click.familyhealthykeeper.com/?t=c&ids=NTc1MTIyMzU1__MTQ5MjQ=__NDcwMjUxNjA=__Njc5__825&url=aHR0cHMlM0ElMkYlMkZlbWRsdnIuY29tJTJGd2Vidw==
301 Moved Permanently 359 B URL HTTP/1.1 click.familyhealthykeeper.com/?t=c&ids=NTc1MTIyMzU1__MTQ5MjQ=__NDcwMjUxNjA=__Njc5__825&url=aHR0cHMlM0ElMkYlMkZlbWRsdnIuY29tJTJGd2Vidw==
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1f85bfdaf505ba61a8cf038d22b99e30
37cfbfed7adfe5d1215ddc38288f7df9a6c5a5da
b36fa0e00cedc3474dcb8185039cadb0ad56802a5c68262f0d7272b8a9d93acf
GET /?t=c&ids=NTc1MTIyMzU1__MTQ5MjQ=__NDcwMjUxNjA=__Njc5__825&url=aHR0cHMlM0ElMkYlMkZlbWRsdnIuY29tJTJGd2Vidw== HTTP/1.1
Host: click.familyhealthykeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 27 Jan 2023 09:27:22 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 359
Connection: keep-alive
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Content-Security-Policy: upgrade-insecure-requests
Location: https://click.familyhealthykeeper.com/?t=c&ids=NTc1MTIyMzU1__MTQ5MjQ=__NDcwMjUxNjA=__Njc5__825&url=aHR0cHMlM0ElMkYlMkZlbWRsdnIuY29tJTJGd2Vidw==
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: MISS
X-Server-Powered-By: Engintron
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2405562765b49b2782ebd2e2994851d5
be7ac8e558f7875bb1fb86ab5ec674424a5ff269
422cfa907461cb7b93b9089d600052f9e94951e5e0c93d97651905002e48ad3e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "422CFA907461CB7B93B9089D600052F9E94951E5E0C93D97651905002E48AD3E"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17911
Expires: Fri, 27 Jan 2023 14:25:53 GMT
Date: Fri, 27 Jan 2023 09:27:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5fe582397f3003b225cb9058e02c2190
68174a54a8f6c4de9247ccea2dcae3c9b76bdb9f
238a2ef5b61d56353d0a5e97ec3092b8f2792cde7cecf40e1a858f8c129d3a9d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "238A2EF5B61D56353D0A5E97EC3092B8F2792CDE7CECF40E1A858F8C129D3A9D"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10927
Expires: Fri, 27 Jan 2023 12:29:29 GMT
Date: Fri, 27 Jan 2023 09:27:22 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 27 Jan 2023 08:42:58 GMT
content-type: application/json
age: 2664
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 69f73ac59327cd9ad7d99816ccfcc03e
c54844f82dbee0d5ee4c8ce344eb0139373e6c6b
e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10921
Expires: Fri, 27 Jan 2023 12:29:23 GMT
Date: Fri, 27 Jan 2023 09:27:22 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: amwZqQbDgCr7s2E+nv5zvwrKWMwxVEVtZPioSYCrPm2x/EOsDAVXp8lrqf0AbWXm5Df/PzMW+hY=
x-amz-request-id: GCSW73NRC20A8X0K
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 27 Jan 2023 08:49:21 GMT
age: 2281
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:27:22 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e403273e087c20e64472c8ebf12dd743
b0925d4accad070ed11ae413e8a529184d16b8b9
c324eec8ab2d3f5d0d799143b2ffde70e54e40b4bc2a948f7ade8cc725772003
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C324EEC8AB2D3F5D0D799143B2FFDE70E54E40B4BC2A948F7ADE8CC725772003"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 27 Jan 2023 15:27:22 GMT
Date: Fri, 27 Jan 2023 09:27:22 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 27 Jan 2023 08:41:40 GMT
age: 2743
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16768
Expires: Fri, 27 Jan 2023 14:06:51 GMT
Date: Fri, 27 Jan 2023 09:27:23 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: TPyaPdTVtEwrmuLevAOFHg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HXwsLzbtNtAlezma0Qm2nWku7mk=
trumpbucksbill.com/assets/userevents/application.js
200 OK 2.3 kB URL HTTP/2 trumpbucksbill.com/assets/userevents/application.js
IP
File type ASCII text, with very long lines (5244), with no line terminators
Hash 61705790ca9b919de4e8439834b0d92b
72ce50bb67742fd3174c4a454c7c41cd0a2a5a27
35ed7d1385d29735c39a648a0237eb232f84b3dbc63c4c86a8646e5f3c01e103
GET /assets/userevents/application.js HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:23 GMT
content-type: application/x-javascript
cf-ray: 790073c639f5b524-OSL
access-control-allow-origin: *
age: 389
cache-control: public, max-age=1200
etag: W/"63c939da-147c"
expires: Fri, 27 Jan 2023 09:47:23 GMT
last-modified: Thu, 19 Jan 2023 12:38:50 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 065a8a0e315417e52649420d58023260
6502650c8f1497ce088fffbbf27f0dba4cb071e4
94a3f4df58187fd8003a9fe07408c0ad75f0eaf2b29f9d161233673b7e4fef99
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5072
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 09:27:23 GMT
Last-Modified: Fri, 27 Jan 2023 08:02:51 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 278 B IP
Hash 27ce0eca2c9630125f1420d257c7ad93
3555949a75880ee7d2b17eb605a8eb30d474b3e6
06e76c4465da3d49e5e24115360facb86108d1603659656995218bc937c01754
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6587
Cache-Control: max-age=169503
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 09:27:23 GMT
Etag: "63d3725f-116"
Expires: Sun, 29 Jan 2023 08:32:26 GMT
Last-Modified: Fri, 27 Jan 2023 06:42:39 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 278
trumpbucksbill.com/assets/pushcrew.js
200 OK 819 B URL HTTP/2 trumpbucksbill.com/assets/pushcrew.js
IP
File type ASCII text, with very long lines (637), with no line terminators
Hash bc86fd32ae3e07d8ce29071aed958adb
1d973daf9db4483fa6d3463fb56106731e9dfbf8
fd10d5f69e157497518464c50248ea89aff7cb16ad6916c0db9102373af3757b
GET /assets/pushcrew.js HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:23 GMT
content-type: application/x-javascript
cf-ray: 790073c65a31b524-OSL
access-control-allow-origin: *
age: 389
cache-control: public, max-age=1200
etag: W/"63c939d9-27d"
expires: Fri, 27 Jan 2023 09:47:23 GMT
last-modified: Thu, 19 Jan 2023 12:38:49 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
emdlvr.com/webw
200 OK 107 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size 107 kB (107284 bytes)
Hash 8ccb82cb7fc14283a789f1686c037919
9c83237e081e921c4055b0ef2f895b563184c941
9995b5a40e09483f000d275e8d9d02d027b75bba55b42241d0c76dcfb09efb91
Analyzer Verdict Alert fortinet Phishing
GET /webw HTTP/1.1
Host: emdlvr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:23 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
x-robots-tag: noindex, nofollow
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: Mon, 07 Jul 1777 07:07:07 GMT
x-redirect-powered-by: Pretty Link Executive 3.2.6 http://prettylink.com
set-cookie: prli_click_154=webw; expires=Sun, 26-Feb-2023 09:27:23 GMT; Max-Age=2592000; path=/
prli_visitor=63d398fb57c35; expires=Sat, 27-Jan-2024 09:27:23 GMT; Max-Age=31536000; path=/
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: MISS
x-server-powered-by: Engintron
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jI%2BQ%2FXFGw3icHKHx21y%2B26kr1va3MSaFkVq1UmTdvI40E1E615eDDR%2FfoaV4wCy62LtcuiheeX6I%2B%2FgEXnf9iSGTtAzcuZ8fsjVE9TEcLcQDGdk%2BQkjdq5FVxwNY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790073c20909b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-235277236-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-235277236-1
IP
File type ASCII text, with very long lines (1759)
Hash 069cbfad747df47ffcd8fade367aa7cc
7982557def39d1a124dc15a8d816aa4f74d4bcb8
552314341bdd837db179a4f87217c7b13fa4c80d62feeae147ffb2ecb069acab
GET /gtag/js?id=UA-235277236-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 27 Jan 2023 09:27:24 GMT
expires: Fri, 27 Jan 2023 09:27:24 GMT
cache-control: private, max-age=900
last-modified: Fri, 27 Jan 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44020
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 065a8a0e315417e52649420d58023260
6502650c8f1497ce088fffbbf27f0dba4cb071e4
94a3f4df58187fd8003a9fe07408c0ad75f0eaf2b29f9d161233673b7e4fef99
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5073
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 09:27:24 GMT
Last-Modified: Fri, 27 Jan 2023 08:02:51 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 82e3abc4a7b17efedca67cf215f4bb60
e20e55d87591af7db3a4bcfc429048f85e389b85
df8901d4d87686fb11e17986f5d53cf513f675b4dd71f0a2e35c7ffbefa7fb9e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 09:27:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
trumpbucksbill.com/hosted/images/c2/72ebf66a524ef8a347f0842f1fbca6/Natural-Cures---BG-Size-9-.png
200 OK 68 kB URL HTTP/2 trumpbucksbill.com/hosted/images/c2/72ebf66a524ef8a347f0842f1fbca6/Natural-Cures---BG-Size-9-.png
IP
File type PNG image data, 1920 x 1080, 1-bit colormap, non-interlaced\012- data
Hash 503ff87a051f208035a2b98465e9ebc4
9855eda22c08588c55ce1d2b89447a0de1a3630c
6b331c02d70e8887fa6cc722bd59ce6f30aeb9dedfdd86b8b096e025d36bfda5
