r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14597
Expires: Fri, 02 Dec 2022 08:25:55 GMT
Date: Fri, 02 Dec 2022 04:22:38 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 0c748388899e8a8d3680355da2ea5020
903c620cd137613daafb0da0508c37b2f4a67212
39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1242
Cache-Control: max-age=109756
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:22:38 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 10:51:54 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9067
Expires: Fri, 02 Dec 2022 06:53:45 GMT
Date: Fri, 02 Dec 2022 04:22:38 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 04:18:11 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 267
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 9SMqK6DB4xTkq4UEa2FdhPhHmUKGTbHIho58DhKgnOn0eQLg93EBoKG3KJomUieMl5yccedbgkA=
x-amz-request-id: BASM3M0K21NCVT7Z
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 03:45:57 GMT
age: 2201
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 04:22:38 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 04:11:15 GMT
cache-control: public,max-age=3600
age: 684
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1f88399f3fdd89dbb9ca1229cb67143a
325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3
831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1237
Cache-Control: max-age=104687
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:22:39 GMT
Etag: "63886ea9-1d7"
Expires: Sat, 03 Dec 2022 09:27:26 GMT
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: YiiaMDVVBwHbY8h9yvDZow==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 4niQdvCveC7OIbUOfaPKVRvS9Uo=
kaysgf.com/
200 OK 16 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (10200), with CRLF, LF line terminators
Hash 8e1937fb9655212c78a3f590ec80bdbc
87fae28876d90cfebedaf6423b8310130283c941
a676f236776a122c2efc7dbfde3e6dd1db40cc04c1e03094d19e8c3396ef620a
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: kaysgf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 04:22:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
X-nginx-cache: WordPress
Last-Modified: Fri, 02 Dec 2022 04:22:39 GMT
Set-Cookie: PHPSESSID=30366849da97797956091ab50aff11db; path=/
__cf_bm=yq.MTcD8ferrQANNypfxfjaTq.66nIh311SrWDhzSnM-1669954959-0-ATyx+hhD7kYlUrKr0BWpzmesFX0mVI9Gzndjkiy2FBAn9OhdFRpz4jp82DElZNPG+S3a2RqK7iTeHCQdyJqocM8ZgtmFrMEdol21OPI3dDqZ; path=/; expires=Fri, 02-Dec-22 04:52:39 GMT; domain=.clickfunnels.com; HttpOnly; Secure
CF-Cache-Status: MISS
Server: cloudflare
CF-RAY: 7731485b2e4f0b69-OSL
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 279 B IP
Hash 807b5e46dc50c29000263e4c50b3bef6
92f30964e142b0b5fd97624b63504c297489109e
eaf82c63aa1b16f21a3b0dbb3edcd20b490bba063a25a63a1b850c6b9ece9db2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1124
Cache-Control: max-age=95924
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:22:40 GMT
Etag: "63884ce1-117"
Expires: Sat, 03 Dec 2022 07:01:24 GMT
Last-Modified: Thu, 01 Dec 2022 06:42:41 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash aff15ad9f37f82e3e8971e79b9159670
e9414ce7af5599213ab3f50af0b3bc07d2c6c04b
716600b6453c753227ffde5d9ceaf03b0f043002665cfcae45b68d0322947139
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1056
Cache-Control: max-age=115307
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:22:40 GMT
Etag: "638898db-117"
Expires: Sat, 03 Dec 2022 12:24:27 GMT
Last-Modified: Thu, 01 Dec 2022 12:06:51 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash aff15ad9f37f82e3e8971e79b9159670
e9414ce7af5599213ab3f50af0b3bc07d2c6c04b
716600b6453c753227ffde5d9ceaf03b0f043002665cfcae45b68d0322947139
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1091
Cache-Control: max-age=115341
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:22:40 GMT
Etag: "638898db-117"
Expires: Sat, 03 Dec 2022 12:25:01 GMT
Last-Modified: Thu, 01 Dec 2022 12:06:51 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 05917f7542a781275c12d43562be1507
1ea730e7e2b5a84fb0341ef9a64b141a4dd469b3
2f24492a077b583bd9dfe049c16c60b219d950712879f187ff2160214df9bd0e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:22:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 280 B IP
Hash 7bf4b9b508aa40f5d519add7f235f128
c10deab72baf7be9b90e40aa8585ee1e2438612a
2ccf0bb265836b9e6b20b57be61d660e60402d747a82ee9a80961ab5df063bd0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 897
Cache-Control: max-age=110454
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:22:40 GMT
Etag: "63888685-118"
Expires: Sat, 03 Dec 2022 11:03:34 GMT
Last-Modified: Thu, 01 Dec 2022 10:48:37 GMT
Server: ECS (amb/6BC6)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash 7bf4b9b508aa40f5d519add7f235f128
c10deab72baf7be9b90e40aa8585ee1e2438612a
2ccf0bb265836b9e6b20b57be61d660e60402d747a82ee9a80961ab5df063bd0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 897
Cache-Control: max-age=110454
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:22:40 GMT
Etag: "63888685-118"
Expires: Sat, 03 Dec 2022 11:03:34 GMT
Last-Modified: Thu, 01 Dec 2022 10:48:37 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash 7bf4b9b508aa40f5d519add7f235f128
c10deab72baf7be9b90e40aa8585ee1e2438612a
2ccf0bb265836b9e6b20b57be61d660e60402d747a82ee9a80961ab5df063bd0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4739
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:22:40 GMT
Etag: "63888685-118"
Last-Modified: Fri, 02 Dec 2022 03:03:41 GMT
Server: ECS (amb/6BAD)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash 7bf4b9b508aa40f5d519add7f235f128
c10deab72baf7be9b90e40aa8585ee1e2438612a
2ccf0bb265836b9e6b20b57be61d660e60402d747a82ee9a80961ab5df063bd0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4477
Cache-Control: max-age=114033
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:22:40 GMT
Etag: "63888685-118"
Expires: Sat, 03 Dec 2022 12:03:13 GMT
Last-Modified: Thu, 01 Dec 2022 10:48:37 GMT
Server: ECS (amb/6B9A)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash 7bf4b9b508aa40f5d519add7f235f128
c10deab72baf7be9b90e40aa8585ee1e2438612a
2ccf0bb265836b9e6b20b57be61d660e60402d747a82ee9a80961ab5df063bd0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:22:40 GMT
Etag: "63888685-118"
Server: ECS (amb/6B7A)
Content-Length: 280
images.clickfunnels.com/3d/392630953c4119a324492bb1c05778/ClickfunnelsTag.png
