clickintowealth.com/lp/fff/vid-ts-k.php?AFFID=1006&C1=3913&C3=&CID=12&tr=10235203245146221202&
301 Moved Permanently 162 B URL HTTP/1.1 clickintowealth.com/lp/fff/vid-ts-k.php?AFFID=1006&C1=3913&C3=&CID=12&tr=10235203245146221202&
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /lp/fff/vid-ts-k.php?AFFID=1006&C1=3913&C3=&CID=12&tr=10235203245146221202& HTTP/1.1
Host: clickintowealth.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 02 Dec 2022 08:50:22 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://clickintowealth.com/lp/fff/vid-ts-k.php?AFFID=1006&C1=3913&C3=&CID=12&tr=10235203245146221202&
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18095
Expires: Fri, 02 Dec 2022 13:51:58 GMT
Date: Fri, 02 Dec 2022 08:50:23 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 0c748388899e8a8d3680355da2ea5020
903c620cd137613daafb0da0508c37b2f4a67212
39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4101
Cache-Control: max-age=96550
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:50:23 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 11:39:33 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 08:19:54 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1829
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15008
Expires: Fri, 02 Dec 2022 13:00:31 GMT
Date: Fri, 02 Dec 2022 08:50:23 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: +vfdhDeiwrdz9OsSjtejUoWQZM4Or2bxUhT8iV/vpXUOeVPdUgdXH8wAQ7YZX1fgrOGRRZUVA8H2jMyYSwtDGA==
x-amz-request-id: G9TPNSYFXFVRH5J8
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 08:46:38 GMT
age: 225
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:50:23 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 08:11:15 GMT
cache-control: public,max-age=3600
age: 2348
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
clickintowealth.com/lp/fff/vid-ts-k.php?AFFID=1006&C1=3913&C3=&CID=12&tr=10235203245146221202&
200 OK 13 kB URL HTTP/2 clickintowealth.com/lp/fff/vid-ts-k.php?AFFID=1006&C1=3913&C3=&CID=12&tr=10235203245146221202&
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3197), with CRLF line terminators
Hash e39ca4e34be8d14c7df1025298fa9eed
f0d150232dc12fad4928c6d0aa9c1ac28d21e727
26c32b9f8f88b3ae043dca3e643772fc13076ffc33603557770f755cce585d8b
GET /lp/fff/vid-ts-k.php?AFFID=1006&C1=3913&C3=&CID=12&tr=10235203245146221202& HTTP/1.1
Host: clickintowealth.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:50:23 GMT
content-type: text/html; charset=UTF-8
content-length: 13052
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=265f9c4opgee9bnl5vjm144c8m; path=/
permissions-policy: vr=(); xr-spatial-tracking=('none');
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1f88399f3fdd89dbb9ca1229cb67143a
325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3
831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4099
Cache-Control: max-age=91485
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:50:23 GMT
Etag: "63886ea9-1d7"
Expires: Sat, 03 Dec 2022 10:15:08 GMT
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 279 B IP
Hash aff15ad9f37f82e3e8971e79b9159670
e9414ce7af5599213ab3f50af0b3bc07d2c6c04b
716600b6453c753227ffde5d9ceaf03b0f043002665cfcae45b68d0322947139
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3986
Cache-Control: max-age=102174
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:50:23 GMT
Etag: "638898db-117"
Expires: Sat, 03 Dec 2022 13:13:17 GMT
Last-Modified: Thu, 01 Dec 2022 12:06:51 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8cd876589951719c94a6d49d1494bdbd
01600c8bb95fac543696e509b3e452b90d844572
e03942321526a2303220b1abd51f82f1d4cf80e0dd22a2582cf809b8bd729521
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:50:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8cd876589951719c94a6d49d1494bdbd
01600c8bb95fac543696e509b3e452b90d844572
e03942321526a2303220b1abd51f82f1d4cf80e0dd22a2582cf809b8bd729521
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:50:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 05917f7542a781275c12d43562be1507
1ea730e7e2b5a84fb0341ef9a64b141a4dd469b3
2f24492a077b583bd9dfe049c16c60b219d950712879f187ff2160214df9bd0e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:50:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fast.wistia.com/assets/external/E-v1.js
200 OK 117 kB URL HTTP/2 fast.wistia.com/assets/external/E-v1.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 117 kB (116574 bytes)
Hash 4c37b9bb76701684d4ae4f4da69fa406
da0edf6c365033b9ea90103a6e942722f83abdeb
f961fad8441ec0dafacb85e13aefa441faf03357519cc29a5629916ecb6f52ea
GET /assets/external/E-v1.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "63867024-1c75e"
last-modified: Tue, 29 Nov 2022 20:48:36 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 02 Dec 2022 08:50:23 GMT
age: 1497
x-served-by: cache-iad-kiad7000159-IAD, cache-bma1653-BMA
x-cache: HIT, HIT
x-cache-hits: 34, 147
x-timer: S1669971024.792253,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 116574
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/ka4i176oso/swatch
200 OK 1.7 kB URL HTTP/2 fast.wistia.com/embed/medias/ka4i176oso/swatch
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x56, components 1\012- data
Hash ca1c791f9bf50a1ebd1f52918097e646
d22a47a4126b42559b8b14df7b66684d48eaeebb
23945edf196968764daede8e50a8ff7ad472777a4df7887f18ba5c638eacbda2
GET /embed/medias/ka4i176oso/swatch HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *, *
access-control-expose-headers: Origin, Content-Type, Accept, Server, x-amz-version-id, X-Cache
access-control-request-method: *
cache-control: public, no-cache, max-age=31362278
content-disposition: inline
content-type: image/jpeg
last-modified: Tue, 29 Nov 2022 20:28:10 UTC
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 02 Dec 2022 08:50:23 GMT
age: 43534
x-served-by: cache-iad-kcgs7200107-IAD, cache-bma1653-BMA
x-cache: HIT, HIT
x-cache-hits: 429, 1
x-timer: S1669971024.792340,VS0,VE1
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 1654
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/ka4i176oso.jsonp
200 OK 1.7 kB URL HTTP/2 fast.wistia.com/embed/medias/ka4i176oso.jsonp
IP
File type ASCII text, with very long lines (5634)
Hash 48c09ecd9f011b9000704f1d78036f09
9ec389c5b371f474aae9b0fc8d7c7616b08fc831
961b6e23741e79d7a9323de9dd4802e3a4c532f94dfd92e44987f03802319a8a
GET /embed/medias/ka4i176oso.jsonp HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, no-cache
content-encoding: br
content-type: application/javascript; charset=utf-8
etag: W/"c6d2cc274f7180f6c43a4b28a775f546"
p3p: CP="CURi ADMa DEVa IVAa IVDa CONi OUR IND DSP CAO COR"
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-request-id: a2ccce9c0b07f9a6a963741c9afbed1b
x-runtime: 0.053857
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 02 Dec 2022 08:50:23 GMT
age: 43534
x-served-by: cache-iad-kjyo7100169-IAD, cache-bma1653-BMA
x-cache: HIT, HIT
x-cache-hits: 425, 1
x-timer: S1669971024.795119,VS0,VE1
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 1651
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-126759577-4
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-126759577-4
IP
File type ASCII text, with very long lines (1921)
Hash 316b2572120c9f8cff2818573a2dbcf6
487da68ce90471204913b6a5e28d9fc9eac0f1a5
ce83f02100cfe6370ab61154459b430b2d3ff9c2ba46e41264c6b3b151a82fef
GET /gtag/js?id=UA-126759577-4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Dec 2022 08:50:23 GMT
expires: Fri, 02 Dec 2022 08:50:23 GMT
cache-control: private, max-age=900
last-modified: Fri, 02 Dec 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43622
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-Y04TL8NEE0
200 OK 77 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-Y04TL8NEE0
IP
File type ASCII text, with very long lines (20080)
Hash 1fa12a351062257583fb37299553426a
593e30d3334a0da7de5a541992c2548b59462b75
55f28efde2b31f4fdb60ec0066036a52be7fcdba8d07864bb130b420e3870188