GET /hosted/images/c2/72ebf66a524ef8a347f0842f1fbca6/Natural-Cures---BG-Size-9-.png HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:24 GMT
content-type: image/png
content-length: 67636
cf-ray: 790073c77bc6b524-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "ee602d33949a46d3917c8dd247c85a91"
last-modified: Thu, 16 Jun 2022 18:05:45 GMT
vary: Accept, Accept-Encoding
cf-cache-status: REVALIDATED
cf-bgj: imgq:85,h2pri
cf-polished: origSize=67730
x-amz-cf-pop: OSL50-P1
server: cloudflare
X-Firefox-Spdy: h2
trumpbucksbill.com/hosted/images/63/78bc9a4c104101984207bcb1da09bf/HERO_BG.jpg
200 OK 86 kB URL HTTP/2 trumpbucksbill.com/hosted/images/63/78bc9a4c104101984207bcb1da09bf/HERO_BG.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.5 (Windows), datetime=2022:06:16 12:21:06], progressive, precision 8, 3413x1920, components 3\012- data
Hash 513f23b8e1754202bd1c801350bdbd12
5a26bd28b887cc45a7565cc9d60c8c957c417119
3b44afed35ade5d2e02505f95c76f8516060a636afa823860964827475a92158
GET /hosted/images/63/78bc9a4c104101984207bcb1da09bf/HERO_BG.jpg HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:24 GMT
content-type: image/jpeg
content-length: 86423
cf-ray: 790073c7abe7b524-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "513f23b8e1754202bd1c801350bdbd12"
last-modified: Thu, 16 Jun 2022 17:01:42 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-P1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
trumpbucksbill.com/hosted/images/f3/e64504591446019a1dbfabf67a92bf/HERO_BG---Copy.jpg
200 OK 61 kB URL HTTP/2 trumpbucksbill.com/hosted/images/f3/e64504591446019a1dbfabf67a92bf/HERO_BG---Copy.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.5 (Windows), datetime=2022:06:16 12:21:06], progressive, precision 8, 3000x1688, components 3\012- data
Hash e8caaed20a985630f59914a388887490
3934db366161830d061604f0d54abca0b2a9b151
123d41700c881a62f14c22798eb9a6b226a7e845302c75ec56c0ae5070005cd0
GET /hosted/images/f3/e64504591446019a1dbfabf67a92bf/HERO_BG---Copy.jpg HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:24 GMT
content-type: image/jpeg
content-length: 61287
cf-ray: 790073c7bbf5b524-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "e8caaed20a985630f59914a388887490"
last-modified: Mon, 20 Jun 2022 15:47:09 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-P1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
trumpbucksbill.com/hosted/images/87/dc5c58f82045b884ea39033274d556/BG-2.jpg
200 OK 432 kB URL HTTP/2 trumpbucksbill.com/hosted/images/87/dc5c58f82045b884ea39033274d556/BG-2.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 1920x2812, components 3\012- data
Size 432 kB (431546 bytes)
Hash 842bd4faf71183462ca66b171c396a7f
961d57fe9cc1e21214f66d6f2011524b74c1601b
d59401b02f88fa67600bdbfea8257f7853925950b7602477a03b62dacaba4e3c
GET /hosted/images/87/dc5c58f82045b884ea39033274d556/BG-2.jpg HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:24 GMT
content-type: image/jpeg
content-length: 431546
cf-ray: 790073c7abefb524-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "cf9cfc77c6418c12c1a0d8259efac0b9"
last-modified: Mon, 25 Apr 2022 14:16:51 GMT
cf-cache-status: REVALIDATED
cf-bgj: imgq:85,h2pri
cf-polished: origSize=445445, status=webp_bigger
x-amz-cf-pop: OSL50-P1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
d2saw6je89goi1.cloudfront.net/uploads/digital_asset/file/864444/Montserrat-ExtraBold.otf
200 OK 71 kB URL HTTP/2 d2saw6je89goi1.cloudfront.net/uploads/digital_asset/file/864444/Montserrat-ExtraBold.otf
IP
File type OpenType font data\012- data
Hash 2bd71f20a86651553aae5d1e7d3383eb
6382e0c1f097447ae23381eaf482acc163adec49
17ae49f737f0b36ce87dd587a7fda35a7d95eb330d175f27e70062905894b486
GET /uploads/digital_asset/file/864444/Montserrat-ExtraBold.otf HTTP/1.1
Host: d2saw6je89goi1.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://trumpbucksbill.com
Connection: keep-alive
Referer: https://trumpbucksbill.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 71380
date: Tue, 17 Jan 2023 22:24:07 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 03 Mar 2021 02:22:39 GMT
etag: "2bd71f20a86651553aae5d1e7d3383eb"
cache-control: max-age=31536000
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oQNvZeyQYuaA86OLfKTswJMO3KDhmECil7e_KncYO-TtQ7c7IwjRRg==
age: 817398
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d9bf2793558044193d7e5d27708a9144
5a8f73462cfda6544cc3efe488854c3cd80bb0a7
e1db5ce5f130aa6d6a1bf18da60fee5c6bb76625a26aef0fee67702e7209ef7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 09:27:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 12708, version 1.0\012- data
Hash b4a68b1e743ee317eaaf0bbadd131571
f24f7823d4e3830c7cfa5bcb33733d2897c00f13
ddc148b8a0a27b1449fda6033f4a0defac9bd43210117b50d5d7ad1eda09f394
GET /s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://trumpbucksbill.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12708
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 02:05:56 GMT
expires: Sat, 27 Jan 2024 02:05:56 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 18:55:59 GMT
content-type: font/woff2
age: 26488
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d2saw6je89goi1.cloudfront.net/uploads/digital_asset/file/950338/hover.css
200 OK 25 kB URL HTTP/2 d2saw6je89goi1.cloudfront.net/uploads/digital_asset/file/950338/hover.css
IP
Hash 0fca7b1d230f687d670961c21d100669
052422b86a47fc10966599e5aa2b8eae36ea21df
129e2ab1e6078730a191d4c38f6e340e6e6d15da00fefb2b785c921476dfee27
GET /uploads/digital_asset/file/950338/hover.css HTTP/1.1
Host: d2saw6je89goi1.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
date: Wed, 18 Jan 2023 16:17:49 GMT
last-modified: Thu, 07 Oct 2021 09:34:34 GMT
etag: W/"fac4178c15e5a86139c662dafc809501"
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Hasg-saQfu4g9p0c7fIXDgDgdG6yLt7Np2PGe15LsHFg6Pq1VEp6QA==
age: 752975
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d9bf2793558044193d7e5d27708a9144
5a8f73462cfda6544cc3efe488854c3cd80bb0a7
e1db5ce5f130aa6d6a1bf18da60fee5c6bb76625a26aef0fee67702e7209ef7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 09:27:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6524
Expires: Fri, 27 Jan 2023 11:16:08 GMT
Date: Fri, 27 Jan 2023 09:27:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6524
Expires: Fri, 27 Jan 2023 11:16:08 GMT
Date: Fri, 27 Jan 2023 09:27:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6524
Expires: Fri, 27 Jan 2023 11:16:08 GMT
Date: Fri, 27 Jan 2023 09:27:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6524
Expires: Fri, 27 Jan 2023 11:16:08 GMT
Date: Fri, 27 Jan 2023 09:27:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6524
Expires: Fri, 27 Jan 2023 11:16:08 GMT
Date: Fri, 27 Jan 2023 09:27:24 GMT
Connection: keep-alive
app.clickfunnels.com/userevents/?funnel_id=NkhFVHJqdER0cHdnSGRFZ2hlalVhQT09LS1yc1dDR053bkFjMEZxa0hJMGwxTExBPT0%3D--821a2ac22d77fea956aba543e79c59c30342c4f7&page_id=KzlHOE5JRitmYTZpdXU0ZWFiQWZzQT09LS1BNSsxdUZEQTVUQmV6ZHJyaXJBMWZ3PT0%3D--ba2548336f24e660a81a79f9b705b4035ec2a63a&funnel_step_id=ZFd6ZjBXTlBuSVV3S0dIY3M1WFh3Zz09LS1aRk1LdWpRdVZqczdhYVNvL2N5ekZBPT0%3D--062d14c736e1b0cf87b5f202c25978b71c7f6f05&user_id=L2hHVnp5ZmF0UGxwL3Y3VEk1VHFaUT09LS1NcGl1T1FNM25qMlkxS0g2NUhVMmdnPT0%3D--21d57c5a6b529fd286da1940d3c1d8b224e83e6b&account_id=Nkt4TFdUajBRWnFlOVZDRDZaeVNpUT09LS00T2lPRzVha3lENVEyRUxZaHA5aWhRPT0%3D--5aeb6af033ee96c17f6546296feae3356bdaed0a&page_code=NTUzMDgyODc%3D&mode_id=1&time_zone=UTC&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::PageviewsCreatedSummary&nonce=cb9af151-c5ac-498a-b631-b457a67ace22&url=https%3A%2F%2Ftrumpbucksbill.com%2Fget-gold-pated-bills%3Faff_id%3D1374%26subid%3Dmw6gia0126trump
202 Accepted 4.3 kB URL HTTP/2 app.clickfunnels.com/userevents/?funnel_id=NkhFVHJqdER0cHdnSGRFZ2hlalVhQT09LS1yc1dDR053bkFjMEZxa0hJMGwxTExBPT0%3D--821a2ac22d77fea956aba543e79c59c30342c4f7&page_id=KzlHOE5JRitmYTZpdXU0ZWFiQWZzQT09LS1BNSsxdUZEQTVUQmV6ZHJyaXJBMWZ3PT0%3D--ba2548336f24e660a81a79f9b705b4035ec2a63a&funnel_step_id=ZFd6ZjBXTlBuSVV3S0dIY3M1WFh3Zz09LS1aRk1LdWpRdVZqczdhYVNvL2N5ekZBPT0%3D--062d14c736e1b0cf87b5f202c25978b71c7f6f05&user_id=L2hHVnp5ZmF0UGxwL3Y3VEk1VHFaUT09LS1NcGl1T1FNM25qMlkxS0g2NUhVMmdnPT0%3D--21d57c5a6b529fd286da1940d3c1d8b224e83e6b&account_id=Nkt4TFdUajBRWnFlOVZDRDZaeVNpUT09LS00T2lPRzVha3lENVEyRUxZaHA5aWhRPT0%3D--5aeb6af033ee96c17f6546296feae3356bdaed0a&page_code=NTUzMDgyODc%3D&mode_id=1&time_zone=UTC&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::PageviewsCreatedSummary&nonce=cb9af151-c5ac-498a-b631-b457a67ace22&url=https%3A%2F%2Ftrumpbucksbill.com%2Fget-gold-pated-bills%3Faff_id%3D1374%26subid%3Dmw6gia0126trump
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6e96f3ea585b5fa8ed6446ed16e2b4b2
