Overview

URLemail.mg.performanceequinevs.com/c/eJxM0M9q4zAYBPCnsY5G_2UddFh28e5CQ0oh7TF8lj4lIpLsKHYhffqSnMrchuF3GH9MwZmP-1naw_V__RPT2n7rsuckOACpcSLomDZ00NoYTbBAysf1vqDzUBZIp_qje2BaWKPUQJHpEG0IcqIDC8qTs0NgxkctuZDKWIhsQC4iY5NiMihrSXKccs4eMcIK3WsQGCmdLEKwHkMnaTn1C7Y4twLVI163VPHz1vu5kOzO67rcOvGr42PHR8gTtnVuW85Qe5-Tv8StVszPecfHeVlTZVowY41QeqCG5Pl5yeFlP5b3t7-7fdx2F3id5n8n0pzHnKCTNMOXh_ZQvgMAAP__PN9mgQ
IP 34.86.85.56 (United States)
ASN#15169 GOOGLE
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-12-12 20:39:19 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (22)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2022-12-12 17:12:17 UTC 23.36.76.249
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-12-12 17:12:30 UTC 34.117.237.239
ocsp.digicert.com (5) 86 2012-05-21 07:02:23 UTC 2022-12-12 18:45:47 UTC 93.184.220.29
app.clickfunnels.com (10) 34727 2015-03-12 08:40:23 UTC 2022-12-12 17:12:34 UTC 104.16.14.194
use.fontawesome.com (2) 942 2017-01-30 04:43:25 UTC 2022-12-12 17:12:34 UTC 172.64.132.15
klee.studio.s3.amazonaws.com (1) 859833 2018-11-08 16:57:02 UTC 2022-12-09 05:52:01 UTC 52.217.34.52
js-agent.newrelic.com (3) 378 2017-01-30 05:00:15 UTC 2022-12-12 17:14:29 UTC 151.101.130.137
bam.nr-data.net (1) 630 2015-02-10 00:06:27 UTC 2022-12-12 17:12:02 UTC 162.247.241.14
img-getpocket.cdn.mozilla.net (4) 1631 2017-09-01 03:40:57 UTC 2022-12-12 17:34:28 UTC 34.120.237.76
static.cloudflareinsights.com (1) 1294 2019-09-24 14:34:56 UTC 2022-12-12 17:19:38 UTC 104.16.56.101
www.clickfunnels.com (1) 51002 2014-10-08 20:01:35 UTC 2022-12-12 16:25:51 UTC 104.18.39.181
fonts.googleapis.com (1) 8877 2012-05-23 12:41:44 UTC 2022-12-12 17:25:09 UTC 142.250.74.74
images.clickfunnels.com (2) 95357 2014-10-08 20:00:42 UTC 2022-12-12 16:25:52 UTC 104.16.14.194
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-12-12 17:26:41 UTC 52.24.78.9
d26b395fwzu5fz.cloudfront.net (1) 0 2014-10-30 06:57:09 UTC 2022-12-12 18:15:38 UTC 54.230.96.210 Unknown ranking
ocsp.pki.goog (1) 175 2017-06-14 07:23:31 UTC 2022-12-12 17:12:18 UTC 216.58.211.3
albertorullan.clickfunnels.com (3) 0 No data No data 104.16.14.194 Domain (clickfunnels.com) ranked at: 14979
ocsp.sca1b.amazontrust.com (1) 1015 2016-02-14 02:37:56 UTC 2019-03-27 04:05:54 UTC 108.157.217.47
email.mg.performanceequinevs.com (1) 0 2022-11-11 20:24:58 UTC 2022-12-12 17:39:57 UTC 34.86.85.56 Unknown ranking
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2022-12-12 17:13:01 UTC 35.241.9.150
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-12-12 17:14:28 UTC 34.160.144.191
classic.clickfunnels.com (1) 0 2022-10-26 18:44:01 UTC 2022-12-12 16:25:52 UTC 104.16.14.194 Domain (clickfunnels.com) ranked at: 14979

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-12 2 email.mg.performanceequinevs.com/c/eJxM0M9q4zAYBPCnsY5G_2UddFh28e5CQ0oh7TF8 (...) Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 34.86.85.56
Date UQ / IDS / BL URL IP
2023-02-25 15:29:48 +0000 0 - 0 - 1 email.us.cupid-selections.com/c/eJxtkM1uwyAQh (...) 34.86.85.56
2023-02-25 14:34:29 +0000 0 - 0 - 3 email.daytranslations.com/c/eJxtjTsSwiAUAE8DZ (...) 34.86.85.56
2023-02-23 20:52:01 +0000 0 - 0 - 19 email.travelsbroker.com/c/eJxljssKwjAURL-m2Vn (...) 34.86.85.56
2023-02-23 19:41:27 +0000 0 - 0 - 1 email.mail.usbfund.com/c/eJxNUMtOwzAQ_Jr4GNlr (...) 34.86.85.56
2023-02-23 05:29:43 +0000 0 - 2 - 0 email.send.fixmycurls.com/c/eJxVz0tqxDAQBNDT2 (...) 34.86.85.56


Last 5 reports on ASN: GOOGLE
Date UQ / IDS / BL URL IP
2023-03-24 00:30:52 +0000 0 - 3 - 0 r5---sn-qxo7rn7r.gvt1.com/edgedl/release2/upd (...) 173.194.54.170
2023-03-24 00:28:11 +0000 0 - 0 - 0 groups.google.com/d/forum/lawyers-cooperation 173.194.221.138
2023-03-24 00:27:21 +0000 0 - 2 - 0 r5---sn-4g5lznek.gvt1.com/edgedl/release2/upd (...) 74.125.162.42
2023-03-24 00:25:54 +0000 0 - 2 - 0 r5---sn-4g5lznek.gvt1.com/edgedl/release2/upd (...) 74.125.162.42
2023-03-24 00:25:41 +0000 0 - 2 - 0 r1---sn-qxoedne7.gvt1.com/edgedl/release2/upd (...) 74.125.161.38


Last 2 reports on domain: performanceequinevs.com
Date UQ / IDS / BL URL IP
2022-12-13 18:42:09 +0000 0 - 0 - 26 performanceequinevs.com/ 67.225.141.82
2022-12-12 20:39:19 +0000 0 - 0 - 1 email.mg.performanceequinevs.com/c/eJxM0M9q4z (...) 34.86.85.56


No other reports with similar screenshot

JavaScript

Executed Scripts (25)