GET /gtag/js?id=G-Y04TL8NEE0 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Dec 2022 08:50:23 GMT
expires: Fri, 02 Dec 2022 08:50:23 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77274
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash aff15ad9f37f82e3e8971e79b9159670
e9414ce7af5599213ab3f50af0b3bc07d2c6c04b
716600b6453c753227ffde5d9ceaf03b0f043002665cfcae45b68d0322947139
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3986
Cache-Control: max-age=102174
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:50:23 GMT
Etag: "638898db-117"
Expires: Sat, 03 Dec 2022 13:13:17 GMT
Last-Modified: Thu, 01 Dec 2022 12:06:51 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8cd876589951719c94a6d49d1494bdbd
01600c8bb95fac543696e509b3e452b90d844572
e03942321526a2303220b1abd51f82f1d4cf80e0dd22a2582cf809b8bd729521
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:50:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 05917f7542a781275c12d43562be1507
1ea730e7e2b5a84fb0341ef9a64b141a4dd469b3
2f24492a077b583bd9dfe049c16c60b219d950712879f187ff2160214df9bd0e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:50:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: HKRRubrx6AeqhqTzc+A1Qg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: L7W9LX9CBqzWIyCp8THCaA4nXeI=
clickintowealth.com/lp/fff/vid_files/closemodal.webp
200 OK 672 B URL HTTP/2 clickintowealth.com/lp/fff/vid_files/closemodal.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 19754ed4d508cf576c80cf36e0db8c50
f459beac714e5be68aa75349fa806a5642af456a
5216f197f782f4bb872e02a677986af90a488015910f8d3864b796ad68dbd389
Analyzer Verdict Alert fortinet Phishing
GET /lp/fff/vid_files/closemodal.webp HTTP/1.1
Host: clickintowealth.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/lp/fff/vid-ts-k.php?AFFID=1006&C1=3913&C3=&CID=12&tr=10235203245146221202&
Cookie: PHPSESSID=265f9c4opgee9bnl5vjm144c8m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:50:23 GMT
content-type: image/webp
content-length: 672
last-modified: Sun, 11 Apr 2021 14:20:01 GMT
etag: "60730591-2a0"
cache-control: public, max-age=648000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:50:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
clickintowealth.com/lp/fff/vid_files/mailcheck.js
200 OK 1.6 kB URL HTTP/2 clickintowealth.com/lp/fff/vid_files/mailcheck.js
IP
Hash 5284e36ec14eead91cb4b54bb3e722a1
8838fedbb408a308231f1ca1d2043bf38e147d8a
9e7235c8ee1b6eb4d4f1ff99253cd21e26613192f8d6d655d08608be0148771d
Analyzer Verdict Alert fortinet Phishing
GET /lp/fff/vid_files/mailcheck.js HTTP/1.1
Host: clickintowealth.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/lp/fff/vid-ts-k.php?AFFID=1006&C1=3913&C3=&CID=12&tr=10235203245146221202&
Cookie: PHPSESSID=265f9c4opgee9bnl5vjm144c8m
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:50:23 GMT
content-type: application/javascript
last-modified: Sun, 11 Apr 2021 14:20:01 GMT
vary: Accept-Encoding
etag: W/"60730591-a8d"
cache-control: public, max-age=648000
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://clickintowealth.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:08 GMT
expires: Thu, 30 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 134176
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://clickintowealth.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 18:53:49 GMT
expires: Thu, 30 Nov 2023 18:53:49 GMT
cache-control: public, max-age=31536000
age: 136595
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15736, version 1.0\012- data
Hash 479970ffb74f2117317f9d24d9e317fe
81c796737cbe44d4a719777f0aff14b73a3efb1e
48c3fa6f86c54f1d9bb519220713d4b0a1f8cd1a589a3c03b9fa82e98ecb13e3
GET /s/roboto/v20/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://clickintowealth.com
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15736
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 18:22:20 GMT
expires: Thu, 30 Nov 2023 18:22:20 GMT
cache-control: public, max-age=31536000
age: 138484
last-modified: Wed, 24 Jul 2019 01:18:36 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
clickintowealth.com/lp/fff/vid_files/powerscripts.js
200 OK 1.6 kB URL HTTP/2 clickintowealth.com/lp/fff/vid_files/powerscripts.js
IP
Hash 822b38496800a5d2b1edcde9147b3864
39d9424b504aebc40b104df01c6b3ad72eff6d46
70ef185a82dd5e7e362e2834254ec21953848377f98d3c6719f91720997ed3b4
Analyzer Verdict Alert fortinet Phishing
GET /lp/fff/vid_files/powerscripts.js HTTP/1.1
Host: clickintowealth.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/lp/fff/vid-ts-k.php?AFFID=1006&C1=3913&C3=&CID=12&tr=10235203245146221202&
Cookie: PHPSESSID=265f9c4opgee9bnl5vjm144c8m
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:50:23 GMT
content-type: application/javascript
last-modified: Sun, 11 Apr 2021 14:20:01 GMT
vary: Accept-Encoding
etag: W/"60730591-e1f"
cache-control: public, max-age=648000
content-encoding: gzip
X-Firefox-Spdy: h2
clickintowealth.com/lp/fff/vid_files/10dollarsqueeze-k.png
200 OK 408 kB URL HTTP/2 clickintowealth.com/lp/fff/vid_files/10dollarsqueeze-k.png
IP
File type PNG image data, 998 x 404, 8-bit/color RGBA, non-interlaced\012- data
Size 408 kB (408139 bytes)
Hash 2467afb1409fdf64c24837aa998199ad
910cef40e90d232ed5dd9c6e7fab3ae333987acc
a79c994ae8bff22635755684421b7bf7375deb8ef80d89d78373995381dfc3a1
GET /lp/fff/vid_files/10dollarsqueeze-k.png HTTP/1.1
Host: clickintowealth.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/lp/fff/vid-ts-k.php?AFFID=1006&C1=3913&C3=&CID=12&tr=10235203245146221202&
Cookie: PHPSESSID=265f9c4opgee9bnl5vjm144c8m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:50:23 GMT
content-type: image/png
content-length: 408139
last-modified: Sun, 11 Apr 2021 14:20:01 GMT
etag: "60730591-63a4b"
cache-control: public, max-age=648000
accept-ranges: bytes
X-Firefox-Spdy: h2
clickintowealth.com/lp/fff/vid_files/email.png
200 OK 1.9 kB URL HTTP/2 clickintowealth.com/lp/fff/vid_files/email.png
IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 695fd6ba1d1560afd7f7ca44f64f2c43
9e2a6448963d4b3a82e232d7601cce94f403dfbd
a6322e438f340951e51d083d0ceffa99864e4c3823c079d70229a6d6ede82b99
GET /lp/fff/vid_files/email.png HTTP/1.1
Host: clickintowealth.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/lp/fff/vid_files/lander.css
Cookie: PHPSESSID=265f9c4opgee9bnl5vjm144c8m; _ga_Y04TL8NEE0=GS1.1.1669971022.1.0.1669971022.0.0.0; _ga=GA1.1.583098542.1669971022; zabUserId=1669971022330zabu0.5152438059688514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:50:24 GMT
content-type: image/png
content-length: 1871
last-modified: Sun, 11 Apr 2021 14:20:01 GMT
etag: "60730591-74f"
cache-control: public, max-age=648000
accept-ranges: bytes
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/wistia-mux.js
200 OK 31 kB URL HTTP/2 fast.wistia.com/assets/external/wistia-mux.js
IP
File type ASCII text, with very long lines (65468)
Hash 8ca4953da62f6c8a05b7f2d7333a83f7
c68e554587e7e3dc6da836b6501e926ae543f933
9d7adbd9c2243a23cf7cb8ab534ce188da6f2b78d75e52ab79fb6af490dc6279
GET /assets/external/wistia-mux.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "63867024-7a30"
last-modified: Tue, 29 Nov 2022 20:48:36 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 02 Dec 2022 08:50:24 GMT
age: 1498
x-served-by: cache-iad-kcgs7200128-IAD, cache-bma1653-BMA
x-cache: HIT, HIT
x-cache-hits: 27, 85
x-timer: S1669971024.326764,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 31280