f90c205f370a2426dffe3c21b24bfa551b385556
6967ba25887f87200fcb39a3e6f065fd27596b2ebcf0d33a2751c655d6e724f2
GET /userevents/?funnel_id=NkhFVHJqdER0cHdnSGRFZ2hlalVhQT09LS1yc1dDR053bkFjMEZxa0hJMGwxTExBPT0%3D--821a2ac22d77fea956aba543e79c59c30342c4f7&page_id=KzlHOE5JRitmYTZpdXU0ZWFiQWZzQT09LS1BNSsxdUZEQTVUQmV6ZHJyaXJBMWZ3PT0%3D--ba2548336f24e660a81a79f9b705b4035ec2a63a&funnel_step_id=ZFd6ZjBXTlBuSVV3S0dIY3M1WFh3Zz09LS1aRk1LdWpRdVZqczdhYVNvL2N5ekZBPT0%3D--062d14c736e1b0cf87b5f202c25978b71c7f6f05&user_id=L2hHVnp5ZmF0UGxwL3Y3VEk1VHFaUT09LS1NcGl1T1FNM25qMlkxS0g2NUhVMmdnPT0%3D--21d57c5a6b529fd286da1940d3c1d8b224e83e6b&account_id=Nkt4TFdUajBRWnFlOVZDRDZaeVNpUT09LS00T2lPRzVha3lENVEyRUxZaHA5aWhRPT0%3D--5aeb6af033ee96c17f6546296feae3356bdaed0a&page_code=NTUzMDgyODc%3D&mode_id=1&time_zone=UTC&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::PageviewsCreatedSummary&nonce=cb9af151-c5ac-498a-b631-b457a67ace22&url=https%3A%2F%2Ftrumpbucksbill.com%2Fget-gold-pated-bills%3Faff_id%3D1374%26subid%3Dmw6gia0126trump HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://trumpbucksbill.com
Connection: keep-alive
Referer: https://trumpbucksbill.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
date: Fri, 27 Jan 2023 09:27:24 GMT
content-type: text/html
cf-ray: 790073caade81bfe-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: 5ee4930f245bebb565099729cc0b06f5
x-runtime: 0.043363
set-cookie: __cf_bm=XyC3nMNCfMpxW2KE_L2dKz81ZF0aG.Rkc_VfucFtS1s-1674811644-0-AWduj9GJsWIv7boohlWAemd9Vo5aJlNKpYP6hFjH+rtnUFQ501KesnZe2E8eqDWPhQjv4VMm2YGAW7nY7rUs/Walz1JANuT2/4/QkYKlkQiX; path=/; expires=Fri, 27-Jan-23 09:57:24 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 131eb343c5abd61939457d69bd371348
ffb2035cf64fc83f01db5c6f26ffa264b6aac95b
8486eb9dc6325018f8721bc6f37408f260b6e652b145280f2d778d860d3ec2d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7538
x-amzn-requestid: 113924cc-a196-4dbd-91d9-68c213265afe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3fobF-ZoAMFjjA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c61302-6b24941a642b22cf21e47dc0;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 03:16:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2P09wOtKPDHjxxAuzcLFMQJwmGN1zNJcH9LA6IJpeaGiaPVRF4y-TA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 05:20:00 GMT
age: 14844
etag: "ffb2035cf64fc83f01db5c6f26ffa264b6aac95b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
app.clickfunnels.com/userevents/?funnel_id=NkhFVHJqdER0cHdnSGRFZ2hlalVhQT09LS1yc1dDR053bkFjMEZxa0hJMGwxTExBPT0%3D--821a2ac22d77fea956aba543e79c59c30342c4f7&page_id=KzlHOE5JRitmYTZpdXU0ZWFiQWZzQT09LS1BNSsxdUZEQTVUQmV6ZHJyaXJBMWZ3PT0%3D--ba2548336f24e660a81a79f9b705b4035ec2a63a&funnel_step_id=ZFd6ZjBXTlBuSVV3S0dIY3M1WFh3Zz09LS1aRk1LdWpRdVZqczdhYVNvL2N5ekZBPT0%3D--062d14c736e1b0cf87b5f202c25978b71c7f6f05&user_id=L2hHVnp5ZmF0UGxwL3Y3VEk1VHFaUT09LS1NcGl1T1FNM25qMlkxS0g2NUhVMmdnPT0%3D--21d57c5a6b529fd286da1940d3c1d8b224e83e6b&account_id=Nkt4TFdUajBRWnFlOVZDRDZaeVNpUT09LS00T2lPRzVha3lENVEyRUxZaHA5aWhRPT0%3D--5aeb6af033ee96c17f6546296feae3356bdaed0a&page_code=NTUzMDgyODc%3D&mode_id=1&time_zone=UTC&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniquePageviewsCreatedSummary&nonce=1e99c7c0-28dc-437e-af8f-251e91050c1e&url=https%3A%2F%2Ftrumpbucksbill.com%2Fget-gold-pated-bills%3Faff_id%3D1374%26subid%3Dmw6gia0126trump
202 Accepted 13 kB URL HTTP/2 app.clickfunnels.com/userevents/?funnel_id=NkhFVHJqdER0cHdnSGRFZ2hlalVhQT09LS1yc1dDR053bkFjMEZxa0hJMGwxTExBPT0%3D--821a2ac22d77fea956aba543e79c59c30342c4f7&page_id=KzlHOE5JRitmYTZpdXU0ZWFiQWZzQT09LS1BNSsxdUZEQTVUQmV6ZHJyaXJBMWZ3PT0%3D--ba2548336f24e660a81a79f9b705b4035ec2a63a&funnel_step_id=ZFd6ZjBXTlBuSVV3S0dIY3M1WFh3Zz09LS1aRk1LdWpRdVZqczdhYVNvL2N5ekZBPT0%3D--062d14c736e1b0cf87b5f202c25978b71c7f6f05&user_id=L2hHVnp5ZmF0UGxwL3Y3VEk1VHFaUT09LS1NcGl1T1FNM25qMlkxS0g2NUhVMmdnPT0%3D--21d57c5a6b529fd286da1940d3c1d8b224e83e6b&account_id=Nkt4TFdUajBRWnFlOVZDRDZaeVNpUT09LS00T2lPRzVha3lENVEyRUxZaHA5aWhRPT0%3D--5aeb6af033ee96c17f6546296feae3356bdaed0a&page_code=NTUzMDgyODc%3D&mode_id=1&time_zone=UTC&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniquePageviewsCreatedSummary&nonce=1e99c7c0-28dc-437e-af8f-251e91050c1e&url=https%3A%2F%2Ftrumpbucksbill.com%2Fget-gold-pated-bills%3Faff_id%3D1374%26subid%3Dmw6gia0126trump
IP
Hash 69c58984055e48c8d69fa2beb30d63e3
d07e9359d82a5b53c2d684ca4ec214f7786b9ac0
9915d6cee8acbde8587ed6b262aa38131054d708523563e782338ac88a737823
GET /userevents/?funnel_id=NkhFVHJqdER0cHdnSGRFZ2hlalVhQT09LS1yc1dDR053bkFjMEZxa0hJMGwxTExBPT0%3D--821a2ac22d77fea956aba543e79c59c30342c4f7&page_id=KzlHOE5JRitmYTZpdXU0ZWFiQWZzQT09LS1BNSsxdUZEQTVUQmV6ZHJyaXJBMWZ3PT0%3D--ba2548336f24e660a81a79f9b705b4035ec2a63a&funnel_step_id=ZFd6ZjBXTlBuSVV3S0dIY3M1WFh3Zz09LS1aRk1LdWpRdVZqczdhYVNvL2N5ekZBPT0%3D--062d14c736e1b0cf87b5f202c25978b71c7f6f05&user_id=L2hHVnp5ZmF0UGxwL3Y3VEk1VHFaUT09LS1NcGl1T1FNM25qMlkxS0g2NUhVMmdnPT0%3D--21d57c5a6b529fd286da1940d3c1d8b224e83e6b&account_id=Nkt4TFdUajBRWnFlOVZDRDZaeVNpUT09LS00T2lPRzVha3lENVEyRUxZaHA5aWhRPT0%3D--5aeb6af033ee96c17f6546296feae3356bdaed0a&page_code=NTUzMDgyODc%3D&mode_id=1&time_zone=UTC&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniquePageviewsCreatedSummary&nonce=1e99c7c0-28dc-437e-af8f-251e91050c1e&url=https%3A%2F%2Ftrumpbucksbill.com%2Fget-gold-pated-bills%3Faff_id%3D1374%26subid%3Dmw6gia0126trump HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://trumpbucksbill.com
Connection: keep-alive
Referer: https://trumpbucksbill.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
date: Fri, 27 Jan 2023 09:27:24 GMT
content-type: text/html
cf-ray: 790073cabdef1bfe-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: e3ea1cb26d7ed5fc57463abfb0ca631d
x-runtime: 0.043608
set-cookie: __cf_bm=VaXIoMoolYPK9EoGcoxhw1dcpn5_ZBTcrFRcOj1WeG4-1674811644-0-AVdO47vKdtQsQFKFAp9yLDmvaXSzdjDY0ZOG+HQAM/c3soys4f+kgaOSG4THAExqW4sKaq59awWs6umNGloa+jIBHpK+o+sw3cLf8ttg56Lw; path=/; expires=Fri, 27-Jan-23 09:57:24 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52a1f3b3-38ab-4f58-ad1a-ca4c9f82503e.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52a1f3b3-38ab-4f58-ad1a-ca4c9f82503e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1695371c247eedad65b4cac82f01215d
50510052f0e22e23f747c761d57cdf72910ac533
aadde426229f04f6a489b87d6949a485b19d4fd035cb244b6094549efc08013f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52a1f3b3-38ab-4f58-ad1a-ca4c9f82503e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6394
x-amzn-requestid: 215e6698-30e7-45b0-8f8f-96a05c5f6992
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fOirZG1doAMFW_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf4b15-3e1bec6759816cf84467339b;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 03:05:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: tG3T0HguJWldw-LJ9SJSuuUT4ubLCWViwQFB-dZhNfEswMEexb7Tcw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 04:26:09 GMT
age: 18075
etag: "50510052f0e22e23f747c761d57cdf72910ac533"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ba0a42dadf6a976df148f652e9cc1844
4d825b74865effa4a858ddcad1d0969671facc07
7276a38c9ba6b13a06f24ab8b802f210f98c5541df53fbcd8e879a14d2957d95
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5943
x-amzn-requestid: 6774f4a4-ed83-49df-868f-4517c2af914b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUXxNF2UIAMFlYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a007-75b1e8975c3f4b503e0a1c5b;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:55 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KY05WKpINERD5g9o2QLYdsNMSuuy_YKn2Tl7Qkn7YaAOaPTDfLteeA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 21:49:48 GMT
age: 41856
etag: "4d825b74865effa4a858ddcad1d0969671facc07"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5e7158416f60576804ccff03307319fe
a342f94625e913fa6b8d862a59979f1e3ad80dd1
5c525df7d169cc7e033d920c11f4a0163a781c025a22b70530882b56964a9a52
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5737
x-amzn-requestid: 23239d1f-0228-4722-b826-40dc8c9a4af2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVzDbEacIAMFZtA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d23215-1604c24e272fbb657b9925cc;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:56:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -_8PZoms7W6Lvw__KsoTwL_CzjfyWChzoSWDc9yCk9zCR8cTs87oNA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 16:31:35 GMT
age: 60949
etag: "a342f94625e913fa6b8d862a59979f1e3ad80dd1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Fri, 27 Jan 2023 07:46:59 GMT
expires: Fri, 27 Jan 2023 09:46:59 GMT
cache-control: public, max-age=7200
age: 6026
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
