r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43ad67f241ee3692a9c9c1da080dae58
6a024f7d71eeee257edc91ba9273416f634aaae5
636635b57f9e6d2ad9b1b949298ee7d3b5b7e251a63516ff68bfb1eceded5688
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "636635B57F9E6D2AD9B1B949298EE7D3B5B7E251A63516FF68BFB1ECEDED5688"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2313
Expires: Mon, 12 Dec 2022 21:17:41 GMT
Date: Mon, 12 Dec 2022 20:39:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b8fe6ec1ac390bc5b90b68b0e3005299
4ce20d527fcc93a2a6d1c5f3ab73ee8ded2a57f2
1755a645d41780a9e54ee1ad04a2b293d16d2a98e543f81835c3a66e3d58c3be
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1755A645D41780A9E54EE1AD04A2B293D16D2A98E543F81835C3A66E3D58C3BE"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12078
Expires: Tue, 13 Dec 2022 00:00:26 GMT
Date: Mon, 12 Dec 2022 20:39:08 GMT
Connection: keep-alive
email.mg.performanceequinevs.com/c/eJxM0M9q4zAYBPCnsY5G_2UddFh28e5CQ0oh7TF8lj4lIpLsKHYhffqSnMrchuF3GH9MwZmP-1naw_V__RPT2n7rsuckOACpcSLomDZ00NoYTbBAysf1vqDzUBZIp_qje2BaWKPUQJHpEG0IcqIDC8qTs0NgxkctuZDKWIhsQC4iY5NiMihrSXKccs4eMcIK3WsQGCmdLEKwHkMnaTn1C7Y4twLVI163VPHz1vu5kOzO67rcOvGr42PHR8gTtnVuW85Qe5-Tv8StVszPecfHeVlTZVowY41QeqCG5Pl5yeFlP5b3t7-7fdx2F3id5n8n0pzHnKCTNMOXh_ZQvgMAAP__PN9mgQ
302 Found 464 B URL HTTP/1.1 email.mg.performanceequinevs.com/c/eJxM0M9q4zAYBPCnsY5G_2UddFh28e5CQ0oh7TF8lj4lIpLsKHYhffqSnMrchuF3GH9MwZmP-1naw_V__RPT2n7rsuckOACpcSLomDZ00NoYTbBAysf1vqDzUBZIp_qje2BaWKPUQJHpEG0IcqIDC8qTs0NgxkctuZDKWIhsQC4iY5NiMihrSXKccs4eMcIK3WsQGCmdLEKwHkMnaTn1C7Y4twLVI163VPHz1vu5kOzO67rcOvGr42PHR8gTtnVuW85Qe5-Tv8StVszPecfHeVlTZVowY41QeqCG5Pl5yeFlP5b3t7-7fdx2F3id5n8n0pzHnKCTNMOXh_ZQvgMAAP__PN9mgQ
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 72108763cbe127b1e18ab8c97d6ff02d
f137f001aac0da7c43ed10c8e34ebf68d38b9ce0
1be2af5d8eaf94621d608f76554e3b437953449a723a24321347b36643b10cdc
Analyzer Verdict Alert fortinet Malware
GET /c/eJxM0M9q4zAYBPCnsY5G_2UddFh28e5CQ0oh7TF8lj4lIpLsKHYhffqSnMrchuF3GH9MwZmP-1naw_V__RPT2n7rsuckOACpcSLomDZ00NoYTbBAysf1vqDzUBZIp_qje2BaWKPUQJHpEG0IcqIDC8qTs0NgxkctuZDKWIhsQC4iY5NiMihrSXKccs4eMcIK3WsQGCmdLEKwHkMnaTn1C7Y4twLVI163VPHz1vu5kOzO67rcOvGr42PHR8gTtnVuW85Qe5-Tv8StVszPecfHeVlTZVowY41QeqCG5Pl5yeFlP5b3t7-7fdx2F3id5n8n0pzHnKCTNMOXh_ZQvgMAAP__PN9mgQ HTTP/1.1
Host: email.mg.performanceequinevs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: no-store
Content-Length: 464
Content-Type: text/html
Date: Mon, 12 Dec 2022 20:39:08 GMT
Location: https://albertorullan.clickfunnels.com/optin1631797356807
X-Robots-Tag: noindex
X-Xss-Protection: 1; mode=block
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 12 Dec 2022 20:33:43 GMT
content-type: application/json
age: 325
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dbd022fec0a71226daaf29b7563a8896
c37d14dc7b3849a4bb815fa325fb5e70fae54039
22da5e6e3f9507688fc8cb02183d52cf38f4adf8b2c6c52eaf5f88182471efeb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22DA5E6E3F9507688FC8CB02183D52CF38F4ADF8B2C6C52EAF5F88182471EFEB"
Last-Modified: Sun, 11 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3688
Expires: Mon, 12 Dec 2022 21:40:36 GMT
Date: Mon, 12 Dec 2022 20:39:08 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: rbcqooa/IHVAPukqIYuJs24jhBDueZWhbgMgJL5oSLYqcIvd/6LkhhDQ0iSYvVqO7J8zUfWv4bU=
x-amz-request-id: N7ZN1NTM1VHKGP7P
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 12 Dec 2022 19:51:37 GMT
age: 2851
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 12 Dec 2022 20:39:08 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash a24dccabe7ae6f125d04cee1e9a4fb81
824aeab551084261061f4ca8f45def7958d0f56c
01c1d03aca0dd7460581c59a8abf8c6b01f0f1f20107b60c985a5d7a11a83a8b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5262
Cache-Control: max-age=127886
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 20:39:08 GMT
Etag: "6396cd6c-116"
Expires: Wed, 14 Dec 2022 08:10:34 GMT
Last-Modified: Mon, 12 Dec 2022 06:42:52 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash e8084687b77c16386801a3c7cef1cb67
ea8eb0086dc7052a5a8cb4b354b92ae38f4353ef
975e1143cf0979c6665e568289f17d21e9c32cf99e0a5aa0eee3d26faa51174d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5247
Cache-Control: max-age=147308
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 20:39:08 GMT
Etag: "63971959-116"
Expires: Wed, 14 Dec 2022 13:34:16 GMT
Last-Modified: Mon, 12 Dec 2022 12:06:49 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0f3dad0d025c4b6b8abd5d698f00cfbd
3a82ecac8709c7acd620316502a0e774ac3b1170
8d98454c05e1bfb1e534913e69fe76f4b0cb619c02626bcdc163f7be48b1621f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 20:39:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
app.clickfunnels.com/assets/userevents/application.js
200 OK 2.1 kB URL HTTP/2 app.clickfunnels.com/assets/userevents/application.js
IP
File type ASCII text, with very long lines (5244), with no line terminators
Hash ab316555defc6a3b797d4fa62446e93d
da3041b27b65720069c4091e50a426bbedcaff1d
b7acbc238df1825d55495db8dfd3961fbc8b998d1ff3c197a1f6e1b8b52211a2
GET /assets/userevents/application.js HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 12 Dec 2022 20:39:08 GMT
content-type: application/x-javascript
cf-ray: 778944886922b4f4-OSL
access-control-allow-origin: *
age: 91
cache-control: public, max-age=1200
