09 GMT
_wixAB3|34436a41-17e8-49fe-9612-42180e4ce87d=15161#1|82045#1|97651#2|236860#2|261000#1|287210#2|334951#1|357145#4|357146#4|551048#2|576877#1|682468#1|697753#1|801675#1|820513#1|835176#1|837541#2|837772#1|851765#1|991250#2|1021294#2|1042875#1|1053247#2|1064386#1|1069205#1|1076929#2|1077043#1|1081623#1|1082814#1|1091452#2; Max-Age=14400; Expires=Wed, 26 Oct 2022 19:15:10 GMT; Path=/; Domain=.wix.com
x-recruiting: Want to build world class business chat product that's used by millions of users? Join our AMAZING team! Visit us at https://www.wix.com/jobs/search?val=crm
etag: W/"5225-U/LjW/KMzah5dgiCiC5CY1Mg5qY"
pragma: no-cache
cache-control: no-store, no-cache
content-encoding: gzip
vary: Accept-Encoding
X-Seen-By: gv/XVF9HsGpk8A2KWukUzOwfbs+7qUVAqsIx00yI78k=,m0j2EEknGIVUW/liY8BLLlPVSO1QPQ7KlY+JzrfjmCIMbwluI1yUDJty9McxOlfY,++r5XCRb/6cYf+PEtyYPdA2SVW/wVX+ObBTDo8rzBVDMLpNGCp6mIg3K71I3bFw6IxZ+Aa8SsyrC3ibmmx9/Uw==,osV03DUdKaEVOGwoQFgPYsH3r8e1yjl86ko6apRbpO0=,Odrt8F1EDvjOxRVUPESA5/2yQlULddWql7T1vhH7ICM8znw5DB4Atbp5lEEEz2TI1sYLr9RpL2m0EEgBB2V5FQ==,sQ19iEk473qMiaixh4sATpxOwdxlwKVKVLC8FI6LzQ0=,sQ19iEk473qMiaixh4sATs55vcjl4Suz2yRFeK3XseE=,Tj5BxVkCjhX6S7vFNevVZYck3/Oc8m/KJAXt4m20WVMcft034/wTeGWtfyqkLnCVznm9yOXhK7PbJEV4rdex4Q==,mvxQ9qSAmY38asKjFCcmG9cxZnA9ld12cV+F8KlU4mCzVdU0zhcLkEq4n8GQ5sG2HhaCFNQ8vqF0JYIKoNOQGA==,sQ19iEk473qMiaixh4sATljKRd8gtqqvvv5QssAxEaM=,sQ19iEk473qMiaixh4sATkMCELXTXkH9Nc15cqcD3J4=,LlHHrtdZwfqSTe7u8ayFI1RpayTcJuYRolPfk1l7Et5InmU0XCkw1wTIkk3DCdBDwJFVqH8jjmK6bgsmXdtXQQ==,sQ19iEk473qMiaixh4sATj3MrW2XH0UcaD8d5s1Y01Q=,Tj5BxVkCjhX6S7vFNevVZYck3/Oc8m/KJAXt4m20WVPMWg9IFaOMRc//J+75D4e5PcytbZcfRRxoPx3mzVjTVA==,sQ19iEk473qMiaixh4sATkQ7musG745sELldG5OWZS8=,54sIEWKMiveDgi8EJdej77SFq0Dg8668DAKL5FbkQeKV9Ul6dio3858aIUUWtHJ607tmRDBFrQEa1bLgdzpbNg==,NrLb3i/xpYXJ2OAS5Ls5WtnH9yT5XVf02A1azh/oY/qLRHHBiTpk1+y1AWAZahHIbKBfb5qoHWRnZvplJq8aHg==,sQ19iEk473qMiaixh4sATlB1URYXYay9jYjnxgFJpWI=,sQ19iEk473qMiaixh4sATjoHmOyDRZyvNn5Pr8h4b9g=,xcng7sTk3ADdZYw5QlZiWqdFTZ10BrYlEnhmHE3dOYF1LhXGwLYMfuemwsWH001W+xpMFl7obFDd+dWKDQPYHw==,V0ypG4WNZ7qxkGIizG7qlmJjQ8U5k/Fr/MMWwVbV/QejnICRsPYJ+NN1xLm5W216egP/xsmqDn1KqaBpqKFqMQ==,sQ19iEk473qMiaixh4sATqlXc3QoBR9acBhaPrKCulQ=,sQ19iEk473qMiaixh4sATpoSqPc3EUNaNwLfBV8nd+Q=,2fKwxo2iHl5wyQOVdzqd10KASQhC6QMfZWOzm8NtNPNd4meBLb3NCqI084v6fgCLl7vHyFWzX4QxBoHQtMLeGQ==,J1YhAWlcwZX0sh0bHV0MaGerxxuqOGjzEvNGZg/iVFQ=
X-Wix-Request-Id: 1666797309.7728686247665132747
Server: Pepyaka/1.19.10
X-Content-Type-Options: nosniff
frog.wix.com/bpm
23.20.49.116204 No Content 0 B IP 23.20.49.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bpm HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2861
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 15:15:10 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
frog.wix.com/fed?appName=chat-widget&src=72&evid=14&session_id=dec1f2c0-cea9-46ef-b099-817ebb821a05&_=0.9665721306408125&is_rollout=false
23.20.49.116204 No Content 0 B URL HTTP/2 frog.wix.com/fed?appName=chat-widget&src=72&evid=14&session_id=dec1f2c0-cea9-46ef-b099-817ebb821a05&_=0.9665721306408125&is_rollout=false
IP 23.20.49.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fed?appName=chat-widget&src=72&evid=14&session_id=dec1f2c0-cea9-46ef-b099-817ebb821a05&_=0.9665721306408125&is_rollout=false HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://engage.wixapps.net