trumpbucksbill.com/hosted/images/21/0155f874564e6ea50589c8883fa045/flag-usa-united-states-america-background_53500-169.png
200 OK 503 kB URL HTTP/2 trumpbucksbill.com/hosted/images/21/0155f874564e6ea50589c8883fa045/flag-usa-united-states-america-background_53500-169.png
IP
File type PNG image data, 2000 x 1248, 8-bit colormap, non-interlaced\012- data
Size 503 kB (503071 bytes)
Hash f46025ecbb1194d2330c1578cec7f40a
aa21e88a2f0c687a3c70f4a4bb332e4eacd24c23
4c102564f607003fed8b83cda9ee64f3cba8473a25beca52795460086bb79345
GET /hosted/images/21/0155f874564e6ea50589c8883fa045/flag-usa-united-states-america-background_53500-169.png HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTUzMDgyODc=:visited=true; cf:visitor_id=97c816d2-2e8f-44b6-9ead-beb9b34a4cdb; aff_id=1374; subid=mw6gia0126trump; addevent_track_cookie=ab0d2c56-b655-40b6-3cb3-8dab7e99dd08
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:25 GMT
content-type: image/png
content-length: 503071
cf-ray: 790073cd2aeab524-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "fc81b73e870cc3ae531d2327f4440993"
last-modified: Tue, 21 Jun 2022 08:06:11 GMT
vary: Accept, Accept-Encoding
cf-cache-status: REVALIDATED
cf-bgj: imgq:85,h2pri
cf-polished: origSize=503092
x-amz-cf-pop: OSL50-P1
server: cloudflare
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j99&a=1280841652&t=pageview&_s=1&dl=https%3A%2F%2Ftrumpbucksbill.com%2Fget-gold-pated-bills%3Faff_id%3D1374%26subid%3Dmw6gia0126trump&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Trump%20Bucks%20Gold%20Bill&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=1609307502&gjid=2031606259&cid=1602889558.1674811645&tid=UA-235277236-1&_gid=774091467.1674811645&_r=1&_slc=1>m=2ou1p0&z=1212284170
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&a=1280841652&t=pageview&_s=1&dl=https%3A%2F%2Ftrumpbucksbill.com%2Fget-gold-pated-bills%3Faff_id%3D1374%26subid%3Dmw6gia0126trump&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Trump%20Bucks%20Gold%20Bill&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=1609307502&gjid=2031606259&cid=1602889558.1674811645&tid=UA-235277236-1&_gid=774091467.1674811645&_r=1&_slc=1>m=2ou1p0&z=1212284170
IP
File type ASCII text, with no line terminators
Hash 38684612f0c6bb6dfa16da92f4a6878f
6fe62d0dd7db314b7f9bb945672f078e01d27f0f
a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
POST /j/collect?v=1&_v=j99&a=1280841652&t=pageview&_s=1&dl=https%3A%2F%2Ftrumpbucksbill.com%2Fget-gold-pated-bills%3Faff_id%3D1374%26subid%3Dmw6gia0126trump&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Trump%20Bucks%20Gold%20Bill&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=1609307502&gjid=2031606259&cid=1602889558.1674811645&tid=UA-235277236-1&_gid=774091467.1674811645&_r=1&_slc=1>m=2ou1p0&z=1212284170 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://trumpbucksbill.com
Connection: keep-alive
Referer: https://trumpbucksbill.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://trumpbucksbill.com
date: Fri, 27 Jan 2023 09:27:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
trumpbucksbill.com/hosted/images/56/daed04e1004fdfaf47f59e1e5523c6/ezgif.com-gif-maker-34-.png
200 OK 13 kB URL HTTP/2 trumpbucksbill.com/hosted/images/56/daed04e1004fdfaf47f59e1e5523c6/ezgif.com-gif-maker-34-.png
IP
File type PNG image data, 224 x 226, 8-bit colormap, non-interlaced\012- data
Hash 3020d436d81ef4732dd0732e1eaedc8e
37d8798b9680559fb77321f1f260ce860f599170
2448a30a64fcaaf997e9e513215dd0bb553353506d474d7b251ae57d69fe6bd6
GET /hosted/images/56/daed04e1004fdfaf47f59e1e5523c6/ezgif.com-gif-maker-34-.png HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTUzMDgyODc=:visited=true; cf:visitor_id=97c816d2-2e8f-44b6-9ead-beb9b34a4cdb; aff_id=1374; subid=mw6gia0126trump; addevent_track_cookie=ab0d2c56-b655-40b6-3cb3-8dab7e99dd08; _ga=GA1.2.1602889558.1674811645; _gid=GA1.2.774091467.1674811645; _gat_gtag_UA_235277236_1=1; sessid2=sessid2023012709273100; spi_funnel_codename=; aff_id=1374; sid=mw6gia0126trump; campaign_id=; referrer=91.90.42.154:emdlvr.com:trumpbucksbill.com%2Fget-gold-pated-bills
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:25 GMT
content-type: image/png
content-length: 13248
cf-ray: 790073cffec4b524-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "3020d436d81ef4732dd0732e1eaedc8e"
last-modified: Sat, 02 Jul 2022 00:58:47 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-P1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
trumpbucksbill.com/hosted/images/61/48c8ba933b497b9d4fb44a5e34fc41/Screen-Shot-2022-04-21-at-8.20.13-PM.png
200 OK 605 kB URL HTTP/2 trumpbucksbill.com/hosted/images/61/48c8ba933b497b9d4fb44a5e34fc41/Screen-Shot-2022-04-21-at-8.20.13-PM.png
IP
File type PNG image data, 1268 x 1270, 8-bit colormap, non-interlaced\012- data
Size 605 kB (605070 bytes)
Hash db612cf5f501910ca325a64e41e0ad65
68c6efa849bab9b28f9ae7339b5d0b65d40d8481
b252acaf34e49552568c867a170852f11d899a80cd0b7e4bc64a1b5c227c73da
GET /hosted/images/61/48c8ba933b497b9d4fb44a5e34fc41/Screen-Shot-2022-04-21-at-8.20.13-PM.png HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTUzMDgyODc=:visited=true; cf:visitor_id=97c816d2-2e8f-44b6-9ead-beb9b34a4cdb; aff_id=1374; subid=mw6gia0126trump; addevent_track_cookie=ab0d2c56-b655-40b6-3cb3-8dab7e99dd08; _ga=GA1.2.1602889558.1674811645; _gid=GA1.2.774091467.1674811645; _gat_gtag_UA_235277236_1=1; sessid2=sessid2023012709273100; spi_funnel_codename=; aff_id=1374; sid=mw6gia0126trump; campaign_id=; referrer=91.90.42.154:emdlvr.com:trumpbucksbill.com%2Fget-gold-pated-bills
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:25 GMT
content-type: image/png
content-length: 605070
cf-ray: 790073d01ee2b524-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "db612cf5f501910ca325a64e41e0ad65"
last-modified: Thu, 21 Apr 2022 18:21:04 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-P1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
trumpbucksbill.com/hosted/images/bd/e3dece00cd497a80579c4a3a7be9cb/ezgif.com-gif-maker-31-.png
200 OK 7.5 kB URL HTTP/2 trumpbucksbill.com/hosted/images/bd/e3dece00cd497a80579c4a3a7be9cb/ezgif.com-gif-maker-31-.png
IP
File type PNG image data, 799 x 106, 8-bit colormap, non-interlaced\012- data
Hash df1f25c182875bb8d403fe8b6b416ca6
9fb94df816a7a2b8c024f7c23af70c84665778d2
9a778aa2e54b0d372b39c20c4c0475b30aba1c606953d1f2ec85ae14463f1d3a
GET /hosted/images/bd/e3dece00cd497a80579c4a3a7be9cb/ezgif.com-gif-maker-31-.png HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTUzMDgyODc=:visited=true; cf:visitor_id=97c816d2-2e8f-44b6-9ead-beb9b34a4cdb; aff_id=1374; subid=mw6gia0126trump; addevent_track_cookie=ab0d2c56-b655-40b6-3cb3-8dab7e99dd08; _ga=GA1.2.1602889558.1674811645; _gid=GA1.2.774091467.1674811645; _gat_gtag_UA_235277236_1=1; sessid2=sessid2023012709273100; spi_funnel_codename=; aff_id=1374; sid=mw6gia0126trump; campaign_id=; referrer=91.90.42.154:emdlvr.com:trumpbucksbill.com%2Fget-gold-pated-bills
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:25 GMT
content-type: image/png
content-length: 7549
cf-ray: 790073cffebcb524-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "df1f25c182875bb8d403fe8b6b416ca6"
last-modified: Sat, 02 Jul 2022 00:21:40 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-P1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
trumpbucksbill.com/hosted/images/35/9699ed8ef3481e8444df15b2796f99/ezgif.com-gif-maker-33-.png
200 OK 10 kB URL HTTP/2 trumpbucksbill.com/hosted/images/35/9699ed8ef3481e8444df15b2796f99/ezgif.com-gif-maker-33-.png
IP
File type PNG image data, 800 x 203, 4-bit colormap, non-interlaced\012- data
Hash 50798c0d91340593382fc6293222bd37
16c6ee35496aee5dfe8b3e4247fe86990276717d
618af5d9bd1295e1fa464d8206e92a34451e5e413b6523851020a1fb75168a10
GET /hosted/images/35/9699ed8ef3481e8444df15b2796f99/ezgif.com-gif-maker-33-.png HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTUzMDgyODc=:visited=true; cf:visitor_id=97c816d2-2e8f-44b6-9ead-beb9b34a4cdb; aff_id=1374; subid=mw6gia0126trump; addevent_track_cookie=ab0d2c56-b655-40b6-3cb3-8dab7e99dd08; _ga=GA1.2.1602889558.1674811645; _gid=GA1.2.774091467.1674811645; _gat_gtag_UA_235277236_1=1; sessid2=sessid2023012709273100; spi_funnel_codename=; aff_id=1374; sid=mw6gia0126trump; campaign_id=; referrer=91.90.42.154:emdlvr.com:trumpbucksbill.com%2Fget-gold-pated-bills
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:25 GMT
content-type: image/png
content-length: 10343
cf-ray: 790073cffec0b524-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "50798c0d91340593382fc6293222bd37"
last-modified: Sat, 02 Jul 2022 00:43:41 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-P1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
trumpbucksbill.com/vendor.js