Executed Evals (2)
#1 JavaScript::Eval (size: 20304) - SHA256: 9c1ea695852f01d2fc6027d572b126b740a9c4634540fb0d39ea3656377eef77
function $d(d) {
    return document.getElementById(d)
}
var proc = location.protocol;
if (proc != 'https:') {
    proc = 'http:'
}
var _image_path = proc + '//addthisevent.com/gfx/icon-calendar-t1.png';
var _ate_license = '';
var _ate_mouse = false;
var _ate_css = 'true';
var _ate_callback = '';
var _ate_dropdown = '';
var _ate_lbl_outlook = 'Outlook Calendar';
var _ate_lbl_google = 'Google Calendar';
var _ate_lbl_yahoo = 'Yahoo Calendar';
var _ate_lbl_hotmail = 'Hotmail Calendar';
var _ate_lbl_ical = 'iCal Calendar';
var _ate_lbl_fb_event = 'Facebook Event';
var _ate_show_outlook = true;
var _ate_show_google = true;
var _ate_show_yahoo = true;
var _ate_show_hotmail = true;
var _ate_show_ical = true;
var _ate_show_facebook = true;
var _d_rd = false;
var _ate_btn_found = false;
var _ate_btn_expo = false;
var addthisevent = function() {
    var D = false,
        dropzcx = 1,
        olddrop = '',
        dropmousetim, css1 = false,
        css2 = false;
    return {
        generate: function() {
            try {
                _image_path = _image_path
            } catch (e) {
                _image_path = proc + '//addthisevent.com/gfx/icon-calendar-t1.png'
            }
            try {
                _ate_license = _license
            } catch (e) {}
            try {
                _ate_mouse = _mouse
            } catch (e) {}
            try {
                _ate_css = _css
            } catch (e) {}
            var b = addthisevent.glicense(_ate_license);
            var c = document.getElementsByTagName('*');
            for (var d = 0; d < c.length; d += 1) {
                var f = '',
                    fbevent = false,
                    str = c[d].className,
                    htmx = '';
                if (addthisevent.hasclass(c[d], 'addthisevent')) {
                    var g = c[d].getElementsByTagName('span');
                    for (var m = 0; m < g.length; m += 1) {
                        if (addthisevent.hasclass(g[m], '_url')) {
                            g[m].style.display = 'none'
                        }
                        if (addthisevent.hasclass(g[m], '_start')) {
                            g[m].style.display = 'none';
                            f += '&dstart=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_end')) {
                            g[m].style.display = 'none';
                            f += '&dend=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_zonecode')) {
                            g[m].style.display = 'none';
                            f += '&dzone=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_summary')) {
                            g[m].style.display = 'none';
                            f += '&dsum=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_description')) {
                            g[m].style.display = 'none';
                            f += '&ddesc=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_location')) {
                            g[m].style.display = 'none';
                            f += '&dloca=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_organizer')) {
                            g[m].style.display = 'none';
                            f += '&dorga=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_organizer_email')) {
                            g[m].style.display = 'none';
                            f += '&dorgaem=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_attendees')) {
                            g[m].style.display = 'none';
                            f += '&datte=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_all_day_event')) {
                            g[m].style.display = 'none';
                            f += '&dallday=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_date_format')) {
                            g[m].style.display = 'none';
                            f += '&dateformat=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_alarm_reminder')) {
                            g[m].style.display = 'none';
                            f += '&alarm=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_recurring')) {
                            g[m].style.display = 'none';
                            f += '&drule=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_uid')) {
                            g[m].style.display = 'none';
                            f += '&uid=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_facebook_event')) {
                            if (g[m].innerHTML != '') {
                                g[m].style.display = 'none';
                                var h = g[m].innerHTML.replace(/ /gi, "");
                                f += '&fbevent=' + encodeURIComponent(h);
                                fbevent = true
                            }
                        }
                    }
                    if (b) {
                        f += '&credits=false'
                    }
                    f = f.replace(/'/gi, "�");
                    if (_ate_dropdown != '') {
                        _ate_dropdown = _ate_dropdown + ',';
                        _ate_dropdown = _ate_dropdown.replace(/ /gi, '');
                        var i = _ate_dropdown.split(',');
                        for (var a = 0; a < i.length; a += 1) {
                            if (_ate_show_outlook && i[a] == 'outlook') {
                                htmx += '<span class="ateoutlook" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'outlook\',\'' + f + '\');">' + _ate_lbl_outlook + '</span>'
                            }
                            if (_ate_show_google && i[a] == 'google') {
                                htmx += '<span class="ategoogle" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'google\',\'' + f + '\');">' + _ate_lbl_google + '</span>'
                            }
                            if (_ate_show_yahoo && i[a] == 'yahoo') {
                                htmx += '<span class="ateyahoo" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'yahoo\',\'' + f + '\');">' + _ate_lbl_yahoo + '</span>'
                            }
                            if (_ate_show_hotmail && i[a] == 'hotmail') {
                                htmx += '<span class="atehotmail" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'hotmail\',\'' + f + '\');">' + _ate_lbl_hotmail + '</span>'
                            }
                            if (_ate_show_ical && i[a] == 'ical') {
                                htmx += '<span class="ateical" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'ical\',\'' + f + '\');">' + _ate_lbl_ical + '</span>'
                            }
                            if (fbevent && i[a] == 'facebook') {
                                if (_ate_show_facebook && i[a] == 'facebook') {
                                    htmx += '<span class="atefacebook" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'facebook\',\'' + f + '\');">' + _ate_lbl_fb_event + '</span>'
                                }
                            }
                        }
                    } else {
                        if (_ate_show_outlook) {
                            htmx += '<span class="ateoutlook" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'outlook\',\'' + f + '\');">' + _ate_lbl_outlook + '</span>'
                        }
                        if (_ate_show_google) {
                            htmx += '<span class="ategoogle" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'google\',\'' + f + '\');">' + _ate_lbl_google + '</span>'
                        }
                        if (_ate_show_yahoo) {
                            htmx += '<span class="ateyahoo" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'yahoo\',\'' + f + '\');">' + _ate_lbl_yahoo + '</span>'
                        }
                        if (_ate_show_hotmail) {
                            htmx += '<span class="atehotmail" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'hotmail\',\'' + f + '\');">' + _ate_lbl_hotmail + '</span>'
                        }
                        if (_ate_show_ical) {
                            htmx += '<span class="ateical" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'ical\',\'' + f + '\');">' + _ate_lbl_ical + '</span>'
                        }
                        if (fbevent) {
                            if (_ate_show_facebook) {
                                htmx += '<span data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'facebook\',\'' + f + '\');">' + _ate_lbl_fb_event + '</span>'
                            }
                        }
                    }
                    if (!b) {
                        htmx += '<em class="copyx"><em class="brx"></em><em class="frs" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'home\');">AddThisEvent</em></em>'
                    }
                    c[d].id = 'atedrop' + dropzcx;
                    c[d].className = c[d].className.replace(/addthisevent/gi, '');
                    c[d].className = c[d].className + ' addthisevent-drop';
                    c[d].title = '';
                    var j = c[d].getAttribute('data-direct');
                    if (j) {
                        c[d].setAttribute('data-url', f);
                        c[d].setAttribute('data-ref', dropzcx);
                        c[d].onclick = function() {
                            addthisevent.direct(this);
                            return false
                        }
                    } else {
                        if (_ate_mouse) {
                            c[d].onmouseover = function() {
                                clearTimeout(dropmousetim);
                                addthisevent.show(this, 'auto', 'auto', true)
                            };
                            c[d].onmouseout = function() {
                                dropmousetim = setTimeout("addthisevent.out();", 200)
                            };
                            c[d].onclick = function() {
                                return false
                            }
                        } else {
                            c[d].onclick = function() {
                                addthisevent.show(this, 'auto', 'auto');
                                return false
                            }
                        }
                    }
                    var k = c[d];
                    var l = document.createElement('span');
                    l.id = 'atedrop' + dropzcx + '-drop';
                    l.className = 'addthisevent_dropdown';
                    l.innerHTML = htmx;
                    k.appendChild(l);
                    dropzcx++;
                    _ate_btn_found = true
                }
            }
            if (_ate_css == 'false') {
                addthisevent.trycss()
            } else {
                addthisevent.applycss(b)
            }
            if (_ate_btn_found && !_ate_btn_expo) {
                _ate_btn_expo = true;
                addthisevent.track({
                    typ: 'exposure',
                    cal: ''
                })
            }
        },
        direct: function(f) {
            var a = f.getAttribute('data-url');
            var b = f.getAttribute('data-direct');
            addthisevent.cli(f, b, a)
        },
        cli: function(f, a, b) {
            var c = '',
                ref = location.href,
                nw = true,
                now = new Date();
            if (a == 'outlook') {