Connection: keep-alive
Referer: https://engage.wixapps.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 15:15:10 GMT
server: nginx
access-control-allow-origin: https://engage.wixapps.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
frog.wix.com/fed
23.20.49.116204 No Content 0 B IP 23.20.49.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fed HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 935
Origin: https://engage.wixapps.net
Connection: keep-alive
Referer: https://engage.wixapps.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 15:15:11 GMT
server: nginx
access-control-allow-origin: https://engage.wixapps.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
engage.wixapps.net/_api/chat-web/v1/real-time-tokens
185.230.60.202200 OK 913 B URL HTTP/1.1 engage.wixapps.net/_api/chat-web/v1/real-time-tokens
IP 185.230.60.202:0
File type JSON data\012- , ASCII text, with very long lines (1224), with no line terminators
Hash 55bc3b53b2a3d1a2fafc5e26f775ab71
f000110a4a1b3f4da6a46a213c0e11157f06262e
9449bbb534854d3524c6c1e57b2e59444b3a3e22feecf6435f3c0f71f199c192
POST /_api/chat-web/v1/real-time-tokens HTTP/1.1
Host: engage.wixapps.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-wix-brand: wix
consent-policy: %7B%22func%22%3A0%2C%22anl%22%3A0%2C%22adv%22%3A0%2C%22dt3%22%3A1%2C%22ess%22%3A1%7D
X-Wix-Client-Artifact-Id: chat-widget
commonConfig: %7B%22brand%22%3A%22wix%22%2C%22BSI%22%3A%22%22%7D
Content-Length: 464
Origin: https://engage.wixapps.net
Connection: keep-alive
Referer: https://engage.wixapps.net/chat-widget-server/renderChatWidget/index?lang=en&dateNumberFormat=en-gb&isPrimaryLanguage=false&pageId=masterPage&compId=comp-kve7wtv7&viewerCompId=comp-kve7wtv7&siteRevision=2601&viewMode=site&deviceType=desktop&locale=fr&tz=Europe%2FParis®ionalLanguage=fr&width=94&height=94&instance=i3-fXTH5zaPuXvZ5jwMFZLkFz0IzE0QLUbqoK6mKHqk.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¤cy=EUR¤tCurrency=EUR&commonConfig=%7B%22brand%22%3A%22wix%22%2C%22bsi%22%3A%22%22%2C%22BSI%22%3A%22%22%7D&consent-policy=%7B%22func%22%3A0%2C%22anl%22%3A0%2C%22adv%22%3A0%2C%22dt3%22%3A1%2C%22ess%22%3A1%7D&vsi=e614f683-15d8-474a-a05f-28910c101483
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 15:15:11 GMT
Content-Type: application/json;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: no-cache
content-encoding: gzip
vary: Accept-Encoding
X-Seen-By: gv/XVF9HsGpk8A2KWukUzOwfbs+7qUVAqsIx00yI78k=,m0j2EEknGIVUW/liY8BLLlPVSO1QPQ7KlY+JzrfjmCIMbwluI1yUDJty9McxOlfY,++r5XCRb/6cYf+PEtyYPdDU6jFUSa5Kk8HkXMBbM63yCvnKfb2NwUct6rNbmrHcFiLmOBCJX9PwPq0FFNfh5cw==,osV03DUdKaEVOGwoQFgPYl7ich+iEDq2OU8Wb8/LLPk=,sQ19iEk473qMiaixh4sATgTqxCwRMq/w2eqsia3dywY=,dEEl33DmWirEZ6YVD2/LVP3JlIL3X7SrKKSWZME6VPf8jb02vzVAk932Kyh9Jz/2
X-Wix-Request-Id: 1666797311.0208686247665232747
set-cookie: XSRF-TOKEN=1666797311|UGckYlm0xEl4; Path=/; Domain=engage.wixapps.net; Secure; SameSite=None
Server: Pepyaka/1.19.10
X-Content-Type-Options: nosniff
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 19132f29a8811a10f90eca2d81e5deb8
3b9e0bbf9f40f46b57dad5567b008e58b5770565