200 OK 132 kB URL HTTP/2 trumpbucksbill.com/vendor.js
IP
Size 132 kB (131788 bytes)
Hash 707e8a5a89aa92dc7c8546e205a75d40
7539106b3d5eed8e20214f12a266289ab7a50d6c
4dff881357ee254a6c88821ed1d2e75c75776da1fdfba9b6c5d4f706e34d9e85
GET /vendor.js HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:24 GMT
content-type: application/javascript
cf-ray: 790073ca0f3ab524-OSL
access-control-allow-origin: *
cache-control: max-age=900, public
etag: W/"7422e50efbaea439fda7ef3b0eb54ee1"
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: MISS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
status: 200 OK
x-content-digest: 581e49c9b7bdd06dab54c00931f4256b223e620e
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: stale, valid, store
x-request-id: 8d4294e5e6db30223dada1fb401b7cec
x-runtime: 0.017253
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
trumpbucksbill.com/hosted/images/3d/1fad24457349acbed8a5676c8c6950/trump-10x.png
200 OK 117 kB URL HTTP/2 trumpbucksbill.com/hosted/images/3d/1fad24457349acbed8a5676c8c6950/trump-10x.png
IP
File type PNG image data, 642 x 283, 8-bit colormap, non-interlaced\012- data
Size 117 kB (116660 bytes)
Hash 03f579e40c12fe89195f3797d19fe582
59f6478c982a23f57f32517779e66846856c533b
7723a47fe42b69e6de1cff6c827228abfef069276d95b94725eaf06db3da6d81
GET /hosted/images/3d/1fad24457349acbed8a5676c8c6950/trump-10x.png HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTUzMDgyODc=:visited=true; cf:visitor_id=97c816d2-2e8f-44b6-9ead-beb9b34a4cdb; aff_id=1374; subid=mw6gia0126trump; addevent_track_cookie=ab0d2c56-b655-40b6-3cb3-8dab7e99dd08; _ga=GA1.2.1602889558.1674811645; _gid=GA1.2.774091467.1674811645; _gat_gtag_UA_235277236_1=1; sessid2=sessid2023012709273100; spi_funnel_codename=; aff_id=1374; sid=mw6gia0126trump; campaign_id=; referrer=91.90.42.154:emdlvr.com:trumpbucksbill.com%2Fget-gold-pated-bills
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:25 GMT
content-type: image/png
content-length: 116660
cf-ray: 790073d00ed0b524-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "03f579e40c12fe89195f3797d19fe582"
last-modified: Fri, 08 Jul 2022 15:44:17 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-P1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
trumpbucksbill.com/hosted/images/56/67390807b4479aa6c6b482931d66b9/trump-100x-2-.png
200 OK 152 kB URL HTTP/2 trumpbucksbill.com/hosted/images/56/67390807b4479aa6c6b482931d66b9/trump-100x-2-.png
IP
File type PNG image data, 659 x 400, 8-bit colormap, non-interlaced\012- data
Size 152 kB (151709 bytes)
Hash 12056384e42e539c864733992c159b5a
679bcc5c9a44825067612961cf9e0e57c0c9ca69
34556b5471981175f0b7f70b174d34655366c6fb3768baf0a15015688f0d6227
GET /hosted/images/56/67390807b4479aa6c6b482931d66b9/trump-100x-2-.png HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTUzMDgyODc=:visited=true; cf:visitor_id=97c816d2-2e8f-44b6-9ead-beb9b34a4cdb; aff_id=1374; subid=mw6gia0126trump; addevent_track_cookie=ab0d2c56-b655-40b6-3cb3-8dab7e99dd08; _ga=GA1.2.1602889558.1674811645; _gid=GA1.2.774091467.1674811645; _gat_gtag_UA_235277236_1=1; sessid2=sessid2023012709273100; spi_funnel_codename=; aff_id=1374; sid=mw6gia0126trump; campaign_id=; referrer=91.90.42.154:emdlvr.com:trumpbucksbill.com%2Fget-gold-pated-bills
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:25 GMT
content-type: image/png
content-length: 151709
cf-ray: 790073cffec1b524-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "12056384e42e539c864733992c159b5a"
last-modified: Fri, 08 Jul 2022 15:44:18 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-P1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
trumpbucksbill.com/hosted/images/ed/ea1402352d4c54ad3a348624b35937/trump-mockup.png
200 OK 254 kB URL HTTP/2 trumpbucksbill.com/hosted/images/ed/ea1402352d4c54ad3a348624b35937/trump-mockup.png
IP
File type PNG image data, 848 x 674, 8-bit colormap, non-interlaced\012- data
Size 254 kB (254449 bytes)
Hash e0c21dd9d1238e6c6084fdd9b4a0b390
d1b898cdfb168da3529a25e485a8ade75b29cb4a
32e8a6aae9b00253272eeacdf73be207917c0b85dde40f1c93c4741bc082b92f
GET /hosted/images/ed/ea1402352d4c54ad3a348624b35937/trump-mockup.png HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTUzMDgyODc=:visited=true; cf:visitor_id=97c816d2-2e8f-44b6-9ead-beb9b34a4cdb; aff_id=1374; subid=mw6gia0126trump; addevent_track_cookie=ab0d2c56-b655-40b6-3cb3-8dab7e99dd08; _ga=GA1.2.1602889558.1674811645; _gid=GA1.2.774091467.1674811645; _gat_gtag_UA_235277236_1=1; sessid2=sessid2023012709273100; spi_funnel_codename=; aff_id=1374; sid=mw6gia0126trump; campaign_id=; referrer=91.90.42.154:emdlvr.com:trumpbucksbill.com%2Fget-gold-pated-bills
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:25 GMT
content-type: image/png
content-length: 254449
cf-ray: 790073cffeb9b524-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "e0c21dd9d1238e6c6084fdd9b4a0b390"
last-modified: Fri, 08 Jul 2022 15:42:24 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-P1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
trumpbucksbill.com/hosted/images/1f/9028a0e164425d83ffb4566fb75f80/Screen-Shot-2022-04-21-at-8.19.44-PM.png
200 OK 635 kB URL HTTP/2 trumpbucksbill.com/hosted/images/1f/9028a0e164425d83ffb4566fb75f80/Screen-Shot-2022-04-21-at-8.19.44-PM.png
IP
File type PNG image data, 1290 x 1310, 8-bit colormap, non-interlaced\012- data
Size 635 kB (634644 bytes)
Hash 663bc47562217f70835e0eeb75be1a60
3e0fbd84e6f9819dad6012ac01f9707df72d00bf
d2162b64e059ab21310f5809a42075162646d176fc43a106c3ab85d0940edbc8
GET /hosted/images/1f/9028a0e164425d83ffb4566fb75f80/Screen-Shot-2022-04-21-at-8.19.44-PM.png HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTUzMDgyODc=:visited=true; cf:visitor_id=97c816d2-2e8f-44b6-9ead-beb9b34a4cdb; aff_id=1374; subid=mw6gia0126trump; addevent_track_cookie=ab0d2c56-b655-40b6-3cb3-8dab7e99dd08; _ga=GA1.2.1602889558.1674811645; _gid=GA1.2.774091467.1674811645; _gat_gtag_UA_235277236_1=1; sessid2=sessid2023012709273100; spi_funnel_codename=; aff_id=1374; sid=mw6gia0126trump; campaign_id=; referrer=91.90.42.154:emdlvr.com:trumpbucksbill.com%2Fget-gold-pated-bills
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:25 GMT
content-type: image/png
content-length: 634644
cf-ray: 790073d01ee0b524-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "663bc47562217f70835e0eeb75be1a60"
last-modified: Thu, 21 Apr 2022 18:20:45 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-P1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
trumpbucksbill.com/hosted/images/36/21546b72154eb4b7d8b57a6229558a/trump-50x.png
200 OK 134 kB URL HTTP/2 trumpbucksbill.com/hosted/images/36/21546b72154eb4b7d8b57a6229558a/trump-50x.png
IP
File type PNG image data, 659 x 344, 8-bit colormap, non-interlaced\012- data
Size 134 kB (133465 bytes)
Hash a278b1e05adebfdd9321584fb9bf20b8
758ab64bc62f76cb02aa838267f06e784a5030a6
ca0126a22d9433f1492b3c5c99e01830bab9b9112fee4a24acd1a81b9d032c07
GET /hosted/images/36/21546b72154eb4b7d8b57a6229558a/trump-50x.png HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTUzMDgyODc=:visited=true; cf:visitor_id=97c816d2-2e8f-44b6-9ead-beb9b34a4cdb; aff_id=1374; subid=mw6gia0126trump; addevent_track_cookie=ab0d2c56-b655-40b6-3cb3-8dab7e99dd08; _ga=GA1.2.1602889558.1674811645; _gid=GA1.2.774091467.1674811645; _gat_gtag_UA_235277236_1=1; sessid2=sessid2023012709273100; spi_funnel_codename=; aff_id=1374; sid=mw6gia0126trump; campaign_id=; referrer=91.90.42.154:emdlvr.com:trumpbucksbill.com%2Fget-gold-pated-bills
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:25 GMT
content-type: image/png
content-length: 133465
cf-ray: 790073d00eccb524-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "a278b1e05adebfdd9321584fb9bf20b8"
last-modified: Fri, 08 Jul 2022 15:44:18 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-P1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
trumpbucksbill.com/hosted/images/44/bdd53f110440bea7f5ca4c9e6bd656/Screen-Shot-2022-04-21-at-8.20.20-PM.png
200 OK 699 kB URL HTTP/2 trumpbucksbill.com/hosted/images/44/bdd53f110440bea7f5ca4c9e6bd656/Screen-Shot-2022-04-21-at-8.20.20-PM.png
IP
File type PNG image data, 1318 x 1326, 8-bit colormap, non-interlaced\012- data
Size 699 kB (698660 bytes)
Hash 82e85c999043ee7add5edf5cbdaaba7d
1c01ff8da4bbe6839162d9077bf145fddf5d50f1
05d9b1c627a94d90d254849698668293e58a59d54013288c902548fa919ce713
GET /hosted/images/44/bdd53f110440bea7f5ca4c9e6bd656/Screen-Shot-2022-04-21-at-8.20.20-PM.png HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTUzMDgyODc=:visited=true; cf:visitor_id=97c816d2-2e8f-44b6-9ead-beb9b34a4cdb; aff_id=1374; subid=mw6gia0126trump; addevent_track_cookie=ab0d2c56-b655-40b6-3cb3-8dab7e99dd08; _ga=GA1.2.1602889558.1674811645; _gid=GA1.2.774091467.1674811645; _gat_gtag_UA_235277236_1=1; sessid2=sessid2023012709273100; spi_funnel_codename=; aff_id=1374; sid=mw6gia0126trump; campaign_id=; referrer=91.90.42.154:emdlvr.com:trumpbucksbill.com%2Fget-gold-pated-bills