etag: W/"637bf173-147c"
expires: Mon, 12 Dec 2022 20:59:08 GMT
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700
200 OK 2.9 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700
IP
Hash 482908f12dae5a7f47991a9993bc3911
d4a872c74de2aee9d115c0c1f1273b9d37545a27
776e35dbbd699f27deb242865eae4a44ff3b36af35e6d2c43ac61201d22f8ea9
GET /css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 12 Dec 2022 20:39:08 GMT
date: Mon, 12 Dec 2022 20:39:08 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.9.0/css/v4-shims.css
200 OK 4.5 kB URL HTTP/2 use.fontawesome.com/releases/v5.9.0/css/v4-shims.css
IP
File type ASCII text, with very long lines (26440)
Hash 651ba17f6dfa5eff1812926874669ed3
3218dd62961529798473dd2a5040ba47bd3b1550
7dea776c80acb66dc5ae0bee6df83ce95ea8a7c895e2bcec62f2fcaabd721945
GET /releases/v5.9.0/css/v4-shims.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 12 Dec 2022 20:39:09 GMT
content-type: text/css
x-amz-id-2: Txapr/ufTkVDw/YvyQL0z+i3Z1k8XFYPX+D3ustfZuiEDXVNAbgfzDTZjdsppkN1G7zgmmIhcfc=
x-amz-request-id: J2XW272F55Q8XMWG
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"e140a7d32f343530f016095df3cc2ae4"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 659833
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nld6bZqG%2Bxsl4xMcZVqC7xXzkdHy%2BPGQSjO65Q7ykac%2FxOzwwRljhoO29cX%2FW1eZjBg2Et39wgLCw5h2caB5S%2FvtNT4BqNiNSKlzVxHis4Wbl6B%2B%2FRUfyom0KLlD5s4nLh3V5Vto"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77894489290623bd-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
klee.studio.s3.amazonaws.com/cfmarketplace/plf1/popclose2.png
404 Not Found 301 B URL HTTP/1.1 klee.studio.s3.amazonaws.com/cfmarketplace/plf1/popclose2.png
IP
File type XML 1.0 document text\012- XML document, ASCII text
Hash bc49ae2d53a2d0983d071dfac5776f5e
80c714ef6aa54534a4dcc7ea778e55d5eebb5b09
765b28e568fc6634d46d11ae50f42e8017f8a6ba04f054ee2ab62e8303c47515
GET /cfmarketplace/plf1/popclose2.png HTTP/1.1
Host: klee.studio.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 404 Not Found
x-amz-request-id: N415PMDAJZ6XYDQ9
x-amz-id-2: W8jZCsnJuuJ70DFCkgBtrQRhg4/e/wBABhuerZpS7042xpGHWFQyMpD+DjoQjma5oJHGXQd5WAU=
Content-Type: application/xml
Transfer-Encoding: chunked
Date: Mon, 12 Dec 2022 20:39:08 GMT
Server: AmazonS3
images.clickfunnels.com/bf/112e84c3b8437db48c23430351885a/1070569_LogosAndPhone_EPIC-72DPI_051821.png
200 OK 54 kB URL HTTP/2 images.clickfunnels.com/bf/112e84c3b8437db48c23430351885a/1070569_LogosAndPhone_EPIC-72DPI_051821.png
IP
File type PNG image data, 490 x 490, 8-bit/color RGB, non-interlaced\012- data
Hash 60fac03d09004b8aa7da676fefcf988c
c5ddd40c4ddf8b5e6c0f82ca8f3b13619d3e462c
d065e640adebe12f4be340871bb6a5ef5f9a546ab6ca4f3c87885a9acb0c15e0
GET /bf/112e84c3b8437db48c23430351885a/1070569_LogosAndPhone_EPIC-72DPI_051821.png HTTP/1.1
Host: images.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 12 Dec 2022 20:39:09 GMT
content-type: image/png
content-length: 54458
x-amz-id-2: BM/pIT8093wJ8k8UN60GdLxSmiBcUKpfqWh9KusYW67Gdy1f1A/iCgoo8OTSrsh0ZSwmCXS9U44=
x-amz-request-id: N418BAR4X29HCES7
last-modified: Fri, 28 May 2021 18:31:10 GMT
etag: "60fac03d09004b8aa7da676fefcf988c"
cf-cache-status: MISS
expires: Thu, 05 Jan 2023 20:39:09 GMT
cache-control: public, max-age=2073600
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 778944894adab4f4-OSL
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 12 Dec 2022 20:07:56 GMT
age: 1873
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
images.clickfunnels.com/9a/d7b24f72d04c1fb676035c6d71c6b8/_MG_0452.jpg
200 OK 564 kB URL HTTP/2 images.clickfunnels.com/9a/d7b24f72d04c1fb676035c6d71c6b8/_MG_0452.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS 7D Mark II, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 9.2.1 (Windows), datetime=2020:07:08 17:14:53], progressive, precision 8, 2052x3000, components 3\012- data
Size 564 kB (563976 bytes)
Hash d82eaf458815b6a2f8433650e76de127
95130176966248e497bf928f4e91621db6a7a618
5ae429f12f62b7ca995cfa1aafd96d84da703ab570018b8b7d20d7a3301e211d
GET /9a/d7b24f72d04c1fb676035c6d71c6b8/_MG_0452.jpg HTTP/1.1
Host: images.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 12 Dec 2022 20:39:09 GMT
content-type: image/jpeg
content-length: 563976
x-amz-id-2: 5/NaTGvmLe8RAlFzU1PBree1/wd88m/eQ6MWl3JEMXnGnHF5dFViluX0EwvYBOMpl42bvx6dJ24=
x-amz-request-id: N410F7GQ758MWBNQ
last-modified: Wed, 05 Aug 2020 18:38:24 GMT
etag: "d82eaf458815b6a2f8433650e76de127"
cf-cache-status: MISS
expires: Thu, 05 Jan 2023 20:39:09 GMT
cache-control: public, max-age=2073600
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 778944895aeeb4f4-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ee19f96e42a0eca99d00c8d91f977c35
3bf8dbf8b8ce6ea7adadf7bb92cae2f9502fbee9
6d8adcb1494bfe2ca73cd6b77eb57b2d08e07b05eb892fea98a1fde0bfb2ea12
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6396
Cache-Control: max-age=137658
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 20:39:09 GMT
Etag: "6396ef2b-1d7"
Expires: Wed, 14 Dec 2022 10:53:27 GMT
Last-Modified: Mon, 12 Dec 2022 09:06:51 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 279 B IP
Hash 34a23c15553e12092134d0cfea3ce6c5
57da920a1218f4cf4d0837ba744d7b3c752084c0
83369e4c302a843121f37baf2636976fb4808135f6c6c27d9a6e7cce5cc2537a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4608