200 OK 5.3 kB URL HTTP/2 images.clickfunnels.com/3d/392630953c4119a324492bb1c05778/ClickfunnelsTag.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash d99a10ef5010513b3d30f7cf51614b5f
d60c1da11f05540f39632c7357c22b76c9ee1ed7
5dfa88a4dc8b6c0b834a62e45daee28a8dc37ed6ae7eb1545e4ed8b6382c0474
GET /3d/392630953c4119a324492bb1c05778/ClickfunnelsTag.png HTTP/1.1
Host: images.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kaysgf.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:22:40 GMT
content-type: image/webp
content-length: 5276
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=9030
content-disposition: inline; filename="ClickfunnelsTag.webp"
etag: "a633777156a5ffeb58c92d3d59fa4e34"
last-modified: Fri, 03 Jan 2020 17:41:49 GMT
vary: Accept
x-amz-id-2: mpfiofoz3/g51l0X59TmfRciwp2R2+klwKzL5vkyJWZPbOjzCzwQzX2/BNhT36HmjMtaLHBKOlM=
x-amz-request-id: 8H4XD9AS9YGT4H71
cf-cache-status: HIT
age: 4309
expires: Mon, 26 Dec 2022 04:22:40 GMT
cache-control: public, max-age=2073600
accept-ranges: bytes
set-cookie: __cf_bm=emQAUv2WyssbF_PD45dWt61if4HZijxk4xwKVbi0bCA-1669954960-0-AR7oEZ7KhynbtQKCEPnVGJTQHkHB6HkhklMXdQEVMTZNfg57lDZFTFJz4XAQoogl/fyRtWjrPMw4UvvN4T+/qJSoebv9ofj6YGCi6sR0DAcO; path=/; expires=Fri, 02-Dec-22 04:52:40 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 773148651970b51d-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3519a58310eefa01756f0440e2acd7dd
50153382830684a6abb653dc7b4e41d7c7e386b5
5f321e771fa62d9f794339006752655316cdb6e8d69bc23e1d0e3c8bc526f12e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:22:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash aff15ad9f37f82e3e8971e79b9159670
e9414ce7af5599213ab3f50af0b3bc07d2c6c04b
716600b6453c753227ffde5d9ceaf03b0f043002665cfcae45b68d0322947139
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1111
Cache-Control: max-age=115362
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:22:40 GMT
Etag: "638898db-117"
Expires: Sat, 03 Dec 2022 12:25:22 GMT
Last-Modified: Thu, 01 Dec 2022 12:06:51 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279
app.clickfunnels.com/cf.js
301 Moved Permanently 6.5 kB URL HTTP/2 app.clickfunnels.com/cf.js
IP
Hash 10a5724640ed4e4b19e4197e48c966b5
46550e6b9c9018af40c2b55709182b2e9ba77fa3
ba4fee8de8a488d7e12a758914568f7375b8cbd797854212548ee49d395be28d
GET /cf.js HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kaysgf.com/
Cookie: __cf_bm=K9Dg7o9j0C0rec10lcjdIuxtZWoReO4Sdr6iHrTLn_U-1669954960-0-AaWP4k6ztX7A7viQ7jHTRg2rz99/tBgiya4aOoTnbXHJKpDTTu6TnsJRDKgOSy33lTCQ1duGSminOI7txq4UMTFEDiD1l9553m6aBuC2fQuC
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Fri, 02 Dec 2022 04:22:40 GMT
content-type: text/html
location: https://www.clickfunnels.com/cf.js
cf-ray: 77314868db40b51d-OSL
access-control-allow-origin: *
age: 1037
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13190
Expires: Fri, 02 Dec 2022 08:02:30 GMT
Date: Fri, 02 Dec 2022 04:22:40 GMT
Connection: keep-alive
static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
200 OK 6.7 kB URL HTTP/2 static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
IP
Hash 586bf5a6382f78b4b9b18c547649ef65
7c68f53b0743f3732ffe4461c5abbc4525108c2a
cac1a8cf974d6be6c8179b2b2c2188ae6aa61d4c75a0ca560cbe5bd52add0d39
GET /beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://kaysgf.com
Connection: keep-alive
Referer: http://kaysgf.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:22:40 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2022.10.1
last-modified: Fri, 21 Oct 2022 01:56:09 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 773148648a770b31-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13190
Expires: Fri, 02 Dec 2022 08:02:30 GMT
Date: Fri, 02 Dec 2022 04:22:40 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F321bfec8-0690-49d3-ba43-a2899f137b6b.jpeg
200 OK 1.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F321bfec8-0690-49d3-ba43-a2899f137b6b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 367a113e3826442861c63ba501d2d67d
764f6910ecc1ee436a70aa83f5bd363c2e500341
5e5cc53aba99e68211c86a2fd83ac4a023d1c82875d60a09d52875ef129cbb71
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F321bfec8-0690-49d3-ba43-a2899f137b6b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 1654
x-amzn-requestid: 537d523f-a3fb-4514-bda5-ecc834c1ed39
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGgBEFNIAMFTjw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891dff-0c12ccea20e953c236ca2b1b;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: IXNpFJsiqPvrg8f-op2tcIVW2qoV7ZPm12wsTTXfYu0369N4Csy8BA==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:34:56 GMT
age: 24464
etag: "764f6910ecc1ee436a70aa83f5bd363c2e500341"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe82fdd03-be1f-4def-adb8-61eefd79def6.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe82fdd03-be1f-4def-adb8-61eefd79def6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6e65083422468e512aa73eb68f20b2ec
73884daab5e71e4917637b3679c0bb5a1f0447de
f0d97bb9e3f01bbdbe91ba1f9b6ea0f649c66192383c51fe5c7ca9ac2a38ebdb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe82fdd03-be1f-4def-adb8-61eefd79def6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9719
x-amzn-requestid: c4ba3502-e191-40fa-8ae0-71dc6f733db4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPjhHE8woAMFyKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382e606-70ab0e5523c91e5420efec78;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 04:22:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oBn917CDV6DjSs9TAL2iBU0Rn8_f8ny1rAVXrbI9KML2P7pxusbdjA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 03:43:52 GMT
age: 2328
etag: "73884daab5e71e4917637b3679c0bb5a1f0447de"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
200 OK 2.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b47431190f34eccf0a6efb98e2a32b7d
9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fw6nrporwF27NW0-vXpaolW79nDXLF2RyS-lqhhp1osHt7q98VpI3g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:49:56 GMT
age: 23564
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb8ec880-52b8-4350-bb47-d051878e78f1.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb8ec880-52b8-4350-bb47-d051878e78f1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 25c68d8b1fae82820f93efca500fd848
45cf5e1a54ee491497ffe08a8e39fe97ba3c8a48
f0ec6b6f6ba0a931c9b71f5bc7ad1e5b89c8e4d8b7441f35eeebfba418d0e588
