r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3d0727e32cd103ddd4b73f28c81758aa
197a7bf43d63723fc532c23c6dced68d5cc36652
d3f75d03561d6a47d19370292e821a86e58381466f0c69386a21175de55882ff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D3F75D03561D6A47D19370292E821A86E58381466F0C69386A21175DE55882FF"
Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8963
Expires: Sun, 13 Nov 2022 01:59:44 GMT
Date: Sat, 12 Nov 2022 23:30:21 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash de470c6bab46e7c4b7cc69f392900fe7
189e4dcc4c2b8bf1f050e06bd68bce8a99618918
86f57134ddebd23a25615dc4d59c4b1ca8919e3e0495e1f006cbe7c0f39aa27e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5599
Cache-Control: max-age=131653
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 23:30:21 GMT
Etag: "636f75f3-1d7"
Expires: Mon, 14 Nov 2022 12:04:34 GMT
Last-Modified: Sat, 12 Nov 2022 10:31:15 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8391107bfc5e4673e8a706f90f63768
5295ed0b1cb8bad4d3e851049acc7f0270937d12
ed5c27510100ffc4481be474ebcb020d147c645beb110604d5284eeeb8b97c02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ED5C27510100FFC4481BE474EBCB020D147C645BEB110604D5284EEEB8B97C02"
Last-Modified: Fri, 11 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4833
Expires: Sun, 13 Nov 2022 00:50:54 GMT
Date: Sat, 12 Nov 2022 23:30:21 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4736bac84ca28f2b1e961159fb4ea098
1319612979f53896fcfeacd4215c2715d4951e4c
5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Length, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 12 Nov 2022 22:44:05 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2776
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: do0XvcHYLIt2sPlK1rbFLKO0KSbqxFpz+lyNuDtS3bk97kGadSlR/n1WND0/2mAFgnO/XOLwLv4=
x-amz-request-id: N5TDT28XMMYCTXWN
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 12 Nov 2022 23:13:11 GMT
age: 1030
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 23:30:21 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Cache-Control, Retry-After, Content-Length, Expires, ETag, Pragma, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 12 Nov 2022 22:44:48 GMT
cache-control: public,max-age=3600
age: 2734
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ae51f1958554de4457c22a7d5a9ba8b6
173e90a8c6ee36b7ec569dbea47436a90d7e7c76
dc43a04e1e26243f63a8e628f2ebcb23a9527fd4bc40dc6d1d61879b0f95bb21
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1605
Cache-Control: max-age=122595
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 23:30:22 GMT
Etag: "636f622c-1d7"
Expires: Mon, 14 Nov 2022 09:33:37 GMT
Last-Modified: Sat, 12 Nov 2022 09:06:52 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Cupm867NrSqwr5u+PQYVtQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: bWkoAn5r4lwJECdf26J+6Vi/UdM=
derrickgmarketing.com/
200 OK 15 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (10200), with CRLF, LF line terminators
Hash af24388dea3b754d72e130dba4a6bdbd
d1186ab2d2ebcd463df8809e98682e98d1494d8e
5ac6772606fe21c9abb93c7f6d2d51241e03ac8e18f0cc944c52aab96bd286b9
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: derrickgmarketing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 12 Nov 2022 23:30:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
X-nginx-cache: WordPress
Last-Modified: Sat, 12 Nov 2022 23:30:22 GMT
Set-Cookie: PHPSESSID=c1c0761ce09f8a58a2b1a636f3bc8e62; path=/
__cf_bm=IXM.RPfH8APSI1qD0w_nXtHiNxJHYFhkSlvjiclVYFM-1668295822-0-ASvIgNYM/nFP+3vlEobzmpl735UAK79N2OsJ9A0P+xU55W3lHrLPp+n2L37JmFFoiGyLQqjtqX3czqs7tyx+Ay3Iz6hevqK0dpZN+VouF/uz; path=/; expires=Sun, 13-Nov-22 00:00:22 GMT; domain=.clickfunnels.com; HttpOnly; Secure
CF-Cache-Status: MISS
Server: cloudflare
CF-RAY: 76930e13daa3b511-OSL
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 278 B IP
Hash f3db15f7288b39b54336d77f5a8ee2f6
181ae6b8f413d128cf1f612dd79c032cf57c46da
4cf03d974d8b68f89a73382df63af8ed9239b87c996080cde68f9d9c40880fce
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4382
Cache-Control: max-age=116722
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 23:30:22 GMT
Etag: "636f4062-116"
Expires: Mon, 14 Nov 2022 07:55:44 GMT
Last-Modified: Sat, 12 Nov 2022 06:42:42 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278
images.clickfunnels.com/3d/392630953c4119a324492bb1c05778/ClickfunnelsTag.png
200 OK 5.3 kB URL HTTP/2 images.clickfunnels.com/3d/392630953c4119a324492bb1c05778/ClickfunnelsTag.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash d99a10ef5010513b3d30f7cf51614b5f
d60c1da11f05540f39632c7357c22b76c9ee1ed7
5dfa88a4dc8b6c0b834a62e45daee28a8dc37ed6ae7eb1545e4ed8b6382c0474
GET /3d/392630953c4119a324492bb1c05778/ClickfunnelsTag.png HTTP/1.1
Host: images.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://derrickgmarketing.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 23:30:22 GMT
content-type: image/webp
content-length: 5276
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=9030
content-disposition: inline; filename="ClickfunnelsTag.webp"
etag: "a633777156a5ffeb58c92d3d59fa4e34"
last-modified: Fri, 03 Jan 2020 17:41:49 GMT
vary: Accept
x-amz-id-2: ljv94G2w1n3M/2W2IrEIaIUolhdJvl32C32hIw/MnVEwf6HJXMHzwSV+C+j1wXlOoJiMbV356Bg=
x-amz-request-id: EGVJ33C2QW4HWEB9
cf-cache-status: HIT
age: 5791
expires: Tue, 06 Dec 2022 23:30:22 GMT
cache-control: public, max-age=2073600
accept-ranges: bytes
set-cookie: __cf_bm=5N4Ty_hzKcCc2LEKe3zaboWIZJmSvYppmR2zWr2BDk8-1668295822-0-AdXn/OsNlWfXQS7AzqaPKHaYpMdDC0a4pk6DKBMBkoR/D1NY4y41lZV0thWkJMsogYEi438JGmf5nc6uoa5N65opH1tFwLHo2zEytlLPOMdv; path=/; expires=Sun, 13-Nov-22 00:00:22 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 76930e1ceaabb4eb-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bc49d7a510846ce4c52fc2bcf19c591c
42189d9ddeba55c15da20ab02c8ccad4a8ad7ae2
86ce259086857d53f246aa21f8cb5dc2be85435601b687f727d3a5a2e38ec406
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 23:30:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4b46bbcd35c85c4678b0e3e409bba3bc
bb0705335e28414345ad5fcdd61104cf2fbbbbc4
6c3df7e6d0a8491fe24c03df2ccba059ba2f84155a680a4a22f217d3870cff95
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 23:30:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