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-Y04TL8NEE0>m=2oebu0&_p=1548222640&cid=583098542.1669971022&ul=en-us&sr=1280x1024&_s=1&sid=1669971022&sct=1&seg=0&dl=https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%3FAFFID%3D1006%26C1%3D3913%26C3%3D%26CID%3D12%26tr%3D10235203245146221202%26&dt=Click%20Into%20Wealth%20(FFF%20TS%20Vid)&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-Y04TL8NEE0>m=2oebu0&_p=1548222640&cid=583098542.1669971022&ul=en-us&sr=1280x1024&_s=1&sid=1669971022&sct=1&seg=0&dl=https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%3FAFFID%3D1006%26C1%3D3913%26C3%3D%26CID%3D12%26tr%3D10235203245146221202%26&dt=Click%20Into%20Wealth%20(FFF%20TS%20Vid)&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-Y04TL8NEE0>m=2oebu0&_p=1548222640&cid=583098542.1669971022&ul=en-us&sr=1280x1024&_s=1&sid=1669971022&sct=1&seg=0&dl=https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%3FAFFID%3D1006%26C1%3D3913%26C3%3D%26CID%3D12%26tr%3D10235203245146221202%26&dt=Click%20Into%20Wealth%20(FFF%20TS%20Vid)&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://clickintowealth.com
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://clickintowealth.com
date: Fri, 02 Dec 2022 08:50:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 02 Dec 2022 08:41:08 GMT
expires: Fri, 02 Dec 2022 10:41:08 GMT
cache-control: public, max-age=7200
age: 556
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/engines/hls_video.js
200 OK 114 kB URL HTTP/2 fast.wistia.com/assets/external/engines/hls_video.js
IP
File type ASCII text, with very long lines (65469)
Size 114 kB (114373 bytes)
Hash ddbf94a47f16fcd8a99d8c45572ac852
fabe447aee7408e90c4fcfc1de127d98987b8ca0
cb2cba64e3b0a0797031ca64b918bed7c1c58b6f3b40d92b4f45f93b3ea55109
GET /assets/external/engines/hls_video.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "63867024-1bec5"
last-modified: Tue, 29 Nov 2022 20:48:36 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 02 Dec 2022 08:50:24 GMT
age: 1754
x-served-by: cache-iad-kiad7000086-IAD, cache-bma1653-BMA
x-cache: HIT, HIT
x-cache-hits: 32, 75
x-timer: S1669971025.809437,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 114373
X-Firefox-Spdy: h2
clickintowealth.com/favicon.ico
302 Found 0 B URL HTTP/2 clickintowealth.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: clickintowealth.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/lp/fff/vid-ts-k.php?AFFID=1006&C1=3913&C3=&CID=12&tr=10235203245146221202&
Cookie: PHPSESSID=265f9c4opgee9bnl5vjm144c8m; _ga_Y04TL8NEE0=GS1.1.1669971022.1.0.1669971022.0.0.0; _ga=GA1.1.583098542.1669971022; zabUserId=1669971022330zabu0.5152438059688514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx
date: Fri, 02 Dec 2022 08:50:24 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://clickintowealth.com/wp-content/uploads/2022/04/cropped-Logo-Gold-32x32.png
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-redirect-by: WordPress
permissions-policy: vr=(); xr-spatial-tracking=('none');
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/ka4i176oso.m3u8
200 OK 934 B URL HTTP/2 fast.wistia.com/embed/medias/ka4i176oso.m3u8
IP
Hash 76b719459fff841a068e07779ea72617
42c04e0cbd592a64e44eadcd35cf881d2b4df1a2
7e30ade169bda8fce4f930ff659b83a2d305e05726a2a4b35ed936c5ddea95c3
GET /embed/medias/ka4i176oso.m3u8 HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://clickintowealth.com
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, no-cache
content-type: application/x-mpegURL
etag: W/"7e30ade169bda8fce4f930ff659b83a2"
p3p: CP="CURi ADMa DEVa IVAa IVDa CONi OUR IND DSP CAO COR"
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-request-id: 0e11ee233c0079a103da0f0e1d6c9380
x-runtime: 0.033341
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 02 Dec 2022 08:50:24 GMT
age: 43502
x-served-by: cache-iad-kcgs7200089-IAD, cache-bma1653-BMA
x-cache: HIT, HIT
x-cache-hits: 4757, 1
x-timer: S1669971025.965282,VS0,VE1
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 934
X-Firefox-Spdy: h2
cdn.pagesense.io/js/whateversfinellc/d2435290e41a4addb5098539d1a3da64.js
200 OK 1.2 kB URL HTTP/2 cdn.pagesense.io/js/whateversfinellc/d2435290e41a4addb5098539d1a3da64.js
IP
Hash fbdc4ed9a1e2ee4917a265306927bcf1
6d177725d8230df0457e72004080f712e26fe624
a78759ea185fd0fa42ca9be1fc5bca4d3167a2836dc6c85e479a19dbf57fe2c2
GET /js/whateversfinellc/d2435290e41a4addb5098539d1a3da64.js HTTP/1.1
Host: cdn.pagesense.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 29 Nov 2022 04:40:22 GMT
x-amz-meta-cache-control: max-age=0
server: AmazonS3
content-encoding: gzip
date: Fri, 02 Dec 2022 04:15:44 GMT
cache-control: max-age=0
etag: W/"d7e2599ce2a45790f1364c064b5b32c1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7TwZ9FNO1VYrfi2rvCE7u5AmxUL3jM4bl7UySHQB3a6oLKdOSP_4kQ==
age: 16480
X-Firefox-Spdy: h2
embedwistia-a.akamaihd.net/deliveries/5b5a2eca16c0f642321056b33b8de0d398ca3f0e.m3u8
200 OK 44 kB URL HTTP/1.1 embedwistia-a.akamaihd.net/deliveries/5b5a2eca16c0f642321056b33b8de0d398ca3f0e.m3u8
IP
ASN #20940 Akamai International B.V.
Hash f10c1e077cf3b441a0f5a6a18775c3e4
39f3aef0a342a47f92d85922ee83310ef563aa82
5753ed68dc80d3e2fddbb237dcc83bc194e41308af2c75a2ff1a3cb48e0ef04d
GET /deliveries/5b5a2eca16c0f642321056b33b8de0d398ca3f0e.m3u8 HTTP/1.1
Host: embedwistia-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://clickintowealth.com
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/vnd.apple.mpegurl
Content-Length: 43678
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Last-Modified: Mon, 05 Nov 2018 10:11:00 GMT
surrogate-key: 5b5a2eca16c0f642321056b33b8de0d398ca3f0e-hls-segment a7c24e0afda8619d4e32d587369c2b9a2c30db09
Accept-Ranges: bytes
Cache-Control: max-age=31319516
Expires: Wed, 29 Nov 2023 20:42:21 GMT
Date: Fri, 02 Dec 2022 08:50:25 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Request-Method: *
Access-Control-Allow-Origin: *
embedwistia-a.akamaihd.net/deliveries/5b5a2eca16c0f642321056b33b8de0d398ca3f0e.m3u8/seg-1-v1-a1.ts
200 OK 232 kB URL HTTP/1.1 embedwistia-a.akamaihd.net/deliveries/5b5a2eca16c0f642321056b33b8de0d398ca3f0e.m3u8/seg-1-v1-a1.ts
IP
ASN #20940 Akamai International B.V.
File type MPEG transport stream data\012- data
Size 232 kB (231992 bytes)
Hash d62d6a7ac809e857ccaa3f8a1716b816
00156f5c40d00da43d5dd1f5012310dc2f436ae5
a612a2fa819e7db802809609790b1022499bcb24cfb2ada992ed51cb141a0de9
GET /deliveries/5b5a2eca16c0f642321056b33b8de0d398ca3f0e.m3u8/seg-1-v1-a1.ts HTTP/1.1
Host: embedwistia-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://clickintowealth.com
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: video/MP2T
Content-Length: 231992
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Last-Modified: Mon, 05 Nov 2018 10:11:00 GMT
surrogate-key: 5b5a2eca16c0f642321056b33b8de0d398ca3f0e-hls-segment a7c24e0afda8619d4e32d587369c2b9a2c30db09
Accept-Ranges: bytes
Cache-Control: max-age=31371546
Expires: Thu, 30 Nov 2023 11:09:31 GMT
Date: Fri, 02 Dec 2022 08:50:25 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Request-Method: *
Access-Control-Allow-Origin: *
embedwistia-a.akamaihd.net/deliveries/232b37a242135d97c6a942f3a662e9a696e813ca.m3u8
200 OK 44 kB URL HTTP/1.1 embedwistia-a.akamaihd.net/deliveries/232b37a242135d97c6a942f3a662e9a696e813ca.m3u8
IP
ASN #20940 Akamai International B.V.
Hash 13f4896445158ebcc17911dc5468b742
269a110f4e0df8727e240c664b0c78a0d21df89b
936f57d05b36e204cc50069e187834eb253024cbdaea148e6a369d7466dfe958
GET /deliveries/232b37a242135d97c6a942f3a662e9a696e813ca.m3u8 HTTP/1.1
Host: embedwistia-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://clickintowealth.com
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/vnd.apple.mpegurl
Content-Length: 43678
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Last-Modified: Mon, 05 Nov 2018 10:11:00 GMT
surrogate-key: 232b37a242135d97c6a942f3a662e9a696e813ca-hls-segment a7c24e0afda8619d4e32d587369c2b9a2c30db09
Accept-Ranges: bytes
Cache-Control: max-age=31319126
Expires: Wed, 29 Nov 2023 20:35:51 GMT
Date: Fri, 02 Dec 2022 08:50:25 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Request-Method: *
Access-Control-Allow-Origin: *
embedwistia-a.akamaihd.net/deliveries/232b37a242135d97c6a942f3a662e9a696e813ca.m3u8/seg-1-v1-a1.ts
200 OK 166 kB URL HTTP/1.1 embedwistia-a.akamaihd.net/deliveries/232b37a242135d97c6a942f3a662e9a696e813ca.m3u8/seg-1-v1-a1.ts
IP
ASN #20940 Akamai International B.V.
