r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a5daf4dc99951793ae2315d4795e8146
4427507ca4d3a5632cc8f598afbc85e2195d00bd
94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8098
Expires: Wed, 30 Nov 2022 07:03:23 GMT
Date: Wed, 30 Nov 2022 04:48:25 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 4ed065cb23b5fca1a179dd73b3c5b7b2
4422eb24688f5e056fc1b18b127c7f63b1dbf5e0
b723d770d0dec7441d8505dc5a4e7d34f55c9f564ec52f20d9b70c7c3a0d9d35
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1603
Cache-Control: max-age=108569
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:48:25 GMT
Etag: "6385df6f-1d7"
Expires: Thu, 01 Dec 2022 10:57:54 GMT
Last-Modified: Tue, 29 Nov 2022 10:31:11 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6d9d34c96b9a826ae5676640c966469c
8052a16d41a637e420478b7de1ff5a2dc951fccd
f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5267
Expires: Wed, 30 Nov 2022 06:16:12 GMT
Date: Wed, 30 Nov 2022 04:48:25 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 30 Nov 2022 04:17:59 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1826
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: jQC598hArX5UHgL9gdqfX2sPUmPBSrLuoWIPq94K5tqUz6EJZUTSPMiLOK8hdEE+AUzRZqVELlE=
x-amz-request-id: JB7K4C2HE9MN7VPE
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 30 Nov 2022 04:45:44 GMT
age: 161
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 04:48:25 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 30 Nov 2022 04:08:56 GMT
cache-control: public,max-age=3600
age: 2370
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3c8c689bd654417640d85f3da51af313
85123b6d46230a23d03768bf304b386e5d301305
516138ca79703b45e904d32d7dde1c1e9fd35995b9f1bb1331c547542745676d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1589
Cache-Control: max-age=103491
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:48:26 GMT
Etag: "6385cba8-1d7"
Expires: Thu, 01 Dec 2022 09:33:17 GMT
Last-Modified: Tue, 29 Nov 2022 09:06:48 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: kCnxcUl6OApSM0Oeorjeow==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8+FzQAEpVdM3kwXr3ew6ckiCQW8=
alexsmarketingmaster.com/
200 OK 16 kB URL HTTP/1.1 alexsmarketingmaster.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (10200), with CRLF, LF line terminators
Hash aec43ea6109170076531f8393df9b7ba
ac072828a6d4a4f2cb0cbe969ffff77b791cee7a
a4f1376f9a80fe044aa02ca334fd9ef0e862567af5e58530c1c14c009366f108
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: alexsmarketingmaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:48:27 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
X-nginx-cache: WordPress
Last-Modified: Wed, 30 Nov 2022 04:48:27 GMT
Set-Cookie: PHPSESSID=b91f7fb7bbb3a1a963874bd0161bb687; path=/
__cf_bm=kUbM00FKxDwVYH8yNoFG3j2gbbDHvhXXlOJYbv_ETrw-1669783706-0-AfCqrNHG1DaDqsUeY1fghDNKXNP6bpQoaj7vMR7oBAhwRGeQct8PgvxJDbunxVwbORUtnjFRwyAWpOln/exPi1lhbpuYw43P2AkKEXf0cwy4; path=/; expires=Wed, 30-Nov-22 05:18:26 GMT; domain=.clickfunnels.com; HttpOnly; Secure
CF-Cache-Status: MISS
Server: cloudflare
CF-RAY: 7720f3602eafb51d-OSL
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 279 B IP
Hash ab9880f4ca9b38aa594dceaf7a5406d4
6a598803a84903d4c1b1e26fe73f27e822a80cfa
1d211004959a8d11c83f638a27cd30a6575c01a3b8e1de34b1cb680d4a34d864
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1586
Cache-Control: max-age=94842
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:48:27 GMT
Etag: "6385a9e4-117"
Expires: Thu, 01 Dec 2022 07:09:09 GMT
Last-Modified: Tue, 29 Nov 2022 06:42:44 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 92b080a94d6524805b4c8a8055948dba
d7c78a8a9b8cf2a6b877f25d5ebca472a411f23a
c0411a1359b1d22ec900109b5164fe12eb53ef9189e2ade3a3fee6534fdbf649
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6415
Cache-Control: max-age=114426
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:48:27 GMT
Etag: "6385e386-117"
Expires: Thu, 01 Dec 2022 12:35:33 GMT
Last-Modified: Tue, 29 Nov 2022 10:48:38 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 146dac10a93604a686550631e14eefb9
b4af601ce6d515d9ec124938ce626060e0d43099
bac5bc94c1a95af45522dadbf1639aff31e691fa2314314c6cce1ab1e70bba87
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:48:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 92b080a94d6524805b4c8a8055948dba
d7c78a8a9b8cf2a6b877f25d5ebca472a411f23a
c0411a1359b1d22ec900109b5164fe12eb53ef9189e2ade3a3fee6534fdbf649
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1407
Cache-Control: max-age=109418
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:48:27 GMT
Etag: "6385e386-117"
Expires: Thu, 01 Dec 2022 11:12:05 GMT
Last-Modified: Tue, 29 Nov 2022 10:48:38 GMT
Server: ECS (amb/6B7D)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 02ca4292c31c0c0caa2ed7401af8d5bd
16ced3b6956cea150f608c9848bfa2f31e0a3e18
e90eff9a37ae4b3dff3bf24081ff3f110c45619703129b1b3f3f8bd3e0df9da0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1637
Cache-Control: max-age=114344
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:48:27 GMT
Etag: "6385f5de-117"
Expires: Thu, 01 Dec 2022 12:34:11 GMT
Last-Modified: Tue, 29 Nov 2022 12:06:54 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 92b080a94d6524805b4c8a8055948dba
d7c78a8a9b8cf2a6b877f25d5ebca472a411f23a
c0411a1359b1d22ec900109b5164fe12eb53ef9189e2ade3a3fee6534fdbf649
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 763
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:48:27 GMT
Last-Modified: Wed, 30 Nov 2022 04:35:44 GMT
Server: ECS (amb/6BB8)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 92b080a94d6524805b4c8a8055948dba
d7c78a8a9b8cf2a6b877f25d5ebca472a411f23a
c0411a1359b1d22ec900109b5164fe12eb53ef9189e2ade3a3fee6534fdbf649
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6123
Cache-Control: max-age=114134
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:48:27 GMT
Etag: "6385e386-117"
Expires: Thu, 01 Dec 2022 12:30:41 GMT
Last-Modified: Tue, 29 Nov 2022 10:48:38 GMT