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb8ec880-52b8-4350-bb47-d051878e78f1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6882
x-amzn-requestid: 6b5f15a5-c15b-46bf-9fd5-5d013d37a0eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGfrG3WIAMFc9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891dfd-6038ca700dfb4489230c2683;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2O6x-8-ESFDtlhcjVyGxEXCZcLbbfhsCVQeX02lbNMupPWmM-fKuLA==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:34:54 GMT
age: 24466
etag: "45cf5e1a54ee491497ffe08a8e39fe97ba3c8a48"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F474ccac4-fb8f-4a01-8195-4840a857fbe7.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F474ccac4-fb8f-4a01-8195-4840a857fbe7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 65bcc96d51cd1a45dd61a4dddef0b529
5ebd592fe35d0479855700baf8525a621d2eec2e
11bfdb9b2f9730e35596e636b0f75e819a70edef0488e671ac82d1bf53e56868
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F474ccac4-fb8f-4a01-8195-4840a857fbe7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8159
x-amzn-requestid: ed2fb67a-2113-4240-978e-e7c978a3ca3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGgVH1KIAMFjOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e01-0c4966b87f844ec3624e9dae;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ilP6IS-DUqN7rKZB9m8EX900E5Edscm8DkK0SMKPkJqvyCJ7M1kZoA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:34:58 GMT
age: 24462
etag: "5ebd592fe35d0479855700baf8525a621d2eec2e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07af64d-c287-4b0a-9677-9a1000422afc.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07af64d-c287-4b0a-9677-9a1000422afc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 498ab4412ed5cf977bc23e4e870894b0
23753fe8af09ec8ffa10eed4d201a71833885c99
036042656f15e42b4d1537c45f5b8e7190c70305fa9a69c1287c6739ad0b7122
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07af64d-c287-4b0a-9677-9a1000422afc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7334
x-amzn-requestid: a6b8b420-8394-496b-8be8-26dee52e3887
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoHJOoAMF75g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-0b38d07f518c8b3134457df2;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: tuKmV_nb4HVbqkhtCnZY3b33VB-bB6UxaBl6HsY_JgWesbUB8SPt-g==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 22:09:38 GMT
age: 22382
etag: "23753fe8af09ec8ffa10eed4d201a71833885c99"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
app.clickfunnels.com/userevents/?funnel_id=Si9OdGVkanVvbU9ZU0RwaWNpamZhUT09LS00bC91N0xJaCtybk04Skt6MXJSVlFnPT0%3D--d7f95152a4af02114a043545b2672af71f6b3c56&page_id=T3g1R2FFQUdUUkQ0bGNLV0RBb2hxdz09LS1CeU5zY3g2ZVpHT1crTDFLWHM3SnJRPT0%3D--9932ca849fe70f85de2cf2c2f135be7cef225e31&funnel_step_id=dDFIbmJZR2hzL1pLWGQ0bzNpYVl0dz09LS0rcFZZVkRqWlBxTE5UOFdyVjNZc2ZBPT0%3D--b6b88f2c02e776176cd9d71be84aa2da21ec0344&user_id=b213K3kyZnE3Zmd3SnovSjJvRXRDQT09LS1WZnMvUDlZTWwzREw4UXRsTmxpekJnPT0%3D--241a8ad1394a8f8a8a32dcede407d9a962bce5ad&account_id=dFhaeThidVZOZ0I5NDNjQ1RuNG80UT09LS0wTGZVOElLd0hKdVFXOGFNNEJYMWJnPT0%3D--8aa4f05cf4f201c61caa0d70315429fbbfeeed35&page_code=NTcwMTIwMDU%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::PageviewsCreatedSummary&nonce=07503b37-85f4-4ee7-900f-23b7014e6541&url=http%3A%2F%2Fkaysgf.com%2F
301 Moved Permanently 1.4 kB URL HTTP/1.1 app.clickfunnels.com/userevents/?funnel_id=Si9OdGVkanVvbU9ZU0RwaWNpamZhUT09LS00bC91N0xJaCtybk04Skt6MXJSVlFnPT0%3D--d7f95152a4af02114a043545b2672af71f6b3c56&page_id=T3g1R2FFQUdUUkQ0bGNLV0RBb2hxdz09LS1CeU5zY3g2ZVpHT1crTDFLWHM3SnJRPT0%3D--9932ca849fe70f85de2cf2c2f135be7cef225e31&funnel_step_id=dDFIbmJZR2hzL1pLWGQ0bzNpYVl0dz09LS0rcFZZVkRqWlBxTE5UOFdyVjNZc2ZBPT0%3D--b6b88f2c02e776176cd9d71be84aa2da21ec0344&user_id=b213K3kyZnE3Zmd3SnovSjJvRXRDQT09LS1WZnMvUDlZTWwzREw4UXRsTmxpekJnPT0%3D--241a8ad1394a8f8a8a32dcede407d9a962bce5ad&account_id=dFhaeThidVZOZ0I5NDNjQ1RuNG80UT09LS0wTGZVOElLd0hKdVFXOGFNNEJYMWJnPT0%3D--8aa4f05cf4f201c61caa0d70315429fbbfeeed35&page_code=NTcwMTIwMDU%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::PageviewsCreatedSummary&nonce=07503b37-85f4-4ee7-900f-23b7014e6541&url=http%3A%2F%2Fkaysgf.com%2F
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1418)
Hash 960976ccb2e1efc6adac6dff8f159c79
10ae30ce96422bc90f605888d10e27818fd8cd69
fa7f3391b63049b6902ec6de9974ec8ba509f59fddd9fb657f5a99f0ec0a2901
GET /userevents/?funnel_id=Si9OdGVkanVvbU9ZU0RwaWNpamZhUT09LS00bC91N0xJaCtybk04Skt6MXJSVlFnPT0%3D--d7f95152a4af02114a043545b2672af71f6b3c56&page_id=T3g1R2FFQUdUUkQ0bGNLV0RBb2hxdz09LS1CeU5zY3g2ZVpHT1crTDFLWHM3SnJRPT0%3D--9932ca849fe70f85de2cf2c2f135be7cef225e31&funnel_step_id=dDFIbmJZR2hzL1pLWGQ0bzNpYVl0dz09LS0rcFZZVkRqWlBxTE5UOFdyVjNZc2ZBPT0%3D--b6b88f2c02e776176cd9d71be84aa2da21ec0344&user_id=b213K3kyZnE3Zmd3SnovSjJvRXRDQT09LS1WZnMvUDlZTWwzREw4UXRsTmxpekJnPT0%3D--241a8ad1394a8f8a8a32dcede407d9a962bce5ad&account_id=dFhaeThidVZOZ0I5NDNjQ1RuNG80UT09LS0wTGZVOElLd0hKdVFXOGFNNEJYMWJnPT0%3D--8aa4f05cf4f201c61caa0d70315429fbbfeeed35&page_code=NTcwMTIwMDU%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::PageviewsCreatedSummary&nonce=07503b37-85f4-4ee7-900f-23b7014e6541&url=http%3A%2F%2Fkaysgf.com%2F HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://kaysgf.com
Connection: keep-alive
Referer: http://kaysgf.com/
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Dec 2022 04:22:40 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://app.clickfunnels.com/userevents?funnel_id=Si9OdGVkanVvbU9ZU0RwaWNpamZhUT09LS00bC91N0xJaCtybk04Skt6MXJSVlFnPT0%3D--d7f95152a4af02114a043545b2672af71f6b3c56&page_id=T3g1R2FFQUdUUkQ0bGNLV0RBb2hxdz09LS1CeU5zY3g2ZVpHT1crTDFLWHM3SnJRPT0%3D--9932ca849fe70f85de2cf2c2f135be7cef225e31&funnel_step_id=dDFIbmJZR2hzL1pLWGQ0bzNpYVl0dz09LS0rcFZZVkRqWlBxTE5UOFdyVjNZc2ZBPT0%3D--b6b88f2c02e776176cd9d71be84aa2da21ec0344&user_id=b213K3kyZnE3Zmd3SnovSjJvRXRDQT09LS1WZnMvUDlZTWwzREw4UXRsTmxpekJnPT0%3D--241a8ad1394a8f8a8a32dcede407d9a962bce5ad&account_id=dFhaeThidVZOZ0I5NDNjQ1RuNG80UT09LS0wTGZVOElLd0hKdVFXOGFNNEJYMWJnPT0%3D--8aa4f05cf4f201c61caa0d70315429fbbfeeed35&page_code=NTcwMTIwMDU%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3APageviewsCreatedSummary&nonce=07503b37-85f4-4ee7-900f-23b7014e6541&url=http%3A%2F%2Fkaysgf.com%2F
CF-Ray: 773148690bf51bfa-OSL
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Vary: Accept-Encoding