Cache-Control: max-age=120780
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 20:39:09 GMT
Etag: "6396b439-117"
Expires: Wed, 14 Dec 2022 06:12:09 GMT
Last-Modified: Mon, 12 Dec 2022 04:55:21 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: BN59jxVqi8uIxxlKD6m0+g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zLv2Bh5iB/5i3cH+J/1OwE6ru9c=
d26b395fwzu5fz.cloudfront.net/keen-tracking-1.0.3.min.js
200 OK 9.0 kB URL HTTP/1.1 d26b395fwzu5fz.cloudfront.net/keen-tracking-1.0.3.min.js
IP
File type ASCII text, with very long lines (20564)
Hash a6acb97120359c326c8f7775a5514f5d
db0ba6a113b2bf753933f2b5d3451e55d7184c2d
bc1391ed0a7a70a24988c0464202bcf2f8f1a5f4d1465c8d5552471b13b90fba
GET /keen-tracking-1.0.3.min.js HTTP/1.1
Host: d26b395fwzu5fz.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 8994
Connection: keep-alive
Date: Mon, 05 Dec 2022 08:16:46 GMT
Last-Modified: Thu, 31 Mar 2016 04:24:33 GMT
ETag: "a6acb97120359c326c8f7775a5514f5d"
Cache-Control: max-age=31536000000, public
Content-Encoding: gzip
Expires: Fri, 31 Mar 2017 04:24:29 GMT
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 210fa10efb175d891774d170436663b0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN1-C1
X-Amz-Cf-Id: RSlPfAVIqSADycKsQndk9m-zaYWttdXk6i3K6E6TdX5b9GSvtS6PeA==
Age: 649345
js-agent.newrelic.com/552.2d6a2503-1220.js
200 OK 5.9 kB URL HTTP/2 js-agent.newrelic.com/552.2d6a2503-1220.js
IP
File type ASCII text, with very long lines (21423)
Hash 097ef34c5f5d635a147bca3721bd605b
3b31ef3cfb1d62d9884d631ec2467b9d6b0d46e2
3e05d4e42c1e87b516b525574b20d2570dccc50d1bd1b2956d6421699aa19914
GET /552.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Lx7LUNyC193WWpSv5hW/L7UEeNSlDwufm33KpA2sv5a1ht8efI/6s62/R2OVbNZKkoG/gUHXaFI=
x-amz-request-id: VK0V8BCV38T7WVVS
last-modified: Wed, 05 Oct 2022 14:53:43 GMT
etag: "777ac0df4dba632ad1b2955c88dd51ac"
x-amz-version-id: 7EjqUQ3uiXAFqO0VnIOp2ymSTJq3JZwD
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Mon, 12 Dec 2022 20:39:10 GMT
via: 1.1 varnish
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1628
x-timer: S1670877550.092116,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 5890
X-Firefox-Spdy: h2
albertorullan.clickfunnels.com/cdn-cgi/rum?
204 No Content 0 B URL HTTP/2 albertorullan.clickfunnels.com/cdn-cgi/rum?
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: albertorullan.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 8725
Origin: https://albertorullan.clickfunnels.com
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/optin1631797356807
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTA3NTQzOTY=:visited=true; cf:visitor_id=50e93ac7-6f49-45ac-957c-7940604b0707; addevent_track_cookie=11865c4b-b3b6-4796-1552-7618ee000521; cf_survey_participant_50754396=participant_5o95z
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Mon, 12 Dec 2022 20:39:10 GMT
access-control-allow-origin: https://albertorullan.clickfunnels.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 77894490cf50b4f4-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
js-agent.newrelic.com/290.2d6a2503-1220.js
200 OK 3.4 kB URL HTTP/2 js-agent.newrelic.com/290.2d6a2503-1220.js
IP
File type ASCII text, with very long lines (8544)
Hash b9baa2cb6a3b1a3d0fda03cd7db51631
42d37467e05182e3cab2fcb54577dc462adcf50b
31a8b4d47298cae24c66e37256a51474ae88a745fdfec79f99b2d43608e6d822
GET /290.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: fhmr6WetDM+g2i2QlvVMRpxUR5FtkKdG9L63CCQ3CSWsvtR6j++f9vvc73sttpIYqURa2xyYTRk=
x-amz-request-id: VK0ZFWF8T6343F8V
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "13898fbb4d7a1f83fc6722c4c12faf40"
x-amz-version-id: C4hj6k9j4I7xXuTBZvcbX78Bf.Ep8KMk
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Mon, 12 Dec 2022 20:39:10 GMT
via: 1.1 varnish
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1632
x-timer: S1670877550.402396,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 3424
X-Firefox-Spdy: h2
app.clickfunnels.com/userevents/?funnel_id=ekhMUnhNT2FFQ0JQUGhuTEhLeDlpZz09LS0xaW52NXNSL1MwQmZObncybXIvUTJBPT0%3D--d6adb95ec73283b9700531abac307e6485735c6c&page_id=Wm56WnI0N0VEcjhaRS80NVc1TmdFZz09LS02TEF0VWVucjUyV1JFenF6ejVpS0tRPT0%3D--b9ff5ddef7de6430b053dca95490e2dc082d82b6&funnel_step_id=Q3ZyMlRDSXFWajRPWkxMMjlMSEZBZz09LS1Nb3F4VXRyYnVrVFJuYWlITmZIakNnPT0%3D--d572eb31c6203c83e32aba7d140688044b7e864a&user_id=ckdvQ0xUU0UxYmVGajBLMVhONWVJQT09LS1zKzZNYUpuUFRESU5na3VWWlZ3YkRBPT0%3D--be7fed110a6f0c054387acbecad0932a8e2fe4f2&account_id=VTZIZ2RqVUtxajBzTXp3TGVGWG9QZz09LS13Q21UejJSeHFwM3I1SDNVT3RnRGhBPT0%3D--c53cd0c99bbb8f5d8c8bcccb8cf1edf673b1b43c&page_code=NTA3NTQzOTY%3D&mode_id=1&time_zone=Eastern%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::PageviewsCreatedSummary&nonce=5ca6ae37-7d47-48a1-9ca2-02c5484961c2&url=https%3A%2F%2Falbertorullan.clickfunnels.com%2Foptin1631797356807
202 Accepted 1.4 kB URL HTTP/2 app.clickfunnels.com/userevents/?funnel_id=ekhMUnhNT2FFQ0JQUGhuTEhLeDlpZz09LS0xaW52NXNSL1MwQmZObncybXIvUTJBPT0%3D--d6adb95ec73283b9700531abac307e6485735c6c&page_id=Wm56WnI0N0VEcjhaRS80NVc1TmdFZz09LS02TEF0VWVucjUyV1JFenF6ejVpS0tRPT0%3D--b9ff5ddef7de6430b053dca95490e2dc082d82b6&funnel_step_id=Q3ZyMlRDSXFWajRPWkxMMjlMSEZBZz09LS1Nb3F4VXRyYnVrVFJuYWlITmZIakNnPT0%3D--d572eb31c6203c83e32aba7d140688044b7e864a&user_id=ckdvQ0xUU0UxYmVGajBLMVhONWVJQT09LS1zKzZNYUpuUFRESU5na3VWWlZ3YkRBPT0%3D--be7fed110a6f0c054387acbecad0932a8e2fe4f2&account_id=VTZIZ2RqVUtxajBzTXp3TGVGWG9QZz09LS13Q21UejJSeHFwM3I1SDNVT3RnRGhBPT0%3D--c53cd0c99bbb8f5d8c8bcccb8cf1edf673b1b43c&page_code=NTA3NTQzOTY%3D&mode_id=1&time_zone=Eastern%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::PageviewsCreatedSummary&nonce=5ca6ae37-7d47-48a1-9ca2-02c5484961c2&url=https%3A%2F%2Falbertorullan.clickfunnels.com%2Foptin1631797356807