Server: ECS (amb/6BB9)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 02ca4292c31c0c0caa2ed7401af8d5bd
16ced3b6956cea150f608c9848bfa2f31e0a3e18
e90eff9a37ae4b3dff3bf24081ff3f110c45619703129b1b3f3f8bd3e0df9da0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1625
Cache-Control: max-age=114332
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:48:27 GMT
Etag: "6385f5de-117"
Expires: Thu, 01 Dec 2022 12:33:59 GMT
Last-Modified: Tue, 29 Nov 2022 12:06:54 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 279
images.clickfunnels.com/3d/392630953c4119a324492bb1c05778/ClickfunnelsTag.png
200 OK 5.3 kB URL HTTP/2 images.clickfunnels.com/3d/392630953c4119a324492bb1c05778/ClickfunnelsTag.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash d99a10ef5010513b3d30f7cf51614b5f
d60c1da11f05540f39632c7357c22b76c9ee1ed7
5dfa88a4dc8b6c0b834a62e45daee28a8dc37ed6ae7eb1545e4ed8b6382c0474
GET /3d/392630953c4119a324492bb1c05778/ClickfunnelsTag.png HTTP/1.1
Host: images.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alexsmarketingmaster.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:48:27 GMT
content-type: image/webp
content-length: 5276
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=9030
content-disposition: inline; filename="ClickfunnelsTag.webp"
etag: "a633777156a5ffeb58c92d3d59fa4e34"
last-modified: Fri, 03 Jan 2020 17:41:49 GMT
vary: Accept
x-amz-id-2: mpfiofoz3/g51l0X59TmfRciwp2R2+klwKzL5vkyJWZPbOjzCzwQzX2/BNhT36HmjMtaLHBKOlM=
x-amz-request-id: 8H4XD9AS9YGT4H71
cf-cache-status: HIT
age: 6634
expires: Sat, 24 Dec 2022 04:48:27 GMT
cache-control: public, max-age=2073600
accept-ranges: bytes
set-cookie: __cf_bm=jlIwcTnrRJjDt5XOJIGAPB3aGjPvDpiK7ryeOvzGWNo-1669783707-0-AYYuWMluL5e0VL8OON0m9CdWlw3hqh6FaIF90HG3hymtHAvOlTyijmiIVI4njEObShUO2KEWp+4rl8EwAfZq9vb6HOjIyIXDurjtFtaHkOi7; path=/; expires=Wed, 30-Nov-22 05:18:27 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7720f36b7d890b06-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 146dac10a93604a686550631e14eefb9
b4af601ce6d515d9ec124938ce626060e0d43099
bac5bc94c1a95af45522dadbf1639aff31e691fa2314314c6cce1ab1e70bba87
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:48:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 02ca4292c31c0c0caa2ed7401af8d5bd
16ced3b6956cea150f608c9848bfa2f31e0a3e18
e90eff9a37ae4b3dff3bf24081ff3f110c45619703129b1b3f3f8bd3e0df9da0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1625
Cache-Control: max-age=114332
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:48:27 GMT
Etag: "6385f5de-117"
Expires: Thu, 01 Dec 2022 12:33:59 GMT
Last-Modified: Tue, 29 Nov 2022 12:06:54 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 279
app.clickfunnels.com/assets/userevents/application.js
200 OK 2.3 kB URL HTTP/2 app.clickfunnels.com/assets/userevents/application.js
IP
File type ASCII text, with very long lines (5244), with no line terminators
Hash 3fc57a07e53237939c82e61607f0504f
e02d0e37c710df4c2ec9ee8a35bf6ab844a0b9ea
9a9b840783d0b60f4ba5a27c1465dc595107bf5e24eb2d2efef505c5848d439f
GET /assets/userevents/application.js HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alexsmarketingmaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:48:27 GMT
content-type: application/x-javascript
cf-ray: 7720f36b3d740b06-OSL
access-control-allow-origin: *
age: 434
cache-control: public, max-age=1200
etag: W/"637bf173-147c"
expires: Wed, 30 Nov 2022 05:08:27 GMT
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
set-cookie: __cf_bm=3T7MT_nhotuqmDY1DHAZlfXuAvbgzgIPo9kfqWxrUso-1669783707-0-AcwIMfTzoPnnCjJCGcJa/rxLFmCycD8b45Jv6XA+CplmGXzWX+JMzy1aSzXQxUjbbm+Pw+ls/x/e9D6/ss2q89Y430XPz7mf3hpalXiLrCbL; path=/; expires=Wed, 30-Nov-22 05:18:27 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
app.clickfunnels.com/assets/pushcrew.js
200 OK 850 B URL HTTP/2 app.clickfunnels.com/assets/pushcrew.js
IP
File type ASCII text, with very long lines (637), with no line terminators
Hash 7c4236faa1b16400d430aab1fc47dfe4
2b4c874c2a5b7e171cfd3d3208f274e6d3c514cc
cd9dc2bd1af23c8c8ba4ba6bc505dcbac93c1f090482d987aed0000ae9811bc9
GET /assets/pushcrew.js HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alexsmarketingmaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:48:27 GMT
content-type: application/x-javascript
cf-ray: 7720f36b4d7e0b06-OSL
access-control-allow-origin: *
age: 434
cache-control: public, max-age=1200
etag: W/"637bf172-27d"
expires: Wed, 30 Nov 2022 05:08:27 GMT
last-modified: Mon, 21 Nov 2022 21:45:22 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
set-cookie: __cf_bm=2Xw8wEd1TUCDPhPhltKBZECsH0HI69Pdpt._V_.zPqw-1669783707-0-AXw7mGdr6unHC6RnN+Qx7kK6lq39VtfV4sOrObMHu9ocdijOCF3rFA9ZnwYyjZVSl0oAbDKzkD898fw9MPFA3wkEUX5rkjbYniX+txVS9yrI; path=/; expires=Wed, 30-Nov-22 05:18:27 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
200 OK 6.7 kB URL HTTP/2 static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
IP
Hash 3e799c28d6c58624f0741220c0a3b3a7
5a1f983dcb9d49df5adee6f557bf3ba3e43b4b2b
8994360c3d655dfbde6ed124ebf04a85ec631da14afb347b4e7ce6be1b34445d
GET /beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://alexsmarketingmaster.com
Connection: keep-alive
Referer: http://alexsmarketingmaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:48:27 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2022.10.1
last-modified: Fri, 21 Oct 2022 01:56:09 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 7720f36afbc8b51b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12953
Expires: Wed, 30 Nov 2022 08:24:21 GMT
Date: Wed, 30 Nov 2022 04:48:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12953
Expires: Wed, 30 Nov 2022 08:24:21 GMT
Date: Wed, 30 Nov 2022 04:48:28 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa44c8657-c62c-4dd0-8688-d6b89a767fb4.png
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa44c8657-c62c-4dd0-8688-d6b89a767fb4.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cb669522a324cd5d9ba1b1743138d38
71e4307194ea9fb15d29c8a5e35f9bfd3cb0c6e0