app.clickfunnels.com/userevents/?funnel_id=QnIwSVJDYlNQVGtRam83Rzc4aTBCZz09LS16UTBmbEMwRUVaNjZOTXNEVFVheXZ3PT0%3D--07ed3ea10f9091ecdfc54932d3d3a370fff5d650&page_id=clJNZ3E3N2pmcVNLNHZ0OGROZVBIdz09LS1CQjVXOTBpM2MxeWNLdDA1S3c2ek5nPT0%3D--3e28432711517e71e303819e2c9bca97b50726c7&funnel_step_id=ME9acmdoZmhhNVl0aDR1Nlh5bk1ldz09LS1RUTY0b3piTzh4MUErVHozRlJocUxBPT0%3D--0d0a8040931399b3f4a9de8322d8e9ac391f42d0&user_id=NzhVcU01Z1llNkpYMis3RW1JQmJtdz09LS1wMWlpWTBaL1lWTHFzV2FoN0dhbllnPT0%3D--ab2acf8c3c7e27d33dd2562e1f00ed0c144d510e&account_id=NWZMVGRaVTJhalNhd1p6QnRrNDl0dz09LS1ZdWZza2phYkIwYlpWeUx1V1BYalBnPT0%3D--c6b4ddb3bffbd6ead7fe5cccc0e603bbab173a23&page_code=NTY1MzA0NjY%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniquePageviewsCreatedSummary&nonce=048f5e08-5702-485b-8682-1a35dd25a907&url=http%3A%2F%2Fderrickgmarketing.com%2F
301 Moved Permanently 1.5 kB URL HTTP/1.1 app.clickfunnels.com/userevents/?funnel_id=QnIwSVJDYlNQVGtRam83Rzc4aTBCZz09LS16UTBmbEMwRUVaNjZOTXNEVFVheXZ3PT0%3D--07ed3ea10f9091ecdfc54932d3d3a370fff5d650&page_id=clJNZ3E3N2pmcVNLNHZ0OGROZVBIdz09LS1CQjVXOTBpM2MxeWNLdDA1S3c2ek5nPT0%3D--3e28432711517e71e303819e2c9bca97b50726c7&funnel_step_id=ME9acmdoZmhhNVl0aDR1Nlh5bk1ldz09LS1RUTY0b3piTzh4MUErVHozRlJocUxBPT0%3D--0d0a8040931399b3f4a9de8322d8e9ac391f42d0&user_id=NzhVcU01Z1llNkpYMis3RW1JQmJtdz09LS1wMWlpWTBaL1lWTHFzV2FoN0dhbllnPT0%3D--ab2acf8c3c7e27d33dd2562e1f00ed0c144d510e&account_id=NWZMVGRaVTJhalNhd1p6QnRrNDl0dz09LS1ZdWZza2phYkIwYlpWeUx1V1BYalBnPT0%3D--c6b4ddb3bffbd6ead7fe5cccc0e603bbab173a23&page_code=NTY1MzA0NjY%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniquePageviewsCreatedSummary&nonce=048f5e08-5702-485b-8682-1a35dd25a907&url=http%3A%2F%2Fderrickgmarketing.com%2F
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1435)
Hash 3f7af62ac36104a5058cf0f2f10ab2f3
85f2d9c26502274e28137fec08f000b6a68d0524
7c74b7f2a20038894848874c0fb38051218031d4778dafc695b8e45bbbd3e303
GET /userevents/?funnel_id=QnIwSVJDYlNQVGtRam83Rzc4aTBCZz09LS16UTBmbEMwRUVaNjZOTXNEVFVheXZ3PT0%3D--07ed3ea10f9091ecdfc54932d3d3a370fff5d650&page_id=clJNZ3E3N2pmcVNLNHZ0OGROZVBIdz09LS1CQjVXOTBpM2MxeWNLdDA1S3c2ek5nPT0%3D--3e28432711517e71e303819e2c9bca97b50726c7&funnel_step_id=ME9acmdoZmhhNVl0aDR1Nlh5bk1ldz09LS1RUTY0b3piTzh4MUErVHozRlJocUxBPT0%3D--0d0a8040931399b3f4a9de8322d8e9ac391f42d0&user_id=NzhVcU01Z1llNkpYMis3RW1JQmJtdz09LS1wMWlpWTBaL1lWTHFzV2FoN0dhbllnPT0%3D--ab2acf8c3c7e27d33dd2562e1f00ed0c144d510e&account_id=NWZMVGRaVTJhalNhd1p6QnRrNDl0dz09LS1ZdWZza2phYkIwYlpWeUx1V1BYalBnPT0%3D--c6b4ddb3bffbd6ead7fe5cccc0e603bbab173a23&page_code=NTY1MzA0NjY%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniquePageviewsCreatedSummary&nonce=048f5e08-5702-485b-8682-1a35dd25a907&url=http%3A%2F%2Fderrickgmarketing.com%2F HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://derrickgmarketing.com
Connection: keep-alive
Referer: http://derrickgmarketing.com/
HTTP/1.1 301 Moved Permanently
Date: Sat, 12 Nov 2022 23:30:23 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://app.clickfunnels.com/userevents?funnel_id=QnIwSVJDYlNQVGtRam83Rzc4aTBCZz09LS16UTBmbEMwRUVaNjZOTXNEVFVheXZ3PT0%3D--07ed3ea10f9091ecdfc54932d3d3a370fff5d650&page_id=clJNZ3E3N2pmcVNLNHZ0OGROZVBIdz09LS1CQjVXOTBpM2MxeWNLdDA1S3c2ek5nPT0%3D--3e28432711517e71e303819e2c9bca97b50726c7&funnel_step_id=ME9acmdoZmhhNVl0aDR1Nlh5bk1ldz09LS1RUTY0b3piTzh4MUErVHozRlJocUxBPT0%3D--0d0a8040931399b3f4a9de8322d8e9ac391f42d0&user_id=NzhVcU01Z1llNkpYMis3RW1JQmJtdz09LS1wMWlpWTBaL1lWTHFzV2FoN0dhbllnPT0%3D--ab2acf8c3c7e27d33dd2562e1f00ed0c144d510e&account_id=NWZMVGRaVTJhalNhd1p6QnRrNDl0dz09LS1ZdWZza2phYkIwYlpWeUx1V1BYalBnPT0%3D--c6b4ddb3bffbd6ead7fe5cccc0e603bbab173a23&page_code=NTY1MzA0NjY%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniquePageviewsCreatedSummary&nonce=048f5e08-5702-485b-8682-1a35dd25a907&url=http%3A%2F%2Fderrickgmarketing.com%2F
CF-Ray: 76930e210aec0b69-OSL
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Vary: Accept-Encoding
CF-Cache-Status: MISS
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
Status: 301 Moved Permanently
X-Powered-By: Phusion Passenger Enterprise 6.0.7
X-Rack-Cache: miss
X-Request-Id: d5c2ae2ad20ed527d2250678e87c9481
X-Runtime: 0.007650
Set-Cookie: __cf_bm=2afTyE2IN6W8HSA9uqNmfxHC_lkpbPyzPH5j2osS8hM-1668295823-0-AbtRrLzxJ96JuKYWJ/tFpE6i6UCXYSZwuCQiflW/G+y8tTRiP66w60NlO8+pY1A+MDsjhddKOupCdpBGCNIvVQiX5bB/x7SBrNOTTZnp6gmw; path=/; expires=Sun, 13-Nov-22 00:00:23 GMT; domain=.clickfunnels.com; HttpOnly; SameSite=None
Server-Timing: cf-q-config;dur=6.0000020312145e-06
Server: cloudflare
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5823b629e86542b63f4355ec5e67a126
97cbdbbb6b03e6ef7f3f45449245470ad8bd8292
96d8e39efb6eebd1413a4bc0fa6800781f636e70dc0ccadf6a546f26fa022755
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19351
Expires: Sun, 13 Nov 2022 04:52:54 GMT
Date: Sat, 12 Nov 2022 23:30:23 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5823b629e86542b63f4355ec5e67a126
97cbdbbb6b03e6ef7f3f45449245470ad8bd8292
96d8e39efb6eebd1413a4bc0fa6800781f636e70dc0ccadf6a546f26fa022755
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19351
Expires: Sun, 13 Nov 2022 04:52:54 GMT
Date: Sat, 12 Nov 2022 23:30:23 GMT
Connection: keep-alive
app.clickfunnels.com/userevents/?funnel_id=QnIwSVJDYlNQVGtRam83Rzc4aTBCZz09LS16UTBmbEMwRUVaNjZOTXNEVFVheXZ3PT0%3D--07ed3ea10f9091ecdfc54932d3d3a370fff5d650&page_id=clJNZ3E3N2pmcVNLNHZ0OGROZVBIdz09LS1CQjVXOTBpM2MxeWNLdDA1S3c2ek5nPT0%3D--3e28432711517e71e303819e2c9bca97b50726c7&funnel_step_id=ME9acmdoZmhhNVl0aDR1Nlh5bk1ldz09LS1RUTY0b3piTzh4MUErVHozRlJocUxBPT0%3D--0d0a8040931399b3f4a9de8322d8e9ac391f42d0&user_id=NzhVcU01Z1llNkpYMis3RW1JQmJtdz09LS1wMWlpWTBaL1lWTHFzV2FoN0dhbllnPT0%3D--ab2acf8c3c7e27d33dd2562e1f00ed0c144d510e&account_id=NWZMVGRaVTJhalNhd1p6QnRrNDl0dz09LS1ZdWZza2phYkIwYlpWeUx1V1BYalBnPT0%3D--c6b4ddb3bffbd6ead7fe5cccc0e603bbab173a23&page_code=NTY1MzA0NjY%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::PageviewsCreatedSummary&nonce=03810e96-2a71-4d3b-872c-e60632bcf552&url=http%3A%2F%2Fderrickgmarketing.com%2F