708aeab241760b108d60c1462b1979e59cf473242222e9270705ba70642b04f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 15:15:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 19132f29a8811a10f90eca2d81e5deb8
3b9e0bbf9f40f46b57dad5567b008e58b5770565
708aeab241760b108d60c1462b1979e59cf473242222e9270705ba70642b04f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 15:15:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
frog.wix.com/bpm
23.20.49.116204 No Content 0 B IP 23.20.49.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bpm HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1335
Origin: https://en.kabaun.com
Connection: keep-alive
Referer: https://en.kabaun.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 15:15:11 GMT
server: nginx
access-control-allow-origin: https://en.kabaun.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
www.googleapis.com/identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyClcOX5Tut1uJylikpNbFzkW_qpiBFjNPM
142.250.74.170200 OK 0 B URL HTTP/2 www.googleapis.com/identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyClcOX5Tut1uJylikpNbFzkW_qpiBFjNPM
IP 142.250.74.170:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyClcOX5Tut1uJylikpNbFzkW_qpiBFjNPM HTTP/1.1
Host: www.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://engage.wixapps.net/
Origin: https://engage.wixapps.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://engage.wixapps.net
vary: origin, referer, x-origin
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type
access-control-max-age: 3600
date: Wed, 26 Oct 2022 15:15:11 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash f046e6113dd1e5e499c765516be08b17
c2253055e09b46209469853cad8720e64f84a1bf
18663a8f0b5d4d7581b771da6c2dc897bc2b82d51d7dac1a56d22f9bebab6fb3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 15:15:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
engage.wixapps.net/serverless/chat-event-reporter/report-event
185.230.60.218200 OK 0 B URL HTTP/1.1 engage.wixapps.net/serverless/chat-event-reporter/report-event
IP 185.230.60.218:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /serverless/chat-event-reporter/report-event HTTP/1.1
Host: engage.wixapps.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Wix-Chat-Instance: i3-fXTH5zaPuXvZ5jwMFZLkFz0IzE0QLUbqoK6mKHqk.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
x-wix-brand: wix
consent-policy: %7B%22func%22%3A0%2C%22anl%22%3A0%2C%22adv%22%3A0%2C%22dt3%22%3A1%2C%22ess%22%3A1%7D
authorization: i3-fXTH5zaPuXvZ5jwMFZLkFz0IzE0QLUbqoK6mKHqk.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
X-Wix-Client-Artifact-Id: chat-widget
commonConfig: %7B%22brand%22%3A%22wix%22%2C%22BSI%22%3A%22%22%7D
x-wix-linguist: en|en-gb|false|7e1f53a2-31f5-4724-801b-be94bede09e1
Content-Length: 454
Origin: https://engage.wixapps.net
Connection: keep-alive
Referer: https://engage.wixapps.net/chat-widget-server/renderChatWidget/index?lang=en&dateNumberFormat=en-gb&isPrimaryLanguage=false&pageId=masterPage&compId=comp-kve7wtv7&viewerCompId=comp-kve7wtv7&siteRevision=2601&viewMode=site&deviceType=desktop&locale=fr&tz=Europe%2FParis®ionalLanguage=fr&width=94&height=94&instance=i3-fXTH5zaPuXvZ5jwMFZLkFz0IzE0QLUbqoK6mKHqk.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¤cy=EUR¤tCurrency=EUR&commonConfig=%7B%22brand%22%3A%22wix%22%2C%22bsi%22%3A%22%22%2C%22BSI%22%3A%22%22%7D&consent-policy=%7B%22func%22%3A0%2C%22anl%22%3A0%2C%22adv%22%3A0%2C%22dt3%22%3A1%2C%22ess%22%3A1%7D&vsi=e614f683-15d8-474a-a05f-28910c101483