a997731964710b80affb001f7f2e2f05a93550b06c1626279516d78b11332803
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa44c8657-c62c-4dd0-8688-d6b89a767fb4.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8337
x-amzn-requestid: 88e6ec5a-6b04-4787-91e4-02f316d0d6e2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhgYHViIAMFZrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867c68-10f0d81a09c0ae930f6be726;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:40:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8XATm-S2y3wzXWzJxgof2GIbXx_7WzuEMKrhI5By_tGaB8EiYeGkLg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:59:07 GMT
age: 24561
etag: "71e4307194ea9fb15d29c8a5e35f9bfd3cb0c6e0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
app.clickfunnels.com/images/email2.png
200 OK 13 kB URL HTTP/2 app.clickfunnels.com/images/email2.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 059fcc92915a5bb3a73ad85d47afd5da
711e8fbea5b3fcc9ae728ddd86a2952f1b76f9fb
7c53d049ff8ce9ebf4c2c4916a1b0761a15123d19f370f7111022601bdb1f09f
GET /images/email2.png HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.clickfunnels.com/assets/lander.css
Cookie: __cf_bm=BHqBzXnlP91gkzVplonCEEtMNLPvg8NltkvjN_AUiIA-1669783707-0-AV/Tt4sx/0usZEuBbRj3/O2cvSx1XP3n3XgUt08Z9Ahb7Xi1miX4GBlMCkNrnrS4yv2BE4QJDAIZxGowTuvqbrVOn/1ed7IUFRTGsIVDFRLW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:48:27 GMT
content-type: image/webp
cf-ray: 7720f36c1dc00b06-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 469096
cache-control: public, max-age=2678400
content-disposition: inline; filename="email2.webp"
etag: "637bf173-c80"
expires: Sat, 31 Dec 2022 04:48:27 GMT
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept, Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=3200
server: cloudflare
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 777ce44582c70bf01a31da4cab366f36
57e1d34f146d5ccd9943aa97bcc3158f7103bb07
fbdc8f65ae74dc13b7aafec464f08fdc9902af519946200ec52432ac3ca55982
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10958
x-amzn-requestid: abfea5b0-58f5-49e1-b78e-7cf456d03cb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgFHF9oIAMF5lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a20-5ab719292d440d083b07a478;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: e4GuUolL0WIMXvnF7BZ80j-dMMSILN2gd-1mqFwNns-zCUBsJa8iHQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:43:04 GMT
age: 25524
etag: "57e1d34f146d5ccd9943aa97bcc3158f7103bb07"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F265a94d3-cdf4-4682-bcea-7cb1b79bc860.png
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F265a94d3-cdf4-4682-bcea-7cb1b79bc860.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9fb14804c284e300f976848e30396e9c
6004b4b7afd22dded903f026d245bc90a6706767
1cf96b0b6c83f182d018fa4ffb9924038bf282755091e7bacff2a624220260d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F265a94d3-cdf4-4682-bcea-7cb1b79bc860.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13195
x-amzn-requestid: 1303b72c-fe18-46a3-b3c1-06f3b8550d90
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhGvHW6oAMFxgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867bc4-1b3dbbb005a238117076d1f3;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pw2Wm8mI8MxRAOVsdvvWLEuxPN5ffcgWBZ_KecuuS5stoTHF4hxECg==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:49 GMT
age: 25419
etag: "6004b4b7afd22dded903f026d245bc90a6706767"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe74cbd5b-36b7-497f-97d1-4e7073a47375.jpeg
200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe74cbd5b-36b7-497f-97d1-4e7073a47375.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9b96b63164d7dc37268951510afb359f
5991d60e238558f9fe4e1759fe18dde628cb7be4
cd7a88b3173bae9ad466d41b9ae9a2ed9e18157660697f1f1b070043194c3db4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe74cbd5b-36b7-497f-97d1-4e7073a47375.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4706
x-amzn-requestid: ce0b287a-7242-402b-8261-c519a1310309
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhHxETjoAMFcTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867bcb-7a69d6d14ad0fd707ede2882;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YOLFLV-a93jrA__gtWEzu2Vz8fpQJgvYGDk5fVsjhKVULRHdnKmfHw==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:35 GMT
age: 25433
etag: "5991d60e238558f9fe4e1759fe18dde628cb7be4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5508d05a290b663fd89ead9b58f2efd8
53650399f9a986ba54addd668b4557109d12003b
65704a961410fdd318c491fedf002c8e9b184cd34b76fe1b67026d42ce21be3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9674
x-amzn-requestid: 7e7d0183-9667-462a-8d44-d125998c1ae3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgEoHVAoAMFvAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1d-280ba97e3fe1bf7244cbde35;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qftF-GQkcjKTs30KMGCTDymw2SVSXeAYKGNWUnaMfvIb8HjtfHUx8A==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:46 GMT
etag: "53650399f9a986ba54addd668b4557109d12003b"
content-type: image/jpeg
age: 25422
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
app.clickfunnels.com/userevents/?funnel_id=T0pzMzRGVm8yU2hjb09BMDBWRFhRZz09LS1VM2VDM0oxUjczMmhNQjFTVmo5RlV3PT0%3D--6abaf842f2bc6d9f8589f0ead6f4db25734510f0&page_id=Q1lZbHdRMUhiekM2Ly9TaXU5MDVDdz09LS1mNlU0Sm80NlUzY3p3VTBhTzBJaWFRPT0%3D--ecf96a4bc79a2680b15f97737e43c2d9321f4eed&funnel_step_id=VUhISWpXdkVDWml6MmdyNGU3dkx6Zz09LS1DTmpsekt3MWdkZVUydkR0bFM4RzlRPT0%3D--5ec7fd5b4cd89b6bf8101cb23a2d7cacb472db56&user_id=NXJpZWdGdlFmWUJPcnFZaENoSU5QUT09LS1acUlhMEhVam0rNGhacW82MjVaUUJ3PT0%3D--affbb81e267d6e0efc5fa5b68ccb8534ee3a2dbe&account_id=QWs1LzZRM2R1YmdPSExFK0FQUWhGUT09LS10ZXFLR2wvV0NMaFRSWHJSRWoxbXBBPT0%3D--008f0e8c1379b61df0ee438b87a296b14574cf36&page_code=NTcwMTI3NTQ%3D&mode_id=1&time_zone=America%2FDetroit&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::PageviewsCreatedSummary&nonce=382124d3-74d9-41d5-967c-96c4e442595c&url=http%3A%2F%2Falexsmarketingmaster.com%2F