CF-Cache-Status: MISS
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
Status: 301 Moved Permanently
X-Powered-By: Phusion Passenger Enterprise 6.0.7
X-Rack-Cache: miss
X-Request-Id: 83fda5bcaff92dbded23aa1d37d8b36c
X-Runtime: 0.012357
Set-Cookie: __cf_bm=6upe9RAmJvukHuu2VkkpcGvX0V.6Woxut7QehyDJEIY-1669954960-0-AZafN/e0ijeypZdZOyoW4hyfVTyDZPqEns9o6CRRofpZy5Byu7XbX+RiPOvspulKNGoRpDjpGpLNZFB3fBtAGPBwrNU0B1P7mRU07/eajQU8; path=/; expires=Fri, 02-Dec-22 04:52:40 GMT; domain=.clickfunnels.com; HttpOnly; SameSite=None
Server-Timing: cf-q-config;dur=7.0000005507609e-06
Server: cloudflare
alt-svc: h2=":443"; ma=60
app.clickfunnels.com/userevents/?funnel_id=Si9OdGVkanVvbU9ZU0RwaWNpamZhUT09LS00bC91N0xJaCtybk04Skt6MXJSVlFnPT0%3D--d7f95152a4af02114a043545b2672af71f6b3c56&page_id=T3g1R2FFQUdUUkQ0bGNLV0RBb2hxdz09LS1CeU5zY3g2ZVpHT1crTDFLWHM3SnJRPT0%3D--9932ca849fe70f85de2cf2c2f135be7cef225e31&funnel_step_id=dDFIbmJZR2hzL1pLWGQ0bzNpYVl0dz09LS0rcFZZVkRqWlBxTE5UOFdyVjNZc2ZBPT0%3D--b6b88f2c02e776176cd9d71be84aa2da21ec0344&user_id=b213K3kyZnE3Zmd3SnovSjJvRXRDQT09LS1WZnMvUDlZTWwzREw4UXRsTmxpekJnPT0%3D--241a8ad1394a8f8a8a32dcede407d9a962bce5ad&account_id=dFhaeThidVZOZ0I5NDNjQ1RuNG80UT09LS0wTGZVOElLd0hKdVFXOGFNNEJYMWJnPT0%3D--8aa4f05cf4f201c61caa0d70315429fbbfeeed35&page_code=NTcwMTIwMDU%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniqueVisitorsCreatedSummary&nonce=793fd01e-d632-460a-a80b-f46152e1e3d0&url=http%3A%2F%2Fkaysgf.com%2F
301 Moved Permanently 1.4 kB URL HTTP/1.1 app.clickfunnels.com/userevents/?funnel_id=Si9OdGVkanVvbU9ZU0RwaWNpamZhUT09LS00bC91N0xJaCtybk04Skt6MXJSVlFnPT0%3D--d7f95152a4af02114a043545b2672af71f6b3c56&page_id=T3g1R2FFQUdUUkQ0bGNLV0RBb2hxdz09LS1CeU5zY3g2ZVpHT1crTDFLWHM3SnJRPT0%3D--9932ca849fe70f85de2cf2c2f135be7cef225e31&funnel_step_id=dDFIbmJZR2hzL1pLWGQ0bzNpYVl0dz09LS0rcFZZVkRqWlBxTE5UOFdyVjNZc2ZBPT0%3D--b6b88f2c02e776176cd9d71be84aa2da21ec0344&user_id=b213K3kyZnE3Zmd3SnovSjJvRXRDQT09LS1WZnMvUDlZTWwzREw4UXRsTmxpekJnPT0%3D--241a8ad1394a8f8a8a32dcede407d9a962bce5ad&account_id=dFhaeThidVZOZ0I5NDNjQ1RuNG80UT09LS0wTGZVOElLd0hKdVFXOGFNNEJYMWJnPT0%3D--8aa4f05cf4f201c61caa0d70315429fbbfeeed35&page_code=NTcwMTIwMDU%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniqueVisitorsCreatedSummary&nonce=793fd01e-d632-460a-a80b-f46152e1e3d0&url=http%3A%2F%2Fkaysgf.com%2F
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1423)
Hash 54e5f1a171f8f5f164b77eb431d48d07
92158a7786c4bcec334a90c9bdacf13d95fa9cbd
53e4d2f41b25ce199d99aece4c2ef81ed55fdd692725468fb051c7639fe9d51a
GET /userevents/?funnel_id=Si9OdGVkanVvbU9ZU0RwaWNpamZhUT09LS00bC91N0xJaCtybk04Skt6MXJSVlFnPT0%3D--d7f95152a4af02114a043545b2672af71f6b3c56&page_id=T3g1R2FFQUdUUkQ0bGNLV0RBb2hxdz09LS1CeU5zY3g2ZVpHT1crTDFLWHM3SnJRPT0%3D--9932ca849fe70f85de2cf2c2f135be7cef225e31&funnel_step_id=dDFIbmJZR2hzL1pLWGQ0bzNpYVl0dz09LS0rcFZZVkRqWlBxTE5UOFdyVjNZc2ZBPT0%3D--b6b88f2c02e776176cd9d71be84aa2da21ec0344&user_id=b213K3kyZnE3Zmd3SnovSjJvRXRDQT09LS1WZnMvUDlZTWwzREw4UXRsTmxpekJnPT0%3D--241a8ad1394a8f8a8a32dcede407d9a962bce5ad&account_id=dFhaeThidVZOZ0I5NDNjQ1RuNG80UT09LS0wTGZVOElLd0hKdVFXOGFNNEJYMWJnPT0%3D--8aa4f05cf4f201c61caa0d70315429fbbfeeed35&page_code=NTcwMTIwMDU%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniqueVisitorsCreatedSummary&nonce=793fd01e-d632-460a-a80b-f46152e1e3d0&url=http%3A%2F%2Fkaysgf.com%2F HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://kaysgf.com
Connection: keep-alive
Referer: http://kaysgf.com/
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Dec 2022 04:22:40 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://app.clickfunnels.com/userevents?funnel_id=Si9OdGVkanVvbU9ZU0RwaWNpamZhUT09LS00bC91N0xJaCtybk04Skt6MXJSVlFnPT0%3D--d7f95152a4af02114a043545b2672af71f6b3c56&page_id=T3g1R2FFQUdUUkQ0bGNLV0RBb2hxdz09LS1CeU5zY3g2ZVpHT1crTDFLWHM3SnJRPT0%3D--9932ca849fe70f85de2cf2c2f135be7cef225e31&funnel_step_id=dDFIbmJZR2hzL1pLWGQ0bzNpYVl0dz09LS0rcFZZVkRqWlBxTE5UOFdyVjNZc2ZBPT0%3D--b6b88f2c02e776176cd9d71be84aa2da21ec0344&user_id=b213K3kyZnE3Zmd3SnovSjJvRXRDQT09LS1WZnMvUDlZTWwzREw4UXRsTmxpekJnPT0%3D--241a8ad1394a8f8a8a32dcede407d9a962bce5ad&account_id=dFhaeThidVZOZ0I5NDNjQ1RuNG80UT09LS0wTGZVOElLd0hKdVFXOGFNNEJYMWJnPT0%3D--8aa4f05cf4f201c61caa0d70315429fbbfeeed35&page_code=NTcwMTIwMDU%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniqueVisitorsCreatedSummary&nonce=793fd01e-d632-460a-a80b-f46152e1e3d0&url=http%3A%2F%2Fkaysgf.com%2F
CF-Ray: 773148690bd4b51b-OSL
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Vary: Accept-Encoding
CF-Cache-Status: MISS
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
Status: 301 Moved Permanently
X-Powered-By: Phusion Passenger Enterprise 6.0.7
X-Rack-Cache: miss
X-Request-Id: ce95ecd70c345be3bb32da42dbde0d61
X-Runtime: 0.008059
Set-Cookie: __cf_bm=pc_df6HHwWyAxaAGb8AFOOG02CJsbnIlFzsmdmTrIQk-1669954960-0-AWPx84YfqFWxQAyUb3T9Cw0esTt43Qe1iZ4+t5cs+i70Wkyxpf7/q6loizEMn0ZlBAYviehwU6TH6K8CQq6UtI149AO950SEzRkevrv4hI7P; path=/; expires=Fri, 02-Dec-22 04:52:40 GMT; domain=.clickfunnels.com; HttpOnly; SameSite=None
Server-Timing: cf-q-config;dur=4.9999999873762e-06
Server: cloudflare
alt-svc: h2=":443"; ma=60
app.clickfunnels.com/userevents/?funnel_id=Si9OdGVkanVvbU9ZU0RwaWNpamZhUT09LS00bC91N0xJaCtybk04Skt6MXJSVlFnPT0%3D--d7f95152a4af02114a043545b2672af71f6b3c56&page_id=T3g1R2FFQUdUUkQ0bGNLV0RBb2hxdz09LS1CeU5zY3g2ZVpHT1crTDFLWHM3SnJRPT0%3D--9932ca849fe70f85de2cf2c2f135be7cef225e31&funnel_step_id=dDFIbmJZR2hzL1pLWGQ0bzNpYVl0dz09LS0rcFZZVkRqWlBxTE5UOFdyVjNZc2ZBPT0%3D--b6b88f2c02e776176cd9d71be84aa2da21ec0344&user_id=b213K3kyZnE3Zmd3SnovSjJvRXRDQT09LS1WZnMvUDlZTWwzREw4UXRsTmxpekJnPT0%3D--241a8ad1394a8f8a8a32dcede407d9a962bce5ad&account_id=dFhaeThidVZOZ0I5NDNjQ1RuNG80UT09LS0wTGZVOElLd0hKdVFXOGFNNEJYMWJnPT0%3D--8aa4f05cf4f201c61caa0d70315429fbbfeeed35&page_code=NTcwMTIwMDU%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniquePageviewsCreatedSummary&nonce=10cdc25f-e81d-4644-bb03-1a0bec7b7403&url=http%3A%2F%2Fkaysgf.com%2F