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:25 GMT
content-type: image/png
content-length: 698660
cf-ray: 790073d01ee9b524-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "82e85c999043ee7add5edf5cbdaaba7d"
last-modified: Thu, 21 Apr 2022 18:23:51 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-P1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
assets.clickfunnels.com/images/closemodal.png
200 OK 672 B URL HTTP/2 assets.clickfunnels.com/images/closemodal.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 19754ed4d508cf576c80cf36e0db8c50
f459beac714e5be68aa75349fa806a5642af456a
5216f197f782f4bb872e02a677986af90a488015910f8d3864b796ad68dbd389
GET /images/closemodal.png HTTP/1.1
Host: assets.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:25 GMT
content-type: image/webp
content-length: 672
cf-ray: 790073d059771c06-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 37332
cache-control: public, max-age=2678400
content-disposition: inline; filename="closemodal.webp"
etag: "63c939da-314"
expires: Mon, 27 Feb 2023 09:27:25 GMT
last-modified: Thu, 19 Jan 2023 12:38:50 GMT
strict-transport-security: max-age=0
vary: Accept, Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=788
set-cookie: __cf_bm=lMS65ydFo_5DVSX4_LFtm_3kkQP9CMreb9taWWdBO_c-1674811645-0-AR7Y3Hdo8Yi2Vfnya5IbeRovWSjgoZvG5SvrH1be9GWf6qn+FIP1bqnrLrCsazZtvLU+gSLVCJHDPqsjF+KlT4YHGHcrXdvU6RDd406AZotJ; path=/; expires=Fri, 27-Jan-23 09:57:25 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
trumpbucksbill.com/hosted/images/24/86f11c772e44e6b78cac2334acb2db/Screen-Shot-2022-04-21-at-8.20.01-PM.png
200 OK 574 kB URL HTTP/2 trumpbucksbill.com/hosted/images/24/86f11c772e44e6b78cac2334acb2db/Screen-Shot-2022-04-21-at-8.20.01-PM.png
IP
File type PNG image data, 1316 x 1308, 8-bit colormap, non-interlaced\012- data
Size 574 kB (574013 bytes)
Hash b6f02555f9f442bfc0583211856e6b98
559fa11cd871708bb1cedd6066b87a13f79b5676
c280f42dcc358d244999f0ad3c5058a8cfec9b8f2718eeefe69511d1db8e7822
GET /hosted/images/24/86f11c772e44e6b78cac2334acb2db/Screen-Shot-2022-04-21-at-8.20.01-PM.png HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTUzMDgyODc=:visited=true; cf:visitor_id=97c816d2-2e8f-44b6-9ead-beb9b34a4cdb; aff_id=1374; subid=mw6gia0126trump; addevent_track_cookie=ab0d2c56-b655-40b6-3cb3-8dab7e99dd08; _ga=GA1.2.1602889558.1674811645; _gid=GA1.2.774091467.1674811645; _gat_gtag_UA_235277236_1=1; sessid2=sessid2023012709273100; spi_funnel_codename=; aff_id=1374; sid=mw6gia0126trump; campaign_id=; referrer=91.90.42.154:emdlvr.com:trumpbucksbill.com%2Fget-gold-pated-bills
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:25 GMT
content-type: image/png
content-length: 574013
cf-ray: 790073d01ee6b524-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "38e74d418418a1e287251801d7e21254"
last-modified: Thu, 21 Apr 2022 18:21:21 GMT
vary: Accept, Accept-Encoding
cf-cache-status: REVALIDATED
cf-bgj: imgq:85,h2pri
cf-polished: origSize=574307
x-amz-cf-pop: OSL50-P1
server: cloudflare
X-Firefox-Spdy: h2
trumpbucksbill.com/hosted/images/2f/5a9a9693fd434baf2444e71a80defa/ezgif.com-gif-maker.gif
200 OK 2.1 MB URL HTTP/2 trumpbucksbill.com/hosted/images/2f/5a9a9693fd434baf2444e71a80defa/ezgif.com-gif-maker.gif
IP
File type GIF image data, version 89a, 180 x 320\012- data
Size 2.1 MB (2058110 bytes)
Hash 9415ffe859b00b63339ce7801a1f4e00
9fb9753e1b751614d3f047a72031bd663054ab62
dc70e4185609b98ec80446ab9395f8b4eaaf3be0864d8423aaa9478763e4210a
GET /hosted/images/2f/5a9a9693fd434baf2444e71a80defa/ezgif.com-gif-maker.gif HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTUzMDgyODc=:visited=true; cf:visitor_id=97c816d2-2e8f-44b6-9ead-beb9b34a4cdb; aff_id=1374; subid=mw6gia0126trump; addevent_track_cookie=ab0d2c56-b655-40b6-3cb3-8dab7e99dd08; _ga=GA1.2.1602889558.1674811645; _gid=GA1.2.774091467.1674811645; _gat_gtag_UA_235277236_1=1; sessid2=sessid2023012709273100; spi_funnel_codename=; aff_id=1374; sid=mw6gia0126trump; campaign_id=; referrer=91.90.42.154:emdlvr.com:trumpbucksbill.com%2Fget-gold-pated-bills
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:25 GMT
content-type: image/gif
content-length: 2058110
cf-ray: 790073d01edcb524-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "9415ffe859b00b63339ce7801a1f4e00"
last-modified: Thu, 07 Jul 2022 15:11:52 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-P1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
trumpbucksbill.com/cdn-cgi/rum?
204 No Content 0 B URL HTTP/2 trumpbucksbill.com/cdn-cgi/rum?
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 12873
Origin: https://trumpbucksbill.com
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTUzMDgyODc=:visited=true; cf:visitor_id=97c816d2-2e8f-44b6-9ead-beb9b34a4cdb; aff_id=1374; subid=mw6gia0126trump; addevent_track_cookie=ab0d2c56-b655-40b6-3cb3-8dab7e99dd08; _ga=GA1.2.1602889558.1674811645; _gid=GA1.2.774091467.1674811645; _gat_gtag_UA_235277236_1=1; sessid2=sessid2023012709273100; spi_funnel_codename=; aff_id=1374; sid=mw6gia0126trump; campaign_id=; referrer=91.90.42.154:emdlvr.com:trumpbucksbill.com%2Fget-gold-pated-bills
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Fri, 27 Jan 2023 09:27:25 GMT
access-control-allow-origin: https://trumpbucksbill.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 790073d1d8d9b524-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
trumpbucksbill.com/hosted/images/86/0e54ae46594eadaa15c13caa7c5382/ezgif.com-gif-maker-2-.gif
200 OK 2.2 MB URL HTTP/2 trumpbucksbill.com/hosted/images/86/0e54ae46594eadaa15c13caa7c5382/ezgif.com-gif-maker-2-.gif
IP
File type GIF image data, version 89a, 234 x 312\012- data
Size 2.2 MB (2175055 bytes)
Hash 98211803a05e68e71c71cff946413e25
51409284a7f485deea5929b16ec1316323d453af
74885cdb2ce3367680bb0f4ba27cd89855e2152d8f9ad17452a06d17ba6b1579
GET /hosted/images/86/0e54ae46594eadaa15c13caa7c5382/ezgif.com-gif-maker-2-.gif HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTUzMDgyODc=:visited=true; cf:visitor_id=97c816d2-2e8f-44b6-9ead-beb9b34a4cdb; aff_id=1374; subid=mw6gia0126trump; addevent_track_cookie=ab0d2c56-b655-40b6-3cb3-8dab7e99dd08; _ga=GA1.2.1602889558.1674811645; _gid=GA1.2.774091467.1674811645; _gat_gtag_UA_235277236_1=1; sessid2=sessid2023012709273100; spi_funnel_codename=; aff_id=1374; sid=mw6gia0126trump; campaign_id=; referrer=91.90.42.154:emdlvr.com:trumpbucksbill.com%2Fget-gold-pated-bills
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:25 GMT
content-type: image/gif
content-length: 2175055
cf-ray: 790073d01eeeb524-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "98211803a05e68e71c71cff946413e25"
last-modified: Thu, 07 Jul 2022 15:18:09 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-P1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
js-agent.newrelic.com/859.95d4308d-1222.js
200 OK 3.0 kB URL HTTP/2 js-agent.newrelic.com/859.95d4308d-1222.js
IP
File type ASCII text, with very long lines (6657), with no line terminators
Hash 364ac85aef21ab784eeec8f55116dff7
82089547d57defc88e114832b7eb9919a8876e31
255295be519de9a2d1040b1c547c25756b63310e2d7234bcf252ed41d5278c0b
GET /859.95d4308d-1222.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: PAOkWJ6WiOdnSUVZHZQv79Edy7uPwU81uM9fUJQx6T8UpQupKV3O9whnAR+3HGoYTBPmehtRe7k=
x-amz-request-id: WFN4FJZ1XN6DZ8EG
last-modified: Wed, 18 Jan 2023 20:22:30 GMT
etag: "b087387593417c0b63259918da3584e3"
x-amz-version-id: GtNmis6Y3zB4SbtciuRtabFzp3T7wBIy
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Fri, 27 Jan 2023 09:27:25 GMT
via: 1.1 varnish
x-served-by: cache-bma1660-BMA
x-cache: HIT
x-cache-hits: 6941
x-timer: S1674811646.949025,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2975
X-Firefox-Spdy: h2
js-agent.newrelic.com/569.95d4308d-1222.js
200 OK 3.2 kB URL HTTP/2 js-agent.newrelic.com/569.95d4308d-1222.js
IP
File type ASCII text, with very long lines (7513), with no line terminators
Hash 8d0953404ce6fdf0926ef6bf37d7e041
8cec9d9883f8b7720721bb33bffb4afe45193b1d
83966eef1899edd421692b78cda8df58dfb9b0b2b27a7485183c5b4cb44a336d
GET /569.95d4308d-1222.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: v+E2uK5EOShfz1aeDzYcwNWitGv9mKnF6hMwgfWjfoR/qfIZPK6AF+v3z+by8JUQg3fSUYcltK4=
x-amz-request-id: WFNFJ5TESSHD3FE6
last-modified: Wed, 18 Jan 2023 20:22:30 GMT
etag: "e97726ab932639fed09971b1d682788c"
x-amz-version-id: umZj.yHws5JPiBHG1j096ELWHEKx7rh0
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Fri, 27 Jan 2023 09:27:25 GMT
via: 1.1 varnish
x-served-by: cache-bma1660-BMA
x-cache: HIT