301 Moved Permanently 1.4 kB URL HTTP/1.1 app.clickfunnels.com/userevents/?funnel_id=T0pzMzRGVm8yU2hjb09BMDBWRFhRZz09LS1VM2VDM0oxUjczMmhNQjFTVmo5RlV3PT0%3D--6abaf842f2bc6d9f8589f0ead6f4db25734510f0&page_id=Q1lZbHdRMUhiekM2Ly9TaXU5MDVDdz09LS1mNlU0Sm80NlUzY3p3VTBhTzBJaWFRPT0%3D--ecf96a4bc79a2680b15f97737e43c2d9321f4eed&funnel_step_id=VUhISWpXdkVDWml6MmdyNGU3dkx6Zz09LS1DTmpsekt3MWdkZVUydkR0bFM4RzlRPT0%3D--5ec7fd5b4cd89b6bf8101cb23a2d7cacb472db56&user_id=NXJpZWdGdlFmWUJPcnFZaENoSU5QUT09LS1acUlhMEhVam0rNGhacW82MjVaUUJ3PT0%3D--affbb81e267d6e0efc5fa5b68ccb8534ee3a2dbe&account_id=QWs1LzZRM2R1YmdPSExFK0FQUWhGUT09LS10ZXFLR2wvV0NMaFRSWHJSRWoxbXBBPT0%3D--008f0e8c1379b61df0ee438b87a296b14574cf36&page_code=NTcwMTI3NTQ%3D&mode_id=1&time_zone=America%2FDetroit&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::PageviewsCreatedSummary&nonce=382124d3-74d9-41d5-967c-96c4e442595c&url=http%3A%2F%2Falexsmarketingmaster.com%2F
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1431)
Hash a965bdc891a0fc24c0cff4ea8432ca03
d2ffe756e73f5b4ae3254a3ba22a3f8f7639e306
225a009a097bde67453ffe5f669bd32194f0eb7197bba9b63c92358625c9f709
GET /userevents/?funnel_id=T0pzMzRGVm8yU2hjb09BMDBWRFhRZz09LS1VM2VDM0oxUjczMmhNQjFTVmo5RlV3PT0%3D--6abaf842f2bc6d9f8589f0ead6f4db25734510f0&page_id=Q1lZbHdRMUhiekM2Ly9TaXU5MDVDdz09LS1mNlU0Sm80NlUzY3p3VTBhTzBJaWFRPT0%3D--ecf96a4bc79a2680b15f97737e43c2d9321f4eed&funnel_step_id=VUhISWpXdkVDWml6MmdyNGU3dkx6Zz09LS1DTmpsekt3MWdkZVUydkR0bFM4RzlRPT0%3D--5ec7fd5b4cd89b6bf8101cb23a2d7cacb472db56&user_id=NXJpZWdGdlFmWUJPcnFZaENoSU5QUT09LS1acUlhMEhVam0rNGhacW82MjVaUUJ3PT0%3D--affbb81e267d6e0efc5fa5b68ccb8534ee3a2dbe&account_id=QWs1LzZRM2R1YmdPSExFK0FQUWhGUT09LS10ZXFLR2wvV0NMaFRSWHJSRWoxbXBBPT0%3D--008f0e8c1379b61df0ee438b87a296b14574cf36&page_code=NTcwMTI3NTQ%3D&mode_id=1&time_zone=America%2FDetroit&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::PageviewsCreatedSummary&nonce=382124d3-74d9-41d5-967c-96c4e442595c&url=http%3A%2F%2Falexsmarketingmaster.com%2F HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://alexsmarketingmaster.com
Connection: keep-alive
Referer: http://alexsmarketingmaster.com/
HTTP/1.1 301 Moved Permanently
Date: Wed, 30 Nov 2022 04:48:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://app.clickfunnels.com/userevents?funnel_id=T0pzMzRGVm8yU2hjb09BMDBWRFhRZz09LS1VM2VDM0oxUjczMmhNQjFTVmo5RlV3PT0%3D--6abaf842f2bc6d9f8589f0ead6f4db25734510f0&page_id=Q1lZbHdRMUhiekM2Ly9TaXU5MDVDdz09LS1mNlU0Sm80NlUzY3p3VTBhTzBJaWFRPT0%3D--ecf96a4bc79a2680b15f97737e43c2d9321f4eed&funnel_step_id=VUhISWpXdkVDWml6MmdyNGU3dkx6Zz09LS1DTmpsekt3MWdkZVUydkR0bFM4RzlRPT0%3D--5ec7fd5b4cd89b6bf8101cb23a2d7cacb472db56&user_id=NXJpZWdGdlFmWUJPcnFZaENoSU5QUT09LS1acUlhMEhVam0rNGhacW82MjVaUUJ3PT0%3D--affbb81e267d6e0efc5fa5b68ccb8534ee3a2dbe&account_id=QWs1LzZRM2R1YmdPSExFK0FQUWhGUT09LS10ZXFLR2wvV0NMaFRSWHJSRWoxbXBBPT0%3D--008f0e8c1379b61df0ee438b87a296b14574cf36&page_code=NTcwMTI3NTQ%3D&mode_id=1&time_zone=America%2FDetroit&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3APageviewsCreatedSummary&nonce=382124d3-74d9-41d5-967c-96c4e442595c&url=http%3A%2F%2Falexsmarketingmaster.com%2F
CF-Ray: 7720f36f0f53b523-OSL
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Vary: Accept-Encoding
CF-Cache-Status: MISS
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
Status: 301 Moved Permanently
X-Powered-By: Phusion Passenger Enterprise 6.0.7
X-Rack-Cache: miss
X-Request-Id: 402109732e051867c772cfcf940a23b8
X-Runtime: 0.009983
Set-Cookie: __cf_bm=DirBPPd0UGFye.MXwlgalMZpNZ06PqOoBteQQlUDVUc-1669783708-0-AbAtyiTafveMPpiZUn2lFowhOLCMsq6W/sbNLn6iW+2Xl9avadonnSfPA1aPpwgmgqyb6mXojymXPwfjsNJh9MKIYy0k4LDaGmy0n2L8SDkd; path=/; expires=Wed, 30-Nov-22 05:18:28 GMT; domain=.clickfunnels.com; HttpOnly; SameSite=None
Server-Timing: cf-q-config;dur=6.9999987317715e-06
Server: cloudflare
alt-svc: h2=":443"; ma=60
app.clickfunnels.com/userevents/?funnel_id=T0pzMzRGVm8yU2hjb09BMDBWRFhRZz09LS1VM2VDM0oxUjczMmhNQjFTVmo5RlV3PT0%3D--6abaf842f2bc6d9f8589f0ead6f4db25734510f0&page_id=Q1lZbHdRMUhiekM2Ly9TaXU5MDVDdz09LS1mNlU0Sm80NlUzY3p3VTBhTzBJaWFRPT0%3D--ecf96a4bc79a2680b15f97737e43c2d9321f4eed&funnel_step_id=VUhISWpXdkVDWml6MmdyNGU3dkx6Zz09LS1DTmpsekt3MWdkZVUydkR0bFM4RzlRPT0%3D--5ec7fd5b4cd89b6bf8101cb23a2d7cacb472db56&user_id=NXJpZWdGdlFmWUJPcnFZaENoSU5QUT09LS1acUlhMEhVam0rNGhacW82MjVaUUJ3PT0%3D--affbb81e267d6e0efc5fa5b68ccb8534ee3a2dbe&account_id=QWs1LzZRM2R1YmdPSExFK0FQUWhGUT09LS10ZXFLR2wvV0NMaFRSWHJSRWoxbXBBPT0%3D--008f0e8c1379b61df0ee438b87a296b14574cf36&page_code=NTcwMTI3NTQ%3D&mode_id=1&time_zone=America%2FDetroit&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniqueVisitorsCreatedSummary&nonce=7dfd9470-812a-418a-aa7b-828248cdb597&url=http%3A%2F%2Falexsmarketingmaster.com%2F
301 Moved Permanently 1.5 kB URL HTTP/1.1 app.clickfunnels.com/userevents/?funnel_id=T0pzMzRGVm8yU2hjb09BMDBWRFhRZz09LS1VM2VDM0oxUjczMmhNQjFTVmo5RlV3PT0%3D--6abaf842f2bc6d9f8589f0ead6f4db25734510f0&page_id=Q1lZbHdRMUhiekM2Ly9TaXU5MDVDdz09LS1mNlU0Sm80NlUzY3p3VTBhTzBJaWFRPT0%3D--ecf96a4bc79a2680b15f97737e43c2d9321f4eed&funnel_step_id=VUhISWpXdkVDWml6MmdyNGU3dkx6Zz09LS1DTmpsekt3MWdkZVUydkR0bFM4RzlRPT0%3D--5ec7fd5b4cd89b6bf8101cb23a2d7cacb472db56&user_id=NXJpZWdGdlFmWUJPcnFZaENoSU5QUT09LS1acUlhMEhVam0rNGhacW82MjVaUUJ3PT0%3D--affbb81e267d6e0efc5fa5b68ccb8534ee3a2dbe&account_id=QWs1LzZRM2R1YmdPSExFK0FQUWhGUT09LS10ZXFLR2wvV0NMaFRSWHJSRWoxbXBBPT0%3D--008f0e8c1379b61df0ee438b87a296b14574cf36&page_code=NTcwMTI3NTQ%3D&mode_id=1&time_zone=America%2FDetroit&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniqueVisitorsCreatedSummary&nonce=7dfd9470-812a-418a-aa7b-828248cdb597&url=http%3A%2F%2Falexsmarketingmaster.com%2F
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1436)
Hash 7a3f3fc96f72005dcbda526db709c800
92db26ee5960892254239ebe16ca249548ffaaa2
2f972a35f09d9747f43b707f987b48af98ed15dff2b0c526b37ecfafbb395cb9