301 Moved Permanently 1.4 kB URL HTTP/1.1 app.clickfunnels.com/userevents/?funnel_id=QnIwSVJDYlNQVGtRam83Rzc4aTBCZz09LS16UTBmbEMwRUVaNjZOTXNEVFVheXZ3PT0%3D--07ed3ea10f9091ecdfc54932d3d3a370fff5d650&page_id=clJNZ3E3N2pmcVNLNHZ0OGROZVBIdz09LS1CQjVXOTBpM2MxeWNLdDA1S3c2ek5nPT0%3D--3e28432711517e71e303819e2c9bca97b50726c7&funnel_step_id=ME9acmdoZmhhNVl0aDR1Nlh5bk1ldz09LS1RUTY0b3piTzh4MUErVHozRlJocUxBPT0%3D--0d0a8040931399b3f4a9de8322d8e9ac391f42d0&user_id=NzhVcU01Z1llNkpYMis3RW1JQmJtdz09LS1wMWlpWTBaL1lWTHFzV2FoN0dhbllnPT0%3D--ab2acf8c3c7e27d33dd2562e1f00ed0c144d510e&account_id=NWZMVGRaVTJhalNhd1p6QnRrNDl0dz09LS1ZdWZza2phYkIwYlpWeUx1V1BYalBnPT0%3D--c6b4ddb3bffbd6ead7fe5cccc0e603bbab173a23&page_code=NTY1MzA0NjY%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::PageviewsCreatedSummary&nonce=03810e96-2a71-4d3b-872c-e60632bcf552&url=http%3A%2F%2Fderrickgmarketing.com%2F
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1429)
Hash a5bd8d78decd8d96fc53561b617216a0
c192565cbd1fc013ddf3a2275ad1916c287ec5e0
139f1cbe5c844f0042f6c3b9f1a18756f663e344d6850dbd459cda2dcb1bbb72
GET /userevents/?funnel_id=QnIwSVJDYlNQVGtRam83Rzc4aTBCZz09LS16UTBmbEMwRUVaNjZOTXNEVFVheXZ3PT0%3D--07ed3ea10f9091ecdfc54932d3d3a370fff5d650&page_id=clJNZ3E3N2pmcVNLNHZ0OGROZVBIdz09LS1CQjVXOTBpM2MxeWNLdDA1S3c2ek5nPT0%3D--3e28432711517e71e303819e2c9bca97b50726c7&funnel_step_id=ME9acmdoZmhhNVl0aDR1Nlh5bk1ldz09LS1RUTY0b3piTzh4MUErVHozRlJocUxBPT0%3D--0d0a8040931399b3f4a9de8322d8e9ac391f42d0&user_id=NzhVcU01Z1llNkpYMis3RW1JQmJtdz09LS1wMWlpWTBaL1lWTHFzV2FoN0dhbllnPT0%3D--ab2acf8c3c7e27d33dd2562e1f00ed0c144d510e&account_id=NWZMVGRaVTJhalNhd1p6QnRrNDl0dz09LS1ZdWZza2phYkIwYlpWeUx1V1BYalBnPT0%3D--c6b4ddb3bffbd6ead7fe5cccc0e603bbab173a23&page_code=NTY1MzA0NjY%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::PageviewsCreatedSummary&nonce=03810e96-2a71-4d3b-872c-e60632bcf552&url=http%3A%2F%2Fderrickgmarketing.com%2F HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://derrickgmarketing.com
Connection: keep-alive
Referer: http://derrickgmarketing.com/
HTTP/1.1 301 Moved Permanently
Date: Sat, 12 Nov 2022 23:30:23 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://app.clickfunnels.com/userevents?funnel_id=QnIwSVJDYlNQVGtRam83Rzc4aTBCZz09LS16UTBmbEMwRUVaNjZOTXNEVFVheXZ3PT0%3D--07ed3ea10f9091ecdfc54932d3d3a370fff5d650&page_id=clJNZ3E3N2pmcVNLNHZ0OGROZVBIdz09LS1CQjVXOTBpM2MxeWNLdDA1S3c2ek5nPT0%3D--3e28432711517e71e303819e2c9bca97b50726c7&funnel_step_id=ME9acmdoZmhhNVl0aDR1Nlh5bk1ldz09LS1RUTY0b3piTzh4MUErVHozRlJocUxBPT0%3D--0d0a8040931399b3f4a9de8322d8e9ac391f42d0&user_id=NzhVcU01Z1llNkpYMis3RW1JQmJtdz09LS1wMWlpWTBaL1lWTHFzV2FoN0dhbllnPT0%3D--ab2acf8c3c7e27d33dd2562e1f00ed0c144d510e&account_id=NWZMVGRaVTJhalNhd1p6QnRrNDl0dz09LS1ZdWZza2phYkIwYlpWeUx1V1BYalBnPT0%3D--c6b4ddb3bffbd6ead7fe5cccc0e603bbab173a23&page_code=NTY1MzA0NjY%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3APageviewsCreatedSummary&nonce=03810e96-2a71-4d3b-872c-e60632bcf552&url=http%3A%2F%2Fderrickgmarketing.com%2F
CF-Ray: 76930e210f200b02-OSL
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Vary: Accept-Encoding
CF-Cache-Status: MISS
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
Status: 301 Moved Permanently
X-Powered-By: Phusion Passenger Enterprise 6.0.7
X-Rack-Cache: miss
X-Request-Id: 8b5b60e8d663ab9a71473ecb4b6049eb
X-Runtime: 0.011458
Set-Cookie: __cf_bm=02keiA2Wyp2qUhjjnkm4fUVmK4YHPSkR2A3fAg95jvc-1668295823-0-AeHAmxivQwytwFtKHryM2QNkdTmlwhgurM3fvqqu79fkFDfd0Y7xePeNRZCwCEkfL4wgT6E8xbxJ3sqISZLTY5fA2gv1lKYYv5PfIrKpa2NX; path=/; expires=Sun, 13-Nov-22 00:00:23 GMT; domain=.clickfunnels.com; HttpOnly; SameSite=None
Server-Timing: cf-q-config;dur=1.5000001440058e-05
Server: cloudflare
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5823b629e86542b63f4355ec5e67a126
97cbdbbb6b03e6ef7f3f45449245470ad8bd8292
96d8e39efb6eebd1413a4bc0fa6800781f636e70dc0ccadf6a546f26fa022755
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19351
Expires: Sun, 13 Nov 2022 04:52:54 GMT
Date: Sat, 12 Nov 2022 23:30:23 GMT
Connection: keep-alive
app.clickfunnels.com/userevents/?funnel_id=QnIwSVJDYlNQVGtRam83Rzc4aTBCZz09LS16UTBmbEMwRUVaNjZOTXNEVFVheXZ3PT0%3D--07ed3ea10f9091ecdfc54932d3d3a370fff5d650&page_id=clJNZ3E3N2pmcVNLNHZ0OGROZVBIdz09LS1CQjVXOTBpM2MxeWNLdDA1S3c2ek5nPT0%3D--3e28432711517e71e303819e2c9bca97b50726c7&funnel_step_id=ME9acmdoZmhhNVl0aDR1Nlh5bk1ldz09LS1RUTY0b3piTzh4MUErVHozRlJocUxBPT0%3D--0d0a8040931399b3f4a9de8322d8e9ac391f42d0&user_id=NzhVcU01Z1llNkpYMis3RW1JQmJtdz09LS1wMWlpWTBaL1lWTHFzV2FoN0dhbllnPT0%3D--ab2acf8c3c7e27d33dd2562e1f00ed0c144d510e&account_id=NWZMVGRaVTJhalNhd1p6QnRrNDl0dz09LS1ZdWZza2phYkIwYlpWeUx1V1BYalBnPT0%3D--c6b4ddb3bffbd6ead7fe5cccc0e603bbab173a23&page_code=NTY1MzA0NjY%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniqueVisitorsCreatedSummary&nonce=6c556a7e-a7b7-49a8-b813-35391baa5083&url=http%3A%2F%2Fderrickgmarketing.com%2F
301 Moved Permanently 1.4 kB URL HTTP/1.1 app.clickfunnels.com/userevents/?funnel_id=QnIwSVJDYlNQVGtRam83Rzc4aTBCZz09LS16UTBmbEMwRUVaNjZOTXNEVFVheXZ3PT0%3D--07ed3ea10f9091ecdfc54932d3d3a370fff5d650&page_id=clJNZ3E3N2pmcVNLNHZ0OGROZVBIdz09LS1CQjVXOTBpM2MxeWNLdDA1S3c2ek5nPT0%3D--3e28432711517e71e303819e2c9bca97b50726c7&funnel_step_id=ME9acmdoZmhhNVl0aDR1Nlh5bk1ldz09LS1RUTY0b3piTzh4MUErVHozRlJocUxBPT0%3D--0d0a8040931399b3f4a9de8322d8e9ac391f42d0&user_id=NzhVcU01Z1llNkpYMis3RW1JQmJtdz09LS1wMWlpWTBaL1lWTHFzV2FoN0dhbllnPT0%3D--ab2acf8c3c7e27d33dd2562e1f00ed0c144d510e&account_id=NWZMVGRaVTJhalNhd1p6QnRrNDl0dz09LS1ZdWZza2phYkIwYlpWeUx1V1BYalBnPT0%3D--c6b4ddb3bffbd6ead7fe5cccc0e603bbab173a23&page_code=NTY1MzA0NjY%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniqueVisitorsCreatedSummary&nonce=6c556a7e-a7b7-49a8-b813-35391baa5083&url=http%3A%2F%2Fderrickgmarketing.com%2F
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1434)
Hash 488b50c0ef790cf0991b2bcfe54aa7e9
b0ff5953f056ab1b0cb657c843b74773ed52cfb7
873fe1873a5df52be313dc4870781075ebd3a1dbe6ffe4982032995516eb9e94
GET /userevents/?funnel_id=QnIwSVJDYlNQVGtRam83Rzc4aTBCZz09LS16UTBmbEMwRUVaNjZOTXNEVFVheXZ3PT0%3D--07ed3ea10f9091ecdfc54932d3d3a370fff5d650&page_id=clJNZ3E3N2pmcVNLNHZ0OGROZVBIdz09LS1CQjVXOTBpM2MxeWNLdDA1S3c2ek5nPT0%3D--3e28432711517e71e303819e2c9bca97b50726c7&funnel_step_id=ME9acmdoZmhhNVl0aDR1Nlh5bk1ldz09LS1RUTY0b3piTzh4MUErVHozRlJocUxBPT0%3D--0d0a8040931399b3f4a9de8322d8e9ac391f42d0&user_id=NzhVcU01Z1llNkpYMis3RW1JQmJtdz09LS1wMWlpWTBaL1lWTHFzV2FoN0dhbllnPT0%3D--ab2acf8c3c7e27d33dd2562e1f00ed0c144d510e&account_id=NWZMVGRaVTJhalNhd1p6QnRrNDl0dz09LS1ZdWZza2phYkIwYlpWeUx1V1BYalBnPT0%3D--c6b4ddb3bffbd6ead7fe5cccc0e603bbab173a23&page_code=NTY1MzA0NjY%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniqueVisitorsCreatedSummary&nonce=6c556a7e-a7b7-49a8-b813-35391baa5083&url=http%3A%2F%2Fderrickgmarketing.com%2F HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://derrickgmarketing.com