IP
File type gzip compressed data, from Unix\012- data
Hash fa50a55750d1d0978fca32be5dbc3988
a7f447621d48b3ecf7fc0192b515d506d3d1ad18
c621038fb07e536af8a1ec6d260853dfe69055dc2fb526700919c53b3b7e5f20
GET /userevents/?funnel_id=ekhMUnhNT2FFQ0JQUGhuTEhLeDlpZz09LS0xaW52NXNSL1MwQmZObncybXIvUTJBPT0%3D--d6adb95ec73283b9700531abac307e6485735c6c&page_id=Wm56WnI0N0VEcjhaRS80NVc1TmdFZz09LS02TEF0VWVucjUyV1JFenF6ejVpS0tRPT0%3D--b9ff5ddef7de6430b053dca95490e2dc082d82b6&funnel_step_id=Q3ZyMlRDSXFWajRPWkxMMjlMSEZBZz09LS1Nb3F4VXRyYnVrVFJuYWlITmZIakNnPT0%3D--d572eb31c6203c83e32aba7d140688044b7e864a&user_id=ckdvQ0xUU0UxYmVGajBLMVhONWVJQT09LS1zKzZNYUpuUFRESU5na3VWWlZ3YkRBPT0%3D--be7fed110a6f0c054387acbecad0932a8e2fe4f2&account_id=VTZIZ2RqVUtxajBzTXp3TGVGWG9QZz09LS13Q21UejJSeHFwM3I1SDNVT3RnRGhBPT0%3D--c53cd0c99bbb8f5d8c8bcccb8cf1edf673b1b43c&page_code=NTA3NTQzOTY%3D&mode_id=1&time_zone=Eastern%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::PageviewsCreatedSummary&nonce=5ca6ae37-7d47-48a1-9ca2-02c5484961c2&url=https%3A%2F%2Falbertorullan.clickfunnels.com%2Foptin1631797356807 HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://albertorullan.clickfunnels.com
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 202 Accepted
date: Mon, 12 Dec 2022 20:39:09 GMT
content-type: text/html
cf-ray: 7789448dba7fb4f4-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: a97f86998b838d8321177e6388b5dadf
x-runtime: 0.096092
set-cookie: __cf_bm=mDZcsyOHjI6D13fYcGxHQc3Q5aU6Ylw_O9rueHcz4u8-1670877549-0-Aa7i59Bk8BIUIWlZfRZ59KgOFv6Jgzdlpjq+VA2Bu2diNairT14ubbDnw+eWTIy9DZEkWLwaiMSkmsAmjpa+1AgY0rVjVJAqUd77PS9Czxb/; path=/; expires=Mon, 12-Dec-22 21:09:09 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
app.clickfunnels.com/userevents/?funnel_id=ekhMUnhNT2FFQ0JQUGhuTEhLeDlpZz09LS0xaW52NXNSL1MwQmZObncybXIvUTJBPT0%3D--d6adb95ec73283b9700531abac307e6485735c6c&page_id=Wm56WnI0N0VEcjhaRS80NVc1TmdFZz09LS02TEF0VWVucjUyV1JFenF6ejVpS0tRPT0%3D--b9ff5ddef7de6430b053dca95490e2dc082d82b6&funnel_step_id=Q3ZyMlRDSXFWajRPWkxMMjlMSEZBZz09LS1Nb3F4VXRyYnVrVFJuYWlITmZIakNnPT0%3D--d572eb31c6203c83e32aba7d140688044b7e864a&user_id=ckdvQ0xUU0UxYmVGajBLMVhONWVJQT09LS1zKzZNYUpuUFRESU5na3VWWlZ3YkRBPT0%3D--be7fed110a6f0c054387acbecad0932a8e2fe4f2&account_id=VTZIZ2RqVUtxajBzTXp3TGVGWG9QZz09LS13Q21UejJSeHFwM3I1SDNVT3RnRGhBPT0%3D--c53cd0c99bbb8f5d8c8bcccb8cf1edf673b1b43c&page_code=NTA3NTQzOTY%3D&mode_id=1&time_zone=Eastern%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniqueVisitorsCreatedSummary&nonce=7c547bce-3318-49e9-b310-559b244dcae3&url=https%3A%2F%2Falbertorullan.clickfunnels.com%2Foptin1631797356807
202 Accepted 2.2 kB URL HTTP/2 app.clickfunnels.com/userevents/?funnel_id=ekhMUnhNT2FFQ0JQUGhuTEhLeDlpZz09LS0xaW52NXNSL1MwQmZObncybXIvUTJBPT0%3D--d6adb95ec73283b9700531abac307e6485735c6c&page_id=Wm56WnI0N0VEcjhaRS80NVc1TmdFZz09LS02TEF0VWVucjUyV1JFenF6ejVpS0tRPT0%3D--b9ff5ddef7de6430b053dca95490e2dc082d82b6&funnel_step_id=Q3ZyMlRDSXFWajRPWkxMMjlMSEZBZz09LS1Nb3F4VXRyYnVrVFJuYWlITmZIakNnPT0%3D--d572eb31c6203c83e32aba7d140688044b7e864a&user_id=ckdvQ0xUU0UxYmVGajBLMVhONWVJQT09LS1zKzZNYUpuUFRESU5na3VWWlZ3YkRBPT0%3D--be7fed110a6f0c054387acbecad0932a8e2fe4f2&account_id=VTZIZ2RqVUtxajBzTXp3TGVGWG9QZz09LS13Q21UejJSeHFwM3I1SDNVT3RnRGhBPT0%3D--c53cd0c99bbb8f5d8c8bcccb8cf1edf673b1b43c&page_code=NTA3NTQzOTY%3D&mode_id=1&time_zone=Eastern%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniqueVisitorsCreatedSummary&nonce=7c547bce-3318-49e9-b310-559b244dcae3&url=https%3A%2F%2Falbertorullan.clickfunnels.com%2Foptin1631797356807
IP
File type gzip compressed data, from Unix\012- data
Hash 98a96a3306b7723c0b8c4bff074cdd9f
e9070da7daa34fa2d8ac2e4ec00e3c499ea37516
a6079d50fa4c72b521fd865e67be080b5b21c336a71dbf7a1800a12ad42384f7
GET /userevents/?funnel_id=ekhMUnhNT2FFQ0JQUGhuTEhLeDlpZz09LS0xaW52NXNSL1MwQmZObncybXIvUTJBPT0%3D--d6adb95ec73283b9700531abac307e6485735c6c&page_id=Wm56WnI0N0VEcjhaRS80NVc1TmdFZz09LS02TEF0VWVucjUyV1JFenF6ejVpS0tRPT0%3D--b9ff5ddef7de6430b053dca95490e2dc082d82b6&funnel_step_id=Q3ZyMlRDSXFWajRPWkxMMjlMSEZBZz09LS1Nb3F4VXRyYnVrVFJuYWlITmZIakNnPT0%3D--d572eb31c6203c83e32aba7d140688044b7e864a&user_id=ckdvQ0xUU0UxYmVGajBLMVhONWVJQT09LS1zKzZNYUpuUFRESU5na3VWWlZ3YkRBPT0%3D--be7fed110a6f0c054387acbecad0932a8e2fe4f2&account_id=VTZIZ2RqVUtxajBzTXp3TGVGWG9QZz09LS13Q21UejJSeHFwM3I1SDNVT3RnRGhBPT0%3D--c53cd0c99bbb8f5d8c8bcccb8cf1edf673b1b43c&page_code=NTA3NTQzOTY%3D&mode_id=1&time_zone=Eastern%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniqueVisitorsCreatedSummary&nonce=7c547bce-3318-49e9-b310-559b244dcae3&url=https%3A%2F%2Falbertorullan.clickfunnels.com%2Foptin1631797356807 HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://albertorullan.clickfunnels.com
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 202 Accepted
date: Mon, 12 Dec 2022 20:39:09 GMT
content-type: text/html