GET /userevents/?funnel_id=T0pzMzRGVm8yU2hjb09BMDBWRFhRZz09LS1VM2VDM0oxUjczMmhNQjFTVmo5RlV3PT0%3D--6abaf842f2bc6d9f8589f0ead6f4db25734510f0&page_id=Q1lZbHdRMUhiekM2Ly9TaXU5MDVDdz09LS1mNlU0Sm80NlUzY3p3VTBhTzBJaWFRPT0%3D--ecf96a4bc79a2680b15f97737e43c2d9321f4eed&funnel_step_id=VUhISWpXdkVDWml6MmdyNGU3dkx6Zz09LS1DTmpsekt3MWdkZVUydkR0bFM4RzlRPT0%3D--5ec7fd5b4cd89b6bf8101cb23a2d7cacb472db56&user_id=NXJpZWdGdlFmWUJPcnFZaENoSU5QUT09LS1acUlhMEhVam0rNGhacW82MjVaUUJ3PT0%3D--affbb81e267d6e0efc5fa5b68ccb8534ee3a2dbe&account_id=QWs1LzZRM2R1YmdPSExFK0FQUWhGUT09LS10ZXFLR2wvV0NMaFRSWHJSRWoxbXBBPT0%3D--008f0e8c1379b61df0ee438b87a296b14574cf36&page_code=NTcwMTI3NTQ%3D&mode_id=1&time_zone=America%2FDetroit&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniqueVisitorsCreatedSummary&nonce=7dfd9470-812a-418a-aa7b-828248cdb597&url=http%3A%2F%2Falexsmarketingmaster.com%2F HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://alexsmarketingmaster.com
Connection: keep-alive
Referer: http://alexsmarketingmaster.com/
HTTP/1.1 301 Moved Permanently
Date: Wed, 30 Nov 2022 04:48:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://app.clickfunnels.com/userevents?funnel_id=T0pzMzRGVm8yU2hjb09BMDBWRFhRZz09LS1VM2VDM0oxUjczMmhNQjFTVmo5RlV3PT0%3D--6abaf842f2bc6d9f8589f0ead6f4db25734510f0&page_id=Q1lZbHdRMUhiekM2Ly9TaXU5MDVDdz09LS1mNlU0Sm80NlUzY3p3VTBhTzBJaWFRPT0%3D--ecf96a4bc79a2680b15f97737e43c2d9321f4eed&funnel_step_id=VUhISWpXdkVDWml6MmdyNGU3dkx6Zz09LS1DTmpsekt3MWdkZVUydkR0bFM4RzlRPT0%3D--5ec7fd5b4cd89b6bf8101cb23a2d7cacb472db56&user_id=NXJpZWdGdlFmWUJPcnFZaENoSU5QUT09LS1acUlhMEhVam0rNGhacW82MjVaUUJ3PT0%3D--affbb81e267d6e0efc5fa5b68ccb8534ee3a2dbe&account_id=QWs1LzZRM2R1YmdPSExFK0FQUWhGUT09LS10ZXFLR2wvV0NMaFRSWHJSRWoxbXBBPT0%3D--008f0e8c1379b61df0ee438b87a296b14574cf36&page_code=NTcwMTI3NTQ%3D&mode_id=1&time_zone=America%2FDetroit&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniqueVisitorsCreatedSummary&nonce=7dfd9470-812a-418a-aa7b-828248cdb597&url=http%3A%2F%2Falexsmarketingmaster.com%2F
CF-Ray: 7720f36f19bfb509-OSL
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Vary: Accept-Encoding
CF-Cache-Status: MISS
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
Status: 301 Moved Permanently
X-Powered-By: Phusion Passenger Enterprise 6.0.7
X-Rack-Cache: miss
X-Request-Id: ba32473184da809fde46cafaa5bad354
X-Runtime: 0.008385
Set-Cookie: __cf_bm=dIIi_zC_u3hMHRI.8HvqDvUX1AcPDCbqf2IE9gyWvAs-1669783708-0-AW2NLIStRWDz+kZXl2guwOW6hHCwhdrkkgoxl6cGC9T3fC3AnZ9ocy8riuyjD5+2kca5m1sm0FloNCWQmrZKT3QULVWg6qQgVcjAui+5cujv; path=/; expires=Wed, 30-Nov-22 05:18:28 GMT; domain=.clickfunnels.com; HttpOnly; SameSite=None
Server-Timing: cf-q-config;dur=4.9999998736894e-06
Server: cloudflare
alt-svc: h2=":443"; ma=60
app.clickfunnels.com/userevents/?funnel_id=T0pzMzRGVm8yU2hjb09BMDBWRFhRZz09LS1VM2VDM0oxUjczMmhNQjFTVmo5RlV3PT0%3D--6abaf842f2bc6d9f8589f0ead6f4db25734510f0&page_id=Q1lZbHdRMUhiekM2Ly9TaXU5MDVDdz09LS1mNlU0Sm80NlUzY3p3VTBhTzBJaWFRPT0%3D--ecf96a4bc79a2680b15f97737e43c2d9321f4eed&funnel_step_id=VUhISWpXdkVDWml6MmdyNGU3dkx6Zz09LS1DTmpsekt3MWdkZVUydkR0bFM4RzlRPT0%3D--5ec7fd5b4cd89b6bf8101cb23a2d7cacb472db56&user_id=NXJpZWdGdlFmWUJPcnFZaENoSU5QUT09LS1acUlhMEhVam0rNGhacW82MjVaUUJ3PT0%3D--affbb81e267d6e0efc5fa5b68ccb8534ee3a2dbe&account_id=QWs1LzZRM2R1YmdPSExFK0FQUWhGUT09LS10ZXFLR2wvV0NMaFRSWHJSRWoxbXBBPT0%3D--008f0e8c1379b61df0ee438b87a296b14574cf36&page_code=NTcwMTI3NTQ%3D&mode_id=1&time_zone=America%2FDetroit&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniquePageviewsCreatedSummary&nonce=2a67a435-24e2-4bc0-a21d-ce2b2d2ef9ad&url=http%3A%2F%2Falexsmarketingmaster.com%2F
301 Moved Permanently 1.5 kB URL HTTP/1.1 app.clickfunnels.com/userevents/?funnel_id=T0pzMzRGVm8yU2hjb09BMDBWRFhRZz09LS1VM2VDM0oxUjczMmhNQjFTVmo5RlV3PT0%3D--6abaf842f2bc6d9f8589f0ead6f4db25734510f0&page_id=Q1lZbHdRMUhiekM2Ly9TaXU5MDVDdz09LS1mNlU0Sm80NlUzY3p3VTBhTzBJaWFRPT0%3D--ecf96a4bc79a2680b15f97737e43c2d9321f4eed&funnel_step_id=VUhISWpXdkVDWml6MmdyNGU3dkx6Zz09LS1DTmpsekt3MWdkZVUydkR0bFM4RzlRPT0%3D--5ec7fd5b4cd89b6bf8101cb23a2d7cacb472db56&user_id=NXJpZWdGdlFmWUJPcnFZaENoSU5QUT09LS1acUlhMEhVam0rNGhacW82MjVaUUJ3PT0%3D--affbb81e267d6e0efc5fa5b68ccb8534ee3a2dbe&account_id=QWs1LzZRM2R1YmdPSExFK0FQUWhGUT09LS10ZXFLR2wvV0NMaFRSWHJSRWoxbXBBPT0%3D--008f0e8c1379b61df0ee438b87a296b14574cf36&page_code=NTcwMTI3NTQ%3D&mode_id=1&time_zone=America%2FDetroit&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniquePageviewsCreatedSummary&nonce=2a67a435-24e2-4bc0-a21d-ce2b2d2ef9ad&url=http%3A%2F%2Falexsmarketingmaster.com%2F
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1437)
Hash 3892b3bba61ba73fad29f6e394c6243a
811e755c06778d4bfe08a354c2dd3f6532a08421
50fb1dad200965f1fe1b8836901ecf3955b47e418e1e6e090c7ff28356f44fed
GET /userevents/?funnel_id=T0pzMzRGVm8yU2hjb09BMDBWRFhRZz09LS1VM2VDM0oxUjczMmhNQjFTVmo5RlV3PT0%3D--6abaf842f2bc6d9f8589f0ead6f4db25734510f0&page_id=Q1lZbHdRMUhiekM2Ly9TaXU5MDVDdz09LS1mNlU0Sm80NlUzY3p3VTBhTzBJaWFRPT0%3D--ecf96a4bc79a2680b15f97737e43c2d9321f4eed&funnel_step_id=VUhISWpXdkVDWml6MmdyNGU3dkx6Zz09LS1DTmpsekt3MWdkZVUydkR0bFM4RzlRPT0%3D--5ec7fd5b4cd89b6bf8101cb23a2d7cacb472db56&user_id=NXJpZWdGdlFmWUJPcnFZaENoSU5QUT09LS1acUlhMEhVam0rNGhacW82MjVaUUJ3PT0%3D--affbb81e267d6e0efc5fa5b68ccb8534ee3a2dbe&account_id=QWs1LzZRM2R1YmdPSExFK0FQUWhGUT09LS10ZXFLR2wvV0NMaFRSWHJSRWoxbXBBPT0%3D--008f0e8c1379b61df0ee438b87a296b14574cf36&page_code=NTcwMTI3NTQ%3D&mode_id=1&time_zone=America%2FDetroit&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniquePageviewsCreatedSummary&nonce=2a67a435-24e2-4bc0-a21d-ce2b2d2ef9ad&url=http%3A%2F%2Falexsmarketingmaster.com%2F HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://alexsmarketingmaster.com
Connection: keep-alive
Referer: http://alexsmarketingmaster.com/
HTTP/1.1 301 Moved Permanently