Connection: keep-alive
Referer: http://derrickgmarketing.com/
HTTP/1.1 301 Moved Permanently
Date: Sat, 12 Nov 2022 23:30:23 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://app.clickfunnels.com/userevents?funnel_id=QnIwSVJDYlNQVGtRam83Rzc4aTBCZz09LS16UTBmbEMwRUVaNjZOTXNEVFVheXZ3PT0%3D--07ed3ea10f9091ecdfc54932d3d3a370fff5d650&page_id=clJNZ3E3N2pmcVNLNHZ0OGROZVBIdz09LS1CQjVXOTBpM2MxeWNLdDA1S3c2ek5nPT0%3D--3e28432711517e71e303819e2c9bca97b50726c7&funnel_step_id=ME9acmdoZmhhNVl0aDR1Nlh5bk1ldz09LS1RUTY0b3piTzh4MUErVHozRlJocUxBPT0%3D--0d0a8040931399b3f4a9de8322d8e9ac391f42d0&user_id=NzhVcU01Z1llNkpYMis3RW1JQmJtdz09LS1wMWlpWTBaL1lWTHFzV2FoN0dhbllnPT0%3D--ab2acf8c3c7e27d33dd2562e1f00ed0c144d510e&account_id=NWZMVGRaVTJhalNhd1p6QnRrNDl0dz09LS1ZdWZza2phYkIwYlpWeUx1V1BYalBnPT0%3D--c6b4ddb3bffbd6ead7fe5cccc0e603bbab173a23&page_code=NTY1MzA0NjY%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniqueVisitorsCreatedSummary&nonce=6c556a7e-a7b7-49a8-b813-35391baa5083&url=http%3A%2F%2Fderrickgmarketing.com%2F
CF-Ray: 76930e21082e1bfa-OSL
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Vary: Accept-Encoding
CF-Cache-Status: MISS
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
Status: 301 Moved Permanently
X-Powered-By: Phusion Passenger Enterprise 6.0.7
X-Rack-Cache: miss
X-Request-Id: 6bd0a13d3ba0f13bd4cc06fabc1ed42a
X-Runtime: 0.012815
Set-Cookie: __cf_bm=NjunBqT5ULoABOjP.wsEYOEFUXUguqOh3CgCD_WMjB0-1668295823-0-AeO4Erq1mRkQp1aGug6r9ydlQfzMw55YYYdwtoJG0NRBl4K+a5gduNH3EWK9Ov/Kd6x4cAdReqCAw91e1X/GK602f8BYxNt+RydKXvv4o91V; path=/; expires=Sun, 13-Nov-22 00:00:23 GMT; domain=.clickfunnels.com; HttpOnly; SameSite=None
Server-Timing: cf-q-config;dur=4.9999980547e-06
Server: cloudflare
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5823b629e86542b63f4355ec5e67a126
97cbdbbb6b03e6ef7f3f45449245470ad8bd8292
96d8e39efb6eebd1413a4bc0fa6800781f636e70dc0ccadf6a546f26fa022755
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19351
Expires: Sun, 13 Nov 2022 04:52:54 GMT
Date: Sat, 12 Nov 2022 23:30:23 GMT
Connection: keep-alive
derrickgmarketing.com/cdn-cgi/rum?
200 OK 0 B URL HTTP/1.1 derrickgmarketing.com/cdn-cgi/rum?
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
POST /cdn-cgi/rum? HTTP/1.1
Host: derrickgmarketing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
content-type: application/json
Content-Length: 4113
Origin: http://derrickgmarketing.com
Connection: keep-alive
Referer: http://derrickgmarketing.com/
Cookie: PHPSESSID=c1c0761ce09f8a58a2b1a636f3bc8e62; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTY1MzA0NjY=:visited=true; cf:visitor_id=49175272-4029-4bac-a074-eecdde8b1709; addevent_track_cookie=9fddf49b-fd36-4b69-2d61-f80d3a250660
HTTP/1.1 200 OK
Date: Sat, 12 Nov 2022 23:30:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
CF-RAY: 76930e221899b511-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5823b629e86542b63f4355ec5e67a126
97cbdbbb6b03e6ef7f3f45449245470ad8bd8292
96d8e39efb6eebd1413a4bc0fa6800781f636e70dc0ccadf6a546f26fa022755
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19351
Expires: Sun, 13 Nov 2022 04:52:54 GMT
Date: Sat, 12 Nov 2022 23:30:23 GMT
Connection: keep-alive
www.clickfunnels.com/cf.js
404 Not Found 1.2 kB URL HTTP/2 www.clickfunnels.com/cf.js
IP
File type ASCII text, with very long lines (590)
Hash 90f65998f5db7586d56cbcfd6943a51b
c299cfcd199a6a80a1992fdd9de7b92cfe9bf075
7031773ba4d5864c84bf87a04ae83f94cc775b3ccf51cdf6effed15cb0835340
GET /cf.js HTTP/1.1
Host: www.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://derrickgmarketing.com/
Connection: keep-alive
Cookie: __cf_bm=5N4Ty_hzKcCc2LEKe3zaboWIZJmSvYppmR2zWr2BDk8-1668295822-0-AdXn/OsNlWfXQS7AzqaPKHaYpMdDC0a4pk6DKBMBkoR/D1NY4y41lZV0thWkJMsogYEi438JGmf5nc6uoa5N65opH1tFwLHo2zEytlLPOMdv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Sat, 12 Nov 2022 23:30:23 GMT
content-type: text/html; charset=utf-8
cf-ray: 76930e21aa220b06-OSL
age: 3
strict-transport-security: max-age=15724800; includeSubDomains
vary: Accept, Origin, Accept-Encoding
cf-cache-status: HIT
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-request-id: d8e6c34efce02531c619932bc1382d6c
x-runtime: 0.085872
set-cookie: __cf_bm=Ar3cAVGnE02QeAUQq2HVERd5C6t4zr6SoJgIe0KQT.M-1668295823-0-AToMi2+fCwyKSi4pCKIoblqMo2QBpih9SfWlXdjzHUQM8CV4i6ylcfekzhVD/ffgbVHbcOZGB5d7kk6S+uj9beg=; path=/; expires=Sun, 13-Nov-22 00:00:23 GMT; domain=.www.clickfunnels.com; HttpOnly; Secure; SameSite=None
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8995ae3b-9ed6-4d82-aeda-bce16829dd81.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8995ae3b-9ed6-4d82-aeda-bce16829dd81.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8bb9138fde16b4052595c61c9aae69a1
eba0fcacc61aed15fe7c4aa11a951e1b681f08d2
11b98e67b1e869b2456ace0e07aa6f5019d15f43c8132f482c76e322282d8e63
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8995ae3b-9ed6-4d82-aeda-bce16829dd81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7018
x-amzn-requestid: 35b9ea76-0024-42a6-9561-f2f87fa09f70
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bHcAoGLUIAMFkVA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63660d37-29eb6d7d6379fff612a6a593;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 07:13:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: _Lgx5YJ1SaHAGB2vH0VIXW7Hu6ZIjdvyLjo3XFasEXqUNqCeKzLqJQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 04:07:30 GMT
age: 69773
etag: "eba0fcacc61aed15fe7c4aa11a951e1b681f08d2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.9.0/css/v4-shims.css
200 OK 12 kB URL HTTP/2 use.fontawesome.com/releases/v5.9.0/css/v4-shims.css
IP
File type ASCII text, with very long lines (26440)
Hash d54e307df78f19ebf50af47c0e60f87e
e5be43d7961dc8209dfd583d863b493cc827b2a5
5e888549f5b443fea7590381d68446322e9433d1ec06baad4430c996c7667f3e
GET /releases/v5.9.0/css/v4-shims.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://derrickgmarketing.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 12 Nov 2022 23:30:22 GMT
content-type: text/css