x-cache-hits: 6962
x-timer: S1674811646.973266,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 3173
X-Firefox-Spdy: h2
js-agent.newrelic.com/620.95d4308d-1222.js
200 OK 1.3 kB URL HTTP/2 js-agent.newrelic.com/620.95d4308d-1222.js
IP
File type ASCII text, with very long lines (2989), with no line terminators
Hash 7094c3f93699a846fe91edd766391f01
25e8c79409acc2bb73a728c0768e1eda66019255
85eb01219e8aaa7c7968aa175c2421454f99615ae66350b15c60465f4616826f
GET /620.95d4308d-1222.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: QggJtv+14rx8wEd4C6ZTDmmxUSe6+8jiYhTGnWcIRu6DC5pRiaL5fPRx8/lgChduQ7GqRSlO6xY=
x-amz-request-id: WFN5FXFSJTZYM7K6
last-modified: Wed, 18 Jan 2023 20:22:30 GMT
etag: "ca9b029ff66dd9146273984d16e20abc"
x-amz-version-id: HYguQMwVKEHCmodKuQRUzW1qxlElK9Xr
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Fri, 27 Jan 2023 09:27:25 GMT
via: 1.1 varnish
x-served-by: cache-bma1660-BMA
x-cache: HIT
x-cache-hits: 6966
x-timer: S1674811646.976072,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1342
X-Firefox-Spdy: h2
js-agent.newrelic.com/41.95d4308d-1222.js
200 OK 439 B URL HTTP/2 js-agent.newrelic.com/41.95d4308d-1222.js
IP
File type ASCII text, with very long lines (828), with no line terminators
Hash 46946da829a2257cd8bdeb75bc6f8ff9
bfb81d0ebb2c5a2c0fe666f6a9c4c09cc5a545b3
50e164f0b5274f88ecc28c833729663593b3380aed5a4ac3a06d29106332a544
GET /41.95d4308d-1222.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 2TG7kVMnt5x5EwbcjDgF/pAaH/jmgGXStlMFEbvOUPNYaRTe14pFRmwb0VQGFJQN7uXfEncHoqkNLs4TYWl92Q==
x-amz-request-id: MFEHG5GPGK6ZYQVP
last-modified: Wed, 18 Jan 2023 20:22:30 GMT
etag: "29dd8aef66100e4c69e07fd60fc88b12"
x-amz-version-id: 6FOFyXAonMoqJqLGEMhx7HWIp32cv4MT
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Fri, 27 Jan 2023 09:27:25 GMT
via: 1.1 varnish
x-served-by: cache-bma1660-BMA
x-cache: HIT
x-cache-hits: 6995
x-timer: S1674811646.979217,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 439
X-Firefox-Spdy: h2
js-agent.newrelic.com/457.95d4308d-1222.js
200 OK 2.0 kB URL HTTP/2 js-agent.newrelic.com/457.95d4308d-1222.js
IP
File type ASCII text, with very long lines (4809), with no line terminators
Hash 09c0cca8d2a9fd69f1892a1c2d1319b9
b46f4fe3b0adc98785d22a092818b74145a91cc0
593022809e272793157f8280bae176bfa74a02f9f9a6d3269384e2dd434be046
GET /457.95d4308d-1222.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 6YLQBRWWkaavoi6QR5dS+9cRhXVrpaQK5v3G9/iqQ5oKPUxxFI0Uv2tN9ar51sQUG2xwVmTWBnY=
x-amz-request-id: WFN1Z9NXJZGF8XE5
last-modified: Wed, 18 Jan 2023 20:22:30 GMT
etag: "c16abc7fa2e34cbb7baf3e290120ad5a"
x-amz-version-id: qROfxBD9CF8WXmbywdhvCmImuu9HvRNA
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Fri, 27 Jan 2023 09:27:25 GMT
via: 1.1 varnish
x-served-by: cache-bma1660-BMA
x-cache: HIT
x-cache-hits: 6985
x-timer: S1674811646.979640,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1953
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 7b72e532b49cad695eb0f3ce02e7c8eb
0cab73ccaca3c3d107577a824c8f45ddbd6882d1
82ec65861808196cd2252c59bc040b01208469409c7a6f66b1c2efaa6d8272eb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3529
Cache-Control: max-age=138368
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 09:27:26 GMT
Etag: "63d304b5-1d7"
Expires: Sat, 28 Jan 2023 23:53:34 GMT
Last-Modified: Thu, 26 Jan 2023 22:54:45 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
bam.nr-data.net/1/NRJS-fc902efb332119fff33?a=367981416&v=1222.PROD&to=dFZWTENWVQ9QExdNRlJLSFlWXEpMRQBfXUYYSU1aXVBKC1AF&rst=2506&ck=0&s=59edab8a3a626fae&ref=https://trumpbucksbill.com/get-gold-pated-bills&ap=398&be=371&fe=1562&dc=664&perf=%7B%22timing%22:%7B%22of%22:1674811643277,%22n%22:0,%22f%22:0,%22dn%22:8,%22dne%22:79,%22c%22:79,%22s%22:82,%22ce%22:96,%22rq%22:96,%22rp%22:352,%22rpe%22:352,%22dl%22:358,%22di%22:1003,%22ds%22:1035,%22de%22:1198,%22dc%22:1933,%22l%22:1933,%22le%22:2048%7D,%22navigation%22:%7B%7D%7D&fcp=692&jsonp=NREUM.setToken
200 OK 72 B URL HTTP/1.1 bam.nr-data.net/1/NRJS-fc902efb332119fff33?a=367981416&v=1222.PROD&to=dFZWTENWVQ9QExdNRlJLSFlWXEpMRQBfXUYYSU1aXVBKC1AF&rst=2506&ck=0&s=59edab8a3a626fae&ref=https://trumpbucksbill.com/get-gold-pated-bills&ap=398&be=371&fe=1562&dc=664&perf=%7B%22timing%22:%7B%22of%22:1674811643277,%22n%22:0,%22f%22:0,%22dn%22:8,%22dne%22:79,%22c%22:79,%22s%22:82,%22ce%22:96,%22rq%22:96,%22rp%22:352,%22rpe%22:352,%22dl%22:358,%22di%22:1003,%22ds%22:1035,%22de%22:1198,%22dc%22:1933,%22l%22:1933,%22le%22:2048%7D,%22navigation%22:%7B%7D%7D&fcp=692&jsonp=NREUM.setToken
IP
File type ASCII text, with no line terminators
Hash 107d93e382e2c9b00fbf9fb0edc65d86
77e750e3ebf9706f4f6dd253785602d70be17c6c
a1ee50b689ea433a0acdccbf4ee4629e9ea3f9c4bcdd21effb334359a2f9e937
GET /1/NRJS-fc902efb332119fff33?a=367981416&v=1222.PROD&to=dFZWTENWVQ9QExdNRlJLSFlWXEpMRQBfXUYYSU1aXVBKC1AF&rst=2506&ck=0&s=59edab8a3a626fae&ref=https://trumpbucksbill.com/get-gold-pated-bills&ap=398&be=371&fe=1562&dc=664&perf=%7B%22timing%22:%7B%22of%22:1674811643277,%22n%22:0,%22f%22:0,%22dn%22:8,%22dne%22:79,%22c%22:79,%22s%22:82,%22ce%22:96,%22rq%22:96,%22rp%22:352,%22rpe%22:352,%22dl%22:358,%22di%22:1003,%22ds%22:1035,%22de%22:1198,%22dc%22:1933,%22l%22:1933,%22le%22:2048%7D,%22navigation%22:%7B%7D%7D&fcp=692&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 09:27:26 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 790073d3edccb512-OSL
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
display.buygoods.com/v1/disclaimer?id=disclaimer&account_id=%207456&_=1674811644424
200 OK 0 B URL HTTP/2 display.buygoods.com/v1/disclaimer?id=disclaimer&account_id=%207456&_=1674811644424
IP
GET /v1/disclaimer?id=disclaimer&account_id=%207456&_=1674811644424 HTTP/1.1
Host: display.buygoods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:25 GMT
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-credentials: true
strict-transport-security: max-age=31536000;
set-cookie: SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
cache-control: private
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 790073cb4b6cb4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
trumpbucksbill.com/assets/lander.js
200 OK 0 B URL HTTP/2 trumpbucksbill.com/assets/lander.js
IP
GET /assets/lander.js HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:23 GMT
content-type: application/x-javascript
cf-ray: 790073c65a2ab524-OSL
access-control-allow-origin: *
age: 389
cache-control: public, max-age=1200
etag: W/"63c93a1e-2391a3"
expires: Fri, 27 Jan 2023 09:47:23 GMT
last-modified: Thu, 19 Jan 2023 12:39:58 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=L6tCQS7qhFnWjlgprmzmKgx2ubrWdQXsb8DVwEkaa9Q-1674811643-0-AWSQBpdbkmyhZzQJvVMYxiAbI_ZE-lyfJXqcxfHWV88fts47_P430wwXCPRgnC2KeiX1JPIpp9CKIOHf3iAMvKNG2ZNc758LsHyYJgjKGjWK"}],"group":"cf-csp-endpoint","max_age":86400}
content-security-policy-report-only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=L6tCQS7qhFnWjlgprmzmKgx2ubrWdQXsb8DVwEkaa9Q-1674811643-0-AWSQBpdbkmyhZzQJvVMYxiAbI_ZE-lyfJXqcxfHWV88fts47_P430wwXCPRgnC2KeiX1JPIpp9CKIOHf3iAMvKNG2ZNc758LsHyYJgjKGjWK; report-to cf-csp-endpoint
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
buygoods.com/affiliates/go/conversion/iframe/bg?a=7456&t=9df26dc6215e871b153fb2b9056468a6&conversion=1&s=&o=null&ut=null
200 OK 0 B URL HTTP/2 buygoods.com/affiliates/go/conversion/iframe/bg?a=7456&t=9df26dc6215e871b153fb2b9056468a6&conversion=1&s=&o=null&ut=null
IP
GET /affiliates/go/conversion/iframe/bg?a=7456&t=9df26dc6215e871b153fb2b9056468a6&conversion=1&s=&o=null&ut=null HTTP/1.1
Host: buygoods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:25 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 790073cb4b5eb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.9.0/css/all.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.9.0/css/all.css
IP
GET /releases/v5.9.0/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:24 GMT
content-type: text/css
x-amz-id-2: vC8KBN503iyWKZzHxfJc5rs99Ocw4DSTaifdaL1SsWTbuhhIHZc4Cm+BPlh6dJ7ueugjQrc5cWE=
x-amz-request-id: F0PHW7H6699FG8TW
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"dbf9d822cefe851ba6f66e1ad57e8987"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 2664937
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B8DbK73uS2pYJHZbh5WBvPrcdEpMSYI8ViS3QQCplo46Lf1K1RNOlDJsrRSBWnz9tLpYt%2Fz12ejfani6gX93VvNTW9Od4hfyK2JN5FNzglfUFlRMBZJEyUzAkhdXXHbg%2BxYYgJ4K"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790073c6ffa58e27-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