File type MPEG transport stream data\012- data
Size 166 kB (165816 bytes)
Hash 79d777c1a59865f51e7326300d8ed90f
bd13a0abaafbf5a2bfd76483c36489d904c32948
3d45f35240d52f12710c83b949b242ec369a46d8d01bd061d3a6b6ab467624bf
GET /deliveries/232b37a242135d97c6a942f3a662e9a696e813ca.m3u8/seg-1-v1-a1.ts HTTP/1.1
Host: embedwistia-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://clickintowealth.com
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: video/MP2T
Content-Length: 165816
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Last-Modified: Mon, 05 Nov 2018 10:11:00 GMT
surrogate-key: 232b37a242135d97c6a942f3a662e9a696e813ca-hls-segment 575be076c6a7044102ef1f308349eab3ff93cb5d
Accept-Ranges: bytes
Cache-Control: max-age=31413739
Expires: Thu, 30 Nov 2023 22:52:44 GMT
Date: Fri, 02 Dec 2022 08:50:25 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Request-Method: *
Access-Control-Allow-Origin: *
embed-ssl.wistia.com/deliveries/2e6fe1bc39d01112c0833292437e51280b8f8439.webp?image_crop_resized=1280x720
200 OK 21 kB URL HTTP/2 embed-ssl.wistia.com/deliveries/2e6fe1bc39d01112c0833292437e51280b8f8439.webp?image_crop_resized=1280x720
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 71dc9860bc64ffc4700da1eb271a7187
771f0913e2e543099a75a8c7b6c5aacd9c1b8ddd
8d185fbdbc5c7816bfbf815e1892e1930ed6148db3a2fd4d42050e274d0c9593
GET /deliveries/2e6fe1bc39d01112c0833292437e51280b8f8439.webp?image_crop_resized=1280x720 HTTP/1.1
Host: embed-ssl.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
access-control-expose-headers: Origin, Content-Type, Accept, Server, x-amz-version-id, X-Cache
cache-control: max-age=31536000
content-disposition: inline
edge-cache-tag: 2e6fe1bc39d01112c0833292437e51280b8f8439
last-modified: Tue, 29 Nov 2022 20:28:10 UTC
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 02 Dec 2022 08:50:25 GMT
age: 217176
access-control-allow-origin: *
access-control-request-method: *
access-control-allow-methods: GET, HEAD, OPTIONS
x-served-by: cache-iad-kiad7000032-IAD, cache-bma1627-BMA
x-cache: HIT, HIT
x-cache-hits: 17, 1
x-timer: S1669971025.258263,VS0,VE7
content-length: 21396
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 08a1a290608282a869757a88184cabee
c1d1f8b4fa0b97ce1a7688bd60caf75e618e9094
6b92880972ae8e28d68969aa8a246c5a4999b26543dccb8d1c059e791b9fc02b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:50:25 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2022 02:49:13 GMT
Expires: Tue, 06 Dec 2022 02:49:12 GMT
Etag: "c1d1f8b4fa0b97ce1a7688bd60caf75e618e9094"
Cache-Control: max-age=323326,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7732d09aef3c0b69-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16598
Expires: Fri, 02 Dec 2022 13:27:03 GMT
Date: Fri, 02 Dec 2022 08:50:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16598
Expires: Fri, 02 Dec 2022 13:27:03 GMT
Date: Fri, 02 Dec 2022 08:50:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16598
Expires: Fri, 02 Dec 2022 13:27:03 GMT
Date: Fri, 02 Dec 2022 08:50:25 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F449f29d0-f60b-4dec-8b5b-0a1971bab406.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F449f29d0-f60b-4dec-8b5b-0a1971bab406.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4c7113338bc3310b13d23ca415c177e2
2cb4edc6b161c6d2d5b47aa498ae54e677966466
3a83adce869dd7eb064c583bf7ff93c57fabd7ea2da872f7d1f7d868b8a492e9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F449f29d0-f60b-4dec-8b5b-0a1971bab406.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10270
x-amzn-requestid: ac2d2825-2ec4-435e-9921-3ea6524df1dc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfG1nEvYoAMFliA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e8a-4419423112b5723e3dba46ea;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NQ21d2_5JO2Ym-LEnDecub9bK6wUyvM2zUf_XpfMGag83fVWlMjT8w==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:50:09 GMT
age: 39616
etag: "2cb4edc6b161c6d2d5b47aa498ae54e677966466"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
200 OK 2.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b47431190f34eccf0a6efb98e2a32b7d
9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fw6nrporwF27NW0-vXpaolW79nDXLF2RyS-lqhhp1osHt7q98VpI3g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:34:47 GMT
age: 40538
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F937deb9c-e12c-486f-bf82-4833aed00836.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F937deb9c-e12c-486f-bf82-4833aed00836.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d08081e2dd562ef50e4e98ebc0136698
b5118bca37feda2ada3001199dc1d80ac6d2aacc
5160333e0cfd338b3887972d0a5c0f817ef88b70b7eb78e4e25d153a85e3478f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F937deb9c-e12c-486f-bf82-4833aed00836.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11443
x-amzn-requestid: 21469d81-ee4b-47f3-8877-b6658b3ea8b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfHDHE4zoAMFvfw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891ee0-5b39eddd703ea04e6a1355f8;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:38:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ArJSu5jI0RrZj3QtJp6oI6Yvf9LCWrYqU0HRIl8U8xJjdeOaJEe2yg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 22:20:07 GMT
age: 37818
etag: "b5118bca37feda2ada3001199dc1d80ac6d2aacc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d147ccb10bda82b153a596c3c967cd6a
ffd0763f997e71a8c1458523fc17cafe8849dfdf
1cfeb90a4ba027195f903d938d4a0aac418a1c2f0b52215ec023263f15905971
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7591
x-amzn-requestid: e179862e-f840-4e50-a9dc-09f325479b9a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGgMFRZIAMFl7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e01-676a1571459f2d83488f2765;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: oB5K_ZCWWwCltMx8FQSjDdXRMzSTSyRLSYSLAooQXuCrUxadLUiWkA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 22:08:56 GMT
etag: "ffd0763f997e71a8c1458523fc17cafe8849dfdf"
content-type: image/jpeg
age: 38489
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07af64d-c287-4b0a-9677-9a1000422afc.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07af64d-c287-4b0a-9677-9a1000422afc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 498ab4412ed5cf977bc23e4e870894b0
23753fe8af09ec8ffa10eed4d201a71833885c99
036042656f15e42b4d1537c45f5b8e7190c70305fa9a69c1287c6739ad0b7122
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07af64d-c287-4b0a-9677-9a1000422afc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7334
x-amzn-requestid: a6b8b420-8394-496b-8be8-26dee52e3887
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoHJOoAMF75g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-0b38d07f518c8b3134457df2;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 17nFm7AQdmRYS_af-EJ4XBVw8l3YudcphlpcZMveuVjvjhhYdkAQsw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 22:33:10 GMT
age: 37035
etag: "23753fe8af09ec8ffa10eed4d201a71833885c99"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 00:54:54 GMT
age: 28531
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 7a958bd1b98996dbbc6d9a01051cee2d
bc5b494e1c3d93c6410a38f954c9876064963aed
ccc98a180c12d79cb785e1ddd9aa1dfda70d1bdb42730c266fbe691899bb7d9f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=167536
Date: Fri, 02 Dec 2022 08:50:25 GMT
Etag: "638998ca-1d7"
Expires: Sun, 04 Dec 2022 07:22:41 GMT
Last-Modified: Fri, 02 Dec 2022 06:18:50 GMT
Server: ECS (nyb/1D2C)