cf-ray: 7789448dba85b4f4-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: de8e187764786a3af056d71870392a00
x-runtime: 0.026267
set-cookie: __cf_bm=z87CDnD2h.ONFQKxIDOIQltePzPXMhb159VAjBCHGzM-1670877549-0-AeTM9UCGkDJ5Xwx1Xypu5ihJzNgV/75apjG5Nl9ZSUOKs/HoGzkrG9B3ARfJ/xlR8Zjc3Cxk/LQZyMayp2iphtyMpo135FNyjZ0TAzupeG97; path=/; expires=Mon, 12-Dec-22 21:09:09 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
js-agent.newrelic.com/775.2d6a2503-1220.js
200 OK 632 B URL HTTP/2 js-agent.newrelic.com/775.2d6a2503-1220.js
IP
File type ASCII text, with very long lines (1169)
Hash 661520fd0dfebb919d68a69b60ca426f
b85ef80a0e0d95bf4904f9ce4fad56c49ae035be
ecd489671c6255fee8370fc1f8f4e99519ef8d4c4c0ab06640b0c021642e1db7
GET /775.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: n5W3M8HU3EdwDhPARC2iiAf1as95kdLfrN2+qdL0W35SMVzIqjIlMR9W7ck8oTAzeIw6lrJi5fM=
x-amz-request-id: VK0MRM6MJ78HXF3Y
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "1dfdb74c0491489bf04c6deadb56add2"
x-amz-version-id: y1AQ2bnjUbwuFOuSS5MP1vew1dGw.1iz
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Mon, 12 Dec 2022 20:39:10 GMT
via: 1.1 varnish
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1640
x-timer: S1670877550.402700,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 632
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 110e2f3f2b3b9f8bca77eeb4fb4e5cdb
8da8cd9c8f1ea386cc44e04c762da66ffe59fe0c
c66170116aefa5191bb9aad2717f9b54282689e28c1edff106a10e7f466d1753
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5440
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 20:39:10 GMT
Last-Modified: Mon, 12 Dec 2022 19:08:30 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2b42729a2f817a144dfc30a74aca01cb
84b2c426ab812919cc63f0ac705354aef3457945
f5d938274cbe0892fa0eb544d10ebdc60e35826c6996a15b9f030e8c431bc2a4
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=110863
Date: Mon, 12 Dec 2022 20:39:10 GMT
Etag: "639693c3-1d7"
Expires: Wed, 14 Dec 2022 03:26:53 GMT
Last-Modified: Mon, 12 Dec 2022 02:36:51 GMT
Server: ECS (bsa/EB23)
X-Cache: Miss from cloudfront
Via: 1.1 05844663035089f465172d861220e698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN56-P1
X-Amz-Cf-Id: tTsTpde8NCuWMmeSTGr03mXXAUcx2srjf5UmJslMDWdXxXQyIszn7g==
Age: 3002
bam.nr-data.net/1/NRJS-fc902efb332119fff33?a=367981416&v=1220.PROD&to=dFZWTENWVQ9QExdNRlJLSFlWXEpMRQBfXUYYSU1aXVBKC1AF&rst=2199&ck=0&s=f040659eaa6d88cc&ref=https://albertorullan.clickfunnels.com/optin1631797356807&ap=393&be=455&fe=1258&dc=910&perf=%7B%22timing%22:%7B%22of%22:1670877546419,%22n%22:0,%22f%22:218,%22dn%22:225,%22dne%22:252,%22c%22:252,%22s%22:257,%22ce%22:278,%22rq%22:278,%22rp%22:415,%22rpe%22:418,%22dl%22:435,%22di%22:1329,%22ds%22:1365,%22de%22:1472,%22dc%22:1712,%22l%22:1712,%22le%22:1850%7D,%22navigation%22:%7B%7D%7D&fcp=862&jsonp=NREUM.setToken
200 OK 77 B URL HTTP/1.1 bam.nr-data.net/1/NRJS-fc902efb332119fff33?a=367981416&v=1220.PROD&to=dFZWTENWVQ9QExdNRlJLSFlWXEpMRQBfXUYYSU1aXVBKC1AF&rst=2199&ck=0&s=f040659eaa6d88cc&ref=https://albertorullan.clickfunnels.com/optin1631797356807&ap=393&be=455&fe=1258&dc=910&perf=%7B%22timing%22:%7B%22of%22:1670877546419,%22n%22:0,%22f%22:218,%22dn%22:225,%22dne%22:252,%22c%22:252,%22s%22:257,%22ce%22:278,%22rq%22:278,%22rp%22:415,%22rpe%22:418,%22dl%22:435,%22di%22:1329,%22ds%22:1365,%22de%22:1472,%22dc%22:1712,%22l%22:1712,%22le%22:1850%7D,%22navigation%22:%7B%7D%7D&fcp=862&jsonp=NREUM.setToken
IP
File type ASCII text, with no line terminators
Hash f1442f5831dbbe0210da2d7a4180d6b8
2ade23c6c7a001c66f0c0a9a101ec152747b434e
c6acf9fb2ecc1b144c51bd0337bbf1c26db3df2f649ac2da5c56db20d93eb3ef
GET /1/NRJS-fc902efb332119fff33?a=367981416&v=1220.PROD&to=dFZWTENWVQ9QExdNRlJLSFlWXEpMRQBfXUYYSU1aXVBKC1AF&rst=2199&ck=0&s=f040659eaa6d88cc&ref=https://albertorullan.clickfunnels.com/optin1631797356807&ap=393&be=455&fe=1258&dc=910&perf=%7B%22timing%22:%7B%22of%22:1670877546419,%22n%22:0,%22f%22:218,%22dn%22:225,%22dne%22:252,%22c%22:252,%22s%22:257,%22ce%22:278,%22rq%22:278,%22rp%22:415,%22rpe%22:418,%22dl%22:435,%22di%22:1329,%22ds%22:1365,%22de%22:1472,%22dc%22:1712,%22l%22:1712,%22le%22:1850%7D,%22navigation%22:%7B%7D%7D&fcp=862&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:39:10 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 778944938d2bb51e-OSL
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
albertorullan.clickfunnels.com/favicon.ico
200 OK 2.3 kB URL HTTP/2 albertorullan.clickfunnels.com/favicon.ico
IP
File type MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash a19be7acd37b22fa3bf337ce7e3f22bb
42a63fe467ec9002e5e7ce515860883af0063525
8a5c482bed9702819cd996b5abab1cb01eb9e0189451d7dd1c169b9ea92fc2dd
GET /favicon.ico HTTP/1.1
Host: albertorullan.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/optin1631797356807
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTA3NTQzOTY=:visited=true; cf:visitor_id=50e93ac7-6f49-45ac-957c-7940604b0707; addevent_track_cookie=11865c4b-b3b6-4796-1552-7618ee000521
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 12 Dec 2022 20:39:10 GMT
content-type: image/x-icon
cf-ray: 7789448f6d26b4f4-OSL
access-control-allow-origin: *
etag: W/"637bf173-3aee"
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: MISS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2326
Expires: Mon, 12 Dec 2022 21:17:57 GMT
Date: Mon, 12 Dec 2022 20:39:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2326