trumpbucksbill.com/images/background.png?_unique=0.4389648796748976&_uniqueVisitorID=null&_type=WINDOW&_location=ttps%3A//trumpbucksbill.com/get-gold-pated-bills%3Faff_id%3D1374%26subid%3Dmw6gia0126trump&_referrer=ttps%3A//emdlvr.com/&_title=Trump%20Bucks%20Gold%20Bill&_key=1yc2df14&_page_key=1kofc3nbufuhcyqf&_fid=12240070&_fspos=1&_fvrs=1&_funnel_stat=1&_location=https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump&_referrer=https://emdlvr.com/
200 OK 0 B URL HTTP/2 trumpbucksbill.com/images/background.png?_unique=0.4389648796748976&_uniqueVisitorID=null&_type=WINDOW&_location=ttps%3A//trumpbucksbill.com/get-gold-pated-bills%3Faff_id%3D1374%26subid%3Dmw6gia0126trump&_referrer=ttps%3A//emdlvr.com/&_title=Trump%20Bucks%20Gold%20Bill&_key=1yc2df14&_page_key=1kofc3nbufuhcyqf&_fid=12240070&_fspos=1&_fvrs=1&_funnel_stat=1&_location=https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump&_referrer=https://emdlvr.com/
IP
GET /images/background.png?_unique=0.4389648796748976&_uniqueVisitorID=null&_type=WINDOW&_location=ttps%3A//trumpbucksbill.com/get-gold-pated-bills%3Faff_id%3D1374%26subid%3Dmw6gia0126trump&_referrer=ttps%3A//emdlvr.com/&_title=Trump%20Bucks%20Gold%20Bill&_key=1yc2df14&_page_key=1kofc3nbufuhcyqf&_fid=12240070&_fspos=1&_fvrs=1&_funnel_stat=1&_location=https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump&_referrer=https://emdlvr.com/ HTTP/1.1
Host: trumpbucksbill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/get-gold-pated-bills?aff_id=1374&subid=mw6gia0126trump
Cookie: __cf_bm=fatL0CZNEHprHxZildbuI3HZ1dGK7EqBNxXOH5Q9lO8-1674811643-0-ASr0aFgdHfz52wBquymfzemy+pJ026r3SbZTm05GKopX2NuQvJvLLmwXdFCLDVE3U1UtJSvw1pxz/66/GVMiU2sKdF6AjXNVzCaliq8JXAVq; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTUzMDgyODc=:visited=true; cf:visitor_id=97c816d2-2e8f-44b6-9ead-beb9b34a4cdb; aff_id=1374; subid=mw6gia0126trump; addevent_track_cookie=ab0d2c56-b655-40b6-3cb3-8dab7e99dd08; _ga=GA1.2.1602889558.1674811645; _gid=GA1.2.774091467.1674811645; _gat_gtag_UA_235277236_1=1; sessid2=sessid2023012709273100; spi_funnel_codename=; aff_id=1374; sid=mw6gia0126trump; campaign_id=; referrer=91.90.42.154:emdlvr.com:trumpbucksbill.com%2Fget-gold-pated-bills
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:25 GMT
content-type: text/javascript; charset=utf-8
cf-ray: 790073d02efcb524-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store, private
strict-transport-security: max-age=0
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
status: 200 OK
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: 949b35a5aeea6fe31e574f25fb8c0d3f
x-runtime: 0.028434
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
click.familyhealthykeeper.com/?t=c&ids=NTc1MTIyMzU1__MTQ5MjQ=__NDcwMjUxNjA=__Njc5__825&url=aHR0cHMlM0ElMkYlMkZlbWRsdnIuY29tJTJGd2Vidw==
200 OK 0 B URL HTTP/2 click.familyhealthykeeper.com/?t=c&ids=NTc1MTIyMzU1__MTQ5MjQ=__NDcwMjUxNjA=__Njc5__825&url=aHR0cHMlM0ElMkYlMkZlbWRsdnIuY29tJTJGd2Vidw==
IP
GET /?t=c&ids=NTc1MTIyMzU1__MTQ5MjQ=__NDcwMjUxNjA=__Njc5__825&url=aHR0cHMlM0ElMkYlMkZlbWRsdnIuY29tJTJGd2Vidw== HTTP/1.1
Host: click.familyhealthykeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:27:23 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: EXPIRED
x-server-powered-by: Engintron
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Montserrat%7CMontserratbold+serif%7CMontserrat%7CMontserratbold+serif%7CMontserrat%7CMontserratbold+serif%7CMontserrat%7COxygen%7CMontserrat%7COxygen%7CMontserrat%7COxygen%7CMontserrat%7COxygen%7CMontserrat%7CMontserratbold+serif%7CMontserrat%7CMontserrat%7C
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Montserrat%7CMontserratbold+serif%7CMontserrat%7CMontserratbold+serif%7CMontserrat%7CMontserratbold+serif%7CMontserrat%7COxygen%7CMontserrat%7COxygen%7CMontserrat%7COxygen%7CMontserrat%7COxygen%7CMontserrat%7CMontserratbold+serif%7CMontserrat%7CMontserrat%7C
IP
GET /css?family=Montserrat%7CMontserratbold+serif%7CMontserrat%7CMontserratbold+serif%7CMontserrat%7CMontserratbold+serif%7CMontserrat%7COxygen%7CMontserrat%7COxygen%7CMontserrat%7COxygen%7CMontserrat%7COxygen%7CMontserrat%7CMontserratbold+serif%7CMontserrat%7CMontserrat%7C HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 27 Jan 2023 09:27:23 GMT
date: Fri, 27 Jan 2023 09:27:23 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.9.0/css/v4-shims.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.9.0/css/v4-shims.css
IP
GET /releases/v5.9.0/css/v4-shims.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 27 Jan 2023 09:27:24 GMT
content-type: text/css
x-amz-id-2: HpuDfuJOnoRBIn1oGWh6kpnFISyPAhBcUuSh2sgaSOixf+diILYpFUsoF1uDkiR93wgKGECAn7k=
x-amz-request-id: F0PPGVAN5CXAHSGM
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"e140a7d32f343530f016095df3cc2ae4"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 2664936
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IZR76xNH69gD4zdWipg399kST3e5qkanWuplFWBvJHU6lYC%2BK%2B1%2FX8pOWWdK8q37QTRDodreG8e7vsM4wAwGOAQhhMsuiK%2BoroMcIf8jHU3qJCMx3eezRv1Iy2NKWAi0JXq3Zvs2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790073c6ffa68e27-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700
IP
GET /css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trumpbucksbill.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 27 Jan 2023 09:27:23 GMT
date: Fri, 27 Jan 2023 09:27:23 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
app.clickfunnels.com/userevents/?funnel_id=NkhFVHJqdER0cHdnSGRFZ2hlalVhQT09LS1yc1dDR053bkFjMEZxa0hJMGwxTExBPT0%3D--821a2ac22d77fea956aba543e79c59c30342c4f7&page_id=KzlHOE5JRitmYTZpdXU0ZWFiQWZzQT09LS1BNSsxdUZEQTVUQmV6ZHJyaXJBMWZ3PT0%3D--ba2548336f24e660a81a79f9b705b4035ec2a63a&funnel_step_id=ZFd6ZjBXTlBuSVV3S0dIY3M1WFh3Zz09LS1aRk1LdWpRdVZqczdhYVNvL2N5ekZBPT0%3D--062d14c736e1b0cf87b5f202c25978b71c7f6f05&user_id=L2hHVnp5ZmF0UGxwL3Y3VEk1VHFaUT09LS1NcGl1T1FNM25qMlkxS0g2NUhVMmdnPT0%3D--21d57c5a6b529fd286da1940d3c1d8b224e83e6b&account_id=Nkt4TFdUajBRWnFlOVZDRDZaeVNpUT09LS00T2lPRzVha3lENVEyRUxZaHA5aWhRPT0%3D--5aeb6af033ee96c17f6546296feae3356bdaed0a&page_code=NTUzMDgyODc%3D&mode_id=1&time_zone=UTC&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniqueVisitorsCreatedSummary&nonce=d659a730-2336-4233-a49d-c3fd2f85ff32&url=https%3A%2F%2Ftrumpbucksbill.com%2Fget-gold-pated-bills%3Faff_id%3D1374%26subid%3Dmw6gia0126trump
202 Accepted 0 B URL HTTP/2 app.clickfunnels.com/userevents/?funnel_id=NkhFVHJqdER0cHdnSGRFZ2hlalVhQT09LS1yc1dDR053bkFjMEZxa0hJMGwxTExBPT0%3D--821a2ac22d77fea956aba543e79c59c30342c4f7&page_id=KzlHOE5JRitmYTZpdXU0ZWFiQWZzQT09LS1BNSsxdUZEQTVUQmV6ZHJyaXJBMWZ3PT0%3D--ba2548336f24e660a81a79f9b705b4035ec2a63a&funnel_step_id=ZFd6ZjBXTlBuSVV3S0dIY3M1WFh3Zz09LS1aRk1LdWpRdVZqczdhYVNvL2N5ekZBPT0%3D--062d14c736e1b0cf87b5f202c25978b71c7f6f05&user_id=L2hHVnp5ZmF0UGxwL3Y3VEk1VHFaUT09LS1NcGl1T1FNM25qMlkxS0g2NUhVMmdnPT0%3D--21d57c5a6b529fd286da1940d3c1d8b224e83e6b&account_id=Nkt4TFdUajBRWnFlOVZDRDZaeVNpUT09LS00T2lPRzVha3lENVEyRUxZaHA5aWhRPT0%3D--5aeb6af033ee96c17f6546296feae3356bdaed0a&page_code=NTUzMDgyODc%3D&mode_id=1&time_zone=UTC&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniqueVisitorsCreatedSummary&nonce=d659a730-2336-4233-a49d-c3fd2f85ff32&url=https%3A%2F%2Ftrumpbucksbill.com%2Fget-gold-pated-bills%3Faff_id%3D1374%26subid%3Dmw6gia0126trump
IP
GET /userevents/?funnel_id=NkhFVHJqdER0cHdnSGRFZ2hlalVhQT09LS1yc1dDR053bkFjMEZxa0hJMGwxTExBPT0%3D--821a2ac22d77fea956aba543e79c59c30342c4f7&page_id=KzlHOE5JRitmYTZpdXU0ZWFiQWZzQT09LS1BNSsxdUZEQTVUQmV6ZHJyaXJBMWZ3PT0%3D--ba2548336f24e660a81a79f9b705b4035ec2a63a&funnel_step_id=ZFd6ZjBXTlBuSVV3S0dIY3M1WFh3Zz09LS1aRk1LdWpRdVZqczdhYVNvL2N5ekZBPT0%3D--062d14c736e1b0cf87b5f202c25978b71c7f6f05&user_id=L2hHVnp5ZmF0UGxwL3Y3VEk1VHFaUT09LS1NcGl1T1FNM25qMlkxS0g2NUhVMmdnPT0%3D--21d57c5a6b529fd286da1940d3c1d8b224e83e6b&account_id=Nkt4TFdUajBRWnFlOVZDRDZaeVNpUT09LS00T2lPRzVha3lENVEyRUxZaHA5aWhRPT0%3D--5aeb6af033ee96c17f6546296feae3356bdaed0a&page_code=NTUzMDgyODc%3D&mode_id=1&time_zone=UTC&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniqueVisitorsCreatedSummary&nonce=d659a730-2336-4233-a49d-c3fd2f85ff32&url=https%3A%2F%2Ftrumpbucksbill.com%2Fget-gold-pated-bills%3Faff_id%3D1374%26subid%3Dmw6gia0126trump HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://trumpbucksbill.com
Connection: keep-alive
Referer: https://trumpbucksbill.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
date: Fri, 27 Jan 2023 09:27:24 GMT
content-type: text/html
cf-ray: 790073cabdeb1bfe-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: 1642e22dab6cabaa57bdc74b9e5cd0ef
x-runtime: 0.037529
set-cookie: __cf_bm=htGufiBDqP14qomwPz5GjGLew6.UnXGcZFkHIlV5IsY-1674811644-0-ARWY9IzJijsnJqhM3fKgyNxAz3vQG8IU6XFu1E4tnsCgOqEH9AgZ7BLSc6ABCq0rLvxfMi8QxsjBaqL5+CrvEuj/rGmnsgqJ5g2efM92QmGj; path=/; expires=Fri, 27-Jan-23 09:57:24 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
170.187.185.18
104.16.12.194
151.101.130.137
93.184.220.29
23.36.76.226