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 15:15:11 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 0
Connection: keep-alive
pragma: no-cache
cache-control: no-store, no-cache
X-Seen-By: 6ivkWfREES4Y8b2pOpzk7Owfbs+7qUVAqsIx00yI78k=,m0j2EEknGIVUW/liY8BLLkiHzpTYSDRA7u88Ic3Fde4MbwluI1yUDJty9McxOlfY,++r5XCRb/6cYf+PEtyYPdIiD7iKg3ZZ/HxT9fe3Ma7ta0mywjzqS33UCxutnoNtGaF07XlKSZvPmUUzKBxKQdw==,osV03DUdKaEVOGwoQFgPYrIkDZCChYtTNUpj8Lg2BBw=,sQ19iEk473qMiaixh4sATqy44XBefmfg+cWV6pt7nf0=,PgrrMD+T/VLWpAP1f76DIoAXQ6fiMLN02eUSRBYJ5uCZwyJZaN1mxj8ZEQiiXM4pOlTxG08KXx7b/jq01byBtFKr/SOudM/Y7P5gHkbOK0c=
X-Wix-Request-Id: 1666797311.290867081883517742
set-cookie: XSRF-TOKEN=1666797311|C1XqbSYkscnb; Path=/; Domain=engage.wixapps.net; Secure; SameSite=None
Server: Pepyaka/1.19.10
X-Content-Type-Options: nosniff
www.googleapis.com/identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyClcOX5Tut1uJylikpNbFzkW_qpiBFjNPM
142.250.74.170200 OK 1.0 kB URL HTTP/2 www.googleapis.com/identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyClcOX5Tut1uJylikpNbFzkW_qpiBFjNPM
IP 142.250.74.170:0
File type JSON data\012- , ASCII text, with very long lines (952)
Hash 74289079f7b51c4808a15be0639997db
81788b6dfe123633ec04f2f3582dabf08726f47f
518c49d5616bb4f28ab5ecca13ca81f58e9b0faba6bd003744d702b32bdbab4a
POST /identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyClcOX5Tut1uJylikpNbFzkW_qpiBFjNPM HTTP/1.1
Host: www.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 956
Origin: https://engage.wixapps.net
Connection: keep-alive
Referer: https://engage.wixapps.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
pragma: no-cache
date: Wed, 26 Oct 2022 15:15:11 GMT
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Mon, 01 Jan 1990 00:00:00 GMT
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
server: ESF
content-length: 1010
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://engage.wixapps.net
access-control-expose-headers: date,vary,vary,vary,content-encoding,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4int/5EXjxzFGjgM
142.250.74.35200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4int/5EXjxzFGjgM
IP 142.250.74.35:0
Hash a3cf607598c74948cc43f98856504e89
a741df07b69f4e94a06a788a7b84b9170cae6b39
f6924a5e0b0b0083050bffdf393a5e0a3f3866a5c5edefa381eaf2657b529f12
POST /s/gts1d4int/5EXjxzFGjgM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 15:15:11 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
wix-engage-visitors-prod-23.firebaseio.com/core-chat/participants/4673a3f2-ec79-44d7-8a2b-9cde1b23e537/events.json?auth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjNmNjcyNDYxOTk4YjJiMzMyYWQ4MTY0ZTFiM2JlN2VkYTY4NDZiMzciLCJ0eXAiOiJKV1QifQ.eyJwYXJ0aWNpcGFudElkIjoiNDY3M2EzZjItZWM3OS00NGQ3LThhMmItOWNkZTFiMjNlNTM3IiwiaXNzIjoiaHR0cHM6Ly9zZWN1cmV0b2tlbi5nb29nbGUuY29tL3dpeC1lbmdhZ2UtdmlzaXRvcnMtcHJvZC0xNSIsImF1ZCI6IndpeC1lbmdhZ2UtdmlzaXRvcnMtcHJvZC0xNSIsImF1dGhfdGltZSI6MTY2Njc5NzMxMSwidXNlcl9pZCI6IjVmM2I0MjM5LTAyYTktNGM4Yy1hZjQwLWYzMWIzZmI3NTA1YSIsInN1YiI6IjVmM2I0MjM5LTAyYTktNGM4Yy1hZjQwLWYzMWIzZmI3NTA1YSIsImlhdCI6MTY2Njc5NzMxMSwiZXhwIjoxNjY2ODAwOTExLCJmaXJlYmFzZSI6eyJpZGVudGl0aWVzIjp7fSwic2lnbl9pbl9wcm92aWRlciI6ImN1c3RvbSJ9fQ.QlCNQPD3PrpztrVE0mY4RwUreWKhWHC5l5N834ZOId1oTp7KPoVERvTPAzD4ax5lbbqGbx2eXD8V-EUt7FqzhvgmlVCNE4Q_RAXSVwfsSvzCdjlT_RS0m5NFl8kl8LJJU9r3-fgCWOoTDOSi-RxhyJuo_iXj6haBfbX32LaGqcEODFlbRUf3XPwUE2ic6iZzYcjBddVBYwb8snJWLwxmNxDLETRbIhdVkw6KtZJ3neNRpTc2xF7Lw8EAsvdBSLzNaXpyYk2i5VBkNfZjyogFaGOm0qx3T3mCm68i4W72cs9dDIrm9igbhwQGVrCYP5LuwwulvDAzWHxp6K-Gck6uhA
34.120.160.131200 OK 4 B URL HTTP/1.1 wix-engage-visitors-prod-23.firebaseio.com/core-chat/participants/4673a3f2-ec79-44d7-8a2b-9cde1b23e537/events.json?auth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjNmNjcyNDYxOTk4YjJiMzMyYWQ4MTY0ZTFiM2JlN2VkYTY4NDZiMzciLCJ0eXAiOiJKV1QifQ.eyJwYXJ0aWNpcGFudElkIjoiNDY3M2EzZjItZWM3OS00NGQ3LThhMmItOWNkZTFiMjNlNTM3IiwiaXNzIjoiaHR0cHM6Ly9zZWN1cmV0b2tlbi5nb29nbGUuY29tL3dpeC1lbmdhZ2UtdmlzaXRvcnMtcHJvZC0xNSIsImF1ZCI6IndpeC1lbmdhZ2UtdmlzaXRvcnMtcHJvZC0xNSIsImF1dGhfdGltZSI6MTY2Njc5NzMxMSwidXNlcl9pZCI6IjVmM2I0MjM5LTAyYTktNGM4Yy1hZjQwLWYzMWIzZmI3NTA1YSIsInN1YiI6IjVmM2I0MjM5LTAyYTktNGM4Yy1hZjQwLWYzMWIzZmI3NTA1YSIsImlhdCI6MTY2Njc5NzMxMSwiZXhwIjoxNjY2ODAwOTExLCJmaXJlYmFzZSI6eyJpZGVudGl0aWVzIjp7fSwic2lnbl9pbl9wcm92aWRlciI6ImN1c3RvbSJ9fQ.QlCNQPD3PrpztrVE0mY4RwUreWKhWHC5l5N834ZOId1oTp7KPoVERvTPAzD4ax5lbbqGbx2eXD8V-EUt7FqzhvgmlVCNE4Q_RAXSVwfsSvzCdjlT_RS0m5NFl8kl8LJJU9r3-fgCWOoTDOSi-RxhyJuo_iXj6haBfbX32LaGqcEODFlbRUf3XPwUE2ic6iZzYcjBddVBYwb8snJWLwxmNxDLETRbIhdVkw6KtZJ3neNRpTc2xF7Lw8EAsvdBSLzNaXpyYk2i5VBkNfZjyogFaGOm0qx3T3mCm68i4W72cs9dDIrm9igbhwQGVrCYP5LuwwulvDAzWHxp6K-Gck6uhA
IP 34.120.160.131:0
File type ASCII text, with no line terminators
Hash 37a6259cc0c1dae299a7866489dff0bd
2be88ca4242c76e8253ac62474851065032d6833
74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b
GET /core-chat/participants/4673a3f2-ec79-44d7-8a2b-9cde1b23e537/events.json?auth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjNmNjcyNDYxOTk4YjJiMzMyYWQ4MTY0ZTFiM2JlN2VkYTY4NDZiMzciLCJ0eXAiOiJKV1QifQ.eyJwYXJ0aWNpcGFudElkIjoiNDY3M2EzZjItZWM3OS00NGQ3LThhMmItOWNkZTFiMjNlNTM3IiwiaXNzIjoiaHR0cHM6Ly9zZWN1cmV0b2tlbi5nb29nbGUuY29tL3dpeC1lbmdhZ2UtdmlzaXRvcnMtcHJvZC0xNSIsImF1ZCI6IndpeC1lbmdhZ2UtdmlzaXRvcnMtcHJvZC0xNSIsImF1dGhfdGltZSI6MTY2Njc5NzMxMSwidXNlcl9pZCI6IjVmM2I0MjM5LTAyYTktNGM4Yy1hZjQwLWYzMWIzZmI3NTA1YSIsInN1YiI6IjVmM2I0MjM5LTAyYTktNGM4Yy1hZjQwLWYzMWIzZmI3NTA1YSIsImlhdCI6MTY2Njc5NzMxMSwiZXhwIjoxNjY2ODAwOTExLCJmaXJlYmFzZSI6eyJpZGVudGl0aWVzIjp7fSwic2lnbl9pbl9wcm92aWRlciI6ImN1c3RvbSJ9fQ.QlCNQPD3PrpztrVE0mY4RwUreWKhWHC5l5N834ZOId1oTp7KPoVERvTPAzD4ax5lbbqGbx2eXD8V-EUt7FqzhvgmlVCNE4Q_RAXSVwfsSvzCdjlT_RS0m5NFl8kl8LJJU9r3-fgCWOoTDOSi-RxhyJuo_iXj6haBfbX32LaGqcEODFlbRUf3XPwUE2ic6iZzYcjBddVBYwb8snJWLwxmNxDLETRbIhdVkw6KtZJ3neNRpTc2xF7Lw8EAsvdBSLzNaXpyYk2i5VBkNfZjyogFaGOm0qx3T3mCm68i4W72cs9dDIrm9igbhwQGVrCYP5LuwwulvDAzWHxp6K-Gck6uhA HTTP/1.1
Host: wix-engage-visitors-prod-23.firebaseio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://engage.wixapps.net
Connection: keep-alive
Referer: https://engage.wixapps.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 26 Oct 2022 15:15:11 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 4
Connection: keep-alive
