kinepal.com

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 25 Oct 2021 04:38:33 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://kinepal.com/
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubdomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubdomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubdomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubdomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubdomains

HTTP/2 200 
server: nginx
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: no-cache, private
date: Mon, 25 Oct 2021 04:38:34 GMT
set-cookie: XSRF-TOKEN=eyJpdiI6IjhHWURPelNCZHU5NFlHb3ozamdIMHc9PSIsInZhbHVlIjoiZG9WaU9SS1FwQ28wdjVFaXJjQW1xT0I4K2doXC9TYnpvV1hBcFwvcEJzMnBJUEZMMDJVT1VrM3E5WWIrUlZOdndrIiwibWFjIjoiMjFlYmY5ZWMyYzI0MmQyZTM3MmYyMzIxZDlmMDczMTdkMzViMzRjNWE1MDJmYzA3MTkxNjQ4OWI0N2ExYzJlYSJ9; expires=Mon, 25-Oct-2021 06:38:34 GMT; Max-Age=7200; path=/
set-cookie: laravel_session=eyJpdiI6IjRXMkt4QlV1b1wvbVplaktKZGU1bkFRPT0iLCJ2YWx1ZSI6Ik4xN2Z5bWlcL05SbEJaYVc3cTBiRTlyWHdJVXFIdHJlSXNmTCtEWXNvakFpNjlFK0JTaEM0ZWpzeHJTcjhoREt3IiwibWFjIjoiNjg2YjZjNmRhMTE5YjM2ZTlmNTZhMTlkYzFhZDA3OTU1ODcwZGIzYWU4Y2IxY2Q2N2E0MTA1YWZlYTEzMGI2ZCJ9; expires=Mon, 25-Oct-2021 06:38:34 GMT; Max-Age=7200; path=/; httponly
strict-transport-security: max-age=31536000; includeSubdomains
strict-transport-security: max-age=63072000; 
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1;  mode=block
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src https: data: 'self' 'unsafe-inline' 'unsafe-eval';
feature-policy: fullscreen 'self'
x-permitted-cross-domain-policies: none