                c = proc + '//addthisevent.com/create/?service=OUTLOOK' + b + '&reference=' + ref;
                nw = false
            }
            if (a == 'google') {
                c = proc + '//addthisevent.com/create/?service=GOOGLE' + b + '&reference=' + ref
            }
            if (a == 'yahoo') {
                c = proc + '//addthisevent.com/create/?service=YAHOO' + b + '&reference=' + ref
            }
            if (a == 'hotmail') {
                c = proc + '//addthisevent.com/create/?service=HOTMAIL' + b + '&reference=' + ref
            }
            if (a == 'ical') {
                c = proc + '//addthisevent.com/create/?service=ICAL' + b + '&reference=' + ref;
                nw = false
            }
            if (a == 'facebook') {
                c = proc + '//addthisevent.com/create/?service=FACEBOOK' + b + '&reference=' + ref
            }
            if (a == 'home') {
                c = proc + '//addthisevent.com/'
            }
            if (c != '') {
                if (a != 'home') {
                    var d = f.getAttribute('data-ref');
                    var g = $d('atedrop' + d);
                    if (g) {
                        var h = g.getAttribute('data-track');
                        if (h != null) {
                            h = h.replace(/ate-calendar/gi, a);
                            try {
                                eval(h)
                            } catch (e) {}
                        }
                    }
                }
                if (!$d('atecllink')) {
                    var j = document.createElement("a");
                    j.id = 'atecllink';
                    j.rel = 'external';
                    j.innerHTML = '{addthisevent-ghost-link}';
                    j.style.display = 'none';
                    document.body.appendChild(j)
                }
                var k = $d('atecllink');
                if (nw) {
                    k.target = '_blank'
                } else {
                    k.target = '_self'
                }
                k.href = c;
                addthisevent.eclick('atecllink')
            }
            addthisevent.track({
                typ: 'click',
                cal: a
            });
            if (_ate_callback) {
                for (var i = 0; i < _ate_callback.length; i++) {
                    try {
                        eval(_ate_callback[i])
                    } catch (e) {
                        alert(e.description)
                    }
                }
            }
        },
        applycss: function(a) {
            if (!css2) {
                var b;
                b = '.addthisevent-drop {display:inline-block;position:relative;font-family:arial;color:#333!important;background:#f4f4f4 url(' + _image_path + ') no-repeat 9px 50%;text-decoration:none!important;border:1px solid #d9d9d9;color:#555;font-weight:bold;font-size:14px;text-decoration:none;padding:9px 12px 8px 35px;-moz-border-radius:2px;-webkit-border-radius:2px;-webkit-touch-callout:none;-webkit-user-select:none;-khtml-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;}';
                b += '.addthisevent-drop:hover {border:1px solid #aab9d4;color:#555;font-weight:bold;font-size:14px;text-decoration:none!important;}';
                b += '.addthisevent-drop:active {top:1px;}';
                b += '.addthisevent-selected {background-color:#f7f7f7;}';
                if (a) {
                    b += '.addthisevent_dropdown {width:200px;position:absolute;z-index:99999;padding:0px 0px 0px 0px;background:#fff;text-align:left;display:none;margin-top:-2px;margin-left:-1px;border-top:1px solid #c8c8c8;border-right:1px solid #bebebe;border-bottom:1px solid #a8a8a8;border-left:1px solid #bebebe;-moz-border-radius:2px;-webkit-border-radius:2px;-webkit-box-shadow:1px 3px 6px rgba(0,0,0,0.15);-moz-box-shadow:1px 3px 6px rgba(0,0,0,0.15);box-shadow:1px 3px 6px rgba(0,0,0,0.15);}'
                } else {
                    b += '.addthisevent_dropdown {width:200px;position:absolute;z-index:99999;padding:6px 0px 0px 0px;background:#fff;text-align:left;display:none;margin-top:-2px;margin-left:-1px;border-top:1px solid #c8c8c8;border-right:1px solid #bebebe;border-bottom:1px solid #a8a8a8;border-left:1px solid #bebebe;-moz-border-radius:2px;-webkit-border-radius:2px;-webkit-box-shadow:1px 3px 6px rgba(0,0,0,0.15);-moz-box-shadow:1px 3px 6px rgba(0,0,0,0.15);box-shadow:1px 3px 6px rgba(0,0,0,0.15);}'
                }
                b += '.addthisevent_dropdown span {display:block;cursor:pointer;line-height:110%;background:#fff;text-decoration:none;font-size:12px;color:#6d84b4;padding:8px 10px 9px 15px;}';
                b += '.addthisevent_dropdown span:hover {background:#f4f4f4;color:#6d84b4;text-decoration:none;font-size:12px;}';
                b += '.addthisevent span {display:none!important;}';
                b += '.addthisevent-drop ._url,.addthisevent-drop ._start,.addthisevent-drop ._end,.addthisevent-drop ._zonecode,.addthisevent-drop ._summary,.addthisevent-drop ._description,.addthisevent-drop ._location,.addthisevent-drop ._organizer,.addthisevent-drop ._organizer_email,.addthisevent-drop ._facebook_event,.addthisevent-drop ._all_day_event {display:none!important;}';
                b += '.addthisevent_dropdown .copyx {width:200px;height:21px;display:block;position:relative;cursor:default;}';
                b += '.addthisevent_dropdown .brx {width:180px;height:1px;overflow:hidden;background:#e0e0e0;position:absolute;z-index:100;left:10px;top:9px;}';
                b += '.addthisevent_dropdown .frs {position:absolute;top:5px;cursor:pointer;right:10px;padding-left:10px;font-style:normal;font-weight:normal;text-align:right;z-index:101;line-height:110%;background:#fff;text-decoration:none;font-size:9px;color:#cacaca;}';
                b += '.addthisevent_dropdown .frs:hover {color:#999!important;}';
                var c = document.createElement("style");
                c.type = "text/css";
                c.id = "ate_css";
                if (c.styleSheet) {
                    c.styleSheet.cssText = b
                } else {
                    c.appendChild(document.createTextNode(b))
                }
                document.getElementsByTagName("head")[0].appendChild(c);
                css2 = true
            }
        },
        trycss: function() {
            if (!css1) {
                try {
                    var a = '.addthisevent {visibility:hidden;}';
                    a += '.addthisevent-drop ._url,.addthisevent-drop ._start,.addthisevent-drop ._end,.addthisevent-drop ._zonecode,.addthisevent-drop ._summary,.addthisevent-drop ._description,.addthisevent-drop ._location,.addthisevent-drop ._organizer,.addthisevent-drop ._organizer_email,.addthisevent-drop ._attendees,.addthisevent-drop ._facebook_event,.addthisevent-drop ._all_day_event {display:none!important;}';
                    var b = document.createElement("style");
                    b.type = "text/css";
                    if (b.styleSheet) {
                        b.styleSheet.cssText = a
                    } else {
                        b.appendChild(document.createTextNode(a))
                    }
                    document.getElementsByTagName("head")[0].appendChild(b)
                } catch (e) {}
                css1 = true;
                addthisevent.track({
                    typ: 'jsinit',
                    cal: ''
                })
            }
        },
        removecss: function() {
            try {
                return (hdx = $d('ate_css')) ? hdx.parentNode.removeChild(hdx) : false
            } catch (e) {}
        },
        show: function(f, o, a, b) {
            var c = f.id;
            var d = $d(c);
            var g = $d(c + '-drop');
            if (d && g) {
                if (olddrop != c) {
                    addthisevent.hide(olddrop)
                }
                var h = addthisevent.getstyle(g, 'display');
                try {
                    f.blur()
                } catch (e) {};
                if (h == 'block') {
                    if (b) {} else {
                        addthisevent.hide(c)
                    }
                } else {
                    olddrop = c;
                    d.className = d.className + ' addthisevent-selected';
                    d.style.zIndex = addthisevent.topzindex();
                    g.style.left = '0px';
                    g.style.top = '0px';
                    g.style.display = 'block';
                    setTimeout("addthisevent.tim();", 350);
                    D = false;
                    var i = parseInt(d.offsetHeight);
                    var j = parseInt(d.offsetWidth);
                    var k = parseInt(g.offsetHeight);
                    var l = parseInt(g.offsetWidth);
                    var m = addthisevent.viewport();
                    var n = m.split('/');
                    var p = parseInt(n[0]);
                    var q = parseInt(n[1]);
                    var r = parseInt(n[2]);
                    var s = parseInt(n[3]);
                    var t = addthisevent.elementposition(g);
                    var u = t.split('/');
                    var v = parseInt(u[0]);
                    var w = parseInt(u[1]);
                    var x = w + k;
                    var y = q + s;
                    var z = v + l;
                    var A = p + r;
                    var B = 0,
                        dropy = 0;
                    if (o == 'down' && a == 'left') {
                        B = '0px';
                        dropy = i + 'px'
                    } else if (o == 'up' && a == 'left') {
                        B = '0px';
                        dropy = -k + 'px'
                    } else if (o == 'down' && a == 'right') {
                        B = -(l - j) + 'px';
                        dropy = i + 'px'
                    } else if (o == 'up' && a == 'right') {
                        B = -(l - j) + 'px';
                        dropy = -k + 'px'
                    } else if (o == 'auto' && a == 'left') {
                        B = '0px';
                        if (x > y) {
                            dropy = -k + 'px'
                        } else {
                            dropy = i + 'px'
                        }
                    } else if (o == 'auto' && a == 'right') {
                        B = -(l - j) + 'px';
                        if (x > y) {
                            dropy = -k + 'px'
                        } else {
                            dropy = i + 'px'
                        }
                    } else {
                        if (x > y) {
                            dropy = -k + 'px'
                        } else {
                            dropy = i + 'px'
                        }
                        if (z > A) {
                            B = -(l - j) + 'px'
                        } else {
                            B = '0px'
                        }
                    }
                    g.style.left = B;
                    g.style.top = dropy;
                    var C = 'ontouchstart' in document.documentElement ? 'touchstart' : 'click';
                    if (document.addEventListener) {
                        document.addEventListener(C, function() {
                            if (D) {
                                setTimeout(function() {
                                    addthisevent.force(c)
                                }, 300)
                            }
                        }, false)
                    } else if (document.attachEvent) {
                        document.attachEvent("on" + C, function() {
                            if (D) {