Date: Wed, 30 Nov 2022 04:48:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://app.clickfunnels.com/userevents?funnel_id=T0pzMzRGVm8yU2hjb09BMDBWRFhRZz09LS1VM2VDM0oxUjczMmhNQjFTVmo5RlV3PT0%3D--6abaf842f2bc6d9f8589f0ead6f4db25734510f0&page_id=Q1lZbHdRMUhiekM2Ly9TaXU5MDVDdz09LS1mNlU0Sm80NlUzY3p3VTBhTzBJaWFRPT0%3D--ecf96a4bc79a2680b15f97737e43c2d9321f4eed&funnel_step_id=VUhISWpXdkVDWml6MmdyNGU3dkx6Zz09LS1DTmpsekt3MWdkZVUydkR0bFM4RzlRPT0%3D--5ec7fd5b4cd89b6bf8101cb23a2d7cacb472db56&user_id=NXJpZWdGdlFmWUJPcnFZaENoSU5QUT09LS1acUlhMEhVam0rNGhacW82MjVaUUJ3PT0%3D--affbb81e267d6e0efc5fa5b68ccb8534ee3a2dbe&account_id=QWs1LzZRM2R1YmdPSExFK0FQUWhGUT09LS10ZXFLR2wvV0NMaFRSWHJSRWoxbXBBPT0%3D--008f0e8c1379b61df0ee438b87a296b14574cf36&page_code=NTcwMTI3NTQ%3D&mode_id=1&time_zone=America%2FDetroit&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniquePageviewsCreatedSummary&nonce=2a67a435-24e2-4bc0-a21d-ce2b2d2ef9ad&url=http%3A%2F%2Falexsmarketingmaster.com%2F
CF-Ray: 7720f36f0c8db517-OSL
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Vary: Accept-Encoding
CF-Cache-Status: MISS
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
Status: 301 Moved Permanently
X-Powered-By: Phusion Passenger Enterprise 6.0.7
X-Rack-Cache: miss
X-Request-Id: adba2b3aba4ad3f77e7f1e186521f4c3
X-Runtime: 0.012025
Set-Cookie: __cf_bm=IEQwdPcPLxRZGYu29SCL6cRXpb_3PGI23V4F3ynEypY-1669783708-0-Ae4CNjS+I/UU8k9qk6bIRho6CRC0dXniVppo745ZiFn8uFdUpeFZGs9jzcNbxqjfMAhkmqrw8RWGVNtMSlhySitjuCg1H2dnDcH60Wz5iHvr; path=/; expires=Wed, 30-Nov-22 05:18:28 GMT; domain=.clickfunnels.com; HttpOnly; SameSite=None
Server-Timing: cf-q-config;dur=2.0000001313747e-05
Server: cloudflare
alt-svc: h2=":443"; ma=60
app.clickfunnels.com/userevents?funnel_id=T0pzMzRGVm8yU2hjb09BMDBWRFhRZz09LS1VM2VDM0oxUjczMmhNQjFTVmo5RlV3PT0%3D--6abaf842f2bc6d9f8589f0ead6f4db25734510f0&page_id=Q1lZbHdRMUhiekM2Ly9TaXU5MDVDdz09LS1mNlU0Sm80NlUzY3p3VTBhTzBJaWFRPT0%3D--ecf96a4bc79a2680b15f97737e43c2d9321f4eed&funnel_step_id=VUhISWpXdkVDWml6MmdyNGU3dkx6Zz09LS1DTmpsekt3MWdkZVUydkR0bFM4RzlRPT0%3D--5ec7fd5b4cd89b6bf8101cb23a2d7cacb472db56&user_id=NXJpZWdGdlFmWUJPcnFZaENoSU5QUT09LS1acUlhMEhVam0rNGhacW82MjVaUUJ3PT0%3D--affbb81e267d6e0efc5fa5b68ccb8534ee3a2dbe&account_id=QWs1LzZRM2R1YmdPSExFK0FQUWhGUT09LS10ZXFLR2wvV0NMaFRSWHJSRWoxbXBBPT0%3D--008f0e8c1379b61df0ee438b87a296b14574cf36&page_code=NTcwMTI3NTQ%3D&mode_id=1&time_zone=America%2FDetroit&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3APageviewsCreatedSummary&nonce=382124d3-74d9-41d5-967c-96c4e442595c&url=http%3A%2F%2Falexsmarketingmaster.com%2F
202 Accepted 279 B URL HTTP/2 app.clickfunnels.com/userevents?funnel_id=T0pzMzRGVm8yU2hjb09BMDBWRFhRZz09LS1VM2VDM0oxUjczMmhNQjFTVmo5RlV3PT0%3D--6abaf842f2bc6d9f8589f0ead6f4db25734510f0&page_id=Q1lZbHdRMUhiekM2Ly9TaXU5MDVDdz09LS1mNlU0Sm80NlUzY3p3VTBhTzBJaWFRPT0%3D--ecf96a4bc79a2680b15f97737e43c2d9321f4eed&funnel_step_id=VUhISWpXdkVDWml6MmdyNGU3dkx6Zz09LS1DTmpsekt3MWdkZVUydkR0bFM4RzlRPT0%3D--5ec7fd5b4cd89b6bf8101cb23a2d7cacb472db56&user_id=NXJpZWdGdlFmWUJPcnFZaENoSU5QUT09LS1acUlhMEhVam0rNGhacW82MjVaUUJ3PT0%3D--affbb81e267d6e0efc5fa5b68ccb8534ee3a2dbe&account_id=QWs1LzZRM2R1YmdPSExFK0FQUWhGUT09LS10ZXFLR2wvV0NMaFRSWHJSRWoxbXBBPT0%3D--008f0e8c1379b61df0ee438b87a296b14574cf36&page_code=NTcwMTI3NTQ%3D&mode_id=1&time_zone=America%2FDetroit&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3APageviewsCreatedSummary&nonce=382124d3-74d9-41d5-967c-96c4e442595c&url=http%3A%2F%2Falexsmarketingmaster.com%2F
IP
Hash b8b5b5b3de7d6996c5463abf62a6052b
aab4fa45e448abd78d8bf7122a5336d2e060bbc7
f072aa43b87161b00c799a897a15a6f8b6908deabf12542012e117c5f248add6
GET /userevents?funnel_id=T0pzMzRGVm8yU2hjb09BMDBWRFhRZz09LS1VM2VDM0oxUjczMmhNQjFTVmo5RlV3PT0%3D--6abaf842f2bc6d9f8589f0ead6f4db25734510f0&page_id=Q1lZbHdRMUhiekM2Ly9TaXU5MDVDdz09LS1mNlU0Sm80NlUzY3p3VTBhTzBJaWFRPT0%3D--ecf96a4bc79a2680b15f97737e43c2d9321f4eed&funnel_step_id=VUhISWpXdkVDWml6MmdyNGU3dkx6Zz09LS1DTmpsekt3MWdkZVUydkR0bFM4RzlRPT0%3D--5ec7fd5b4cd89b6bf8101cb23a2d7cacb472db56&user_id=NXJpZWdGdlFmWUJPcnFZaENoSU5QUT09LS1acUlhMEhVam0rNGhacW82MjVaUUJ3PT0%3D--affbb81e267d6e0efc5fa5b68ccb8534ee3a2dbe&account_id=QWs1LzZRM2R1YmdPSExFK0FQUWhGUT09LS10ZXFLR2wvV0NMaFRSWHJSRWoxbXBBPT0%3D--008f0e8c1379b61df0ee438b87a296b14574cf36&page_code=NTcwMTI3NTQ%3D&mode_id=1&time_zone=America%2FDetroit&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3APageviewsCreatedSummary&nonce=382124d3-74d9-41d5-967c-96c4e442595c&url=http%3A%2F%2Falexsmarketingmaster.com%2F HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: http://alexsmarketingmaster.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Wed, 30 Nov 2022 04:48:28 GMT
content-type: text/html
cf-ray: 7720f3700ee70b06-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: 53f8037fe5641c17909b97e88851dc31
x-runtime: 0.035313
set-cookie: __cf_bm=tmXdUKMCzwFOAE.GQzLj0dYJ1Ox2wDEhWBG9kVn3yCw-1669783708-0-AUGT+nKk/VLXNFnKCk4zMEnFffMPXJcRu1mbjb75IfMhGOiozdNn85hFtKZmmT7S9h3n5dhvWElLajRni22w7mi+QuGinB9vW5VIMMur3om8; path=/; expires=Wed, 30-Nov-22 05:18:28 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
assets.clickfunnels.com/images/closemodal.png
200 OK 672 B URL HTTP/2 assets.clickfunnels.com/images/closemodal.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 19754ed4d508cf576c80cf36e0db8c50
f459beac714e5be68aa75349fa806a5642af456a
5216f197f782f4bb872e02a677986af90a488015910f8d3864b796ad68dbd389
GET /images/closemodal.png HTTP/1.1
Host: assets.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alexsmarketingmaster.com/
Cookie: __cf_bm=BHqBzXnlP91gkzVplonCEEtMNLPvg8NltkvjN_AUiIA-1669783707-0-AV/Tt4sx/0usZEuBbRj3/O2cvSx1XP3n3XgUt08Z9Ahb7Xi1miX4GBlMCkNrnrS4yv2BE4QJDAIZxGowTuvqbrVOn/1ed7IUFRTGsIVDFRLW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:48:28 GMT
content-type: image/webp
content-length: 672
cf-ray: 7720f372af910b06-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 1166892
cache-control: public, max-age=2678400
content-disposition: inline; filename="closemodal.webp"
etag: "6359dae3-314"
expires: Sat, 31 Dec 2022 04:48:28 GMT
last-modified: Thu, 27 Oct 2022 01:12:03 GMT
strict-transport-security: max-age=0
vary: Accept, Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=788
server: cloudflare
X-Firefox-Spdy: h2
alexsmarketingmaster.com/cdn-cgi/rum?