301 Moved Permanently 1.4 kB URL HTTP/1.1 app.clickfunnels.com/userevents/?funnel_id=Si9OdGVkanVvbU9ZU0RwaWNpamZhUT09LS00bC91N0xJaCtybk04Skt6MXJSVlFnPT0%3D--d7f95152a4af02114a043545b2672af71f6b3c56&page_id=T3g1R2FFQUdUUkQ0bGNLV0RBb2hxdz09LS1CeU5zY3g2ZVpHT1crTDFLWHM3SnJRPT0%3D--9932ca849fe70f85de2cf2c2f135be7cef225e31&funnel_step_id=dDFIbmJZR2hzL1pLWGQ0bzNpYVl0dz09LS0rcFZZVkRqWlBxTE5UOFdyVjNZc2ZBPT0%3D--b6b88f2c02e776176cd9d71be84aa2da21ec0344&user_id=b213K3kyZnE3Zmd3SnovSjJvRXRDQT09LS1WZnMvUDlZTWwzREw4UXRsTmxpekJnPT0%3D--241a8ad1394a8f8a8a32dcede407d9a962bce5ad&account_id=dFhaeThidVZOZ0I5NDNjQ1RuNG80UT09LS0wTGZVOElLd0hKdVFXOGFNNEJYMWJnPT0%3D--8aa4f05cf4f201c61caa0d70315429fbbfeeed35&page_code=NTcwMTIwMDU%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniquePageviewsCreatedSummary&nonce=10cdc25f-e81d-4644-bb03-1a0bec7b7403&url=http%3A%2F%2Fkaysgf.com%2F
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1424)
Hash 4ad7b1acdcc96b0d445459685f6b2bfb
d23e91a59559066ce45a57b79a700555ce427edf
11b1a0231068ca5496f608ef5187fac51a440ec4e7b90aecd9906fb4163ba694
GET /userevents/?funnel_id=Si9OdGVkanVvbU9ZU0RwaWNpamZhUT09LS00bC91N0xJaCtybk04Skt6MXJSVlFnPT0%3D--d7f95152a4af02114a043545b2672af71f6b3c56&page_id=T3g1R2FFQUdUUkQ0bGNLV0RBb2hxdz09LS1CeU5zY3g2ZVpHT1crTDFLWHM3SnJRPT0%3D--9932ca849fe70f85de2cf2c2f135be7cef225e31&funnel_step_id=dDFIbmJZR2hzL1pLWGQ0bzNpYVl0dz09LS0rcFZZVkRqWlBxTE5UOFdyVjNZc2ZBPT0%3D--b6b88f2c02e776176cd9d71be84aa2da21ec0344&user_id=b213K3kyZnE3Zmd3SnovSjJvRXRDQT09LS1WZnMvUDlZTWwzREw4UXRsTmxpekJnPT0%3D--241a8ad1394a8f8a8a32dcede407d9a962bce5ad&account_id=dFhaeThidVZOZ0I5NDNjQ1RuNG80UT09LS0wTGZVOElLd0hKdVFXOGFNNEJYMWJnPT0%3D--8aa4f05cf4f201c61caa0d70315429fbbfeeed35&page_code=NTcwMTIwMDU%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniquePageviewsCreatedSummary&nonce=10cdc25f-e81d-4644-bb03-1a0bec7b7403&url=http%3A%2F%2Fkaysgf.com%2F HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://kaysgf.com
Connection: keep-alive
Referer: http://kaysgf.com/
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Dec 2022 04:22:40 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://app.clickfunnels.com/userevents?funnel_id=Si9OdGVkanVvbU9ZU0RwaWNpamZhUT09LS00bC91N0xJaCtybk04Skt6MXJSVlFnPT0%3D--d7f95152a4af02114a043545b2672af71f6b3c56&page_id=T3g1R2FFQUdUUkQ0bGNLV0RBb2hxdz09LS1CeU5zY3g2ZVpHT1crTDFLWHM3SnJRPT0%3D--9932ca849fe70f85de2cf2c2f135be7cef225e31&funnel_step_id=dDFIbmJZR2hzL1pLWGQ0bzNpYVl0dz09LS0rcFZZVkRqWlBxTE5UOFdyVjNZc2ZBPT0%3D--b6b88f2c02e776176cd9d71be84aa2da21ec0344&user_id=b213K3kyZnE3Zmd3SnovSjJvRXRDQT09LS1WZnMvUDlZTWwzREw4UXRsTmxpekJnPT0%3D--241a8ad1394a8f8a8a32dcede407d9a962bce5ad&account_id=dFhaeThidVZOZ0I5NDNjQ1RuNG80UT09LS0wTGZVOElLd0hKdVFXOGFNNEJYMWJnPT0%3D--8aa4f05cf4f201c61caa0d70315429fbbfeeed35&page_code=NTcwMTIwMDU%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniquePageviewsCreatedSummary&nonce=10cdc25f-e81d-4644-bb03-1a0bec7b7403&url=http%3A%2F%2Fkaysgf.com%2F
CF-Ray: 7731486908950b55-OSL
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Vary: Accept-Encoding
CF-Cache-Status: MISS
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
Status: 301 Moved Permanently
X-Powered-By: Phusion Passenger Enterprise 6.0.7
X-Rack-Cache: miss
X-Request-Id: 1bd8b536724d4f1ebea64b4287d0bc0a
X-Runtime: 0.009837
Set-Cookie: __cf_bm=6wVcQNzPPS0dJO9Var6ZgZPyy28JJeSwFnR6erTIATI-1669954960-0-AYIt3HKeiqH6IveNciqJAUl/qINVGyeilAdCr0B1XyRbrp60pmTemOk06bf8xleF4qwv0v7TrXW0SYMf5q4YZb4TZ/jsI3SjX6izG2Ll2Dkg; path=/; expires=Fri, 02-Dec-22 04:52:40 GMT; domain=.clickfunnels.com; HttpOnly; SameSite=None
Server-Timing: cf-q-config;dur=6.0000002122251e-06
Server: cloudflare
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 279 B IP
Hash c5ce029c82da37f6c6dce777651a2285
359c64cf89c5b38505a19af598ecc0a07fb3cb28
81c1b264b35fbd777f14684ee92ad7dad712a57bfb3bb85c5afdb1b549193bee
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5487
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:22:40 GMT
Etag: "638833a4-117"
Last-Modified: Fri, 02 Dec 2022 02:51:13 GMT
Server: ECS (amb/6BC6)
X-Cache: HIT
Content-Length: 279
classic.clickfunnels.com/cf.js
200 OK 6.1 kB URL HTTP/2 classic.clickfunnels.com/cf.js
IP
Hash 0cb60a45e2e12679ccaf857d6f8768a3
096ba5be84a0bcea1c7f78f4ce5e41e6b0f81e8f
a4f202762aee6ec62e7515a657b7d57fcfaffb9dbff4360d488a7843f117fe35
GET /cf.js HTTP/1.1
Host: classic.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kaysgf.com/
Connection: keep-alive
Cookie: __cf_bm=K9Dg7o9j0C0rec10lcjdIuxtZWoReO4Sdr6iHrTLn_U-1669954960-0-AaWP4k6ztX7A7viQ7jHTRg2rz99/tBgiya4aOoTnbXHJKpDTTu6TnsJRDKgOSy33lTCQ1duGSminOI7txq4UMTFEDiD1l9553m6aBuC2fQuC
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:22:41 GMT
content-type: application/x-javascript
cf-ray: 7731486a8bebb51d-OSL
access-control-allow-origin: *
age: 2089
etag: W/"637bf173-476a"
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
kaysgf.com/cdn-cgi/rum?
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
POST /cdn-cgi/rum? HTTP/1.1
Host: kaysgf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
content-type: application/json
Content-Length: 4284
Origin: http://kaysgf.com
Connection: keep-alive
Referer: http://kaysgf.com/
Cookie: PHPSESSID=30366849da97797956091ab50aff11db; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTcwMTIwMDU=:visited=true; cf:visitor_id=306d4849-8d62-4e7c-9f84-bfbf81c4f484; addevent_track_cookie=ba2c6e80-82e1-4bbd-e710-984d3d382481
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 04:22:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
CF-RAY: 7731486b7d930b61-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
images.clickfunnels.com/cdn-cgi/image/fit=scale-down,width=1150,quality=75/https://images.clickfunnels.com/10/5c6682c1ac48689d734c9d43790c92/steps123.png
200 OK 8.1 kB URL HTTP/2 images.clickfunnels.com/cdn-cgi/image/fit=scale-down,width=1150,quality=75/https://images.clickfunnels.com/10/5c6682c1ac48689d734c9d43790c92/steps123.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 633x96, components 3\012- data
Hash 4382c50b983b0ebb2da1d1ef3e7fb270
db83bbc5e62b7702cb64ec28598abe1f54591466
dc488b1e29ef1814e0f2246de38268a742f8be636cc1374d8754d1f0ade4d019
GET /cdn-cgi/image/fit=scale-down,width=1150,quality=75/https://images.clickfunnels.com/10/5c6682c1ac48689d734c9d43790c92/steps123.png HTTP/1.1
Host: images.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kaysgf.com/
Cookie: __cf_bm=K9Dg7o9j0C0rec10lcjdIuxtZWoReO4Sdr6iHrTLn_U-1669954960-0-AaWP4k6ztX7A7viQ7jHTRg2rz99/tBgiya4aOoTnbXHJKpDTTu6TnsJRDKgOSy33lTCQ1duGSminOI7txq4UMTFEDiD1l9553m6aBuC2fQuC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:22:41 GMT
content-type: image/jpeg
content-length: 8105
cf-ray: 7731486abbfbb51d-OSL
accept-ranges: bytes
cache-control: max-age=2073600