                                setTimeout(function() {
                                    addthisevent.force(c)
                                }, 300)
                            }
                        })
                    } else {
                        document.onclick = function() {
                            addthisevent.force(c)
                        }
                    }
                }
            }
        },
        force: function(f) {
            var a = $d(f);
            var b = $d(f + '-drop');
            if (a && b) {
                if (D && b.style.display == 'block') {
                    setTimeout("addthisevent.hide('" + f + "');", 350)
                }
            }
        },
        out: function() {
            addthisevent.force(olddrop)
        },
        hide: function(f) {
            var a = $d(f);
            var b = $d(f + '-drop');
            if (a && b) {
                a.className = a.className.replace(/addthisevent-selected/gi, '');
                b.style.display = 'none';
                b.style.zIndex = ''
            }
        },
        tim: function() {
            D = true
        },
        topzindex: function() {
            var a = 99999;
            var b = document.getElementsByTagName('*');
            for (var d = 0; d < b.length; d += 1) {
                if (addthisevent.hasclass(b[d], 'addthisevent-drop') || addthisevent.hasclass(b[d], 'addeventstc-drop')) {
                    var c = addthisevent.getstyle(b[d], 'z-index');
                    if (!isNaN(parseFloat(c)) && isFinite(c)) {
                        c = parseInt(c);
                        if (c > a) {
                            a = c
                        }
                    }
                }
            }
            a++;
            return a
        },
        viewport: function() {
            var w = 0,
                h = 0,
                y = 0,
                x = 0;
            if (typeof(window.innerWidth) == 'number') {
                w = window.innerWidth;
                h = window.innerHeight
            } else if (document.documentElement && (document.documentElement.clientWidth || document.documentElement.clientHeight)) {
                w = document.documentElement.clientWidth;
                h = document.documentElement.clientHeight
            } else if (document.body && (document.body.clientWidth || document.body.clientHeight)) {
                w = document.body.clientWidth;
                h = document.body.clientHeight
            }
            if (document.all) {
                x = (document.documentElement.scrollLeft) ? document.documentElement.scrollLeft : document.body.scrollLeft;
                y = (document.documentElement.scrollTop) ? document.documentElement.scrollTop : document.body.scrollTop
            } else {
                x = window.pageXOffset;
                y = window.pageYOffset
            }
            return w + '/' + h + '/' + x + '/' + y
        },
        elementposition: function(a) {
            var x = 0,
                y = 0;
            if (a.offsetParent) {
                x = a.offsetLeft;
                y = a.offsetTop;
                while (a = a.offsetParent) {
                    x += a.offsetLeft;
                    y += a.offsetTop
                }
            }
            return x + '/' + y
        },
        getstyle: function(a, b) {
            var x = a;
            var y;
            if (x.currentStyle) {
                y = x.currentStyle[b]
            } else if (window.getComputedStyle) {
                y = document.defaultView.getComputedStyle(x, null).getPropertyValue(b)
            }
            return y
        },
        glicense: function(f) {
            var b = location.href;
            var c = true;
            var d = f;
            var e = d.length;
            if (e == 20) {
                var a = d.substring(0, 1);
                var z = d.substring(9, 10);
                var m = d.substring(17, 18);
                if (a != 'a') {
                    c = false
                }
                if (z != 'z') {
                    c = false
                }
                if (m != 'm') {
                    c = false
                }
            } else {
                c = false
            }
            if (b.indexOf('addthisevent.com') == -1 && d == 'aao8iuet5zp9iqw5sm9z') {
                c = false
            }
            return c
        },
        refresh: function() {
            var a = document.getElementsByTagName('*');
            for (var d = 0; d < a.length; d += 1) {
                if (addthisevent.hasclass(a[d], 'addthisevent-drop')) {
                    a[d].className = a[d].className.replace(/addthisevent-drop/gi, '');
                    a[d].className = a[d].className.replace(/addthisevent/gi, '');
                    a[d].className = a[d].className + ' addthisevent'
                }
            }
            _ate_btn_expo = false;
            addthisevent.generate()
        },
        callcack: function(f) {
            _ate_callback = f
        },
        setlabel: function(l, t) {
            var x = l.toLowerCase();
            if (x == 'outlook') {
                _ate_lbl_outlook = t
            }
            if (x == 'google') {
                _ate_lbl_google = t
            }
            if (x == 'yahoo') {
                _ate_lbl_yahoo = t
            }
            if (x == 'ical') {
                _ate_lbl_ical = t
            }
            if (x == 'facebookevent') {
                _ate_lbl_fb_event = t
            }
        },
        settings: function(c) {
            if (c.license != undefined) {
                _ate_license = c.license
            }
            if (c.css != undefined) {
                if (c.css) {
                    _ate_css = 'true'
                } else {
                    _ate_css = 'false';
                    addthisevent.removecss()
                }
            }
            if (c.mouse != undefined) {
                _ate_mouse = c.mouse
            }
            if (c.outlook != undefined) {
                if (c.outlook.show != undefined) {
                    _ate_show_outlook = c.outlook.show
                }
            }
            if (c.google != undefined) {
                if (c.google.show != undefined) {
                    _ate_show_google = c.google.show
                }
            }
            if (c.yahoo != undefined) {
                if (c.yahoo.show != undefined) {
                    _ate_show_yahoo = c.yahoo.show
                }
            }
            if (c.hotmail != undefined) {
                if (c.hotmail.show != undefined) {
                    _ate_show_hotmail = c.hotmail.show
                }
            }
            if (c.ical != undefined) {
                if (c.ical.show != undefined) {
                    _ate_show_ical = c.ical.show
                }
            }
            if (c.facebook != undefined) {
                if (c.facebook.show != undefined) {
                    _ate_show_facebook = c.facebook.show
                }
            }
            if (c.outlook != undefined) {
                if (c.outlook.text != undefined) {
                    _ate_lbl_outlook = c.outlook.text
                }
            }
            if (c.google != undefined) {
                if (c.google.text != undefined) {
                    _ate_lbl_google = c.google.text
                }
            }
            if (c.yahoo != undefined) {
                if (c.yahoo.text != undefined) {
                    _ate_lbl_yahoo = c.yahoo.text
                }
            }
            if (c.hotmail != undefined) {
                if (c.hotmail.text != undefined) {
                    _ate_lbl_hotmail = c.hotmail.text
                }
            }
            if (c.ical != undefined) {
                if (c.ical.text != undefined) {
                    _ate_lbl_ical = c.ical.text
                }
            }
            if (c.facebook != undefined) {
                if (c.facebook.text != undefined) {
                    _ate_lbl_fb_event = c.facebook.text
                }
            }
            if (c.dropdown != undefined) {
                if (c.dropdown.order != undefined) {
                    _ate_dropdown = c.dropdown.order
                }
            }
            if (c.callback != undefined) {
                _ate_callback = c.callback
            }
        },
        hasclass: function(e, c) {
            return new RegExp('(\\s|^)' + c + '(\\s|$)').test(e.className)
        },
        htmlencode: function(a) {
            var b = a.replace(/<br\s*[\/]?>/gi, "\n");
            b = b.replace(/<(?:.|\n)*?>/gm, '');
            b = b.replace(/(^\s+|\s+$)/g, '');
            var c = document.createElement("div");
            var d = document.createTextNode(b);
            c.appendChild(d);
            return c.innerHTML
        },
        eclick: function(a) {
            var b = document.getElementById(a);
            if (b.click) {
                b.click()
            } else if (document.createEvent) {
                var c = document.createEvent('MouseEvents');
                c.initEvent('click', true, true);
                b.dispatchEvent(c)
            }
        },
        track: function(a) {
            var b = new Image(1, 1);
            var d = new Date();
            var c = d.getTime();
            var e = encodeURIComponent(window.location.href);
            b.src = proc + '//track.addevent.com/atc/?trktyp=' + a.typ + '&trkcal=' + a.cal + '&guid=' + addthisevent.getguid() + '&url=' + e + '&cache=' + c
        },
        getguid: function() {
            var a = "addevent_track_cookie=",
                coov = '';
            var b = document.cookie.split(';');
            for (var i = 0; i < b.length; i++) {
                var c = b[i];
                while (c.charAt(0) == ' ') {
                    c = c.substring(1, c.length)
                }
                if (c.indexOf(a) == 0) {
                    coov = c.substring(a.length, c.length)
                }
            }
            if (coov == '') {
                var d = (addthisevent.s4() + addthisevent.s4() + "-" + addthisevent.s4() + "-4" + addthisevent.s4().substr(0, 3) + "-" + addthisevent.s4() + "-" + addthisevent.s4() + addthisevent.s4() + addthisevent.s4()).toLowerCase();
                var e = new Date();
                e.setTime(e.getTime() + (365 * 24 * 60 * 60 * 1000));
                var f = "expires=" + e.toUTCString();
                document.cookie = "addevent_track_cookie=" + d + "; " + f;
                coov = d
            }
            return coov
        },
        s4: function() {
            return (((1 + Math.random()) * 0x10000) | 0).toString(16).substring(1)
        }
    }
}();
if (window.addEventListener) {
    window.addEventListener("DOMContentLoaded", function() {
        _d_rd = true;
        addthisevent.trycss();
        addthisevent.generate()
    }, false);
    window.addEventListener("load", function() {
        addthisevent.generate()
    }, false)
} else if (window.attachEvent) {
    window.attachEvent("onreadystatechange", function() {
        _d_rd = true;
        addthisevent.trycss();
        addthisevent.generate()
    });
    window.attachEvent("onload", function() {
        addthisevent.generate()
    })
} else {
    window.onload = function() {
        addthisevent.generate()
    }
}
if (!_d_rd) {
    setTimeout("addthisevent.trycss();addthisevent.generate();", 20)
}
#2 JavaScript::Eval (size: 119) - SHA256: 8a04741596415cfbf3382ccd65e92d157885b767bc08af0434ee98340f9c7785
createCookie('is_eu', false);
createCookie('10w3p6pqg9h1biq2', true, 365);
createCookie('11425493_viewed_1', '1', 365);