Access-Control-Allow-Origin: https://engage.wixapps.net
Cache-Control: no-cache
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
frog.wix.com/fed
23.20.49.116204 No Content 0 B IP 23.20.49.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fed HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 814
Origin: https://engage.wixapps.net
Connection: keep-alive
Referer: https://engage.wixapps.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 26 Oct 2022 15:15:12 GMT
server: nginx
access-control-allow-origin: https://engage.wixapps.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F710265b5-7594-45dd-ae3b-49cf84887c51.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F710265b5-7594-45dd-ae3b-49cf84887c51.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 656b64fb178a96cdeab7d54d0d3df5ba
f628269fc4ba16b1c4b11a8bc965a7dba93755cb
eb1126cfc2a686ea8d845a4898d904a133ff3284578f3a42a45fe01138df6c8c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F710265b5-7594-45dd-ae3b-49cf84887c51.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7971
x-amzn-requestid: d7e1e331-09cc-4bdd-83a3-594b65e50d79
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alK-TEWXIAMFoCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6358585b-6e2c04ed0d36eea85de94a22;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:42:51 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: XHxcZGaZvSBzOOUBp85RIirtQl05uAQ-b-Lzy0LOjav3avtSzXPPIA==
via: 1.1 c9b161639a9353c2354b895548ea9fca.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:49:21 GMT
age: 62753
etag: "f628269fc4ba16b1c4b11a8bc965a7dba93755cb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
wix-engage-visitors-prod-23.firebaseio.com/core-chat/participants/4673a3f2-ec79-44d7-8a2b-9cde1b23e537/events.json?auth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjNmNjcyNDYxOTk4YjJiMzMyYWQ4MTY0ZTFiM2JlN2VkYTY4NDZiMzciLCJ0eXAiOiJKV1QifQ.eyJwYXJ0aWNpcGFudElkIjoiNDY3M2EzZjItZWM3OS00NGQ3LThhMmItOWNkZTFiMjNlNTM3IiwiaXNzIjoiaHR0cHM6Ly9zZWN1cmV0b2tlbi5nb29nbGUuY29tL3dpeC1lbmdhZ2UtdmlzaXRvcnMtcHJvZC0xNSIsImF1ZCI6IndpeC1lbmdhZ2UtdmlzaXRvcnMtcHJvZC0xNSIsImF1dGhfdGltZSI6MTY2Njc5NzMxMSwidXNlcl9pZCI6IjVmM2I0MjM5LTAyYTktNGM4Yy1hZjQwLWYzMWIzZmI3NTA1YSIsInN1YiI6IjVmM2I0MjM5LTAyYTktNGM4Yy1hZjQwLWYzMWIzZmI3NTA1YSIsImlhdCI6MTY2Njc5NzMxMSwiZXhwIjoxNjY2ODAwOTExLCJmaXJlYmFzZSI6eyJpZGVudGl0aWVzIjp7fSwic2lnbl9pbl9wcm92aWRlciI6ImN1c3RvbSJ9fQ.QlCNQPD3PrpztrVE0mY4RwUreWKhWHC5l5N834ZOId1oTp7KPoVERvTPAzD4ax5lbbqGbx2eXD8V-EUt7FqzhvgmlVCNE4Q_RAXSVwfsSvzCdjlT_RS0m5NFl8kl8LJJU9r3-fgCWOoTDOSi-RxhyJuo_iXj6haBfbX32LaGqcEODFlbRUf3XPwUE2ic6iZzYcjBddVBYwb8snJWLwxmNxDLETRbIhdVkw6KtZJ3neNRpTc2xF7Lw8EAsvdBSLzNaXpyYk2i5VBkNfZjyogFaGOm0qx3T3mCm68i4W72cs9dDIrm9igbhwQGVrCYP5LuwwulvDAzWHxp6K-Gck6uhA
34.120.160.131200 OK 4 B URL HTTP/1.1 