x-amz-id-2: WpVlr9E4LNAdFsXi6U7ITEvBAF0od/nY8z13ckAJA/I/wFoGHyoSwlXOyhWr8pqbj6dB1MeQp5k=
x-amz-request-id: CN86A7VHSM61Q680
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"e140a7d32f343530f016095df3cc2ae4"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 2632130
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YP%2BAkhtTEUoaL4SWcOixDeh6cbfhzgau6btE0f0C8MBGL9xri2fH97Jm2iu4V6WinaalrjrWry7flO7a%2ByEakYfh4bch7ivZglE1wmurIHN137AjUbd9osx%2F51E%2Ft0vBmK0w3MCC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76930e1d0e2a0091-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4da03871-10a1-4d64-8f01-11282f1f6f20.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4da03871-10a1-4d64-8f01-11282f1f6f20.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dbfb6798f32968c8e68ba386edf23794
29d00e0276be7b87b759d78edbb3851c52e4db86
4379cce07bdfea4da27c1f158d1c16928346f8ebdf00272737fd1cf1c75f5fee
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4da03871-10a1-4d64-8f01-11282f1f6f20.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13931
x-amzn-requestid: 3f6caf57-b687-4d1b-af40-a21bbebaff95
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bEI_KFf2IAMFwgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6364bb94-23ae7ecd18dc41521e172237;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 07:13:24 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: CoDvVLQV5-9tqbMiKDNkb6y-U0EGO36WHPtZ3Am-eGbPdGLXd7tNYA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 03:53:05 GMT
age: 70638
etag: "29d00e0276be7b87b759d78edbb3851c52e4db86"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25a71d85-6d34-4bb8-8293-97875c72aa74.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25a71d85-6d34-4bb8-8293-97875c72aa74.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 221170365ec0ab6bb773472933bccb4e
2f8d80c36b9d52bbca60ddc946176b8bca2f05f5
c1fedf00b8a0defa4fada242cf3e28c90937bf5f1c10145aebb3494c5a0b5066
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25a71d85-6d34-4bb8-8293-97875c72aa74.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9540
x-amzn-requestid: 69c339ec-ac3c-49a4-8029-01d21a7f50b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: be3itHj1oAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636f6c77-79d478af722a4ecf50a381a9;Sampled=0
x-amzn-remapped-date: Sat, 12 Nov 2022 09:50:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: uxbx0xudJDX6_72_MTyyW6R2FXmdfV_5APgpZhqG-6QIeE_yPdGxSg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 22:05:19 GMT
age: 5104
etag: "2f8d80c36b9d52bbca60ddc946176b8bca2f05f5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
app.clickfunnels.com/assets/pushcrew.js
200 OK 12 kB URL HTTP/2 app.clickfunnels.com/assets/pushcrew.js
IP
File type ASCII text, with very long lines (637), with no line terminators
Hash 5c4c6aea4a8b9f94025129da0d7772a8
3f881be6c794302b73cfe134d0da3367a537f800
cf51e916dce5cb49a0d13e9f94506a89862c43ee03b7effa373669542aca3a88
GET /assets/pushcrew.js HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://derrickgmarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 12 Nov 2022 23:30:22 GMT
content-type: application/x-javascript
cf-ray: 76930e1ceab2b4eb-OSL
access-control-allow-origin: *
age: 189
cache-control: public, max-age=1200
etag: W/"6359dae3-27d"
expires: Sat, 12 Nov 2022 23:50:22 GMT
last-modified: Thu, 27 Oct 2022 01:12:03 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
set-cookie: __cf_bm=dWCsPlmkxJz2BEPX8yCmx5nBzxM3c8hMxLi32WOcRtE-1668295822-0-Aex7cb61sh8fUp/z8zsvBqdE/IyTXvEMjGGrE1/lNh1qN/tqUwSIUfo7VZhF1wmACzm/9/aLedkiSHRWDSpXnbXZUq5s0UfjkF7pJewLt1+X; path=/; expires=Sun, 13-Nov-22 00:00:22 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15103da1-5996-4497-9ec1-6bf49292c35c.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15103da1-5996-4497-9ec1-6bf49292c35c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b3ce8ed12a73c0d1cc9a5f838bff34c8
b96ef6b0060b6dd83475728986ff333faf35c4b6
12466854c0ba0cf11043d6b0ef171c8d6645e6d7f4de4211e1426d0c883a0d96
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15103da1-5996-4497-9ec1-6bf49292c35c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9708
x-amzn-requestid: 08ff92c4-61ac-490e-9c5b-0c3e97abb6fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bBpBDGjPoAMFV8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6363bba0-7a0b97ea587f036e33c43e5f;Sampled=0
x-amzn-remapped-date: Thu, 03 Nov 2022 13:01:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: B-VFR3675yhlwYVLgxGl9621BEfaTzCwdxglY0z07efK3bJ1cCzGqA==
via: 1.1 de8fc80b494d3d381f7e006918dcc588.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 04:57:42 GMT
age: 66761
etag: "b96ef6b0060b6dd83475728986ff333faf35c4b6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
images.clickfunnels.com/cdn-cgi/image/fit=scale-down,width=1150,quality=75/https://images.clickfunnels.com/10/5c6682c1ac48689d734c9d43790c92/steps123.png
200 OK 8.1 kB URL HTTP/2 images.clickfunnels.com/cdn-cgi/image/fit=scale-down,width=1150,quality=75/https://images.clickfunnels.com/10/5c6682c1ac48689d734c9d43790c92/steps123.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 633x96, components 3\012- data
Hash 4382c50b983b0ebb2da1d1ef3e7fb270
db83bbc5e62b7702cb64ec28598abe1f54591466
dc488b1e29ef1814e0f2246de38268a742f8be636cc1374d8754d1f0ade4d019
GET /cdn-cgi/image/fit=scale-down,width=1150,quality=75/https://images.clickfunnels.com/10/5c6682c1ac48689d734c9d43790c92/steps123.png HTTP/1.1
Host: images.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://derrickgmarketing.com/
Cookie: __cf_bm=5N4Ty_hzKcCc2LEKe3zaboWIZJmSvYppmR2zWr2BDk8-1668295822-0-AdXn/OsNlWfXQS7AzqaPKHaYpMdDC0a4pk6DKBMBkoR/D1NY4y41lZV0thWkJMsogYEi438JGmf5nc6uoa5N65opH1tFwLHo2zEytlLPOMdv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 23:30:23 GMT
content-type: image/jpeg
content-length: 8105
cf-ray: 76930e21e855b4eb-OSL
accept-ranges: bytes
cache-control: max-age=2073600
etag: "cfi48pJagVShss7VJusotVVKg9jsT79EnOD-VoEO8ABQ:239a337af79a2433e2a49189c2ec6e7a"
last-modified: Fri, 14 Aug 2020 00:45:22 GMT
vary: Accept, Accept-Encoding
cf-cache-status: REVALIDATED
cf-bgj: imgq:75,h2pri
cf-resized: internal=ok/h q=0 n=31 c=0+15 v=2022.11.1 l=8105
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
js-agent.newrelic.com/nr-1216.min.js
200 OK 14 kB URL HTTP/2 js-agent.newrelic.com/nr-1216.min.js