Executed Writes (0)


HTTP Transactions (50)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.249
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "636635B57F9E6D2AD9B1B949298EE7D3B5B7E251A63516FF68BFB1ECEDED5688"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2313
Expires: Mon, 12 Dec 2022 21:17:41 GMT
Date: Mon, 12 Dec 2022 20:39:08 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.249
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1755A645D41780A9E54EE1AD04A2B293D16D2A98E543F81835C3A66E3D58C3BE"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12078
Expires: Tue, 13 Dec 2022 00:00:26 GMT
Date: Mon, 12 Dec 2022 20:39:08 GMT
Connection: keep-alive

                                        
                                            GET /c/eJxM0M9q4zAYBPCnsY5G_2UddFh28e5CQ0oh7TF8lj4lIpLsKHYhffqSnMrchuF3GH9MwZmP-1naw_V__RPT2n7rsuckOACpcSLomDZ00NoYTbBAysf1vqDzUBZIp_qje2BaWKPUQJHpEG0IcqIDC8qTs0NgxkctuZDKWIhsQC4iY5NiMihrSXKccs4eMcIK3WsQGCmdLEKwHkMnaTn1C7Y4twLVI163VPHz1vu5kOzO67rcOvGr42PHR8gTtnVuW85Qe5-Tv8StVszPecfHeVlTZVowY41QeqCG5Pl5yeFlP5b3t7-7fdx2F3id5n8n0pzHnKCTNMOXh_ZQvgMAAP__PN9mgQ HTTP/1.1 
Host: email.mg.performanceequinevs.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         34.86.85.56
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: no-store
Content-Length: 464
Date: Mon, 12 Dec 2022 20:39:08 GMT
Location: https://albertorullan.clickfunnels.com/optin1631797356807
X-Robots-Tag: noindex
X-Xss-Protection: 1; mode=block


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   464
Md5:    72108763cbe127b1e18ab8c97d6ff02d
Sha1:   f137f001aac0da7c43ed10c8e34ebf68d38b9ce0
Sha256: 1be2af5d8eaf94621d608f76554e3b437953449a723a24321347b36643b10cdc

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 12 Dec 2022 20:33:43 GMT
age: 325
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    bf0c602d32b3c14606f22a86183b5e3c
Sha1:   6eabd8d83475eba731968abe1a05a8bfd272f160
Sha256: 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.249
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "22DA5E6E3F9507688FC8CB02183D52CF38F4ADF8B2C6C52EAF5F88182471EFEB"
Last-Modified: Sun, 11 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3688
Expires: Mon, 12 Dec 2022 21:40:36 GMT
Date: Mon, 12 Dec 2022 20:39:08 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: rbcqooa/IHVAPukqIYuJs24jhBDueZWhbgMgJL5oSLYqcIvd/6LkhhDQ0iSYvVqO7J8zUfWv4bU=
x-amz-request-id: N7ZN1NTM1VHKGP7P
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 12 Dec 2022 19:51:37 GMT
age: 2851
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    53341dea33f4f3d9b4966f80589f429a
Sha1:   20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Mon, 12 Dec 2022 20:39:08 GMT
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5262
Cache-Control: max-age=127886
Date: Mon, 12 Dec 2022 20:39:08 GMT
Etag: "6396cd6c-116"
Expires: Wed, 14 Dec 2022 08:10:34 GMT
Last-Modified: Mon, 12 Dec 2022 06:42:52 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 278

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5247
Cache-Control: max-age=147308
Date: Mon, 12 Dec 2022 20:39:08 GMT
Etag: "63971959-116"
Expires: Wed, 14 Dec 2022 13:34:16 GMT
Last-Modified: Mon, 12 Dec 2022 12:06:49 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 278

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 12 Dec 2022 20:39:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /assets/userevents/application.js HTTP/1.1 
Host: app.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.16.14.194
HTTP/2 200 OK
content-type: application/x-javascript
                                        
date: Mon, 12 Dec 2022 20:39:08 GMT
cf-ray: 778944886922b4f4-OSL
access-control-allow-origin: *
age: 91
cache-control: public, max-age=1200
etag: W/"637bf173-147c"
expires: Mon, 12 Dec 2022 20:59:08 GMT
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5244), with no line terminators
Size:   2102
Md5:    ab316555defc6a3b797d4fa62446e93d
Sha1:   da3041b27b65720069c4091e50a426bbedcaff1d
Sha256: b7acbc238df1825d55495db8dfd3961fbc8b998d1ff3c197a1f6e1b8b52211a2
                                        
                                            GET /css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.74
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 12 Dec 2022 20:39:08 GMT
date: Mon, 12 Dec 2022 20:39:08 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   2921
Md5:    482908f12dae5a7f47991a9993bc3911
Sha1:   d4a872c74de2aee9d115c0c1f1273b9d37545a27
Sha256: 776e35dbbd699f27deb242865eae4a44ff3b36af35e6d2c43ac61201d22f8ea9
                                        
                                            GET /releases/v5.9.0/css/v4-shims.css HTTP/1.1 
Host: use.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.64.132.15
HTTP/2 200 OK
content-type: text/css
                                        
date: Mon, 12 Dec 2022 20:39:09 GMT
x-amz-id-2: Txapr/ufTkVDw/YvyQL0z+i3Z1k8XFYPX+D3ustfZuiEDXVNAbgfzDTZjdsppkN1G7zgmmIhcfc=
x-amz-request-id: J2XW272F55Q8XMWG
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"e140a7d32f343530f016095df3cc2ae4"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 659833
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nld6bZqG%2Bxsl4xMcZVqC7xXzkdHy%2BPGQSjO65Q7ykac%2FxOzwwRljhoO29cX%2FW1eZjBg2Et39wgLCw5h2caB5S%2FvtNT4BqNiNSKlzVxHis4Wbl6B%2B%2FRUfyom0KLlD5s4nLh3V5Vto"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77894489290623bd-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (26440)
Size:   4465
Md5:    651ba17f6dfa5eff1812926874669ed3
Sha1:   3218dd62961529798473dd2a5040ba47bd3b1550
Sha256: 7dea776c80acb66dc5ae0bee6df83ce95ea8a7c895e2bcec62f2fcaabd721945
                                        
                                            GET /cfmarketplace/plf1/popclose2.png HTTP/1.1 
Host: klee.studio.s3.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

search
                                         52.217.34.52
HTTP/1.1 404 Not Found
Content-Type: application/xml
                                        
x-amz-request-id: N415PMDAJZ6XYDQ9
x-amz-id-2: W8jZCsnJuuJ70DFCkgBtrQRhg4/e/wBABhuerZpS7042xpGHWFQyMpD+DjoQjma5oJHGXQd5WAU=
Transfer-Encoding: chunked
Date: Mon, 12 Dec 2022 20:39:08 GMT
Server: AmazonS3


--- Additional Info ---
Magic:  XML 1.0 document text\012- XML document, ASCII text
Size:   301
Md5:    bc49ae2d53a2d0983d071dfac5776f5e
Sha1:   80c714ef6aa54534a4dcc7ea778e55d5eebb5b09
Sha256: 765b28e568fc6634d46d11ae50f42e8017f8a6ba04f054ee2ab62e8303c47515
                                        
                                            GET /bf/112e84c3b8437db48c23430351885a/1070569_LogosAndPhone_EPIC-72DPI_051821.png HTTP/1.1 
Host: images.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Mon, 12 Dec 2022 20:39:09 GMT
content-length: 54458
x-amz-id-2: BM/pIT8093wJ8k8UN60GdLxSmiBcUKpfqWh9KusYW67Gdy1f1A/iCgoo8OTSrsh0ZSwmCXS9U44=
x-amz-request-id: N418BAR4X29HCES7
last-modified: Fri, 28 May 2021 18:31:10 GMT
etag: "60fac03d09004b8aa7da676fefcf988c"
cf-cache-status: MISS
expires: Thu, 05 Jan 2023 20:39:09 GMT
cache-control: public, max-age=2073600
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 778944894adab4f4-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 490 x 490, 8-bit/color RGB, non-interlaced\012- data
Size:   54458
Md5:    60fac03d09004b8aa7da676fefcf988c
Sha1:   c5ddd40c4ddf8b5e6c0f82ca8f3b13619d3e462c
Sha256: d065e640adebe12f4be340871bb6a5ef5f9a546ab6ca4f3c87885a9acb0c15e0
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 12 Dec 2022 20:07:56 GMT
age: 1873
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /9a/d7b24f72d04c1fb676035c6d71c6b8/_MG_0452.jpg HTTP/1.1 
Host: images.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Mon, 12 Dec 2022 20:39:09 GMT
content-length: 563976
x-amz-id-2: 5/NaTGvmLe8RAlFzU1PBree1/wd88m/eQ6MWl3JEMXnGnHF5dFViluX0EwvYBOMpl42bvx6dJ24=
x-amz-request-id: N410F7GQ758MWBNQ
last-modified: Wed, 05 Aug 2020 18:38:24 GMT
etag: "d82eaf458815b6a2f8433650e76de127"
cf-cache-status: MISS
expires: Thu, 05 Jan 2023 20:39:09 GMT
cache-control: public, max-age=2073600
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 778944895aeeb4f4-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS 7D Mark II, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 9.2.1 (Windows), datetime=2020:07:08 17:14:53], progressive, precision 8, 2052x3000, components 3\012- data
Size:   563976
Md5:    d82eaf458815b6a2f8433650e76de127
Sha1:   95130176966248e497bf928f4e91621db6a7a618
Sha256: 5ae429f12f62b7ca995cfa1aafd96d84da703ab570018b8b7d20d7a3301e211d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6396
Cache-Control: max-age=137658
Date: Mon, 12 Dec 2022 20:39:09 GMT
Etag: "6396ef2b-1d7"
Expires: Wed, 14 Dec 2022 10:53:27 GMT
Last-Modified: Mon, 12 Dec 2022 09:06:51 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4608
Cache-Control: max-age=120780
Date: Mon, 12 Dec 2022 20:39:09 GMT
Etag: "6396b439-117"
Expires: Wed, 14 Dec 2022 06:12:09 GMT
Last-Modified: Mon, 12 Dec 2022 04:55:21 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: BN59jxVqi8uIxxlKD6m0+g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.24.78.9
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zLv2Bh5iB/5i3cH+J/1OwE6ru9c=