X-Cache: Miss from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: hyOWPUABJ9wcbeHGJW1gknXJXFJGnpha8TCjcZSbZ6MPr2z7pPVqOA==
Age: 3831
fg8vvsvnieiv3ej16jby.litix.io/
200 OK 0 B URL HTTP/1.1 fg8vvsvnieiv3ej16jby.litix.io/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: fg8vvsvnieiv3ej16jby.litix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://clickintowealth.com/
Content-Type: text/plain
Origin: https://clickintowealth.com
Content-Length: 2390
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Methods: POST, GET
Access-Control-Allow-Origin: *
Date: Fri, 02 Dec 2022 08:50:25 GMT
Content-Length: 0
Connection: keep-alive
pagesense-collect.zoho.com/psimg.gif?raw=%7B%22vrd%22%3A%5B%7B%22a%22%3A%22whateversfinellc%22%2C%22p%22%3A%22d2435290e41a4addb5098539d1a3da64%22%7D%5D%2C%22urd%22%3A%7B%22bv%22%3A%22Firefox%22%2C%22lv%22%3A%22en-US%22%2C%22ov%22%3A%22Windows%22%2C%22dv%22%3A%22desktop%22%2C%22mdv%22%3A%22UNKNOWN%22%2C%22rv%22%3A%22%22%2C%22frv%22%3A%22%22%2C%22fcv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%3FAFFID%3D1006%26C1%3D3913%26C3%3D%26CID%3D12%26tr%3D10235203245146221202%26%22%2C%22cv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%22%2C%22up%22%3A%5B%7B%22pn%22%3A%22AFFID%22%2C%22pv%22%3A%221006%22%7D%2C%7B%22pn%22%3A%22C1%22%2C%22pv%22%3A%223913%22%7D%2C%7B%22pn%22%3A%22C3%22%2C%22pv%22%3A%22%22%7D%2C%7B%22pn%22%3A%22CID%22%2C%22pv%22%3A%2212%22%7D%2C%7B%22pn%22%3A%22tr%22%2C%22pv%22%3A%2210235203245146221202%22%7D%2C%7B%22pn%22%3A%22%22%2C%22pv%22%3A%22%22%7D%5D%2C%22tv%22%3A%22DIRECT%22%2C%22srv%22%3A%221280x1024%22%2C%22f%22%3A%221669971022330zabu0.5152438059688514%22%2C%22d%22%3A%221669971022980zabv0.48406584571257016%22%2C%22sid%22%3A%221669971022981zsc0.7800392099137008%22%2C%22ts%22%3A0%2C%22n%22%3Atrue%2C%22lp%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%22%2C%22lpr%22%3A%22%22%2C%22fsrc%22%3A%22direct%22%2C%22fmdm%22%3A%22(none)%22%2C%22fchn%22%3A%22direct%22%2C%22ifr%22%3Atrue%2C%22isef%22%3Atrue%2C%22ht%22%3A%22pageview%22%2C%22iht%22%3Atrue%2C%22src%22%3A%22direct%22%2C%22mdm%22%3A%22(none)%22%2C%22chn%22%3A%22direct%22%7D%7D&type=21&domainname=whateversfinellc
200 OK 42 B URL HTTP/2 pagesense-collect.zoho.com/psimg.gif?raw=%7B%22vrd%22%3A%5B%7B%22a%22%3A%22whateversfinellc%22%2C%22p%22%3A%22d2435290e41a4addb5098539d1a3da64%22%7D%5D%2C%22urd%22%3A%7B%22bv%22%3A%22Firefox%22%2C%22lv%22%3A%22en-US%22%2C%22ov%22%3A%22Windows%22%2C%22dv%22%3A%22desktop%22%2C%22mdv%22%3A%22UNKNOWN%22%2C%22rv%22%3A%22%22%2C%22frv%22%3A%22%22%2C%22fcv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%3FAFFID%3D1006%26C1%3D3913%26C3%3D%26CID%3D12%26tr%3D10235203245146221202%26%22%2C%22cv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%22%2C%22up%22%3A%5B%7B%22pn%22%3A%22AFFID%22%2C%22pv%22%3A%221006%22%7D%2C%7B%22pn%22%3A%22C1%22%2C%22pv%22%3A%223913%22%7D%2C%7B%22pn%22%3A%22C3%22%2C%22pv%22%3A%22%22%7D%2C%7B%22pn%22%3A%22CID%22%2C%22pv%22%3A%2212%22%7D%2C%7B%22pn%22%3A%22tr%22%2C%22pv%22%3A%2210235203245146221202%22%7D%2C%7B%22pn%22%3A%22%22%2C%22pv%22%3A%22%22%7D%5D%2C%22tv%22%3A%22DIRECT%22%2C%22srv%22%3A%221280x1024%22%2C%22f%22%3A%221669971022330zabu0.5152438059688514%22%2C%22d%22%3A%221669971022980zabv0.48406584571257016%22%2C%22sid%22%3A%221669971022981zsc0.7800392099137008%22%2C%22ts%22%3A0%2C%22n%22%3Atrue%2C%22lp%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%22%2C%22lpr%22%3A%22%22%2C%22fsrc%22%3A%22direct%22%2C%22fmdm%22%3A%22(none)%22%2C%22fchn%22%3A%22direct%22%2C%22ifr%22%3Atrue%2C%22isef%22%3Atrue%2C%22ht%22%3A%22pageview%22%2C%22iht%22%3Atrue%2C%22src%22%3A%22direct%22%2C%22mdm%22%3A%22(none)%22%2C%22chn%22%3A%22direct%22%7D%7D&type=21&domainname=whateversfinellc
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /psimg.gif?raw=%7B%22vrd%22%3A%5B%7B%22a%22%3A%22whateversfinellc%22%2C%22p%22%3A%22d2435290e41a4addb5098539d1a3da64%22%7D%5D%2C%22urd%22%3A%7B%22bv%22%3A%22Firefox%22%2C%22lv%22%3A%22en-US%22%2C%22ov%22%3A%22Windows%22%2C%22dv%22%3A%22desktop%22%2C%22mdv%22%3A%22UNKNOWN%22%2C%22rv%22%3A%22%22%2C%22frv%22%3A%22%22%2C%22fcv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%3FAFFID%3D1006%26C1%3D3913%26C3%3D%26CID%3D12%26tr%3D10235203245146221202%26%22%2C%22cv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%22%2C%22up%22%3A%5B%7B%22pn%22%3A%22AFFID%22%2C%22pv%22%3A%221006%22%7D%2C%7B%22pn%22%3A%22C1%22%2C%22pv%22%3A%223913%22%7D%2C%7B%22pn%22%3A%22C3%22%2C%22pv%22%3A%22%22%7D%2C%7B%22pn%22%3A%22CID%22%2C%22pv%22%3A%2212%22%7D%2C%7B%22pn%22%3A%22tr%22%2C%22pv%22%3A%2210235203245146221202%22%7D%2C%7B%22pn%22%3A%22%22%2C%22pv%22%3A%22%22%7D%5D%2C%22tv%22%3A%22DIRECT%22%2C%22srv%22%3A%221280x1024%22%2C%22f%22%3A%221669971022330zabu0.5152438059688514%22%2C%22d%22%3A%221669971022980zabv0.48406584571257016%22%2C%22sid%22%3A%221669971022981zsc0.7800392099137008%22%2C%22ts%22%3A0%2C%22n%22%3Atrue%2C%22lp%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%22%2C%22lpr%22%3A%22%22%2C%22fsrc%22%3A%22direct%22%2C%22fmdm%22%3A%22(none)%22%2C%22fchn%22%3A%22direct%22%2C%22ifr%22%3Atrue%2C%22isef%22%3Atrue%2C%22ht%22%3A%22pageview%22%2C%22iht%22%3Atrue%2C%22src%22%3A%22direct%22%2C%22mdm%22%3A%22(none)%22%2C%22chn%22%3A%22direct%22%7D%7D&type=21&domainname=whateversfinellc HTTP/1.1
Host: pagesense-collect.zoho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://clickintowealth.com
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: ZGS
date: Fri, 02 Dec 2022 08:50:25 GMT
content-type: image/gif;charset=UTF-8
content-length: 42
x-content-type-options: nosniff
x-xss-protection: 1
set-cookie: 0d269e8747=01c8f4478974f89eccc6b8e3a0473c33; Path=/
zfccn=3a4b35a4-8acb-4911-9899-ee6a596413ad;path=/;SameSite=None;Secure;priority=high
_zcsr_tmp=3a4b35a4-8acb-4911-9899-ee6a596413ad;path=/;SameSite=Strict;Secure;priority=high
x-frame-options: DENY
content-disposition: attachment; filename="psimg.gif"
access-control-allow-origin: *
strict-transport-security: max-age=63072000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49a9684674e0f1b3974c6427c5354fe4
c201e61bcda9cc91369f0c57f8236fcdd3db26c6
27b8d50242836a45aca1fcd0cb58e7f685011c1f93b57d0e3ea9a02400f8d801
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:50:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-126759577-4&cid=583098542.1669971022&jid=1142376721&gjid=1603626103&_gid=1414638993.1669971023&_u=YADAAUAAAAAAACAAI~&z=345635579
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-126759577-4&cid=583098542.1669971022&jid=1142376721&gjid=1603626103&_gid=1414638993.1669971023&_u=YADAAUAAAAAAACAAI~&z=345635579
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-126759577-4&cid=583098542.1669971022&jid=1142376721&gjid=1603626103&_gid=1414638993.1669971023&_u=YADAAUAAAAAAACAAI~&z=345635579 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://clickintowealth.com
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://clickintowealth.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 02 Dec 2022 08:50:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
clickintowealth.com/wp-content/uploads/2022/04/cropped-Logo-Gold-32x32.png
200 OK 839 B URL HTTP/2 clickintowealth.com/wp-content/uploads/2022/04/cropped-Logo-Gold-32x32.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 32b3bb2ffff52dcd2c56632ca795011a
cb3b2b0590bf3699615d8e3596207c361932b6fc
27501a6dc93af8110a956a04d36f6e652fd7fa4c848715e3caa143ed5b891812
GET /wp-content/uploads/2022/04/cropped-Logo-Gold-32x32.png HTTP/1.1