IP
File type ASCII text, with very long lines (32022)
Hash b7c09cc097b2847f9edc784adba62dcb
5aa648623cf5e3b4b215fe5d068a7904c59f2925
6da450b6a3ba53bdab36f6529e987a245cdfca9a37b77790f06dfd8d5797bdaa
GET /nr-1216.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://derrickgmarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Vf9xsFZHH0UI6bmTnW+KeBzegICGOxvtMLIWtbljNKoJtdkUEk/MfmbYPFui+bgtiUf/4lC5dk8=
x-amz-request-id: 4AV5AVKCCR961CNG
last-modified: Thu, 14 Apr 2022 16:45:57 GMT
etag: "9f533d8cd24b2c5e3b4dc886ecbd43e8"
x-amz-version-id: mHHzJIqOizHibcYt0xqAszRr0gQRiNYy
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sat, 12 Nov 2022 23:30:24 GMT
via: 1.1 varnish
x-served-by: cache-bma1626-BMA
x-cache: HIT
x-cache-hits: 2227
x-timer: S1668295824.041526,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 14391
X-Firefox-Spdy: h2
app.clickfunnels.com/userevents?funnel_id=QnIwSVJDYlNQVGtRam83Rzc4aTBCZz09LS16UTBmbEMwRUVaNjZOTXNEVFVheXZ3PT0%3D--07ed3ea10f9091ecdfc54932d3d3a370fff5d650&page_id=clJNZ3E3N2pmcVNLNHZ0OGROZVBIdz09LS1CQjVXOTBpM2MxeWNLdDA1S3c2ek5nPT0%3D--3e28432711517e71e303819e2c9bca97b50726c7&funnel_step_id=ME9acmdoZmhhNVl0aDR1Nlh5bk1ldz09LS1RUTY0b3piTzh4MUErVHozRlJocUxBPT0%3D--0d0a8040931399b3f4a9de8322d8e9ac391f42d0&user_id=NzhVcU01Z1llNkpYMis3RW1JQmJtdz09LS1wMWlpWTBaL1lWTHFzV2FoN0dhbllnPT0%3D--ab2acf8c3c7e27d33dd2562e1f00ed0c144d510e&account_id=NWZMVGRaVTJhalNhd1p6QnRrNDl0dz09LS1ZdWZza2phYkIwYlpWeUx1V1BYalBnPT0%3D--c6b4ddb3bffbd6ead7fe5cccc0e603bbab173a23&page_code=NTY1MzA0NjY%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniqueVisitorsCreatedSummary&nonce=6c556a7e-a7b7-49a8-b813-35391baa5083&url=http%3A%2F%2Fderrickgmarketing.com%2F
202 Accepted 471 B URL HTTP/2 app.clickfunnels.com/userevents?funnel_id=QnIwSVJDYlNQVGtRam83Rzc4aTBCZz09LS16UTBmbEMwRUVaNjZOTXNEVFVheXZ3PT0%3D--07ed3ea10f9091ecdfc54932d3d3a370fff5d650&page_id=clJNZ3E3N2pmcVNLNHZ0OGROZVBIdz09LS1CQjVXOTBpM2MxeWNLdDA1S3c2ek5nPT0%3D--3e28432711517e71e303819e2c9bca97b50726c7&funnel_step_id=ME9acmdoZmhhNVl0aDR1Nlh5bk1ldz09LS1RUTY0b3piTzh4MUErVHozRlJocUxBPT0%3D--0d0a8040931399b3f4a9de8322d8e9ac391f42d0&user_id=NzhVcU01Z1llNkpYMis3RW1JQmJtdz09LS1wMWlpWTBaL1lWTHFzV2FoN0dhbllnPT0%3D--ab2acf8c3c7e27d33dd2562e1f00ed0c144d510e&account_id=NWZMVGRaVTJhalNhd1p6QnRrNDl0dz09LS1ZdWZza2phYkIwYlpWeUx1V1BYalBnPT0%3D--c6b4ddb3bffbd6ead7fe5cccc0e603bbab173a23&page_code=NTY1MzA0NjY%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniqueVisitorsCreatedSummary&nonce=6c556a7e-a7b7-49a8-b813-35391baa5083&url=http%3A%2F%2Fderrickgmarketing.com%2F
IP
Hash 3a7d450c4cf015275397ae0b875f37f6
a21a4375e17e11d7b8e3713040c4eeb68f9b6237
c4c49a204491c4173d976386d6ded05a41a56afe86dcaa647c7dd99610718ff1
GET /userevents?funnel_id=QnIwSVJDYlNQVGtRam83Rzc4aTBCZz09LS16UTBmbEMwRUVaNjZOTXNEVFVheXZ3PT0%3D--07ed3ea10f9091ecdfc54932d3d3a370fff5d650&page_id=clJNZ3E3N2pmcVNLNHZ0OGROZVBIdz09LS1CQjVXOTBpM2MxeWNLdDA1S3c2ek5nPT0%3D--3e28432711517e71e303819e2c9bca97b50726c7&funnel_step_id=ME9acmdoZmhhNVl0aDR1Nlh5bk1ldz09LS1RUTY0b3piTzh4MUErVHozRlJocUxBPT0%3D--0d0a8040931399b3f4a9de8322d8e9ac391f42d0&user_id=NzhVcU01Z1llNkpYMis3RW1JQmJtdz09LS1wMWlpWTBaL1lWTHFzV2FoN0dhbllnPT0%3D--ab2acf8c3c7e27d33dd2562e1f00ed0c144d510e&account_id=NWZMVGRaVTJhalNhd1p6QnRrNDl0dz09LS1ZdWZza2phYkIwYlpWeUx1V1BYalBnPT0%3D--c6b4ddb3bffbd6ead7fe5cccc0e603bbab173a23&page_code=NTY1MzA0NjY%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniqueVisitorsCreatedSummary&nonce=6c556a7e-a7b7-49a8-b813-35391baa5083&url=http%3A%2F%2Fderrickgmarketing.com%2F HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: http://derrickgmarketing.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Sat, 12 Nov 2022 23:30:23 GMT
content-type: text/html
cf-ray: 76930e2238b3b4eb-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: 0276b2175d592d3e85804623919d35bd
x-runtime: 0.026892
set-cookie: __cf_bm=8jysGGhszdl8ypxEit8b4JFhVee5.uBmcD37NWmbGxc-1668295823-0-AfdvmrRGvvKl8EJDS/GYCMHUhhMYtdz1oQQc452qaRXv3MMbX8aWS/QhDCiChdJNUcW5Bd3dg9m2NRL7K4HkutvaSGoWO/gHBkMBasoa4UNw; path=/; expires=Sun, 13-Nov-22 00:00:23 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
bam.nr-data.net/1/NRJS-fc902efb332119fff33?a=367981416&v=1216.487a282&to=dFZWTENWVQ9QExdNRlJLSFlWXEpMRQBfXUYYSU1aXVBKC1AF&rst=2711&ck=1&ref=http://derrickgmarketing.com/&ap=430&be=1392&fe=2306&dc=2157&perf=%7B%22timing%22:%7B%22of%22:1668295820444,%22n%22:0,%22f%22:-6,%22dn%22:-6,%22dne%22:-5,%22c%22:-5,%22ce%22:-4,%22rq%22:58,%22rp%22:1369,%22rpe%22:1370,%22dl%22:1376,%22di%22:2143,%22ds%22:2156,%22de%22:2247,%22dc%22:2305,%22l%22:2305,%22le%22:2313%7D,%22navigation%22:%7B%7D%7D&fcp=1779&jsonp=NREUM.setToken
200 OK 77 B URL HTTP/1.1 bam.nr-data.net/1/NRJS-fc902efb332119fff33?a=367981416&v=1216.487a282&to=dFZWTENWVQ9QExdNRlJLSFlWXEpMRQBfXUYYSU1aXVBKC1AF&rst=2711&ck=1&ref=http://derrickgmarketing.com/&ap=430&be=1392&fe=2306&dc=2157&perf=%7B%22timing%22:%7B%22of%22:1668295820444,%22n%22:0,%22f%22:-6,%22dn%22:-6,%22dne%22:-5,%22c%22:-5,%22ce%22:-4,%22rq%22:58,%22rp%22:1369,%22rpe%22:1370,%22dl%22:1376,%22di%22:2143,%22ds%22:2156,%22de%22:2247,%22dc%22:2305,%22l%22:2305,%22le%22:2313%7D,%22navigation%22:%7B%7D%7D&fcp=1779&jsonp=NREUM.setToken
IP
File type ASCII text, with no line terminators
Hash f1442f5831dbbe0210da2d7a4180d6b8
2ade23c6c7a001c66f0c0a9a101ec152747b434e
c6acf9fb2ecc1b144c51bd0337bbf1c26db3df2f649ac2da5c56db20d93eb3ef
GET /1/NRJS-fc902efb332119fff33?a=367981416&v=1216.487a282&to=dFZWTENWVQ9QExdNRlJLSFlWXEpMRQBfXUYYSU1aXVBKC1AF&rst=2711&ck=1&ref=http://derrickgmarketing.com/&ap=430&be=1392&fe=2306&dc=2157&perf=%7B%22timing%22:%7B%22of%22:1668295820444,%22n%22:0,%22f%22:-6,%22dn%22:-6,%22dne%22:-5,%22c%22:-5,%22ce%22:-4,%22rq%22:58,%22rp%22:1369,%22rpe%22:1370,%22dl%22:1376,%22di%22:2143,%22ds%22:2156,%22de%22:2247,%22dc%22:2305,%22l%22:2305,%22le%22:2313%7D,%22navigation%22:%7B%7D%7D&fcp=1779&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://derrickgmarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 12 Nov 2022 23:30:24 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 76930e250c781c02-OSL
Access-Control-Allow-Origin: *
Set-Cookie: JSESSIONID=2370cd072f4a1d4b; Path=/; Domain=.nr-data.net; Secure; SameSite=None
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
derrickgmarketing.com/cdn-cgi/rum?