wix-engage-visitors-prod-23.firebaseio.com/core-chat/participants/4673a3f2-ec79-44d7-8a2b-9cde1b23e537/events.json?auth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjNmNjcyNDYxOTk4YjJiMzMyYWQ4MTY0ZTFiM2JlN2VkYTY4NDZiMzciLCJ0eXAiOiJKV1QifQ.eyJwYXJ0aWNpcGFudElkIjoiNDY3M2EzZjItZWM3OS00NGQ3LThhMmItOWNkZTFiMjNlNTM3IiwiaXNzIjoiaHR0cHM6Ly9zZWN1cmV0b2tlbi5nb29nbGUuY29tL3dpeC1lbmdhZ2UtdmlzaXRvcnMtcHJvZC0xNSIsImF1ZCI6IndpeC1lbmdhZ2UtdmlzaXRvcnMtcHJvZC0xNSIsImF1dGhfdGltZSI6MTY2Njc5NzMxMSwidXNlcl9pZCI6IjVmM2I0MjM5LTAyYTktNGM4Yy1hZjQwLWYzMWIzZmI3NTA1YSIsInN1YiI6IjVmM2I0MjM5LTAyYTktNGM4Yy1hZjQwLWYzMWIzZmI3NTA1YSIsImlhdCI6MTY2Njc5NzMxMSwiZXhwIjoxNjY2ODAwOTExLCJmaXJlYmFzZSI6eyJpZGVudGl0aWVzIjp7fSwic2lnbl9pbl9wcm92aWRlciI6ImN1c3RvbSJ9fQ.QlCNQPD3PrpztrVE0mY4RwUreWKhWHC5l5N834ZOId1oTp7KPoVERvTPAzD4ax5lbbqGbx2eXD8V-EUt7FqzhvgmlVCNE4Q_RAXSVwfsSvzCdjlT_RS0m5NFl8kl8LJJU9r3-fgCWOoTDOSi-RxhyJuo_iXj6haBfbX32LaGqcEODFlbRUf3XPwUE2ic6iZzYcjBddVBYwb8snJWLwxmNxDLETRbIhdVkw6KtZJ3neNRpTc2xF7Lw8EAsvdBSLzNaXpyYk2i5VBkNfZjyogFaGOm0qx3T3mCm68i4W72cs9dDIrm9igbhwQGVrCYP5LuwwulvDAzWHxp6K-Gck6uhA
IP 34.120.160.131:0
File type ASCII text, with no line terminators
Hash 37a6259cc0c1dae299a7866489dff0bd
2be88ca4242c76e8253ac62474851065032d6833
74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b
GET /core-chat/participants/4673a3f2-ec79-44d7-8a2b-9cde1b23e537/events.json?auth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjNmNjcyNDYxOTk4YjJiMzMyYWQ4MTY0ZTFiM2JlN2VkYTY4NDZiMzciLCJ0eXAiOiJKV1QifQ.eyJwYXJ0aWNpcGFudElkIjoiNDY3M2EzZjItZWM3OS00NGQ3LThhMmItOWNkZTFiMjNlNTM3IiwiaXNzIjoiaHR0cHM6Ly9zZWN1cmV0b2tlbi5nb29nbGUuY29tL3dpeC1lbmdhZ2UtdmlzaXRvcnMtcHJvZC0xNSIsImF1ZCI6IndpeC1lbmdhZ2UtdmlzaXRvcnMtcHJvZC0xNSIsImF1dGhfdGltZSI6MTY2Njc5NzMxMSwidXNlcl9pZCI6IjVmM2I0MjM5LTAyYTktNGM4Yy1hZjQwLWYzMWIzZmI3NTA1YSIsInN1YiI6IjVmM2I0MjM5LTAyYTktNGM4Yy1hZjQwLWYzMWIzZmI3NTA1YSIsImlhdCI6MTY2Njc5NzMxMSwiZXhwIjoxNjY2ODAwOTExLCJmaXJlYmFzZSI6eyJpZGVudGl0aWVzIjp7fSwic2lnbl9pbl9wcm92aWRlciI6ImN1c3RvbSJ9fQ.QlCNQPD3PrpztrVE0mY4RwUreWKhWHC5l5N834ZOId1oTp7KPoVERvTPAzD4ax5lbbqGbx2eXD8V-EUt7FqzhvgmlVCNE4Q_RAXSVwfsSvzCdjlT_RS0m5NFl8kl8LJJU9r3-fgCWOoTDOSi-RxhyJuo_iXj6haBfbX32LaGqcEODFlbRUf3XPwUE2ic6iZzYcjBddVBYwb8snJWLwxmNxDLETRbIhdVkw6KtZJ3neNRpTc2xF7Lw8EAsvdBSLzNaXpyYk2i5VBkNfZjyogFaGOm0qx3T3mCm68i4W72cs9dDIrm9igbhwQGVrCYP5LuwwulvDAzWHxp6K-Gck6uhA HTTP/1.1
Host: wix-engage-visitors-prod-23.firebaseio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://engage.wixapps.net
Connection: keep-alive
Referer: https://engage.wixapps.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 26 Oct 2022 15:15:14 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 4
Connection: keep-alive
Access-Control-Allow-Origin: https://engage.wixapps.net
Cache-Control: no-cache
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
en.kabaun.com/_partials/wix-thunderbolt/dist/clientWorker.32da5f18.bundle.min.js
199.15.163.128200 OK 0 B URL HTTP/2 en.kabaun.com/_partials/wix-thunderbolt/dist/clientWorker.32da5f18.bundle.min.js
IP 199.15.163.128:0
Analyzer Verdict Alert fortinet Malware
GET /_partials/wix-thunderbolt/dist/clientWorker.32da5f18.bundle.min.js HTTP/1.1
Host: en.kabaun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://en.kabaun.com/
Cookie: ssr-caching=cache#desc=hit#varnish=hit#dc#desc=uw2-pub-1; XSRF-TOKEN=1666797306|clN2az2zi0kN; TS01e85bed=01d72e6d161fd172f6a444b1b7f0d394c397c186227c2ac5dc03ba5ee1ec408b4ba4f5a2af26420cc089afb5c7eb39307a329df522; TS01f4356e=01d72e6d161fd172f6a444b1b7f0d394c397c186227c2ac5dc03ba5ee1ec408b4ba4f5a2af26420cc089afb5c7eb39307a329df522
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 15:15:07 GMT
content-type: application/javascript
x-amz-replication-status: COMPLETED