200 OK 0 B URL HTTP/1.1 alexsmarketingmaster.com/cdn-cgi/rum?
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
POST /cdn-cgi/rum? HTTP/1.1
Host: alexsmarketingmaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
content-type: application/json
Content-Length: 6655
Origin: http://alexsmarketingmaster.com
Connection: keep-alive
Referer: http://alexsmarketingmaster.com/
Cookie: PHPSESSID=b91f7fb7bbb3a1a963874bd0161bb687; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTcwMTI3NTQ=:visited=true; cf:visitor_id=9c095a14-6561-4d48-90bf-05de34ccf973; addevent_track_cookie=927545f3-cd55-43e2-232a-6a878e9012bb
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:48:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
CF-RAY: 7720f3735853b51d-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
classic.clickfunnels.com/cf.js
200 OK 14 kB URL HTTP/2 classic.clickfunnels.com/cf.js
IP
Hash 68f128cce88bc1d0704789a099f50135
d41b013509d8b1e401b1ee47e39d782d65b87b6c
c60730f29553503a0393de3d20a8915eaf3a1ad5309fd954790e471f3bd5d146
GET /cf.js HTTP/1.1
Host: classic.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://alexsmarketingmaster.com/
Connection: keep-alive
Cookie: __cf_bm=BHqBzXnlP91gkzVplonCEEtMNLPvg8NltkvjN_AUiIA-1669783707-0-AV/Tt4sx/0usZEuBbRj3/O2cvSx1XP3n3XgUt08Z9Ahb7Xi1miX4GBlMCkNrnrS4yv2BE4QJDAIZxGowTuvqbrVOn/1ed7IUFRTGsIVDFRLW
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:48:28 GMT
content-type: application/x-javascript
cf-ray: 7720f3726f770b06-OSL
access-control-allow-origin: *
age: 3751
etag: W/"637bf173-476a"
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
js-agent.newrelic.com/nr-1216.min.js
200 OK 14 kB URL HTTP/2 js-agent.newrelic.com/nr-1216.min.js
IP
File type ASCII text, with very long lines (32022)
Hash b7c09cc097b2847f9edc784adba62dcb
5aa648623cf5e3b4b215fe5d068a7904c59f2925
6da450b6a3ba53bdab36f6529e987a245cdfca9a37b77790f06dfd8d5797bdaa
GET /nr-1216.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alexsmarketingmaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Vf9xsFZHH0UI6bmTnW+KeBzegICGOxvtMLIWtbljNKoJtdkUEk/MfmbYPFui+bgtiUf/4lC5dk8=
x-amz-request-id: 4AV5AVKCCR961CNG
last-modified: Thu, 14 Apr 2022 16:45:57 GMT
etag: "9f533d8cd24b2c5e3b4dc886ecbd43e8"
x-amz-version-id: mHHzJIqOizHibcYt0xqAszRr0gQRiNYy
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 30 Nov 2022 04:48:28 GMT
via: 1.1 varnish
x-served-by: cache-bma1629-BMA
x-cache: HIT
x-cache-hits: 222
x-timer: S1669783709.784483,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 14391
X-Firefox-Spdy: h2
bam.nr-data.net/1/NRJS-fc902efb332119fff33?a=367981416&v=1216.487a282&to=dFZWTENWVQ9QExdNRlJLSFlWXEpMRQBfXUYYSU1aXVBKC1AF&rst=3378&ck=1&ref=http://alexsmarketingmaster.com/&ap=378&be=1702&fe=3044&dc=2461&perf=%7B%22timing%22:%7B%22of%22:1669783704460,%22n%22:0,%22f%22:-5,%22dn%22:-5,%22dne%22:-3,%22c%22:-3,%22ce%22:-2,%22rq%22:98,%22rp%22:1679,%22rpe%22:1680,%22dl%22:1687,%22di%22:2446,%22ds%22:2461,%22de%22:2540,%22dc%22:3043,%22l%22:3043,%22le%22:3155%7D,%22navigation%22:%7B%7D%7D&fcp=2085&jsonp=NREUM.setToken
200 OK 77 B URL HTTP/1.1 bam.nr-data.net/1/NRJS-fc902efb332119fff33?a=367981416&v=1216.487a282&to=dFZWTENWVQ9QExdNRlJLSFlWXEpMRQBfXUYYSU1aXVBKC1AF&rst=3378&ck=1&ref=http://alexsmarketingmaster.com/&ap=378&be=1702&fe=3044&dc=2461&perf=%7B%22timing%22:%7B%22of%22:1669783704460,%22n%22:0,%22f%22:-5,%22dn%22:-5,%22dne%22:-3,%22c%22:-3,%22ce%22:-2,%22rq%22:98,%22rp%22:1679,%22rpe%22:1680,%22dl%22:1687,%22di%22:2446,%22ds%22:2461,%22de%22:2540,%22dc%22:3043,%22l%22:3043,%22le%22:3155%7D,%22navigation%22:%7B%7D%7D&fcp=2085&jsonp=NREUM.setToken
IP
File type ASCII text, with no line terminators
Hash f1442f5831dbbe0210da2d7a4180d6b8
2ade23c6c7a001c66f0c0a9a101ec152747b434e
c6acf9fb2ecc1b144c51bd0337bbf1c26db3df2f649ac2da5c56db20d93eb3ef
GET /1/NRJS-fc902efb332119fff33?a=367981416&v=1216.487a282&to=dFZWTENWVQ9QExdNRlJLSFlWXEpMRQBfXUYYSU1aXVBKC1AF&rst=3378&ck=1&ref=http://alexsmarketingmaster.com/&ap=378&be=1702&fe=3044&dc=2461&perf=%7B%22timing%22:%7B%22of%22:1669783704460,%22n%22:0,%22f%22:-5,%22dn%22:-5,%22dne%22:-3,%22c%22:-3,%22ce%22:-2,%22rq%22:98,%22rp%22:1679,%22rpe%22:1680,%22dl%22:1687,%22di%22:2446,%22ds%22:2461,%22de%22:2540,%22dc%22:3043,%22l%22:3043,%22le%22:3155%7D,%22navigation%22:%7B%7D%7D&fcp=2085&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alexsmarketingmaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:48:29 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 7720f374ebd8b4eb-OSL
Access-Control-Allow-Origin: *
Set-Cookie: JSESSIONID=3b0c84f8675b775a; Path=/; Domain=.nr-data.net; Secure; SameSite=None
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
alexsmarketingmaster.com/cdn-cgi/rum?