etag: "cfi48pJagVShss7VJusotVVKg9jsT79EnOD-VoEO8ABQ:239a337af79a2433e2a49189c2ec6e7a"
last-modified: Fri, 14 Aug 2020 00:45:22 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:75,h2pri
cf-resized: internal=ok/h q=0 n=31 c=0+16 v=2022.11.7 l=8105
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
app.clickfunnels.com/v1/track?_unique=0.04139380974875084&_uniqueVisitorID=null&_type=WINDOW&_location=ttp%3A//kaysgf.com/&_title=ClickFunnels%20Landing%20Page&_key=v05en8zt&_page_key=7n5ov3u232u1ur0f&_fid=12571998&_fspos=1&_fvrs=1&_funnel_stat=1&_location=http://kaysgf.com/&_referrer=
200 OK 14 kB URL HTTP/2 app.clickfunnels.com/v1/track?_unique=0.04139380974875084&_uniqueVisitorID=null&_type=WINDOW&_location=ttp%3A//kaysgf.com/&_title=ClickFunnels%20Landing%20Page&_key=v05en8zt&_page_key=7n5ov3u232u1ur0f&_fid=12571998&_fspos=1&_fvrs=1&_funnel_stat=1&_location=http://kaysgf.com/&_referrer=
IP
File type ASCII text, with no line terminators
Hash 02017396daa0e56256b9b1b2bea462d8
95fb2d880c77ba39436735d5a48934dfb996fa86
2c839c36b8ec723c8332cb0bc5d0077dac81fcfde39a983f040f55fc160e8291
GET /v1/track?_unique=0.04139380974875084&_uniqueVisitorID=null&_type=WINDOW&_location=ttp%3A//kaysgf.com/&_title=ClickFunnels%20Landing%20Page&_key=v05en8zt&_page_key=7n5ov3u232u1ur0f&_fid=12571998&_fspos=1&_fvrs=1&_funnel_stat=1&_location=http://kaysgf.com/&_referrer= HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://kaysgf.com
Connection: keep-alive
Referer: http://kaysgf.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:22:41 GMT
content-type: text/javascript; charset=utf-8
cf-ray: 7731486acc01b51d-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
status: 200 OK
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: 6d46d0e8c9969800184a689002cf15a1
x-runtime: 0.021366
set-cookie: __cf_bm=tMJn80MW4.eDcMBCza7KpLC0S4YUWgwT6a64XSZD3LI-1669954961-0-AdWuP8W0wpwWv/v7z81wIEaYXP+XoaLapQ6OwUvySYs1z67dSRN+K5OKMUCnRjdseMhR/IXIkHwGmupMGoY2e2YCdmIVPp2297T+yUH8NOvA; path=/; expires=Fri, 02-Dec-22 04:52:41 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
app.clickfunnels.com/userevents?funnel_id=Si9OdGVkanVvbU9ZU0RwaWNpamZhUT09LS00bC91N0xJaCtybk04Skt6MXJSVlFnPT0%3D--d7f95152a4af02114a043545b2672af71f6b3c56&page_id=T3g1R2FFQUdUUkQ0bGNLV0RBb2hxdz09LS1CeU5zY3g2ZVpHT1crTDFLWHM3SnJRPT0%3D--9932ca849fe70f85de2cf2c2f135be7cef225e31&funnel_step_id=dDFIbmJZR2hzL1pLWGQ0bzNpYVl0dz09LS0rcFZZVkRqWlBxTE5UOFdyVjNZc2ZBPT0%3D--b6b88f2c02e776176cd9d71be84aa2da21ec0344&user_id=b213K3kyZnE3Zmd3SnovSjJvRXRDQT09LS1WZnMvUDlZTWwzREw4UXRsTmxpekJnPT0%3D--241a8ad1394a8f8a8a32dcede407d9a962bce5ad&account_id=dFhaeThidVZOZ0I5NDNjQ1RuNG80UT09LS0wTGZVOElLd0hKdVFXOGFNNEJYMWJnPT0%3D--8aa4f05cf4f201c61caa0d70315429fbbfeeed35&page_code=NTcwMTIwMDU%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniquePageviewsCreatedSummary&nonce=10cdc25f-e81d-4644-bb03-1a0bec7b7403&url=http%3A%2F%2Fkaysgf.com%2F
202 Accepted 72 B URL HTTP/2 app.clickfunnels.com/userevents?funnel_id=Si9OdGVkanVvbU9ZU0RwaWNpamZhUT09LS00bC91N0xJaCtybk04Skt6MXJSVlFnPT0%3D--d7f95152a4af02114a043545b2672af71f6b3c56&page_id=T3g1R2FFQUdUUkQ0bGNLV0RBb2hxdz09LS1CeU5zY3g2ZVpHT1crTDFLWHM3SnJRPT0%3D--9932ca849fe70f85de2cf2c2f135be7cef225e31&funnel_step_id=dDFIbmJZR2hzL1pLWGQ0bzNpYVl0dz09LS0rcFZZVkRqWlBxTE5UOFdyVjNZc2ZBPT0%3D--b6b88f2c02e776176cd9d71be84aa2da21ec0344&user_id=b213K3kyZnE3Zmd3SnovSjJvRXRDQT09LS1WZnMvUDlZTWwzREw4UXRsTmxpekJnPT0%3D--241a8ad1394a8f8a8a32dcede407d9a962bce5ad&account_id=dFhaeThidVZOZ0I5NDNjQ1RuNG80UT09LS0wTGZVOElLd0hKdVFXOGFNNEJYMWJnPT0%3D--8aa4f05cf4f201c61caa0d70315429fbbfeeed35&page_code=NTcwMTIwMDU%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniquePageviewsCreatedSummary&nonce=10cdc25f-e81d-4644-bb03-1a0bec7b7403&url=http%3A%2F%2Fkaysgf.com%2F
IP
File type gzip compressed data, from Unix\012- data
Hash 107d93e382e2c9b00fbf9fb0edc65d86
77e750e3ebf9706f4f6dd253785602d70be17c6c
a1ee50b689ea433a0acdccbf4ee4629e9ea3f9c4bcdd21effb334359a2f9e937
GET /userevents?funnel_id=Si9OdGVkanVvbU9ZU0RwaWNpamZhUT09LS00bC91N0xJaCtybk04Skt6MXJSVlFnPT0%3D--d7f95152a4af02114a043545b2672af71f6b3c56&page_id=T3g1R2FFQUdUUkQ0bGNLV0RBb2hxdz09LS1CeU5zY3g2ZVpHT1crTDFLWHM3SnJRPT0%3D--9932ca849fe70f85de2cf2c2f135be7cef225e31&funnel_step_id=dDFIbmJZR2hzL1pLWGQ0bzNpYVl0dz09LS0rcFZZVkRqWlBxTE5UOFdyVjNZc2ZBPT0%3D--b6b88f2c02e776176cd9d71be84aa2da21ec0344&user_id=b213K3kyZnE3Zmd3SnovSjJvRXRDQT09LS1WZnMvUDlZTWwzREw4UXRsTmxpekJnPT0%3D--241a8ad1394a8f8a8a32dcede407d9a962bce5ad&account_id=dFhaeThidVZOZ0I5NDNjQ1RuNG80UT09LS0wTGZVOElLd0hKdVFXOGFNNEJYMWJnPT0%3D--8aa4f05cf4f201c61caa0d70315429fbbfeeed35&page_code=NTcwMTIwMDU%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniquePageviewsCreatedSummary&nonce=10cdc25f-e81d-4644-bb03-1a0bec7b7403&url=http%3A%2F%2Fkaysgf.com%2F HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: http://kaysgf.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Fri, 02 Dec 2022 04:22:41 GMT
content-type: text/html
cf-ray: 7731486a0bb6b51d-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: 5f0fa6ccd820626531c64b6660be5ff8
x-runtime: 0.044776
set-cookie: __cf_bm=scMp6E5SxfEmILcGZBv62aHlSlGSqoZ.zQUQTs73Hko-1669954961-0-ASI0H5HNFsl2Xye2YGAQei3ACcunbtbNZWyPHHYP5yK51oQimi65YcC0U4IJz7ODu8EMRyjo9Pu8YIgAXC7VT3R/tWYjSNCLkwyE5nu0FlTy; path=/; expires=Fri, 02-Dec-22 04:52:41 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
kaysgf.com/funnels/paused-account/cf-logo.png
404 Not Found 9.5 kB URL HTTP/1.1 kaysgf.com/funnels/paused-account/cf-logo.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (17727)
Hash 417ec903553867fae36b71f15aad4fa5
8350d50ad01a872a19098df17e7e2f3e5378f52e
4fc91c9b76b11698bdad0b1a7dba814d230c6b72339407fac500dd3947eae833
GET /funnels/paused-account/cf-logo.png HTTP/1.1
Host: kaysgf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaysgf.com/
Cookie: PHPSESSID=30366849da97797956091ab50aff11db; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTcwMTIwMDU=:visited=true; cf:visitor_id=306d4849-8d62-4e7c-9f84-bfbf81c4f484; addevent_track_cookie=ba2c6e80-82e1-4bbd-e710-984d3d382481
HTTP/1.1 404 Not Found
Date: Fri, 02 Dec 2022 04:22:41 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://kaysgf.com/wp-json/>; rel="https://api.w.org/"
Vary: Accept-Encoding
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
X-nginx-cache: WordPress
CF-Cache-Status: MISS
Server: cloudflare
CF-RAY: 7731486abac50b69-OSL
Content-Encoding: gzip
kaysgf.com/cdn-cgi/rum?