                                        
                                            GET /keen-tracking-1.0.3.min.js HTTP/1.1 
Host: d26b395fwzu5fz.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.96.210
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 8994
Connection: keep-alive
Date: Mon, 05 Dec 2022 08:16:46 GMT
Last-Modified: Thu, 31 Mar 2016 04:24:33 GMT
ETag: "a6acb97120359c326c8f7775a5514f5d"
Cache-Control: max-age=31536000000, public
Content-Encoding: gzip
Expires: Fri, 31 Mar 2017 04:24:29 GMT
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 210fa10efb175d891774d170436663b0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN1-C1
X-Amz-Cf-Id: RSlPfAVIqSADycKsQndk9m-zaYWttdXk6i3K6E6TdX5b9GSvtS6PeA==
Age: 649345


--- Additional Info ---
Magic:  ASCII text, with very long lines (20564)
Size:   8994
Md5:    a6acb97120359c326c8f7775a5514f5d
Sha1:   db0ba6a113b2bf753933f2b5d3451e55d7184c2d
Sha256: bc1391ed0a7a70a24988c0464202bcf2f8f1a5f4d1465c8d5552471b13b90fba
                                        
                                            GET /552.2d6a2503-1220.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.130.137
HTTP/2 200 OK
content-type: application/javascript
                                        
x-amz-id-2: Lx7LUNyC193WWpSv5hW/L7UEeNSlDwufm33KpA2sv5a1ht8efI/6s62/R2OVbNZKkoG/gUHXaFI=
x-amz-request-id: VK0V8BCV38T7WVVS
last-modified: Wed, 05 Oct 2022 14:53:43 GMT
etag: "777ac0df4dba632ad1b2955c88dd51ac"
x-amz-version-id: 7EjqUQ3uiXAFqO0VnIOp2ymSTJq3JZwD
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Mon, 12 Dec 2022 20:39:10 GMT
via: 1.1 varnish
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1628
x-timer: S1670877550.092116,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 5890
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (21423)
Size:   5890
Md5:    097ef34c5f5d635a147bca3721bd605b
Sha1:   3b31ef3cfb1d62d9884d631ec2467b9d6b0d46e2
Sha256: 3e05d4e42c1e87b516b525574b20d2570dccc50d1bd1b2956d6421699aa19914
                                        
                                            POST /cdn-cgi/rum? HTTP/1.1 
Host: albertorullan.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 8725
Origin: https://albertorullan.clickfunnels.com
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/optin1631797356807
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTA3NTQzOTY=:visited=true; cf:visitor_id=50e93ac7-6f49-45ac-957c-7940604b0707; addevent_track_cookie=11865c4b-b3b6-4796-1552-7618ee000521; cf_survey_participant_50754396=participant_5o95z
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.16.14.194
HTTP/2 204 No Content
                                        
date: Mon, 12 Dec 2022 20:39:10 GMT
access-control-allow-origin: https://albertorullan.clickfunnels.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 77894490cf50b4f4-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            GET /290.2d6a2503-1220.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.130.137
HTTP/2 200 OK
content-type: application/javascript
                                        
x-amz-id-2: fhmr6WetDM+g2i2QlvVMRpxUR5FtkKdG9L63CCQ3CSWsvtR6j++f9vvc73sttpIYqURa2xyYTRk=
x-amz-request-id: VK0ZFWF8T6343F8V
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "13898fbb4d7a1f83fc6722c4c12faf40"
x-amz-version-id: C4hj6k9j4I7xXuTBZvcbX78Bf.Ep8KMk
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Mon, 12 Dec 2022 20:39:10 GMT
via: 1.1 varnish
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1632
x-timer: S1670877550.402396,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 3424
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (8544)
Size:   3424
Md5:    b9baa2cb6a3b1a3d0fda03cd7db51631
Sha1:   42d37467e05182e3cab2fcb54577dc462adcf50b
Sha256: 31a8b4d47298cae24c66e37256a51474ae88a745fdfec79f99b2d43608e6d822
                                        
                                            GET /userevents/?funnel_id=ekhMUnhNT2FFQ0JQUGhuTEhLeDlpZz09LS0xaW52NXNSL1MwQmZObncybXIvUTJBPT0%3D--d6adb95ec73283b9700531abac307e6485735c6c&page_id=Wm56WnI0N0VEcjhaRS80NVc1TmdFZz09LS02TEF0VWVucjUyV1JFenF6ejVpS0tRPT0%3D--b9ff5ddef7de6430b053dca95490e2dc082d82b6&funnel_step_id=Q3ZyMlRDSXFWajRPWkxMMjlMSEZBZz09LS1Nb3F4VXRyYnVrVFJuYWlITmZIakNnPT0%3D--d572eb31c6203c83e32aba7d140688044b7e864a&user_id=ckdvQ0xUU0UxYmVGajBLMVhONWVJQT09LS1zKzZNYUpuUFRESU5na3VWWlZ3YkRBPT0%3D--be7fed110a6f0c054387acbecad0932a8e2fe4f2&account_id=VTZIZ2RqVUtxajBzTXp3TGVGWG9QZz09LS13Q21UejJSeHFwM3I1SDNVT3RnRGhBPT0%3D--c53cd0c99bbb8f5d8c8bcccb8cf1edf673b1b43c&page_code=NTA3NTQzOTY%3D&mode_id=1&time_zone=Eastern%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::PageviewsCreatedSummary&nonce=5ca6ae37-7d47-48a1-9ca2-02c5484961c2&url=https%3A%2F%2Falbertorullan.clickfunnels.com%2Foptin1631797356807 HTTP/1.1 
Host: app.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://albertorullan.clickfunnels.com
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.16.14.194
HTTP/2 202 Accepted
content-type: text/html
                                        
date: Mon, 12 Dec 2022 20:39:09 GMT
cf-ray: 7789448dba7fb4f4-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: a97f86998b838d8321177e6388b5dadf
x-runtime: 0.096092
set-cookie: __cf_bm=mDZcsyOHjI6D13fYcGxHQc3Q5aU6Ylw_O9rueHcz4u8-1670877549-0-Aa7i59Bk8BIUIWlZfRZ59KgOFv6Jgzdlpjq+VA2Bu2diNairT14ubbDnw+eWTIy9DZEkWLwaiMSkmsAmjpa+1AgY0rVjVJAqUd77PS9Czxb/; path=/; expires=Mon, 12-Dec-22 21:09:09 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, from Unix\012- data
Size:   1443
Md5:    fa50a55750d1d0978fca32be5dbc3988
Sha1:   a7f447621d48b3ecf7fc0192b515d506d3d1ad18
Sha256: c621038fb07e536af8a1ec6d260853dfe69055dc2fb526700919c53b3b7e5f20
                                        
                                            GET /userevents/?funnel_id=ekhMUnhNT2FFQ0JQUGhuTEhLeDlpZz09LS0xaW52NXNSL1MwQmZObncybXIvUTJBPT0%3D--d6adb95ec73283b9700531abac307e6485735c6c&page_id=Wm56WnI0N0VEcjhaRS80NVc1TmdFZz09LS02TEF0VWVucjUyV1JFenF6ejVpS0tRPT0%3D--b9ff5ddef7de6430b053dca95490e2dc082d82b6&funnel_step_id=Q3ZyMlRDSXFWajRPWkxMMjlMSEZBZz09LS1Nb3F4VXRyYnVrVFJuYWlITmZIakNnPT0%3D--d572eb31c6203c83e32aba7d140688044b7e864a&user_id=ckdvQ0xUU0UxYmVGajBLMVhONWVJQT09LS1zKzZNYUpuUFRESU5na3VWWlZ3YkRBPT0%3D--be7fed110a6f0c054387acbecad0932a8e2fe4f2&account_id=VTZIZ2RqVUtxajBzTXp3TGVGWG9QZz09LS13Q21UejJSeHFwM3I1SDNVT3RnRGhBPT0%3D--c53cd0c99bbb8f5d8c8bcccb8cf1edf673b1b43c&page_code=NTA3NTQzOTY%3D&mode_id=1&time_zone=Eastern%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniqueVisitorsCreatedSummary&nonce=7c547bce-3318-49e9-b310-559b244dcae3&url=https%3A%2F%2Falbertorullan.clickfunnels.com%2Foptin1631797356807 HTTP/1.1 
Host: app.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://albertorullan.clickfunnels.com
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.16.14.194
HTTP/2 202 Accepted
content-type: text/html
                                        
date: Mon, 12 Dec 2022 20:39:09 GMT
cf-ray: 7789448dba85b4f4-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: de8e187764786a3af056d71870392a00
x-runtime: 0.026267
set-cookie: __cf_bm=z87CDnD2h.ONFQKxIDOIQltePzPXMhb159VAjBCHGzM-1670877549-0-AeTM9UCGkDJ5Xwx1Xypu5ihJzNgV/75apjG5Nl9ZSUOKs/HoGzkrG9B3ARfJ/xlR8Zjc3Cxk/LQZyMayp2iphtyMpo135FNyjZ0TAzupeG97; path=/; expires=Mon, 12-Dec-22 21:09:09 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, from Unix\012- data
Size:   2225
Md5:    98a96a3306b7723c0b8c4bff074cdd9f
Sha1:   e9070da7daa34fa2d8ac2e4ec00e3c499ea37516
Sha256: a6079d50fa4c72b521fd865e67be080b5b21c336a71dbf7a1800a12ad42384f7
                                        