200 OK 0 B URL HTTP/1.1 derrickgmarketing.com/cdn-cgi/rum?
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
POST /cdn-cgi/rum? HTTP/1.1
Host: derrickgmarketing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
Content-Length: 528
Origin: http://derrickgmarketing.com
Connection: keep-alive
Referer: http://derrickgmarketing.com/
Cookie: PHPSESSID=c1c0761ce09f8a58a2b1a636f3bc8e62; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTY1MzA0NjY=:visited=true; cf:visitor_id=49175272-4029-4bac-a074-eecdde8b1709; addevent_track_cookie=9fddf49b-fd36-4b69-2d61-f80d3a250660
HTTP/1.1 200 OK
Date: Sat, 12 Nov 2022 23:30:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
CF-RAY: 76930e4d5bd4b511-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
200 OK 0 B URL HTTP/2 static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
IP
GET /beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://derrickgmarketing.com
Connection: keep-alive
Referer: http://derrickgmarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 12 Nov 2022 23:30:22 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2022.10.1
last-modified: Fri, 21 Oct 2022 01:56:09 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 76930e1cf8d7b4f3-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
app.clickfunnels.com/userevents?funnel_id=QnIwSVJDYlNQVGtRam83Rzc4aTBCZz09LS16UTBmbEMwRUVaNjZOTXNEVFVheXZ3PT0%3D--07ed3ea10f9091ecdfc54932d3d3a370fff5d650&page_id=clJNZ3E3N2pmcVNLNHZ0OGROZVBIdz09LS1CQjVXOTBpM2MxeWNLdDA1S3c2ek5nPT0%3D--3e28432711517e71e303819e2c9bca97b50726c7&funnel_step_id=ME9acmdoZmhhNVl0aDR1Nlh5bk1ldz09LS1RUTY0b3piTzh4MUErVHozRlJocUxBPT0%3D--0d0a8040931399b3f4a9de8322d8e9ac391f42d0&user_id=NzhVcU01Z1llNkpYMis3RW1JQmJtdz09LS1wMWlpWTBaL1lWTHFzV2FoN0dhbllnPT0%3D--ab2acf8c3c7e27d33dd2562e1f00ed0c144d510e&account_id=NWZMVGRaVTJhalNhd1p6QnRrNDl0dz09LS1ZdWZza2phYkIwYlpWeUx1V1BYalBnPT0%3D--c6b4ddb3bffbd6ead7fe5cccc0e603bbab173a23&page_code=NTY1MzA0NjY%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3APageviewsCreatedSummary&nonce=03810e96-2a71-4d3b-872c-e60632bcf552&url=http%3A%2F%2Fderrickgmarketing.com%2F
202 Accepted 0 B URL HTTP/2 app.clickfunnels.com/userevents?funnel_id=QnIwSVJDYlNQVGtRam83Rzc4aTBCZz09LS16UTBmbEMwRUVaNjZOTXNEVFVheXZ3PT0%3D--07ed3ea10f9091ecdfc54932d3d3a370fff5d650&page_id=clJNZ3E3N2pmcVNLNHZ0OGROZVBIdz09LS1CQjVXOTBpM2MxeWNLdDA1S3c2ek5nPT0%3D--3e28432711517e71e303819e2c9bca97b50726c7&funnel_step_id=ME9acmdoZmhhNVl0aDR1Nlh5bk1ldz09LS1RUTY0b3piTzh4MUErVHozRlJocUxBPT0%3D--0d0a8040931399b3f4a9de8322d8e9ac391f42d0&user_id=NzhVcU01Z1llNkpYMis3RW1JQmJtdz09LS1wMWlpWTBaL1lWTHFzV2FoN0dhbllnPT0%3D--ab2acf8c3c7e27d33dd2562e1f00ed0c144d510e&account_id=NWZMVGRaVTJhalNhd1p6QnRrNDl0dz09LS1ZdWZza2phYkIwYlpWeUx1V1BYalBnPT0%3D--c6b4ddb3bffbd6ead7fe5cccc0e603bbab173a23&page_code=NTY1MzA0NjY%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3APageviewsCreatedSummary&nonce=03810e96-2a71-4d3b-872c-e60632bcf552&url=http%3A%2F%2Fderrickgmarketing.com%2F
IP
GET /userevents?funnel_id=QnIwSVJDYlNQVGtRam83Rzc4aTBCZz09LS16UTBmbEMwRUVaNjZOTXNEVFVheXZ3PT0%3D--07ed3ea10f9091ecdfc54932d3d3a370fff5d650&page_id=clJNZ3E3N2pmcVNLNHZ0OGROZVBIdz09LS1CQjVXOTBpM2MxeWNLdDA1S3c2ek5nPT0%3D--3e28432711517e71e303819e2c9bca97b50726c7&funnel_step_id=ME9acmdoZmhhNVl0aDR1Nlh5bk1ldz09LS1RUTY0b3piTzh4MUErVHozRlJocUxBPT0%3D--0d0a8040931399b3f4a9de8322d8e9ac391f42d0&user_id=NzhVcU01Z1llNkpYMis3RW1JQmJtdz09LS1wMWlpWTBaL1lWTHFzV2FoN0dhbllnPT0%3D--ab2acf8c3c7e27d33dd2562e1f00ed0c144d510e&account_id=NWZMVGRaVTJhalNhd1p6QnRrNDl0dz09LS1ZdWZza2phYkIwYlpWeUx1V1BYalBnPT0%3D--c6b4ddb3bffbd6ead7fe5cccc0e603bbab173a23&page_code=NTY1MzA0NjY%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3APageviewsCreatedSummary&nonce=03810e96-2a71-4d3b-872c-e60632bcf552&url=http%3A%2F%2Fderrickgmarketing.com%2F HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: http://derrickgmarketing.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Sat, 12 Nov 2022 23:30:23 GMT
content-type: text/html
cf-ray: 76930e2238aab4eb-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: b4ae63481350cb766a29c95ad1942351
x-runtime: 0.041928
set-cookie: __cf_bm=k3Ro_PdiGZ24u0OMbRdOSuhuAcvgyA_2DMnXqIw9LJE-1668295823-0-AY2MduFBwXIrmv12+/jn6C32RmXkvWo3mJJi817Pm/Hx27ctHYago/hWbvAwucMcmgheARsGfOFOmKfOl2Vze2LiKBBwksUISLMJVOkecdja; path=/; expires=Sun, 13-Nov-22 00:00:23 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=uzr1dOtUcC20OcAzKe0nYRczHcRJdaAYLiYGpHYDaP4-1668295823-0-AQrFuP1N8gJlN127KrFvQVfRLluysPAHeWz6kjt_zGXN_rYMCWUiXS0EmOodHoel_lAt2g06P6bjRC1zcACjdGzyDVRSuUqp0OWUMmYPUa-a"}],"group":"cf-csp-endpoint","max_age":86400}
content-security-policy-report-only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=uzr1dOtUcC20OcAzKe0nYRczHcRJdaAYLiYGpHYDaP4-1668295823-0-AQrFuP1N8gJlN127KrFvQVfRLluysPAHeWz6kjt_zGXN_rYMCWUiXS0EmOodHoel_lAt2g06P6bjRC1zcACjdGzyDVRSuUqp0OWUMmYPUa-a; report-to cf-csp-endpoint
server: cloudflare
X-Firefox-Spdy: h2
www2.clickfunnels.com/favicon.ico
200 OK 0 B URL HTTP/2 www2.clickfunnels.com/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: www2.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://derrickgmarketing.com/
Cookie: __cf_bm=5N4Ty_hzKcCc2LEKe3zaboWIZJmSvYppmR2zWr2BDk8-1668295822-0-AdXn/OsNlWfXQS7AzqaPKHaYpMdDC0a4pk6DKBMBkoR/D1NY4y41lZV0thWkJMsogYEi438JGmf5nc6uoa5N65opH1tFwLHo2zEytlLPOMdv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 23:30:24 GMT
content-type: image/x-icon
cf-ray: 76930e241b01b4eb-OSL
access-control-allow-origin: *
etag: W/"6359dae3-3aee"
last-modified: Thu, 27 Oct 2022 01:12:03 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: REVALIDATED
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
app.clickfunnels.com/assets/lander.css
200 OK 0 B URL HTTP/2 app.clickfunnels.com/assets/lander.css
IP
GET /assets/lander.css HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://derrickgmarketing.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 12 Nov 2022 23:30:22 GMT
content-type: text/css
cf-ray: 76930e1ceaa1b4eb-OSL
access-control-allow-origin: *
age: 189
cache-control: public, max-age=1200
etag: W/"6359dae3-6a514"
expires: Sat, 12 Nov 2022 23:50:22 GMT
last-modified: Thu, 27 Oct 2022 01:12:03 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
set-cookie: __cf_bm=QKpXaJvJutL_DPg5x8q_CBLZ_UrGG2.KfDGwa8EubiY-1668295822-0-Ae1I2MIpA1w3WCHXwxiRwEhu9wNrrSdC+pyZ5JK2W7Je6+B/zTF4ysjneqiud7BfY6dp8HEOaQZD60nEz7cH/XWPS4xXbnu2tF+zGfYSj1gs; path=/; expires=Sun, 13-Nov-22 00:00:22 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
app.clickfunnels.com/assets/lander.js
200 OK 0 B URL HTTP/2 app.clickfunnels.com/assets/lander.js
IP