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
POST /cdn-cgi/rum? HTTP/1.1
Host: kaysgf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
Content-Length: 517
Origin: http://kaysgf.com
Connection: keep-alive
Referer: http://kaysgf.com/
Cookie: PHPSESSID=30366849da97797956091ab50aff11db; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTcwMTIwMDU=:visited=true; cf:visitor_id=306d4849-8d62-4e7c-9f84-bfbf81c4f484; addevent_track_cookie=ba2c6e80-82e1-4bbd-e710-984d3d382481; is_eu=false; 7n5ov3u232u1ur0f=true; 12571998_viewed_1=1
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 04:22:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
CF-RAY: 77314894ed160b61-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
app.clickfunnels.com/assets/userevents/application.js
200 OK 0 B URL HTTP/2 app.clickfunnels.com/assets/userevents/application.js
IP
GET /assets/userevents/application.js HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kaysgf.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:22:40 GMT
content-type: application/x-javascript
cf-ray: 773148650964b51d-OSL
access-control-allow-origin: *
age: 706
cache-control: public, max-age=1200
etag: W/"637bf173-147c"
expires: Fri, 02 Dec 2022 04:42:40 GMT
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
set-cookie: __cf_bm=dbqXB_NV63J4ftBm8iY070RjNpLJA62hhtEw.TdZDb8-1669954960-0-AZOyW5KlmKWUFab1M80aIB8+2tei9u4/38g154RBGCkkkqrCn39SBZWZrLiWIelYzHZt63N7URX2I5XAMWEAFGaP4eSBuTQ2KBd4havJQrIt; path=/; expires=Fri, 02-Dec-22 04:52:40 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
app.clickfunnels.com/images/email2.png
200 OK 0 B URL HTTP/2 app.clickfunnels.com/images/email2.png
IP
GET /images/email2.png HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.clickfunnels.com/assets/lander.css
Cookie: __cf_bm=K9Dg7o9j0C0rec10lcjdIuxtZWoReO4Sdr6iHrTLn_U-1669954960-0-AaWP4k6ztX7A7viQ7jHTRg2rz99/tBgiya4aOoTnbXHJKpDTTu6TnsJRDKgOSy33lTCQ1duGSminOI7txq4UMTFEDiD1l9553m6aBuC2fQuC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:22:40 GMT
content-type: image/webp
cf-ray: 77314865b9d9b51d-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 640349
cache-control: public, max-age=2678400
content-disposition: inline; filename="email2.webp"
etag: "637bf173-c80"
expires: Mon, 02 Jan 2023 04:22:40 GMT
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept, Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=3200
server: cloudflare
X-Firefox-Spdy: h2
app.clickfunnels.com/userevents?funnel_id=Si9OdGVkanVvbU9ZU0RwaWNpamZhUT09LS00bC91N0xJaCtybk04Skt6MXJSVlFnPT0%3D--d7f95152a4af02114a043545b2672af71f6b3c56&page_id=T3g1R2FFQUdUUkQ0bGNLV0RBb2hxdz09LS1CeU5zY3g2ZVpHT1crTDFLWHM3SnJRPT0%3D--9932ca849fe70f85de2cf2c2f135be7cef225e31&funnel_step_id=dDFIbmJZR2hzL1pLWGQ0bzNpYVl0dz09LS0rcFZZVkRqWlBxTE5UOFdyVjNZc2ZBPT0%3D--b6b88f2c02e776176cd9d71be84aa2da21ec0344&user_id=b213K3kyZnE3Zmd3SnovSjJvRXRDQT09LS1WZnMvUDlZTWwzREw4UXRsTmxpekJnPT0%3D--241a8ad1394a8f8a8a32dcede407d9a962bce5ad&account_id=dFhaeThidVZOZ0I5NDNjQ1RuNG80UT09LS0wTGZVOElLd0hKdVFXOGFNNEJYMWJnPT0%3D--8aa4f05cf4f201c61caa0d70315429fbbfeeed35&page_code=NTcwMTIwMDU%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3APageviewsCreatedSummary&nonce=07503b37-85f4-4ee7-900f-23b7014e6541&url=http%3A%2F%2Fkaysgf.com%2F
202 Accepted 0 B URL HTTP/2 app.clickfunnels.com/userevents?funnel_id=Si9OdGVkanVvbU9ZU0RwaWNpamZhUT09LS00bC91N0xJaCtybk04Skt6MXJSVlFnPT0%3D--d7f95152a4af02114a043545b2672af71f6b3c56&page_id=T3g1R2FFQUdUUkQ0bGNLV0RBb2hxdz09LS1CeU5zY3g2ZVpHT1crTDFLWHM3SnJRPT0%3D--9932ca849fe70f85de2cf2c2f135be7cef225e31&funnel_step_id=dDFIbmJZR2hzL1pLWGQ0bzNpYVl0dz09LS0rcFZZVkRqWlBxTE5UOFdyVjNZc2ZBPT0%3D--b6b88f2c02e776176cd9d71be84aa2da21ec0344&user_id=b213K3kyZnE3Zmd3SnovSjJvRXRDQT09LS1WZnMvUDlZTWwzREw4UXRsTmxpekJnPT0%3D--241a8ad1394a8f8a8a32dcede407d9a962bce5ad&account_id=dFhaeThidVZOZ0I5NDNjQ1RuNG80UT09LS0wTGZVOElLd0hKdVFXOGFNNEJYMWJnPT0%3D--8aa4f05cf4f201c61caa0d70315429fbbfeeed35&page_code=NTcwMTIwMDU%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3APageviewsCreatedSummary&nonce=07503b37-85f4-4ee7-900f-23b7014e6541&url=http%3A%2F%2Fkaysgf.com%2F
IP
GET /userevents?funnel_id=Si9OdGVkanVvbU9ZU0RwaWNpamZhUT09LS00bC91N0xJaCtybk04Skt6MXJSVlFnPT0%3D--d7f95152a4af02114a043545b2672af71f6b3c56&page_id=T3g1R2FFQUdUUkQ0bGNLV0RBb2hxdz09LS1CeU5zY3g2ZVpHT1crTDFLWHM3SnJRPT0%3D--9932ca849fe70f85de2cf2c2f135be7cef225e31&funnel_step_id=dDFIbmJZR2hzL1pLWGQ0bzNpYVl0dz09LS0rcFZZVkRqWlBxTE5UOFdyVjNZc2ZBPT0%3D--b6b88f2c02e776176cd9d71be84aa2da21ec0344&user_id=b213K3kyZnE3Zmd3SnovSjJvRXRDQT09LS1WZnMvUDlZTWwzREw4UXRsTmxpekJnPT0%3D--241a8ad1394a8f8a8a32dcede407d9a962bce5ad&account_id=dFhaeThidVZOZ0I5NDNjQ1RuNG80UT09LS0wTGZVOElLd0hKdVFXOGFNNEJYMWJnPT0%3D--8aa4f05cf4f201c61caa0d70315429fbbfeeed35&page_code=NTcwMTIwMDU%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3APageviewsCreatedSummary&nonce=07503b37-85f4-4ee7-900f-23b7014e6541&url=http%3A%2F%2Fkaysgf.com%2F HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: http://kaysgf.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Fri, 02 Dec 2022 04:22:41 GMT
content-type: text/html
cf-ray: 7731486a0bb1b51d-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: 6a73c3c127b3b0c50fb2474b0e2934bb
x-runtime: 0.080777
set-cookie: __cf_bm=Fq23.KjRQN9FLXsas6eGLBM4Y3prm7NRuHKeFsxMCwY-1669954961-0-AQtuiyxEsAydGjbwxmx6Qe+LdGKmb3ka4iQMP3ccR1COtLT7TP4IXHasM4F1hXCWafiBZP1rkQusF9OnlA2afG7M+rH2U/XQ0DFxyF7wLzDA; path=/; expires=Fri, 02-Dec-22 04:52:41 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700
IP
GET /css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kaysgf.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Dec 2022 04:22:40 GMT
date: Fri, 02 Dec 2022 04:22:40 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.9.0/css/all.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.9.0/css/all.css
IP
GET /releases/v5.9.0/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kaysgf.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:22:40 GMT
content-type: text/css
x-amz-id-2: vC8KBN503iyWKZzHxfJc5rs99Ocw4DSTaifdaL1SsWTbuhhIHZc4Cm+BPlh6dJ7ueugjQrc5cWE=
x-amz-request-id: F0PHW7H6699FG8TW
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"dbf9d822cefe851ba6f66e1ad57e8987"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 486654
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RXDpkfNEUoVp04c4ZvK8kMhhmwJ4ldxLjRE1UyhB5VkiM14u9crL%2F2%2BY29VBzNTERk1lg45VpeUTUSvKpkiMWzVnLSFzezSVGNDfgteRWzgJKdGhsPnjiHUiY6ROEcOKaYfcJ%2F2w"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77314864fd6a73f3-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
app.clickfunnels.com/assets/lander.css
200 OK 0 B URL HTTP/2 app.clickfunnels.com/assets/lander.css
IP
GET /assets/lander.css HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kaysgf.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:22:40 GMT
content-type: text/css
cf-ray: 773148650961b51d-OSL
access-control-allow-origin: *
age: 364
cache-control: public, max-age=1200
etag: W/"637bf173-6a514"
expires: Fri, 02 Dec 2022 04:42:40 GMT
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