                                            GET /775.2d6a2503-1220.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.130.137
HTTP/2 200 OK
content-type: application/javascript
                                        
x-amz-id-2: n5W3M8HU3EdwDhPARC2iiAf1as95kdLfrN2+qdL0W35SMVzIqjIlMR9W7ck8oTAzeIw6lrJi5fM=
x-amz-request-id: VK0MRM6MJ78HXF3Y
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "1dfdb74c0491489bf04c6deadb56add2"
x-amz-version-id: y1AQ2bnjUbwuFOuSS5MP1vew1dGw.1iz
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Mon, 12 Dec 2022 20:39:10 GMT
via: 1.1 varnish
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1640
x-timer: S1670877550.402700,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 632
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1169)
Size:   632
Md5:    661520fd0dfebb919d68a69b60ca426f
Sha1:   b85ef80a0e0d95bf4904f9ce4fad56c49ae035be
Sha256: ecd489671c6255fee8370fc1f8f4e99519ef8d4c4c0ab06640b0c021642e1db7
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5440
Cache-Control: 'max-age=158059'
Date: Mon, 12 Dec 2022 20:39:10 GMT
Last-Modified: Mon, 12 Dec 2022 19:08:30 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         108.157.217.47
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=110863
Date: Mon, 12 Dec 2022 20:39:10 GMT
Etag: "639693c3-1d7"
Expires: Wed, 14 Dec 2022 03:26:53 GMT
Last-Modified: Mon, 12 Dec 2022 02:36:51 GMT
Server: ECS (bsa/EB23)
X-Cache: Miss from cloudfront
Via: 1.1 05844663035089f465172d861220e698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN56-P1
X-Amz-Cf-Id: tTsTpde8NCuWMmeSTGr03mXXAUcx2srjf5UmJslMDWdXxXQyIszn7g==
Age: 3002

                                        
                                            GET /1/NRJS-fc902efb332119fff33?a=367981416&v=1220.PROD&to=dFZWTENWVQ9QExdNRlJLSFlWXEpMRQBfXUYYSU1aXVBKC1AF&rst=2199&ck=0&s=f040659eaa6d88cc&ref=https://albertorullan.clickfunnels.com/optin1631797356807&ap=393&be=455&fe=1258&dc=910&perf=%7B%22timing%22:%7B%22of%22:1670877546419,%22n%22:0,%22f%22:218,%22dn%22:225,%22dne%22:252,%22c%22:252,%22s%22:257,%22ce%22:278,%22rq%22:278,%22rp%22:415,%22rpe%22:418,%22dl%22:435,%22di%22:1329,%22ds%22:1365,%22de%22:1472,%22dc%22:1712,%22l%22:1712,%22le%22:1850%7D,%22navigation%22:%7B%7D%7D&fcp=862&jsonp=NREUM.setToken HTTP/1.1 
Host: bam.nr-data.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         162.247.241.14
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Mon, 12 Dec 2022 20:39:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 778944938d2bb51e-OSL
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   77
Md5:    f1442f5831dbbe0210da2d7a4180d6b8
Sha1:   2ade23c6c7a001c66f0c0a9a101ec152747b434e
Sha256: c6acf9fb2ecc1b144c51bd0337bbf1c26db3df2f649ac2da5c56db20d93eb3ef
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: albertorullan.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/optin1631797356807
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTA3NTQzOTY=:visited=true; cf:visitor_id=50e93ac7-6f49-45ac-957c-7940604b0707; addevent_track_cookie=11865c4b-b3b6-4796-1552-7618ee000521
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/x-icon
                                        
date: Mon, 12 Dec 2022 20:39:10 GMT
cf-ray: 7789448f6d26b4f4-OSL
access-control-allow-origin: *
etag: W/"637bf173-3aee"
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: MISS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Size:   2263
Md5:    a19be7acd37b22fa3bf337ce7e3f22bb
Sha1:   42a63fe467ec9002e5e7ce515860883af0063525
Sha256: 8a5c482bed9702819cd996b5abab1cb01eb9e0189451d7dd1c169b9ea92fc2dd
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.249
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2326
Expires: Mon, 12 Dec 2022 21:17:57 GMT
Date: Mon, 12 Dec 2022 20:39:11 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.249
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2326
Expires: Mon, 12 Dec 2022 21:17:57 GMT
Date: Mon, 12 Dec 2022 20:39:11 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.249
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2326
Expires: Mon, 12 Dec 2022 21:17:57 GMT
Date: Mon, 12 Dec 2022 20:39:11 GMT
Connection: keep-alive

                                        
                                            GET /userevents/?funnel_id=ekhMUnhNT2FFQ0JQUGhuTEhLeDlpZz09LS0xaW52NXNSL1MwQmZObncybXIvUTJBPT0%3D--d6adb95ec73283b9700531abac307e6485735c6c&page_id=Wm56WnI0N0VEcjhaRS80NVc1TmdFZz09LS02TEF0VWVucjUyV1JFenF6ejVpS0tRPT0%3D--b9ff5ddef7de6430b053dca95490e2dc082d82b6&funnel_step_id=Q3ZyMlRDSXFWajRPWkxMMjlMSEZBZz09LS1Nb3F4VXRyYnVrVFJuYWlITmZIakNnPT0%3D--d572eb31c6203c83e32aba7d140688044b7e864a&user_id=ckdvQ0xUU0UxYmVGajBLMVhONWVJQT09LS1zKzZNYUpuUFRESU5na3VWWlZ3YkRBPT0%3D--be7fed110a6f0c054387acbecad0932a8e2fe4f2&account_id=VTZIZ2RqVUtxajBzTXp3TGVGWG9QZz09LS13Q21UejJSeHFwM3I1SDNVT3RnRGhBPT0%3D--c53cd0c99bbb8f5d8c8bcccb8cf1edf673b1b43c&page_code=NTA3NTQzOTY%3D&mode_id=1&time_zone=Eastern%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniquePageviewsCreatedSummary&nonce=4966526a-0a3b-451d-bb62-ec4de914df19&url=https%3A%2F%2Falbertorullan.clickfunnels.com%2Foptin1631797356807 HTTP/1.1 
Host: app.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://albertorullan.clickfunnels.com
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.16.14.194
HTTP/2 202 Accepted
content-type: text/html
                                        
date: Mon, 12 Dec 2022 20:39:09 GMT
cf-ray: 7789448dba82b4f4-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: d970430e82a4584e892babaf53bca73f
x-runtime: 0.048045
set-cookie: __cf_bm=QOu._p1.RnPN__0JXN6jwcbHWbVxvqy7ijwSGgloRaQ-1670877549-0-AT9JC8gds94iGy2leWcnLhCrpKQojgfSDB58kEqwQKHp7H+JjBvOZH4698kkmy/KZYkqqlDVPanXC2pdymIzosnZZG06QDxlQwHUqZiYOPr6; path=/; expires=Mon, 12-Dec-22 21:09:09 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc582b370-f952-4f63-9937-1de61f295c46.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5452
x-amzn-requestid: eb6aca44-e834-4123-b191-eb3f007bf7b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c6OCrGM-IAMFnxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393f6dd-71fee2de2dd69c7d1d4d32fe;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 03:02:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2dzTL44JHLjIbSIFDFPwmOcNMq9-lZF4YvsBimPz3YD1c4xQF2tUCA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 03:38:01 GMT
age: 61270
etag: "241a28d882355e06b0a2428c931f9d72dd5c6c53"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5452
Md5:    24d5e5918cf53c569d6674e598228246
Sha1:   241a28d882355e06b0a2428c931f9d72dd5c6c53
Sha256: 2ebf30d1844d23a2b7516b900b1aa4473e5c042b0e0ecb2c39675d4b4bc7910e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a765cd8-d4ff-441c-a948-f6a223fa2b0b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4720
x-amzn-requestid: dd990fe1-8447-403e-b276-40889af5baa0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAENuF6SoAMF7oQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d8a-59b5a8f92ef6111e64e16079;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SBYH2ZqOyZx6tB8u3g3dkimaCUGSWAMQhULpYs4gWrmZ6i3_1Br_zQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:57:39 GMT
etag: "d43cd03d5eb3e7618b6fb70c935010c2ac92ad32"
age: 81692
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4720
Md5:    38876d760ef06c8471468c474c1e28a7
Sha1:   d43cd03d5eb3e7618b6fb70c935010c2ac92ad32
Sha256: a0747f29eb6084eef42d3c247594973b02c619c7ec56b6137e24b6d0362557a0
                                        