Expires: Mon, 12 Dec 2022 21:17:57 GMT
Date: Mon, 12 Dec 2022 20:39:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2326
Expires: Mon, 12 Dec 2022 21:17:57 GMT
Date: Mon, 12 Dec 2022 20:39:11 GMT
Connection: keep-alive
app.clickfunnels.com/userevents/?funnel_id=ekhMUnhNT2FFQ0JQUGhuTEhLeDlpZz09LS0xaW52NXNSL1MwQmZObncybXIvUTJBPT0%3D--d6adb95ec73283b9700531abac307e6485735c6c&page_id=Wm56WnI0N0VEcjhaRS80NVc1TmdFZz09LS02TEF0VWVucjUyV1JFenF6ejVpS0tRPT0%3D--b9ff5ddef7de6430b053dca95490e2dc082d82b6&funnel_step_id=Q3ZyMlRDSXFWajRPWkxMMjlMSEZBZz09LS1Nb3F4VXRyYnVrVFJuYWlITmZIakNnPT0%3D--d572eb31c6203c83e32aba7d140688044b7e864a&user_id=ckdvQ0xUU0UxYmVGajBLMVhONWVJQT09LS1zKzZNYUpuUFRESU5na3VWWlZ3YkRBPT0%3D--be7fed110a6f0c054387acbecad0932a8e2fe4f2&account_id=VTZIZ2RqVUtxajBzTXp3TGVGWG9QZz09LS13Q21UejJSeHFwM3I1SDNVT3RnRGhBPT0%3D--c53cd0c99bbb8f5d8c8bcccb8cf1edf673b1b43c&page_code=NTA3NTQzOTY%3D&mode_id=1&time_zone=Eastern%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniquePageviewsCreatedSummary&nonce=4966526a-0a3b-451d-bb62-ec4de914df19&url=https%3A%2F%2Falbertorullan.clickfunnels.com%2Foptin1631797356807
202 Accepted 503 B URL HTTP/2 app.clickfunnels.com/userevents/?funnel_id=ekhMUnhNT2FFQ0JQUGhuTEhLeDlpZz09LS0xaW52NXNSL1MwQmZObncybXIvUTJBPT0%3D--d6adb95ec73283b9700531abac307e6485735c6c&page_id=Wm56WnI0N0VEcjhaRS80NVc1TmdFZz09LS02TEF0VWVucjUyV1JFenF6ejVpS0tRPT0%3D--b9ff5ddef7de6430b053dca95490e2dc082d82b6&funnel_step_id=Q3ZyMlRDSXFWajRPWkxMMjlMSEZBZz09LS1Nb3F4VXRyYnVrVFJuYWlITmZIakNnPT0%3D--d572eb31c6203c83e32aba7d140688044b7e864a&user_id=ckdvQ0xUU0UxYmVGajBLMVhONWVJQT09LS1zKzZNYUpuUFRESU5na3VWWlZ3YkRBPT0%3D--be7fed110a6f0c054387acbecad0932a8e2fe4f2&account_id=VTZIZ2RqVUtxajBzTXp3TGVGWG9QZz09LS13Q21UejJSeHFwM3I1SDNVT3RnRGhBPT0%3D--c53cd0c99bbb8f5d8c8bcccb8cf1edf673b1b43c&page_code=NTA3NTQzOTY%3D&mode_id=1&time_zone=Eastern%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniquePageviewsCreatedSummary&nonce=4966526a-0a3b-451d-bb62-ec4de914df19&url=https%3A%2F%2Falbertorullan.clickfunnels.com%2Foptin1631797356807
IP
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
GET /userevents/?funnel_id=ekhMUnhNT2FFQ0JQUGhuTEhLeDlpZz09LS0xaW52NXNSL1MwQmZObncybXIvUTJBPT0%3D--d6adb95ec73283b9700531abac307e6485735c6c&page_id=Wm56WnI0N0VEcjhaRS80NVc1TmdFZz09LS02TEF0VWVucjUyV1JFenF6ejVpS0tRPT0%3D--b9ff5ddef7de6430b053dca95490e2dc082d82b6&funnel_step_id=Q3ZyMlRDSXFWajRPWkxMMjlMSEZBZz09LS1Nb3F4VXRyYnVrVFJuYWlITmZIakNnPT0%3D--d572eb31c6203c83e32aba7d140688044b7e864a&user_id=ckdvQ0xUU0UxYmVGajBLMVhONWVJQT09LS1zKzZNYUpuUFRESU5na3VWWlZ3YkRBPT0%3D--be7fed110a6f0c054387acbecad0932a8e2fe4f2&account_id=VTZIZ2RqVUtxajBzTXp3TGVGWG9QZz09LS13Q21UejJSeHFwM3I1SDNVT3RnRGhBPT0%3D--c53cd0c99bbb8f5d8c8bcccb8cf1edf673b1b43c&page_code=NTA3NTQzOTY%3D&mode_id=1&time_zone=Eastern%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniquePageviewsCreatedSummary&nonce=4966526a-0a3b-451d-bb62-ec4de914df19&url=https%3A%2F%2Falbertorullan.clickfunnels.com%2Foptin1631797356807 HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://albertorullan.clickfunnels.com
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 202 Accepted
date: Mon, 12 Dec 2022 20:39:09 GMT
content-type: text/html
cf-ray: 7789448dba82b4f4-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: d970430e82a4584e892babaf53bca73f
x-runtime: 0.048045
set-cookie: __cf_bm=QOu._p1.RnPN__0JXN6jwcbHWbVxvqy7ijwSGgloRaQ-1670877549-0-AT9JC8gds94iGy2leWcnLhCrpKQojgfSDB58kEqwQKHp7H+JjBvOZH4698kkmy/KZYkqqlDVPanXC2pdymIzosnZZG06QDxlQwHUqZiYOPr6; path=/; expires=Mon, 12-Dec-22 21:09:09 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc582b370-f952-4f63-9937-1de61f295c46.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc582b370-f952-4f63-9937-1de61f295c46.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 24d5e5918cf53c569d6674e598228246
241a28d882355e06b0a2428c931f9d72dd5c6c53
2ebf30d1844d23a2b7516b900b1aa4473e5c042b0e0ecb2c39675d4b4bc7910e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc582b370-f952-4f63-9937-1de61f295c46.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5452
x-amzn-requestid: eb6aca44-e834-4123-b191-eb3f007bf7b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c6OCrGM-IAMFnxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393f6dd-71fee2de2dd69c7d1d4d32fe;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 03:02:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2dzTL44JHLjIbSIFDFPwmOcNMq9-lZF4YvsBimPz3YD1c4xQF2tUCA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 03:38:01 GMT
age: 61270
etag: "241a28d882355e06b0a2428c931f9d72dd5c6c53"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a765cd8-d4ff-441c-a948-f6a223fa2b0b.jpeg
200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a765cd8-d4ff-441c-a948-f6a223fa2b0b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 38876d760ef06c8471468c474c1e28a7
d43cd03d5eb3e7618b6fb70c935010c2ac92ad32
a0747f29eb6084eef42d3c247594973b02c619c7ec56b6137e24b6d0362557a0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a765cd8-d4ff-441c-a948-f6a223fa2b0b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4720
x-amzn-requestid: dd990fe1-8447-403e-b276-40889af5baa0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAENuF6SoAMF7oQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d8a-59b5a8f92ef6111e64e16079;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SBYH2ZqOyZx6tB8u3g3dkimaCUGSWAMQhULpYs4gWrmZ6i3_1Br_zQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:57:39 GMT