set-cookie: __cf_bm=zmqG90osHnoQuy_hlCrPJUGSTste9vldnYpiou.7M1c-1669954960-0-AUSLle8KzLzJKlKH8dDnV0wH4KgeAK7Gipd8gIFKHnm2tbEShbMiwVn6UxgZ2sDLay/N0je7erbnxa3BRzEiL+WBjj5QYCYetWPQtQQ4vMdp; path=/; expires=Fri, 02-Dec-22 04:52:40 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
app.clickfunnels.com/userevents?funnel_id=Si9OdGVkanVvbU9ZU0RwaWNpamZhUT09LS00bC91N0xJaCtybk04Skt6MXJSVlFnPT0%3D--d7f95152a4af02114a043545b2672af71f6b3c56&page_id=T3g1R2FFQUdUUkQ0bGNLV0RBb2hxdz09LS1CeU5zY3g2ZVpHT1crTDFLWHM3SnJRPT0%3D--9932ca849fe70f85de2cf2c2f135be7cef225e31&funnel_step_id=dDFIbmJZR2hzL1pLWGQ0bzNpYVl0dz09LS0rcFZZVkRqWlBxTE5UOFdyVjNZc2ZBPT0%3D--b6b88f2c02e776176cd9d71be84aa2da21ec0344&user_id=b213K3kyZnE3Zmd3SnovSjJvRXRDQT09LS1WZnMvUDlZTWwzREw4UXRsTmxpekJnPT0%3D--241a8ad1394a8f8a8a32dcede407d9a962bce5ad&account_id=dFhaeThidVZOZ0I5NDNjQ1RuNG80UT09LS0wTGZVOElLd0hKdVFXOGFNNEJYMWJnPT0%3D--8aa4f05cf4f201c61caa0d70315429fbbfeeed35&page_code=NTcwMTIwMDU%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniqueVisitorsCreatedSummary&nonce=793fd01e-d632-460a-a80b-f46152e1e3d0&url=http%3A%2F%2Fkaysgf.com%2F
202 Accepted 0 B URL HTTP/2 app.clickfunnels.com/userevents?funnel_id=Si9OdGVkanVvbU9ZU0RwaWNpamZhUT09LS00bC91N0xJaCtybk04Skt6MXJSVlFnPT0%3D--d7f95152a4af02114a043545b2672af71f6b3c56&page_id=T3g1R2FFQUdUUkQ0bGNLV0RBb2hxdz09LS1CeU5zY3g2ZVpHT1crTDFLWHM3SnJRPT0%3D--9932ca849fe70f85de2cf2c2f135be7cef225e31&funnel_step_id=dDFIbmJZR2hzL1pLWGQ0bzNpYVl0dz09LS0rcFZZVkRqWlBxTE5UOFdyVjNZc2ZBPT0%3D--b6b88f2c02e776176cd9d71be84aa2da21ec0344&user_id=b213K3kyZnE3Zmd3SnovSjJvRXRDQT09LS1WZnMvUDlZTWwzREw4UXRsTmxpekJnPT0%3D--241a8ad1394a8f8a8a32dcede407d9a962bce5ad&account_id=dFhaeThidVZOZ0I5NDNjQ1RuNG80UT09LS0wTGZVOElLd0hKdVFXOGFNNEJYMWJnPT0%3D--8aa4f05cf4f201c61caa0d70315429fbbfeeed35&page_code=NTcwMTIwMDU%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniqueVisitorsCreatedSummary&nonce=793fd01e-d632-460a-a80b-f46152e1e3d0&url=http%3A%2F%2Fkaysgf.com%2F
IP
GET /userevents?funnel_id=Si9OdGVkanVvbU9ZU0RwaWNpamZhUT09LS00bC91N0xJaCtybk04Skt6MXJSVlFnPT0%3D--d7f95152a4af02114a043545b2672af71f6b3c56&page_id=T3g1R2FFQUdUUkQ0bGNLV0RBb2hxdz09LS1CeU5zY3g2ZVpHT1crTDFLWHM3SnJRPT0%3D--9932ca849fe70f85de2cf2c2f135be7cef225e31&funnel_step_id=dDFIbmJZR2hzL1pLWGQ0bzNpYVl0dz09LS0rcFZZVkRqWlBxTE5UOFdyVjNZc2ZBPT0%3D--b6b88f2c02e776176cd9d71be84aa2da21ec0344&user_id=b213K3kyZnE3Zmd3SnovSjJvRXRDQT09LS1WZnMvUDlZTWwzREw4UXRsTmxpekJnPT0%3D--241a8ad1394a8f8a8a32dcede407d9a962bce5ad&account_id=dFhaeThidVZOZ0I5NDNjQ1RuNG80UT09LS0wTGZVOElLd0hKdVFXOGFNNEJYMWJnPT0%3D--8aa4f05cf4f201c61caa0d70315429fbbfeeed35&page_code=NTcwMTIwMDU%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniqueVisitorsCreatedSummary&nonce=793fd01e-d632-460a-a80b-f46152e1e3d0&url=http%3A%2F%2Fkaysgf.com%2F HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: http://kaysgf.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Fri, 02 Dec 2022 04:22:41 GMT
content-type: text/html
cf-ray: 7731486a0bb4b51d-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: 6ed13903eec97a9c1c928ea7fa8de777
x-runtime: 0.026902
set-cookie: __cf_bm=XfVvzPYo9WqfoFHSriz16dswdpfE11EeAw2rsrt_1tA-1669954961-0-ARSS+Hd699fqHciBvownkKjBIi+FGUKfNgV5esj7eNJimunffpWL9eyRkvNr/3PTp4uXN38QloyIyUjtobHCbNHfGP81nLNsmr3EGeULw6IV; path=/; expires=Fri, 02-Dec-22 04:52:41 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
www2.clickfunnels.com/favicon.ico
200 OK 0 B URL HTTP/2 www2.clickfunnels.com/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: www2.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kaysgf.com/
Cookie: __cf_bm=K9Dg7o9j0C0rec10lcjdIuxtZWoReO4Sdr6iHrTLn_U-1669954960-0-AaWP4k6ztX7A7viQ7jHTRg2rz99/tBgiya4aOoTnbXHJKpDTTu6TnsJRDKgOSy33lTCQ1duGSminOI7txq4UMTFEDiD1l9553m6aBuC2fQuC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:22:41 GMT
content-type: image/x-icon
cf-ray: 7731486cacc0b51d-OSL
access-control-allow-origin: *
age: 6377
etag: W/"637bf173-3aee"
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.9.0/css/v4-shims.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.9.0/css/v4-shims.css
IP
GET /releases/v5.9.0/css/v4-shims.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kaysgf.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:22:40 GMT
content-type: text/css
x-amz-id-2: LMYB/EZwJy8ymilIZ80vYWZANr+Oo5+MJ8AkhKu4t39dWPosYZSEykP29/q3kqcOsq0fUg0YmLM=
x-amz-request-id: K27A6ZYB02A9CQ06
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"e140a7d32f343530f016095df3cc2ae4"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 3111
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AZEocI2H0nFz4vVru9TBsib7bndbyrS3QZ6SN6D%2B1Z7MWEnAMdwDpbyEQcwiBz5WI0GOptm1DEVNq0IaA8x%2BY9QOVCFdEI%2Bfie6hXybksvsxay996ipSfwsjMm2EsbZaFTx6FfQZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77314864ed6873f3-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
app.clickfunnels.com/mailcheck.min.js
200 OK 0 B URL HTTP/2 app.clickfunnels.com/mailcheck.min.js
IP
GET /mailcheck.min.js HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kaysgf.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:22:40 GMT
content-type: application/x-javascript
cf-ray: 77314864f957b51d-OSL
access-control-allow-origin: *
age: 4920
etag: W/"637bf173-a8d"
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
set-cookie: __cf_bm=0mn.Yhb6cX9bwpFWCnpqd1nO.rEmV.SxplTsokcv9Ko-1669954960-0-ATY7yff6/Lk08idOS0VHNHd5PLuodwYWPhk5nUGhsChUQO09T8rhL6E8SGaSBgYo/Z4d9Db5ElYBJkjvvObX7RNDtrHixeyJOA5OpTA8OrKi; path=/; expires=Fri, 02-Dec-22 04:52:40 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
app.clickfunnels.com/assets/pushcrew.js
200 OK 0 B URL HTTP/2 app.clickfunnels.com/assets/pushcrew.js
IP
GET /assets/pushcrew.js HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kaysgf.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:22:40 GMT
content-type: application/x-javascript
cf-ray: 773148652980b51d-OSL
access-control-allow-origin: *
age: 706
cache-control: public, max-age=1200
etag: W/"637bf172-27d"
expires: Fri, 02 Dec 2022 04:42:40 GMT
last-modified: Mon, 21 Nov 2022 21:45:22 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
set-cookie: __cf_bm=Pd024938cWNvyiETOwt8pnMLtsB2_h.gZ6AE7lTEc.Q-1669954960-0-AbxR4qixx8XrOBLpjVK5L180JDTSS2JUdzwuMeRaCu4Jq1FxbslFL0pV5gnv0Krp9xZMQfRqm5VUumYhstgaXlo7c6a+NDVOHmTnLiB0QdAb; path=/; expires=Fri, 02-Dec-22 04:52:40 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
app.clickfunnels.com/assets/lander.js
200 OK 0 B URL HTTP/2 app.clickfunnels.com/assets/lander.js
IP
GET /assets/lander.js HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kaysgf.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:22:40 GMT
content-type: application/x-javascript
cf-ray: 773148654989b51d-OSL
access-control-allow-origin: *
age: 706
cache-control: public, max-age=1200
etag: W/"637bf1b5-2391a3"
expires: Fri, 02 Dec 2022 04:42:40 GMT
last-modified: Mon, 21 Nov 2022 21:46:29 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
set-cookie: __cf_bm=K9Dg7o9j0C0rec10lcjdIuxtZWoReO4Sdr6iHrTLn_U-1669954960-0-AaWP4k6ztX7A7viQ7jHTRg2rz99/tBgiya4aOoTnbXHJKpDTTu6TnsJRDKgOSy33lTCQ1duGSminOI7txq4UMTFEDiD1l9553m6aBuC2fQuC; path=/; expires=Fri, 02-Dec-22 04:52:40 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
66.235.200.145
104.16.16.194
93.184.220.29
23.33.119.27