Host: clickintowealth.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://clickintowealth.com/lp/fff/vid-ts-k.php?AFFID=1006&C1=3913&C3=&CID=12&tr=10235203245146221202&
Connection: keep-alive
Cookie: PHPSESSID=265f9c4opgee9bnl5vjm144c8m; _ga_Y04TL8NEE0=GS1.1.1669971022.1.0.1669971022.0.0.0; _ga=GA1.2.583098542.1669971022; zabUserId=1669971022330zabu0.5152438059688514; zscd2435290e41a4addb5098539d1a3da64=1669971022981zsc0.7800392099137008; zps-tgr-dts=sc%3D1-expAppOnNewSession%3D%5B%5D-pc%3D2-sesst%3D1669971022982; zft-sdc=isef%3Dtrue-isfr%3Dtrue-src%3Ddirect; _gid=GA1.2.1414638993.1669971023; _gat_gtag_UA_126759577_4=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:50:25 GMT
content-type: image/png
content-length: 839
last-modified: Wed, 20 Apr 2022 20:41:59 GMT
etag: "62607017-347"
cache-control: public, max-age=648000
accept-ranges: bytes
X-Firefox-Spdy: h2
pagesense-collect.zoho.com/psimg.gif?raw=%7B%22vrd%22%3A%5B%7B%22a%22%3A%22whateversfinellc%22%2C%22p%22%3A%22d2435290e41a4addb5098539d1a3da64%22%7D%5D%2C%22urd%22%3A%7B%22bv%22%3A%22Firefox%22%2C%22lv%22%3A%22en-US%22%2C%22ov%22%3A%22Windows%22%2C%22dv%22%3A%22desktop%22%2C%22mdv%22%3A%22UNKNOWN%22%2C%22rv%22%3A%22%22%2C%22frv%22%3A%22%22%2C%22fcv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%3FAFFID%3D1006%26C1%3D3913%26C3%3D%26CID%3D12%26tr%3D10235203245146221202%26%22%2C%22cv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%22%2C%22up%22%3A%5B%7B%22pn%22%3A%22AFFID%22%2C%22pv%22%3A%221006%22%7D%2C%7B%22pn%22%3A%22C1%22%2C%22pv%22%3A%223913%22%7D%2C%7B%22pn%22%3A%22C3%22%2C%22pv%22%3A%22%22%7D%2C%7B%22pn%22%3A%22CID%22%2C%22pv%22%3A%2212%22%7D%2C%7B%22pn%22%3A%22tr%22%2C%22pv%22%3A%2210235203245146221202%22%7D%2C%7B%22pn%22%3A%22%22%2C%22pv%22%3A%22%22%7D%5D%2C%22tv%22%3A%22DIRECT%22%2C%22srv%22%3A%221280x1024%22%2C%22f%22%3A%221669971022330zabu0.5152438059688514%22%2C%22d%22%3A%221669971023149zabv0.4829129182293873%22%2C%22sid%22%3A%221669971022981zsc0.7800392099137008%22%2C%22ts%22%3A696%2C%22fsrc%22%3A%22direct%22%2C%22fmdm%22%3A%22(none)%22%2C%22fchn%22%3A%22direct%22%2C%22n%22%3Atrue%2C%22lp%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%22%2C%22lpr%22%3A%22%22%2C%22liht%22%3Atrue%2C%22ltv%22%3A%22DIRECT%22%2C%22lfrv%22%3A%22%22%2C%22lfcv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%3FAFFID%3D1006%26C1%3D3913%26C3%3D%26CID%3D12%26tr%3D10235203245146221202%26%22%2C%22lcv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%22%2C%22lrv%22%3A%22%22%2C%22lup%22%3A%5B%7B%22pn%22%3A%22AFFID%22%2C%22pv%22%3A%221006%22%7D%2C%7B%22pn%22%3A%22C1%22%2C%22pv%22%3A%223913%22%7D%2C%7B%22pn%22%3A%22C3%22%2C%22pv%22%3A%22%22%7D%2C%7B%22pn%22%3A%22CID%22%2C%22pv%22%3A%2212%22%7D%2C%7B%22pn%22%3A%22tr%22%2C%22pv%22%3A%2210235203245146221202%22%7D%2C%7B%22pn%22%3A%22%22%2C%22pv%22%3A%22%22%7D%5D%2C%22ld%22%3A%221669971022980zabv0.48406584571257016%22%2C%22lht%22%3A%22pageview%22%2C%22lisef%22%3Atrue%2C%22lsrc%22%3A%22direct%22%2C%22lmdm%22%3A%22(none)%22%2C%22lchn%22%3A%22direct%22%2C%22lifr%22%3Atrue%2C%22rst%22%3A1669971022986%2C%22extpg%22%3A%7B%22liht%22%3Atrue%2C%22lifr%22%3Atrue%2C%22lisef%22%3Atrue%2C%22ltv%22%3A%22DIRECT%22%2C%22lfrv%22%3A%22%22%2C%22lfcv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%3FAFFID%3D1006%26C1%3D3913%26C3%3D%26CID%3D12%26tr%3D10235203245146221202%26%22%2C%22lcv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%22%2C%22lrv%22%3A%22%22%2C%22lup%22%3A%5B%7B%22pn%22%3A%22AFFID%22%2C%22pv%22%3A%221006%22%7D%2C%7B%22pn%22%3A%22C1%22%2C%22pv%22%3A%223913%22%7D%2C%7B%22pn%22%3A%22C3%22%2C%22pv%22%3A%22%22%7D%2C%7B%22pn%22%3A%22CID%22%2C%22pv%22%3A%2212%22%7D%2C%7B%22pn%22%3A%22tr%22%2C%22pv%22%3A%2210235203245146221202%22%7D%2C%7B%22pn%22%3A%22%22%2C%22pv%22%3A%22%22%7D%5D%2C%22ld%22%3A%221669971022980zabv0.48406584571257016%22%2C%22lsrc%22%3A%22direct%22%2C%22lmdm%22%3A%22(none)%22%2C%22lchn%22%3A%22direct%22%2C%22rst%22%3A1669971022985%2C%22ts%22%3A698%7D%2C%22ifr%22%3Afalse%2C%22isef%22%3Afalse%2C%22ht%22%3A%22pageview%22%2C%22iht%22%3Atrue%2C%22src%22%3A%22direct%22%2C%22mdm%22%3A%22(none)%22%2C%22chn%22%3A%22direct%22%7D%7D&type=21&domainname=whateversfinellc
200 OK 42 B URL HTTP/2 pagesense-collect.zoho.com/psimg.gif?raw=%7B%22vrd%22%3A%5B%7B%22a%22%3A%22whateversfinellc%22%2C%22p%22%3A%22d2435290e41a4addb5098539d1a3da64%22%7D%5D%2C%22urd%22%3A%7B%22bv%22%3A%22Firefox%22%2C%22lv%22%3A%22en-US%22%2C%22ov%22%3A%22Windows%22%2C%22dv%22%3A%22desktop%22%2C%22mdv%22%3A%22UNKNOWN%22%2C%22rv%22%3A%22%22%2C%22frv%22%3A%22%22%2C%22fcv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%3FAFFID%3D1006%26C1%3D3913%26C3%3D%26CID%3D12%26tr%3D10235203245146221202%26%22%2C%22cv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%22%2C%22up%22%3A%5B%7B%22pn%22%3A%22AFFID%22%2C%22pv%22%3A%221006%22%7D%2C%7B%22pn%22%3A%22C1%22%2C%22pv%22%3A%223913%22%7D%2C%7B%22pn%22%3A%22C3%22%2C%22pv%22%3A%22%22%7D%2C%7B%22pn%22%3A%22CID%22%2C%22pv%22%3A%2212%22%7D%2C%7B%22pn%22%3A%22tr%22%2C%22pv%22%3A%2210235203245146221202%22%7D%2C%7B%22pn%22%3A%22%22%2C%22pv%22%3A%22%22%7D%5D%2C%22tv%22%3A%22DIRECT%22%2C%22srv%22%3A%221280x1024%22%2C%22f%22%3A%221669971022330zabu0.5152438059688514%22%2C%22d%22%3A%221669971023149zabv0.4829129182293873%22%2C%22sid%22%3A%221669971022981zsc0.7800392099137008%22%2C%22ts%22%3A696%2C%22fsrc%22%3A%22direct%22%2C%22fmdm%22%3A%22(none)%22%2C%22fchn%22%3A%22direct%22%2C%22n%22%3Atrue%2C%22lp%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%22%2C%22lpr%22%3A%22%22%2C%22liht%22%3Atrue%2C%22ltv%22%3A%22DIRECT%22%2C%22lfrv%22%3A%22%22%2C%22lfcv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%3FAFFID%3D1006%26C1%3D3913%26C3%3D%26CID%3D12%26tr%3D10235203245146221202%26%22%2C%22lcv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%22%2C%22lrv%22%3A%22%22%2C%22lup%22%3A%5B%7B%22pn%22%3A%22AFFID%22%2C%22pv%22%3A%221006%22%7D%2C%7B%22pn%22%3A%22C1%22%2C%22pv%22%3A%223913%22%7D%2C%7B%22pn%22%3A%22C3%22%2C%22pv%22%3A%22%22%7D%2C%7B%22pn%22%3A%22CID%22%2C%22pv%22%3A%2212%22%7D%2C%7B%22pn%22%3A%22tr%22%2C%22pv%22%3A%2210235203245146221202%22%7D%2C%7B%22pn%22%3A%22%22%2C%22pv%22%3A%22%22%7D%5D%2C%22ld%22%3A%221669971022980zabv0.48406584571257016%22%2C%22lht%22%3A%22pageview%22%2C%22lisef%22%3Atrue%2C%22lsrc%22%3A%22direct%22%2C%22lmdm%22%3A%22(none)%22%2C%22lchn%22%3A%22direct%22%2C%22lifr%22%3Atrue%2C%22rst%22%3A1669971022986%2C%22extpg%22%3A%7B%22liht%22%3Atrue%2C%22lifr%22%3Atrue%2C%22lisef%22%3Atrue%2C%22ltv%22%3A%22DIRECT%22%2C%22lfrv%22%3A%22%22%2C%22lfcv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%3FAFFID%3D1006%26C1%3D3913%26C3%3D%26CID%3D12%26tr%3D10235203245146221202%26%22%2C%22lcv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%22%2C%22lrv%22%3A%22%22%2C%22lup%22%3A%5B%7B%22pn%22%3A%22AFFID%22%2C%22pv%22%3A%221006%22%7D%2C%7B%22pn%22%3A%22C1%22%2C%22pv%22%3A%223913%22%7D%2C%7B%22pn%22%3A%22C3%22%2C%22pv%22%3A%22%22%7D%2C%7B%22pn%22%3A%22CID%22%2C%22pv%22%3A%2212%22%7D%2C%7B%22pn%22%3A%22tr%22%2C%22pv%22%3A%2210235203245146221202%22%7D%2C%7B%22pn%22%3A%22%22%2C%22pv%22%3A%22%22%7D%5D%2C%22ld%22%3A%221669971022980zabv0.48406584571257016%22%2C%22lsrc%22%3A%22direct%22%2C%22lmdm%22%3A%22(none)%22%2C%22lchn%22%3A%22direct%22%2C%22rst%22%3A1669971022985%2C%22ts%22%3A698%7D%2C%22ifr%22%3Afalse%2C%22isef%22%3Afalse%2C%22ht%22%3A%22pageview%22%2C%22iht%22%3Atrue%2C%22src%22%3A%22direct%22%2C%22mdm%22%3A%22(none)%22%2C%22chn%22%3A%22direct%22%7D%7D&type=21&domainname=whateversfinellc