etag: "d43cd03d5eb3e7618b6fb70c935010c2ac92ad32"
content-type: image/jpeg
age: 81692
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
app.clickfunnels.com/v1/track?_unique=0.21434577386217235&_uniqueVisitorID=null&_type=WINDOW&_location=ttps%3A//albertorullan.clickfunnels.com/optin1631797356807&_title=Connect%20with%20EPIC%20Today%20%7C%20Equine%20Performance%20Innovative%20Center&_key=g6zo9rkj&_page_key=10w3p6pqg9h1biq2&_fid=11425493&_fspos=1&_fvrs=1&_funnel_stat=1&_location=https://albertorullan.clickfunnels.com/optin1631797356807&_referrer=
200 OK 8.9 kB URL HTTP/2 app.clickfunnels.com/v1/track?_unique=0.21434577386217235&_uniqueVisitorID=null&_type=WINDOW&_location=ttps%3A//albertorullan.clickfunnels.com/optin1631797356807&_title=Connect%20with%20EPIC%20Today%20%7C%20Equine%20Performance%20Innovative%20Center&_key=g6zo9rkj&_page_key=10w3p6pqg9h1biq2&_fid=11425493&_fspos=1&_fvrs=1&_funnel_stat=1&_location=https://albertorullan.clickfunnels.com/optin1631797356807&_referrer=
IP
File type ASCII text, with no line terminators
Hash 7ab62feb1942e24846ddf642065999eb
7dbf900b2c05506b63b9d888168f17a0e657acb6
a658bac54f3ae64afec5e91d96dcccf6680144e63761697e48bb06eac9f514d1
GET /v1/track?_unique=0.21434577386217235&_uniqueVisitorID=null&_type=WINDOW&_location=ttps%3A//albertorullan.clickfunnels.com/optin1631797356807&_title=Connect%20with%20EPIC%20Today%20%7C%20Equine%20Performance%20Innovative%20Center&_key=g6zo9rkj&_page_key=10w3p6pqg9h1biq2&_fid=11425493&_fspos=1&_fvrs=1&_funnel_stat=1&_location=https://albertorullan.clickfunnels.com/optin1631797356807&_referrer= HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://albertorullan.clickfunnels.com
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 12 Dec 2022 20:39:10 GMT
content-type: text/javascript; charset=utf-8
cf-ray: 7789448ffe1bb4f4-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
status: 200 OK
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: 29ad7017e76377f110b79b91acf8711e
x-runtime: 0.017737
set-cookie: __cf_bm=.bC1cAO3dz0ng0KDqHhxcVqWa1YFSY4gB5t.ojMlODA-1670877550-0-AS9hvX0cka5dopjrZCf5Ffb1uhmvsrk+axhx2lXU56mAECzrLB6ImjG+GFmN467eK+QitASbpTP3QlSyeIgMFXjx8A9JjtKIR1dZfmm8yrsr; path=/; expires=Mon, 12-Dec-22 21:09:10 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49a0678c-8bda-434a-a337-63696994d79c.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49a0678c-8bda-434a-a337-63696994d79c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a22fc7807fb3337f0af5e546c7ad366a
0d5969394b370a5c77c53ed58f55e5f8a45da3ab
98b4f4fd27dc036697fb0328083bce6e691b7493428f3a54991087d9d1165d97
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49a0678c-8bda-434a-a337-63696994d79c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5530
x-amzn-requestid: adecbb8c-cec3-46a0-b32c-0026b8421fe5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cw4d8Fg6IAMF61g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63903abf-4bcb385f27cb438c36a2cd5e;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 07:03:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: J2FSKW1AHhnyu2NBJDcqib3iVsOk745-dgnNgmk6T-QKcg-z5He7qw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 09:24:15 GMT
age: 40496
etag: "0d5969394b370a5c77c53ed58f55e5f8a45da3ab"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
app.clickfunnels.com/cf.js
301 Moved Permanently 12 kB URL HTTP/2 app.clickfunnels.com/cf.js
IP
Hash 545111734c81c5a15108b036a861d091
5257847b23653155da7c11562cb3da7529a5e2d3
cb917e45708fc7bd38bdd80955dee77a677d5d867d6da0cf5a81094d1b121bf0
GET /cf.js HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 12 Dec 2022 20:39:09 GMT
content-type: text/html
location: https://www.clickfunnels.com/cf.js
cf-ray: 7789448daa6bb4f4-OSL
access-control-allow-origin: *
age: 429
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc57568b-de5b-4cc8-9e29-a57a302df9b6.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc57568b-de5b-4cc8-9e29-a57a302df9b6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9f8d3e3c9e5d2ed74c3894b4825fcc2f
6bbd19dbf5112b5c52a1ccbfff3c9d7d0ab030da
9e44f93e65206ae7095cf9177296f4f528f1c2597cffa4853b7d6dcabf032796
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc57568b-de5b-4cc8-9e29-a57a302df9b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5619
x-amzn-requestid: df7189d2-5cad-43a2-9511-20c5de53f710
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAEMPFCSIAMF4uA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d81-729683c606fd6abc5bc70534;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: kbfjvh64NjCUE-e-3z7W58vyJMisRwERUV_W99jn3vrErY4bF1SFsg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:58:39 GMT
etag: "6bbd19dbf5112b5c52a1ccbfff3c9d7d0ab030da"
content-type: image/jpeg
age: 81632
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
200 OK 0 B URL HTTP/2 static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
IP
GET /beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://albertorullan.clickfunnels.com
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 12 Dec 2022 20:39:09 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2022.10.1