GET /assets/lander.js HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://derrickgmarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 12 Nov 2022 23:30:22 GMT
content-type: application/x-javascript
cf-ray: 76930e1ceaacb4eb-OSL
access-control-allow-origin: *
age: 189
cache-control: public, max-age=1200
etag: W/"6359db3a-2391a3"
expires: Sat, 12 Nov 2022 23:50:22 GMT
last-modified: Thu, 27 Oct 2022 01:13:30 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
set-cookie: __cf_bm=nHsS5iv5pS8pX5QJotCCDiYRjKzD.i8LRWrKhYLNKL0-1668295822-0-AZWbyX2zRvjfoC/OW+vw5zbsJoXO0MOtCeCJmIhTYBcRq2BmwemY4JsgmPQXas1P3VR8ryT/aU1jncGyj0hZmuOyErU+dpvT/5tTIN3OZjCr; path=/; expires=Sun, 13-Nov-22 00:00:22 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.9.0/css/all.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.9.0/css/all.css
IP
GET /releases/v5.9.0/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://derrickgmarketing.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 12 Nov 2022 23:30:22 GMT
content-type: text/css
x-amz-id-2: cIB7RJR8YNkOt3c5odVNIsPWGanLxokh1zS2YvTVv7QSgKdKXNOroM5eyN2MvPjoE855Z9I1sPM=
x-amz-request-id: BCPBKD6BGPB27GGJ
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"dbf9d822cefe851ba6f66e1ad57e8987"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 1505916
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1wnWElYBmtDofM863vM1acyU8InhGrSIPwI1VKR7sj2%2B4RoFjM13YzKGakwpWhQXSLZklfor9XNMwOqDmZExAw1CwdJ%2FYGo1bGEnU8aJaRaUrow%2Bkv2FAqt87mYzR0l3vCBgCN68"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76930e1d3e460091-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700
IP
GET /css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://derrickgmarketing.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 12 Nov 2022 23:30:22 GMT
date: Sat, 12 Nov 2022 23:30:22 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
app.clickfunnels.com/cf.js
301 Moved Permanently 0 B URL HTTP/2 app.clickfunnels.com/cf.js
IP
GET /cf.js HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://derrickgmarketing.com/
Cookie: __cf_bm=5N4Ty_hzKcCc2LEKe3zaboWIZJmSvYppmR2zWr2BDk8-1668295822-0-AdXn/OsNlWfXQS7AzqaPKHaYpMdDC0a4pk6DKBMBkoR/D1NY4y41lZV0thWkJMsogYEi438JGmf5nc6uoa5N65opH1tFwLHo2zEytlLPOMdv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Sat, 12 Nov 2022 23:30:23 GMT
content-type: text/html
location: https://www.clickfunnels.com/cf.js
cf-ray: 76930e20df02b4eb-OSL
access-control-allow-origin: *
age: 213
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
X-Firefox-Spdy: h2
app.clickfunnels.com/userevents?funnel_id=QnIwSVJDYlNQVGtRam83Rzc4aTBCZz09LS16UTBmbEMwRUVaNjZOTXNEVFVheXZ3PT0%3D--07ed3ea10f9091ecdfc54932d3d3a370fff5d650&page_id=clJNZ3E3N2pmcVNLNHZ0OGROZVBIdz09LS1CQjVXOTBpM2MxeWNLdDA1S3c2ek5nPT0%3D--3e28432711517e71e303819e2c9bca97b50726c7&funnel_step_id=ME9acmdoZmhhNVl0aDR1Nlh5bk1ldz09LS1RUTY0b3piTzh4MUErVHozRlJocUxBPT0%3D--0d0a8040931399b3f4a9de8322d8e9ac391f42d0&user_id=NzhVcU01Z1llNkpYMis3RW1JQmJtdz09LS1wMWlpWTBaL1lWTHFzV2FoN0dhbllnPT0%3D--ab2acf8c3c7e27d33dd2562e1f00ed0c144d510e&account_id=NWZMVGRaVTJhalNhd1p6QnRrNDl0dz09LS1ZdWZza2phYkIwYlpWeUx1V1BYalBnPT0%3D--c6b4ddb3bffbd6ead7fe5cccc0e603bbab173a23&page_code=NTY1MzA0NjY%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniquePageviewsCreatedSummary&nonce=048f5e08-5702-485b-8682-1a35dd25a907&url=http%3A%2F%2Fderrickgmarketing.com%2F
202 Accepted 0 B URL HTTP/2 app.clickfunnels.com/userevents?funnel_id=QnIwSVJDYlNQVGtRam83Rzc4aTBCZz09LS16UTBmbEMwRUVaNjZOTXNEVFVheXZ3PT0%3D--07ed3ea10f9091ecdfc54932d3d3a370fff5d650&page_id=clJNZ3E3N2pmcVNLNHZ0OGROZVBIdz09LS1CQjVXOTBpM2MxeWNLdDA1S3c2ek5nPT0%3D--3e28432711517e71e303819e2c9bca97b50726c7&funnel_step_id=ME9acmdoZmhhNVl0aDR1Nlh5bk1ldz09LS1RUTY0b3piTzh4MUErVHozRlJocUxBPT0%3D--0d0a8040931399b3f4a9de8322d8e9ac391f42d0&user_id=NzhVcU01Z1llNkpYMis3RW1JQmJtdz09LS1wMWlpWTBaL1lWTHFzV2FoN0dhbllnPT0%3D--ab2acf8c3c7e27d33dd2562e1f00ed0c144d510e&account_id=NWZMVGRaVTJhalNhd1p6QnRrNDl0dz09LS1ZdWZza2phYkIwYlpWeUx1V1BYalBnPT0%3D--c6b4ddb3bffbd6ead7fe5cccc0e603bbab173a23&page_code=NTY1MzA0NjY%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniquePageviewsCreatedSummary&nonce=048f5e08-5702-485b-8682-1a35dd25a907&url=http%3A%2F%2Fderrickgmarketing.com%2F
IP
GET /userevents?funnel_id=QnIwSVJDYlNQVGtRam83Rzc4aTBCZz09LS16UTBmbEMwRUVaNjZOTXNEVFVheXZ3PT0%3D--07ed3ea10f9091ecdfc54932d3d3a370fff5d650&page_id=clJNZ3E3N2pmcVNLNHZ0OGROZVBIdz09LS1CQjVXOTBpM2MxeWNLdDA1S3c2ek5nPT0%3D--3e28432711517e71e303819e2c9bca97b50726c7&funnel_step_id=ME9acmdoZmhhNVl0aDR1Nlh5bk1ldz09LS1RUTY0b3piTzh4MUErVHozRlJocUxBPT0%3D--0d0a8040931399b3f4a9de8322d8e9ac391f42d0&user_id=NzhVcU01Z1llNkpYMis3RW1JQmJtdz09LS1wMWlpWTBaL1lWTHFzV2FoN0dhbllnPT0%3D--ab2acf8c3c7e27d33dd2562e1f00ed0c144d510e&account_id=NWZMVGRaVTJhalNhd1p6QnRrNDl0dz09LS1ZdWZza2phYkIwYlpWeUx1V1BYalBnPT0%3D--c6b4ddb3bffbd6ead7fe5cccc0e603bbab173a23&page_code=NTY1MzA0NjY%3D&mode_id=1&time_zone=America%2FNew_York&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniquePageviewsCreatedSummary&nonce=048f5e08-5702-485b-8682-1a35dd25a907&url=http%3A%2F%2Fderrickgmarketing.com%2F HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: http://derrickgmarketing.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Sat, 12 Nov 2022 23:30:24 GMT
content-type: text/html
cf-ray: 76930e22289db4eb-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: fcd5e58828c5baad2406c1e85ff4731a
x-runtime: 0.026398
set-cookie: __cf_bm=BVvIzdqCzVNq_Lm0AC4voGNjKGGgRpWGZ7xLPzpOTqo-1668295824-0-AelPMsMGwJutz1C0zl5/gXXu5ZlD/0mB9Xe9SMTIrNfvsOafyBhPtVJTZ5kFZiPz66QfosfRc3q1LMoAi0hNCHo4lyiaZNW2Cw9VcQsyHYgw; path=/; expires=Sun, 13-Nov-22 00:00:24 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
app.clickfunnels.com/assets/userevents/application.js
200 OK 0 B URL HTTP/2 app.clickfunnels.com/assets/userevents/application.js
IP
GET /assets/userevents/application.js HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://derrickgmarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 12 Nov 2022 23:30:22 GMT
content-type: application/x-javascript
cf-ray: 76930e1ceab0b4eb-OSL
access-control-allow-origin: *
age: 189
cache-control: public, max-age=1200
etag: W/"6359dae3-147c"
expires: Sat, 12 Nov 2022 23:50:22 GMT
last-modified: Thu, 27 Oct 2022 01:12:03 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
set-cookie: __cf_bm=_lhmUlBzX_yCpTCQn36EKykKcc3AS5y5CrGcK.Xmpe4-1668295822-0-ARRCaW9SvDgnlZs/aOBDBj2PnEYJcSPaEQt91k6YzUQN4MdyLq8rzfGbIIyugXXVonCC0Ep8nqSEP5U7CjkyPL7zJxdmzzdovhrCeQLDDiNF; path=/; expires=Sun, 13-Nov-22 00:00:22 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
66.235.200.146
151.101.86.137
104.16.57.101
93.184.220.29
23.36.77.32