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /psimg.gif?raw=%7B%22vrd%22%3A%5B%7B%22a%22%3A%22whateversfinellc%22%2C%22p%22%3A%22d2435290e41a4addb5098539d1a3da64%22%7D%5D%2C%22urd%22%3A%7B%22bv%22%3A%22Firefox%22%2C%22lv%22%3A%22en-US%22%2C%22ov%22%3A%22Windows%22%2C%22dv%22%3A%22desktop%22%2C%22mdv%22%3A%22UNKNOWN%22%2C%22rv%22%3A%22%22%2C%22frv%22%3A%22%22%2C%22fcv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%3FAFFID%3D1006%26C1%3D3913%26C3%3D%26CID%3D12%26tr%3D10235203245146221202%26%22%2C%22cv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%22%2C%22up%22%3A%5B%7B%22pn%22%3A%22AFFID%22%2C%22pv%22%3A%221006%22%7D%2C%7B%22pn%22%3A%22C1%22%2C%22pv%22%3A%223913%22%7D%2C%7B%22pn%22%3A%22C3%22%2C%22pv%22%3A%22%22%7D%2C%7B%22pn%22%3A%22CID%22%2C%22pv%22%3A%2212%22%7D%2C%7B%22pn%22%3A%22tr%22%2C%22pv%22%3A%2210235203245146221202%22%7D%2C%7B%22pn%22%3A%22%22%2C%22pv%22%3A%22%22%7D%5D%2C%22tv%22%3A%22DIRECT%22%2C%22srv%22%3A%221280x1024%22%2C%22f%22%3A%221669971022330zabu0.5152438059688514%22%2C%22d%22%3A%221669971023149zabv0.4829129182293873%22%2C%22sid%22%3A%221669971022981zsc0.7800392099137008%22%2C%22ts%22%3A696%2C%22fsrc%22%3A%22direct%22%2C%22fmdm%22%3A%22(none)%22%2C%22fchn%22%3A%22direct%22%2C%22n%22%3Atrue%2C%22lp%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%22%2C%22lpr%22%3A%22%22%2C%22liht%22%3Atrue%2C%22ltv%22%3A%22DIRECT%22%2C%22lfrv%22%3A%22%22%2C%22lfcv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%3FAFFID%3D1006%26C1%3D3913%26C3%3D%26CID%3D12%26tr%3D10235203245146221202%26%22%2C%22lcv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%22%2C%22lrv%22%3A%22%22%2C%22lup%22%3A%5B%7B%22pn%22%3A%22AFFID%22%2C%22pv%22%3A%221006%22%7D%2C%7B%22pn%22%3A%22C1%22%2C%22pv%22%3A%223913%22%7D%2C%7B%22pn%22%3A%22C3%22%2C%22pv%22%3A%22%22%7D%2C%7B%22pn%22%3A%22CID%22%2C%22pv%22%3A%2212%22%7D%2C%7B%22pn%22%3A%22tr%22%2C%22pv%22%3A%2210235203245146221202%22%7D%2C%7B%22pn%22%3A%22%22%2C%22pv%22%3A%22%22%7D%5D%2C%22ld%22%3A%221669971022980zabv0.48406584571257016%22%2C%22lht%22%3A%22pageview%22%2C%22lisef%22%3Atrue%2C%22lsrc%22%3A%22direct%22%2C%22lmdm%22%3A%22(none)%22%2C%22lchn%22%3A%22direct%22%2C%22lifr%22%3Atrue%2C%22rst%22%3A1669971022986%2C%22extpg%22%3A%7B%22liht%22%3Atrue%2C%22lifr%22%3Atrue%2C%22lisef%22%3Atrue%2C%22ltv%22%3A%22DIRECT%22%2C%22lfrv%22%3A%22%22%2C%22lfcv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%3FAFFID%3D1006%26C1%3D3913%26C3%3D%26CID%3D12%26tr%3D10235203245146221202%26%22%2C%22lcv%22%3A%22https%3A%2F%2Fclickintowealth.com%2Flp%2Ffff%2Fvid-ts-k.php%22%2C%22lrv%22%3A%22%22%2C%22lup%22%3A%5B%7B%22pn%22%3A%22AFFID%22%2C%22pv%22%3A%221006%22%7D%2C%7B%22pn%22%3A%22C1%22%2C%22pv%22%3A%223913%22%7D%2C%7B%22pn%22%3A%22C3%22%2C%22pv%22%3A%22%22%7D%2C%7B%22pn%22%3A%22CID%22%2C%22pv%22%3A%2212%22%7D%2C%7B%22pn%22%3A%22tr%22%2C%22pv%22%3A%2210235203245146221202%22%7D%2C%7B%22pn%22%3A%22%22%2C%22pv%22%3A%22%22%7D%5D%2C%22ld%22%3A%221669971022980zabv0.48406584571257016%22%2C%22lsrc%22%3A%22direct%22%2C%22lmdm%22%3A%22(none)%22%2C%22lchn%22%3A%22direct%22%2C%22rst%22%3A1669971022985%2C%22ts%22%3A698%7D%2C%22ifr%22%3Afalse%2C%22isef%22%3Afalse%2C%22ht%22%3A%22pageview%22%2C%22iht%22%3Atrue%2C%22src%22%3A%22direct%22%2C%22mdm%22%3A%22(none)%22%2C%22chn%22%3A%22direct%22%7D%7D&type=21&domainname=whateversfinellc HTTP/1.1
Host: pagesense-collect.zoho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://clickintowealth.com
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: ZGS
date: Fri, 02 Dec 2022 08:50:25 GMT
content-type: image/gif;charset=UTF-8
content-length: 42
x-content-type-options: nosniff
x-xss-protection: 1
set-cookie: 0d269e8747=b2da075d6f5117a5feead1ad10fba9d8; Path=/
zfccn=866ffed5-0030-4b2c-bc47-5df52f9efa19;path=/;SameSite=None;Secure;priority=high
_zcsr_tmp=866ffed5-0030-4b2c-bc47-5df52f9efa19;path=/;SameSite=Strict;Secure;priority=high
x-frame-options: DENY
content-disposition: attachment; filename="psimg.gif"
access-control-allow-origin: *
strict-transport-security: max-age=63072000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49a9684674e0f1b3974c6427c5354fe4
c201e61bcda9cc91369f0c57f8236fcdd3db26c6
27b8d50242836a45aca1fcd0cb58e7f685011c1f93b57d0e3ea9a02400f8d801
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:50:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dev.visualwebsiteoptimizer.com/v.gif?cd=0&a=301780&d=clickintowealth.com&u=DEBBA11B9C0CBC75D5E2D2116CD6EA888&h=eb39f3d0aa0627c153a1644aac816df6&t=false&r=0.7839907354312791
200 OK 35 B URL HTTP/2 dev.visualwebsiteoptimizer.com/v.gif?cd=0&a=301780&d=clickintowealth.com&u=DEBBA11B9C0CBC75D5E2D2116CD6EA888&h=eb39f3d0aa0627c153a1644aac816df6&t=false&r=0.7839907354312791
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /v.gif?cd=0&a=301780&d=clickintowealth.com&u=DEBBA11B9C0CBC75D5E2D2116CD6EA888&h=eb39f3d0aa0627c153a1644aac816df6&t=false&r=0.7839907354312791 HTTP/1.1
Host: dev.visualwebsiteoptimizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 08:50:25 GMT
content-type: image/gif
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
expires: Mon, 10 Jan 2005 00:00:01 GMT
pragma: no-cache
x-content-type-options: nosniff
content-length: 35
server: gnv1c
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/playPauseLoadingControl.js
200 OK 16 kB URL HTTP/2 fast.wistia.com/assets/external/playPauseLoadingControl.js
IP
File type ASCII text, with very long lines (60125), with no line terminators
Hash 7264d7b49eb6dc6eef062a9511cfd32e
d6724f77d675d740c895a283e4b8e3dbdd1719d5
6cca15bd7bbece1644b8b31db564da9659fa85f73ea22b814cb831cf0113a4e3
GET /assets/external/playPauseLoadingControl.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "63867024-3e59"
last-modified: Tue, 29 Nov 2022 20:48:36 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 02 Dec 2022 08:50:25 GMT
age: 1499
x-served-by: cache-iad-kcgs7200113-IAD, cache-bma1653-BMA
x-cache: HIT, HIT
x-cache-hits: 62, 84
x-timer: S1669971026.870936,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 15961
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3f76eb48c947a11a2bdebd1ae8b3d8ab
22e060d1dc1e192e3a85b6949c18c51d984cca2e
91675148556d19d51e585f960c3e6296b75a255696493383efff343d1034b9a0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=89554
Date: Fri, 02 Dec 2022 08:50:26 GMT
Etag: "638868ff-1d7"
Expires: Sat, 03 Dec 2022 09:43:00 GMT
Last-Modified: Thu, 01 Dec 2022 08:42:39 GMT
Server: ECS (nyb/1D15)
X-Cache: Miss from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: lesEfLgtpmd_JANN2zpx73VbRdZq_ZRKFQOWDN6GpA4eXLNXJC2YAA==
Age: 3621
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3f76eb48c947a11a2bdebd1ae8b3d8ab
22e060d1dc1e192e3a85b6949c18c51d984cca2e
91675148556d19d51e585f960c3e6296b75a255696493383efff343d1034b9a0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=89100
Date: Fri, 02 Dec 2022 08:50:26 GMT
Etag: "638868ff-1d7"
Expires: Sat, 03 Dec 2022 09:35:26 GMT
Last-Modified: Thu, 01 Dec 2022 08:42:39 GMT
Server: ECS (nyb/1D1B)
X-Cache: Miss from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: nI_yggYibE-ifNoCD2DAMzBZ_ZWc-zqU8_UNwrD8GNHkHmGXvg6e9Q==
Age: 3167
distillery.wistia.com/x
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x HTTP/1.1
Host: distillery.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 1528
Origin: https://clickintowealth.com
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 02 Dec 2022 08:50:26 GMT
access-control-allow-origin: *
cache-control: max-age=0, private, must-revalidate
X-Firefox-Spdy: h2
pipedream.wistia.com/mput?topic=metrics
200 OK 2 B URL HTTP/2 pipedream.wistia.com/mput?topic=metrics