last-modified: Fri, 21 Oct 2022 01:56:09 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 778944890c64b4f9-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
app.clickfunnels.com/assets/lander.js
200 OK 0 B URL HTTP/2 app.clickfunnels.com/assets/lander.js
IP
GET /assets/lander.js HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 12 Dec 2022 20:39:08 GMT
content-type: application/x-javascript
cf-ray: 778944886925b4f4-OSL
access-control-allow-origin: *
age: 91
cache-control: public, max-age=1200
etag: W/"637bf1b5-2391a3"
expires: Mon, 12 Dec 2022 20:59:08 GMT
last-modified: Mon, 21 Nov 2022 21:46:29 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
app.clickfunnels.com/mailcheck.min.js
200 OK 0 B URL HTTP/2 app.clickfunnels.com/mailcheck.min.js
IP
GET /mailcheck.min.js HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 12 Dec 2022 20:39:08 GMT
content-type: application/x-javascript
cf-ray: 77894488691cb4f4-OSL
access-control-allow-origin: *
age: 3292
etag: W/"637bf173-a8d"
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
app.clickfunnels.com/assets/lander.css
200 OK 0 B URL HTTP/2 app.clickfunnels.com/assets/lander.css
IP
GET /assets/lander.css HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 12 Dec 2022 20:39:08 GMT
content-type: text/css
cf-ray: 778944886920b4f4-OSL
access-control-allow-origin: *
age: 1108
cache-control: public, max-age=1200
etag: W/"637bf173-6a514"
expires: Mon, 12 Dec 2022 20:59:08 GMT
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
app.clickfunnels.com/assets/pushcrew.js
200 OK 0 B URL HTTP/2 app.clickfunnels.com/assets/pushcrew.js
IP
GET /assets/pushcrew.js HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 12 Dec 2022 20:39:08 GMT
content-type: application/x-javascript
cf-ray: 77894488691fb4f4-OSL
access-control-allow-origin: *
age: 1108
cache-control: public, max-age=1200
etag: W/"637bf172-27d"
expires: Mon, 12 Dec 2022 20:59:08 GMT
last-modified: Mon, 21 Nov 2022 21:45:22 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
www.clickfunnels.com/cf.js
301 Moved Permanently 0 B URL HTTP/2 www.clickfunnels.com/cf.js
IP
GET /cf.js HTTP/1.1
Host: www.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://albertorullan.clickfunnels.com/
Connection: keep-alive
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 301 Moved Permanently
date: Mon, 12 Dec 2022 20:39:09 GMT
location: https://classic.clickfunnels.com/cf.js
cache-control: max-age=3600
expires: Mon, 12 Dec 2022 21:39:09 GMT
set-cookie: __cf_bm=CzhUgE4aDwzB8FEsbpxPIETd20LybB4qJX8mnOkJDqw-1670877549-0-ARlIacM9PwzDM8XburtLSUvXKewzf6kz5eeOngNG0DNOxzmx4qImJ33Sr0N1+VnkAo+XeTqLOs/i68zccWas66w=; path=/; expires=Mon, 12-Dec-22 21:09:09 GMT; domain=.www.clickfunnels.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 7789448e8bd1b4f4-OSL
X-Firefox-Spdy: h2
albertorullan.clickfunnels.com/optin1631797356807
200 OK 0 B URL HTTP/2 albertorullan.clickfunnels.com/optin1631797356807
IP
GET /optin1631797356807 HTTP/1.1
Host: albertorullan.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 12 Dec 2022 20:39:08 GMT
content-type: text/html; charset=utf-8
cf-ray: 77894486cde6b4f4-OSL
access-control-allow-origin: *
cache-control: max-age=60, public, s-maxage=600, r-maxage=10
last-modified: Mon, 06 Dec 2021 21:14:39 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: MISS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
status: 200 OK
x-content-digest: 880da673ba11da98a797b484eb1d49e07f5db07c
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: fresh
x-request-id: 95bc341c09e4ef0df887ec03e440e5df
x-runtime: 0.379401
set-cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo; path=/; expires=Mon, 12-Dec-22 21:09:08 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
classic.clickfunnels.com/cf.js
200 OK 0 B URL HTTP/2 classic.clickfunnels.com/cf.js
IP
GET /cf.js HTTP/1.1
Host: classic.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://albertorullan.clickfunnels.com/
Connection: keep-alive
Cookie: __cf_bm=run7EqJI5S8DtzQCYRL_El1s13AzW6wPKYrsFDDKml8-1670877548-0-Af7g2/8dlJwcsDwOFFfQNliOQhAJu2elojT43fI2B7pk4IoIr/JlxmIbZNSSPVFZ555e/rz0Fd6cWH06y2DOV7cz+vO9UyEl//xkxCtjznLo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 12 Dec 2022 20:39:09 GMT
content-type: application/x-javascript
cf-ray: 7789448ecc2fb4f4-OSL
access-control-allow-origin: *
age: 4911
etag: W/"637bf173-476a"
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.9.0/css/all.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.9.0/css/all.css
IP
GET /releases/v5.9.0/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://albertorullan.clickfunnels.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 12 Dec 2022 20:39:08 GMT
content-type: text/css
x-amz-id-2: Spb1ZB77j4xx9SPSBxVkz+CjkVoCLnNPzuJ++QEN6GU0QUbNz41ZYqgiLLYqu/ZVhzedx0ivXZk=
x-amz-request-id: J2XHPWFP0DA0BC1A
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"dbf9d822cefe851ba6f66e1ad57e8987"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 659832
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p6zuhwS0hhhvuBe%2F74i%2F6s7NakLUckwym6KvLuTWZgDiZEt0vSaPaxP3AqEOQZCjZtGOTv2oZVLnr%2FHpV%2BX3FidkFZpmVRUWUIr7FN8wB8TnfeLuV5wCZQkKITHHgsa16OlGJkvk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7789448928f923bd-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
34.86.85.56
23.36.76.249
104.16.56.101
93.184.220.29