                                            GET /v1/track?_unique=0.21434577386217235&_uniqueVisitorID=null&_type=WINDOW&_location=ttps%3A//albertorullan.clickfunnels.com/optin1631797356807&_title=Connect%20with%20EPIC%20Today%20%7C%20Equine%20Performance%20Innovative%20Center&_key=g6zo9rkj&_page_key=10w3p6pqg9h1biq2&_fid=11425493&_fspos=1&_fvrs=1&_funnel_stat=1&_location=https://albertorullan.clickfunnels.com/optin1631797356807&_referrer= HTTP/1.1 
Host: app.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://albertorullan.clickfunnels.com
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.16.14.194
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
date: Mon, 12 Dec 2022 20:39:10 GMT
cf-ray: 7789448ffe1bb4f4-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
status: 200 OK
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: 29ad7017e76377f110b79b91acf8711e
x-runtime: 0.017737
set-cookie: __cf_bm=.bC1cAO3dz0ng0KDqHhxcVqWa1YFSY4gB5t.ojMlODA-1670877550-0-AS9hvX0cka5dopjrZCf5Ffb1uhmvsrk+axhx2lXU56mAECzrLB6ImjG+GFmN467eK+QitASbpTP3QlSyeIgMFXjx8A9JjtKIR1dZfmm8yrsr; path=/; expires=Mon, 12-Dec-22 21:09:10 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   8931
Md5:    7ab62feb1942e24846ddf642065999eb
Sha1:   7dbf900b2c05506b63b9d888168f17a0e657acb6
Sha256: a658bac54f3ae64afec5e91d96dcccf6680144e63761697e48bb06eac9f514d1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49a0678c-8bda-434a-a337-63696994d79c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5530
x-amzn-requestid: adecbb8c-cec3-46a0-b32c-0026b8421fe5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cw4d8Fg6IAMF61g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63903abf-4bcb385f27cb438c36a2cd5e;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 07:03:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: J2FSKW1AHhnyu2NBJDcqib3iVsOk745-dgnNgmk6T-QKcg-z5He7qw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 09:24:15 GMT
age: 40496
etag: "0d5969394b370a5c77c53ed58f55e5f8a45da3ab"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5530
Md5:    a22fc7807fb3337f0af5e546c7ad366a
Sha1:   0d5969394b370a5c77c53ed58f55e5f8a45da3ab
Sha256: 98b4f4fd27dc036697fb0328083bce6e691b7493428f3a54991087d9d1165d97
                                        
                                            GET /cf.js HTTP/1.1 
Host: app.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.16.14.194
HTTP/2 301 Moved Permanently
content-type: text/html
                                        
date: Mon, 12 Dec 2022 20:39:09 GMT
location: https://www.clickfunnels.com/cf.js
cf-ray: 7789448daa6bb4f4-OSL
access-control-allow-origin: *
age: 429
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   12343
Md5:    545111734c81c5a15108b036a861d091
Sha1:   5257847b23653155da7c11562cb3da7529a5e2d3
Sha256: cb917e45708fc7bd38bdd80955dee77a677d5d867d6da0cf5a81094d1b121bf0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc57568b-de5b-4cc8-9e29-a57a302df9b6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5619
x-amzn-requestid: df7189d2-5cad-43a2-9511-20c5de53f710
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAEMPFCSIAMF4uA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d81-729683c606fd6abc5bc70534;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: kbfjvh64NjCUE-e-3z7W58vyJMisRwERUV_W99jn3vrErY4bF1SFsg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:58:39 GMT
etag: "6bbd19dbf5112b5c52a1ccbfff3c9d7d0ab030da"
age: 81632
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5619
Md5:    9f8d3e3c9e5d2ed74c3894b4825fcc2f
Sha1:   6bbd19dbf5112b5c52a1ccbfff3c9d7d0ab030da
Sha256: 9e44f93e65206ae7095cf9177296f4f528f1c2597cffa4853b7d6dcabf032796
                                        
                                            GET /beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 HTTP/1.1 
Host: static.cloudflareinsights.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://albertorullan.clickfunnels.com
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.16.56.101
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
                                        
date: Mon, 12 Dec 2022 20:39:09 GMT
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2022.10.1
last-modified: Fri, 21 Oct 2022 01:56:09 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 778944890c64b4f9-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /assets/lander.js HTTP/1.1 
Host: app.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.16.14.194
HTTP/2 200 OK
content-type: application/x-javascript
                                        
date: Mon, 12 Dec 2022 20:39:08 GMT
cf-ray: 778944886925b4f4-OSL
access-control-allow-origin: *
age: 91
cache-control: public, max-age=1200
etag: W/"637bf1b5-2391a3"
expires: Mon, 12 Dec 2022 20:59:08 GMT
last-modified: Mon, 21 Nov 2022 21:46:29 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /mailcheck.min.js HTTP/1.1 
Host: app.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.16.14.194
HTTP/2 200 OK
content-type: application/x-javascript
                                        
date: Mon, 12 Dec 2022 20:39:08 GMT
cf-ray: 77894488691cb4f4-OSL
access-control-allow-origin: *
age: 3292
etag: W/"637bf173-a8d"
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /assets/lander.css HTTP/1.1 
Host: app.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.16.14.194
HTTP/2 200 OK
content-type: text/css
                                        
date: Mon, 12 Dec 2022 20:39:08 GMT
cf-ray: 778944886920b4f4-OSL
access-control-allow-origin: *
age: 1108
cache-control: public, max-age=1200
etag: W/"637bf173-6a514"
expires: Mon, 12 Dec 2022 20:59:08 GMT
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /assets/pushcrew.js HTTP/1.1 
Host: app.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.16.14.194
HTTP/2 200 OK
content-type: application/x-javascript
                                        
date: Mon, 12 Dec 2022 20:39:08 GMT
cf-ray: 77894488691fb4f4-OSL
access-control-allow-origin: *
age: 1108
cache-control: public, max-age=1200
etag: W/"637bf172-27d"
expires: Mon, 12 Dec 2022 20:59:08 GMT
last-modified: Mon, 21 Nov 2022 21:45:22 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /cf.js HTTP/1.1 
Host: www.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://albertorullan.clickfunnels.com/
Connection: keep-alive
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

search
                                         104.18.39.181
HTTP/2 301 Moved Permanently
                                        
date: Mon, 12 Dec 2022 20:39:09 GMT
location: https://classic.clickfunnels.com/cf.js
cache-control: max-age=3600
expires: Mon, 12 Dec 2022 21:39:09 GMT
set-cookie: __cf_bm=CzhUgE4aDwzB8FEsbpxPIETd20LybB4qJX8mnOkJDqw-1670877549-0-ARlIacM9PwzDM8XburtLSUvXKewzf6kz5eeOngNG0DNOxzmx4qImJ33Sr0N1+VnkAo+XeTqLOs/i68zccWas66w=; path=/; expires=Mon, 12-Dec-22 21:09:09 GMT; domain=.www.clickfunnels.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 7789448e8bd1b4f4-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /optin1631797356807 HTTP/1.1 
Host: albertorullan.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         104.16.14.194
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
date: Mon, 12 Dec 2022 20:39:08 GMT
cf-ray: 77894486cde6b4f4-OSL
access-control-allow-origin: *
cache-control: max-age=60, public, s-maxage=600, r-maxage=10
last-modified: Mon, 06 Dec 2021 21:14:39 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: MISS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
status: 200 OK
x-content-digest: 880da673ba11da98a797b484eb1d49e07f5db07c
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: fresh
x-request-id: 95bc341c09e4ef0df887ec03e440e5df
x-runtime: 0.379401
set-cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo; path=/; expires=Mon, 12-Dec-22 21:09:08 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /cf.js HTTP/1.1 
Host: classic.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://albertorullan.clickfunnels.com/
Connection: keep-alive
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.16.14.194
HTTP/2 200 OK
content-type: application/x-javascript
                                        
date: Mon, 12 Dec 2022 20:39:09 GMT
cf-ray: 7789448ecc2fb4f4-OSL
access-control-allow-origin: *
age: 4911
etag: W/"637bf173-476a"
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /releases/v5.9.0/css/all.css HTTP/1.1 
Host: use.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.64.132.15
HTTP/2 200 OK
content-type: text/css
                                        
date: Mon, 12 Dec 2022 20:39:08 GMT
x-amz-id-2: Spb1ZB77j4xx9SPSBxVkz+CjkVoCLnNPzuJ++QEN6GU0QUbNz41ZYqgiLLYqu/ZVhzedx0ivXZk=
x-amz-request-id: J2XHPWFP0DA0BC1A
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"dbf9d822cefe851ba6f66e1ad57e8987"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 659832
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p6zuhwS0hhhvuBe%2F74i%2F6s7NakLUckwym6KvLuTWZgDiZEt0vSaPaxP3AqEOQZCjZtGOTv2oZVLnr%2FHpV%2BX3FidkFZpmVRUWUIr7FN8wB8TnfeLuV5wCZQkKITHHgsa16OlGJkvk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7789448928f923bd-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---