x-amz-version-id: 9SKjGeAA9q5F6iz2wqkqyg6eZb1HuPDB
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
x-varnish: 421965269
x-cache-status: MISS
x-seen-by: wmgbEcS9zOENaefw7bU4YW8SH3gLjNZZjVt64yZ/SqY=,GilIRCy+Ky2nI9KZaDKzWLxkNjrXdwdgtu6E0yACibU=,GXNXSWFXisshliUcwO20Naon851uhK6HRsxREnrEO9asn5WjbOcu3V3y9B6sMFtNmuOkfcTSJaUOHlD2KQbqrA==,m0j2EEknGIVUW/liY8BLLrS/q53T25jsaPnfPkSVOt8m++C2XkuTvnlRFg2XiSDL,zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjEM4kaaS6QH/itsJwI9pla,aVxMblM8KFG3we5NLvyVc1AtKGBpHBVRBa1WzqM3DuAfbJaKSXYQ/lskq2jK6SGP,2iuX5LYwvZa9CoGaG8ZUZomYmPgSwc4aU7J40H7VRopiS/5dZqOxSsDvwHAW5wi4
x-wix-request-id: 1666797307.522132880406875846
via: 1.1 varnish (Varnish/6.0), 1.1 google
cache-control: public, max-age=7776000, immutable
age: 561108
last-modified: Wed, 19 Oct 2022 19:05:54 GMT
etag: W/"8d6c4dbde4917a2e3204a48646d7a690"
x-content-type-options: nosniff
content-encoding: br
server: Pepyaka/1.19.10
X-Firefox-Spdy: h2
en.kabaun.com/_api/v2/dynamicmodel
199.15.163.128200 OK 0 B URL HTTP/2 en.kabaun.com/_api/v2/dynamicmodel
IP 199.15.163.128:0
Analyzer Verdict Alert fortinet Malware
GET /_api/v2/dynamicmodel HTTP/1.1
Host: en.kabaun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en.kabaun.com/
Connection: keep-alive
Cookie: ssr-caching=cache#desc=hit#varnish=hit#dc#desc=uw2-pub-1; XSRF-TOKEN=1666797306|clN2az2zi0kN; TS01e85bed=01d72e6d161fd172f6a444b1b7f0d394c397c186227c2ac5dc03ba5ee1ec408b4ba4f5a2af26420cc089afb5c7eb39307a329df522; TS01f4356e=01d72e6d161fd172f6a444b1b7f0d394c397c186227c2ac5dc03ba5ee1ec408b4ba4f5a2af26420cc089afb5c7eb39307a329df522
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 15:15:07 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
strict-transport-security: max-age=3600
age: 49320
server-timing: cache;desc=hit, varnish;desc=hit, dc;desc=uw2-pub-1
x-seen-by: wmgbEcS9zOENaefw7bU4YW8SH3gLjNZZjVt64yZ/SqY=,yI4PPEXc3bvXNWfpzSkUarxkNjrXdwdgtu6E0yACibU=,GXNXSWFXisshliUcwO20Naon851uhK6HRsxREnrEO9asn5WjbOcu3V3y9B6sMFtNmuOkfcTSJaUOHlD2KQbqrA==,m0j2EEknGIVUW/liY8BLLrKlzeGrau08OveYR7mXfKcG/hKs8AeY1T4OIbgnD+yx,2d58ifebGbosy5xc+FRalo91ZUZxH7Yx6x991TmzGg5b6qa23/wHYNU3RbyQSd+OOQfqtgK2vpaLaPefBfvJRg==,2UNV7KOq4oGjA5+PKsX47Fr4Rwv2r8GiaFxT+Rq22JoR2rxCTgaJ7/K2Kx9jhAfC
cache-control: no-cache, no-store
vary: Accept-Encoding
x-wix-request-id: 1666797307.4821328921643218335
set-cookie: hs=1526906975; Path=/; Domain=en.kabaun.com; HTTPOnly
svSession=27ac5832f0448a3e331aeb389b44d1696a362261c133812714cd8c0dce4ed9f5b5cdf1b642fb9f456cba8f26c51f133b1e60994d53964e647acf431e4f798bcdb175dbe77a841d9bfc15d7fa72fcd7ebc06c4222be73b637f3e23677a07c942b049e85b0787661a04f601504dc8a53b05a114690d376446580719547752135c18778c4c6c7c536181b4c6d9b65c31eb3; Max-Age=63158399; Expires=Sat, 26 Oct 2024 15:15:06 GMT; Path=/; Domain=en.kabaun.com; Secure; HTTPOnly; SameSite=None
TS01e85bed=01d72e6d161fd172f6a444b1b7f0d394c397c186227c2ac5dc03ba5ee1ec408b4ba4f5a2af26420cc089afb5c7eb39307a329df522; Path=/; SameSite=none; Secure
TS01f4356e=01d72e6d161fd172f6a444b1b7f0d394c397c186227c2ac5dc03ba5ee1ec408b4ba4f5a2af26420cc089afb5c7eb39307a329df522; path=/; domain=en.kabaun.com; SameSite=none; Secure
x-content-type-options: nosniff
content-encoding: br
server: Pepyaka/1.19.10
X-Firefox-Spdy: h2