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/x-www-form-urlencoded
Content-Length: 6812
Origin: https://clickintowealth.com
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 08:50:26 GMT
content-type: text/plain; charset=utf-8
content-length: 2
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/allIntegrations.js
200 OK 5.6 kB URL HTTP/2 fast.wistia.com/assets/external/allIntegrations.js
IP
File type ASCII text, with very long lines (21637), with no line terminators
Hash 98d8f1350f159ef9d630464f2677623c
ee33382759ec18abebe452fb065599627d729114
0bcc59bc6540d08234fceefb99483c915ced9406d7b30173817cb18553c462b3
GET /assets/external/allIntegrations.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "63867024-15f7"
last-modified: Tue, 29 Nov 2022 20:48:36 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 02 Dec 2022 08:50:26 GMT
age: 1500
x-served-by: cache-iad-kiad7000146-IAD, cache-bma1653-BMA
x-cache: HIT, HIT
x-cache-hits: 65, 38
x-timer: S1669971027.870415,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 5623
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash e3882509dcf28cd7b99c4fee6d4b1089
5661302ab1d5ef3d38f3dba1c370a99be3824e8a
55b7c973127ea0b68fbda8871696dc0dc756ba25f10fbac6351f97c89d75201c
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 02 Dec 2022 08:50:26 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 01 Dec 2022 20:30:52 GMT
Expires: Fri, 02 Dec 2022 20:30:52 GMT
ETag: "5661302ab1d5ef3d38f3dba1c370a99be3824e8a"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash e3882509dcf28cd7b99c4fee6d4b1089
5661302ab1d5ef3d38f3dba1c370a99be3824e8a
55b7c973127ea0b68fbda8871696dc0dc756ba25f10fbac6351f97c89d75201c
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 02 Dec 2022 08:50:31 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 01 Dec 2022 20:30:52 GMT
Expires: Fri, 02 Dec 2022 20:30:52 GMT
ETag: "5661302ab1d5ef3d38f3dba1c370a99be3824e8a"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
clickintowealth.com/lp/fff/vid_files/v4-shims.css
200 OK 0 B URL HTTP/2 clickintowealth.com/lp/fff/vid_files/v4-shims.css
IP
GET /lp/fff/vid_files/v4-shims.css HTTP/1.1
Host: clickintowealth.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/lp/fff/vid-ts-k.php?AFFID=1006&C1=3913&C3=&CID=12&tr=10235203245146221202&
Cookie: PHPSESSID=265f9c4opgee9bnl5vjm144c8m
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:50:23 GMT
content-type: text/css
last-modified: Sun, 11 Apr 2021 14:20:01 GMT
vary: Accept-Encoding
etag: W/"60730591-6801"
cache-control: public, max-age=648000
content-encoding: gzip
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.9.0/css/all.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.9.0/css/all.css
IP
GET /releases/v5.9.0/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 08:50:23 GMT
content-type: text/css
x-amz-id-2: vC8KBN503iyWKZzHxfJc5rs99Ocw4DSTaifdaL1SsWTbuhhIHZc4Cm+BPlh6dJ7ueugjQrc5cWE=
x-amz-request-id: F0PHW7H6699FG8TW
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"dbf9d822cefe851ba6f66e1ad57e8987"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 502717
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=phX0XJ97ArE0rWYpph0JWADnOZuz%2Fr4ks0uEfpRDF67gkvwP%2FRn206Q3cdSlBJqCWsNZt71xq8FjvPvzggXO56yy9lIB%2FmLlh6qT5scQvopHJBXP1ruz9dVbzbqFCSMd838z6X8v"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7732d092be7872cc-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.9.0/css/v4-shims.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.9.0/css/v4-shims.css
IP
GET /releases/v5.9.0/css/v4-shims.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 08:50:23 GMT
content-type: text/css
x-amz-id-2: HpuDfuJOnoRBIn1oGWh6kpnFISyPAhBcUuSh2sgaSOixf+diILYpFUsoF1uDkiR93wgKGECAn7k=
x-amz-request-id: F0PPGVAN5CXAHSGM
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"e140a7d32f343530f016095df3cc2ae4"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 502716
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1wMWJBp3eU6suDLdzasi0y%2BbNjPIwfLd3SiGjyGozFtoFsqDKM7VRxcv9VqgqtamHLgREBgK%2FD91jdlbzC52nkf0grzlZ6HnXQQIG7vtkpq9NHMisn3BeTaoW0wZy2PqC%2BOpP4uC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7732d092be8172cc-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
clickintowealth.com/lp/fff/vid_files/lander.css
200 OK 0 B URL HTTP/2 clickintowealth.com/lp/fff/vid_files/lander.css
IP
GET /lp/fff/vid_files/lander.css HTTP/1.1
Host: clickintowealth.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/lp/fff/vid-ts-k.php?AFFID=1006&C1=3913&C3=&CID=12&tr=10235203245146221202&
Cookie: PHPSESSID=265f9c4opgee9bnl5vjm144c8m
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:50:23 GMT
content-type: text/css
last-modified: Sun, 11 Apr 2021 14:20:01 GMT
vary: Accept-Encoding
etag: W/"60730591-6a4a2"
cache-control: public, max-age=648000
content-encoding: gzip
X-Firefox-Spdy: h2
clickintowealth.com/lp/fff/vid_files/css_002.css
200 OK 0 B URL HTTP/2 clickintowealth.com/lp/fff/vid_files/css_002.css
IP
GET /lp/fff/vid_files/css_002.css HTTP/1.1
Host: clickintowealth.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/lp/fff/vid-ts-k.php?AFFID=1006&C1=3913&C3=&CID=12&tr=10235203245146221202&
Cookie: PHPSESSID=265f9c4opgee9bnl5vjm144c8m
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:50:23 GMT
content-type: text/css
last-modified: Sun, 11 Apr 2021 14:20:01 GMT
vary: Accept-Encoding
etag: W/"60730591-8e8"
cache-control: public, max-age=648000
content-encoding: gzip
X-Firefox-Spdy: h2
clickintowealth.com/lp/fff/vid_files/pushcrew.js
200 OK 0 B URL HTTP/2 clickintowealth.com/lp/fff/vid_files/pushcrew.js
IP
Analyzer Verdict Alert fortinet Phishing
GET /lp/fff/vid_files/pushcrew.js HTTP/1.1
Host: clickintowealth.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/lp/fff/vid-ts-k.php?AFFID=1006&C1=3913&C3=&CID=12&tr=10235203245146221202&
Cookie: PHPSESSID=265f9c4opgee9bnl5vjm144c8m
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:50:23 GMT
content-type: application/javascript
last-modified: Sun, 11 Apr 2021 14:20:01 GMT
vary: Accept-Encoding
etag: W/"60730591-27d"
cache-control: public, max-age=648000
content-encoding: gzip
X-Firefox-Spdy: h2
clickintowealth.com/lp/fff/vid_files/all.css
200 OK 0 B URL HTTP/2 clickintowealth.com/lp/fff/vid_files/all.css
IP
GET /lp/fff/vid_files/all.css HTTP/1.1
Host: clickintowealth.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/lp/fff/vid-ts-k.php?AFFID=1006&C1=3913&C3=&CID=12&tr=10235203245146221202&
Cookie: PHPSESSID=265f9c4opgee9bnl5vjm144c8m
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:50:23 GMT
content-type: text/css
last-modified: Sun, 11 Apr 2021 14:20:01 GMT
vary: Accept-Encoding
etag: W/"60730591-da9f"
cache-control: public, max-age=648000
content-encoding: gzip
X-Firefox-Spdy: h2
clickintowealth.com/lp/fff/vid_files/lander.js
200 OK 0 B URL HTTP/2 clickintowealth.com/lp/fff/vid_files/lander.js
IP
Analyzer Verdict Alert fortinet Phishing
GET /lp/fff/vid_files/lander.js HTTP/1.1
Host: clickintowealth.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickintowealth.com/lp/fff/vid-ts-k.php?AFFID=1006&C1=3913&C3=&CID=12&tr=10235203245146221202&
Cookie: PHPSESSID=265f9c4opgee9bnl5vjm144c8m
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:50:23 GMT
content-type: application/javascript
last-modified: Sun, 11 Apr 2021 14:20:01 GMT
vary: Accept-Encoding
etag: W/"60730591-f58e1"
cache-control: public, max-age=648000
content-encoding: gzip
X-Firefox-Spdy: h2
149.28.224.6
93.184.220.29
23.36.76.162
0.0.0.0