200 OK 0 B URL HTTP/1.1 alexsmarketingmaster.com/cdn-cgi/rum?
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
POST /cdn-cgi/rum? HTTP/1.1
Host: alexsmarketingmaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
Content-Length: 530
Origin: http://alexsmarketingmaster.com
Connection: keep-alive
Referer: http://alexsmarketingmaster.com/
Cookie: PHPSESSID=b91f7fb7bbb3a1a963874bd0161bb687; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTcwMTI3NTQ=:visited=true; cf:visitor_id=9c095a14-6561-4d48-90bf-05de34ccf973; addevent_track_cookie=927545f3-cd55-43e2-232a-6a878e9012bb; is_eu=false; 9cw0lyfy7e1cx1e3=true; 12572422_viewed_1=1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:48:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
CF-RAY: 7720f398f918b51d-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
use.fontawesome.com/releases/v5.9.0/css/all.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.9.0/css/all.css
IP
GET /releases/v5.9.0/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alexsmarketingmaster.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:48:27 GMT
content-type: text/css
x-amz-id-2: vC8KBN503iyWKZzHxfJc5rs99Ocw4DSTaifdaL1SsWTbuhhIHZc4Cm+BPlh6dJ7ueugjQrc5cWE=
x-amz-request-id: F0PHW7H6699FG8TW
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"dbf9d822cefe851ba6f66e1ad57e8987"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 315401
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yRnSh%2F7xcfQQ9OxOmlHys0XSf4ngSOgmihVF%2BBCAthnFcyrDBivwSRvqy8NPGItbdP36TWZxYPvuIZHgt9OTFvjJ9%2BcacHIXFm3krgyhIFdQcZZ36dOTi%2FhTD6hPQLsiREVjZCk0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7720f36b5e1b887f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
app.clickfunnels.com/assets/lander.css
200 OK 0 B URL HTTP/2 app.clickfunnels.com/assets/lander.css
IP
GET /assets/lander.css HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alexsmarketingmaster.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:48:27 GMT
content-type: text/css
cf-ray: 7720f36b4d7c0b06-OSL
access-control-allow-origin: *
age: 18
cache-control: public, max-age=1200
etag: W/"637bf173-6a514"
expires: Wed, 30 Nov 2022 05:08:27 GMT
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
set-cookie: __cf_bm=BHqBzXnlP91gkzVplonCEEtMNLPvg8NltkvjN_AUiIA-1669783707-0-AV/Tt4sx/0usZEuBbRj3/O2cvSx1XP3n3XgUt08Z9Ahb7Xi1miX4GBlMCkNrnrS4yv2BE4QJDAIZxGowTuvqbrVOn/1ed7IUFRTGsIVDFRLW; path=/; expires=Wed, 30-Nov-22 05:18:27 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
app.clickfunnels.com/v1/track?_unique=0.49554716148692746&_uniqueVisitorID=null&_type=WINDOW&_location=ttp%3A//alexsmarketingmaster.com/&_title=ClickFunnels%20Landing%20Page&_key=tp0a87kg&_page_key=9cw0lyfy7e1cx1e3&_fid=12572422&_fspos=1&_fvrs=1&_funnel_stat=1&_location=http://alexsmarketingmaster.com/&_referrer=
200 OK 0 B URL HTTP/2 app.clickfunnels.com/v1/track?_unique=0.49554716148692746&_uniqueVisitorID=null&_type=WINDOW&_location=ttp%3A//alexsmarketingmaster.com/&_title=ClickFunnels%20Landing%20Page&_key=tp0a87kg&_page_key=9cw0lyfy7e1cx1e3&_fid=12572422&_fspos=1&_fvrs=1&_funnel_stat=1&_location=http://alexsmarketingmaster.com/&_referrer=
IP
GET /v1/track?_unique=0.49554716148692746&_uniqueVisitorID=null&_type=WINDOW&_location=ttp%3A//alexsmarketingmaster.com/&_title=ClickFunnels%20Landing%20Page&_key=tp0a87kg&_page_key=9cw0lyfy7e1cx1e3&_fid=12572422&_fspos=1&_fvrs=1&_funnel_stat=1&_location=http://alexsmarketingmaster.com/&_referrer= HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://alexsmarketingmaster.com
Connection: keep-alive
Referer: http://alexsmarketingmaster.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:48:28 GMT
content-type: text/javascript; charset=utf-8
cf-ray: 7720f372af920b06-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
status: 200 OK
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: 9ba16ab16efb9ffc5a77ded69432e20f
x-runtime: 0.021482
set-cookie: __cf_bm=2wgHb80fEt3l0xoq2CJDpbkpDS_YVsAc.yDTs5ytEhg-1669783708-0-ARqRizfd/98ZG5fwhBKZkrl01hPfmAH6uij47wVDc8twE28vWc68UVOTvVbTfPvgyT3Pq1EOH573yLnlMhgc98vpQiC43T9rBq99V0UiXxd4; path=/; expires=Wed, 30-Nov-22 05:18:28 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700
IP
GET /css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alexsmarketingmaster.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 30 Nov 2022 04:48:27 GMT
date: Wed, 30 Nov 2022 04:48:27 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.clickfunnels.com/cf.js
301 Moved Permanently 0 B URL HTTP/2 www.clickfunnels.com/cf.js
IP
GET /cf.js HTTP/1.1
Host: www.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://alexsmarketingmaster.com/
Connection: keep-alive
Cookie: __cf_bm=BHqBzXnlP91gkzVplonCEEtMNLPvg8NltkvjN_AUiIA-1669783707-0-AV/Tt4sx/0usZEuBbRj3/O2cvSx1XP3n3XgUt08Z9Ahb7Xi1miX4GBlMCkNrnrS4yv2BE4QJDAIZxGowTuvqbrVOn/1ed7IUFRTGsIVDFRLW
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Wed, 30 Nov 2022 04:48:28 GMT
location: https://classic.clickfunnels.com/cf.js
cache-control: max-age=3600
expires: Wed, 30 Nov 2022 05:48:28 GMT
set-cookie: __cf_bm=.Bg1SbIQ1WoT9qHDApitJoDHWKJeEQH_WxscQ.MH_HM-1669783708-0-AbkxF8POEbq8KLJPqg3hPt7tMC2y8C3c8+zvuUAbRf933jx817fEqm0PapUXAvZFJIrDbJKIpyqRn+IDY20UeHY=; path=/; expires=Wed, 30-Nov-22 05:18:28 GMT; domain=.www.clickfunnels.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 7720f3721b0f0b31-OSL
X-Firefox-Spdy: h2
app.clickfunnels.com/assets/lander.js
200 OK 0 B URL HTTP/2 app.clickfunnels.com/assets/lander.js
IP
GET /assets/lander.js HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alexsmarketingmaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:48:27 GMT
content-type: application/x-javascript
cf-ray: 7720f36b3d790b06-OSL
access-control-allow-origin: *
age: 434
cache-control: public, max-age=1200
etag: W/"637bf1b5-2391a3"
expires: Wed, 30 Nov 2022 05:08:27 GMT
last-modified: Mon, 21 Nov 2022 21:46:29 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
set-cookie: __cf_bm=ye8Vc0q9p21RIBe9b2hYFa51XeagoVEN43Ex7oKMU_8-1669783707-0-AVpvE2o7rsFMF5OMOcI6b/lzyaAc+Bq3ptzDOMZMfCyHnROZC/A9Bbg4bwJ4x4w6trdIGJZ4bIC6ChEQGgM553KWXEna6qFIjm7PhQjMsxFG; path=/; expires=Wed, 30-Nov-22 05:18:27 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
app.clickfunnels.com/cf.js
301 Moved Permanently 0 B URL HTTP/2 app.clickfunnels.com/cf.js
IP
GET /cf.js HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alexsmarketingmaster.com/
Cookie: __cf_bm=BHqBzXnlP91gkzVplonCEEtMNLPvg8NltkvjN_AUiIA-1669783707-0-AV/Tt4sx/0usZEuBbRj3/O2cvSx1XP3n3XgUt08Z9Ahb7Xi1miX4GBlMCkNrnrS4yv2BE4QJDAIZxGowTuvqbrVOn/1ed7IUFRTGsIVDFRLW
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Wed, 30 Nov 2022 04:48:28 GMT
content-type: text/html
location: https://www.clickfunnels.com/cf.js
cf-ray: 7720f36ede770b06-OSL
access-control-allow-origin: *
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: EXPIRED
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
X-Firefox-Spdy: h2
www2.clickfunnels.com/favicon.ico
200 OK 0 B URL HTTP/2 www2.clickfunnels.com/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: www2.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alexsmarketingmaster.com/
Cookie: __cf_bm=BHqBzXnlP91gkzVplonCEEtMNLPvg8NltkvjN_AUiIA-1669783707-0-AV/Tt4sx/0usZEuBbRj3/O2cvSx1XP3n3XgUt08Z9Ahb7Xi1miX4GBlMCkNrnrS4yv2BE4QJDAIZxGowTuvqbrVOn/1ed7IUFRTGsIVDFRLW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:48:29 GMT
content-type: image/x-icon
cf-ray: 7720f373efec0b06-OSL
access-control-allow-origin: *
etag: W/"637bf173-3aee"
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: REVALIDATED
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
app.clickfunnels.com/userevents?funnel_id=T0pzMzRGVm8yU2hjb09BMDBWRFhRZz09LS1VM2VDM0oxUjczMmhNQjFTVmo5RlV3PT0%3D--6abaf842f2bc6d9f8589f0ead6f4db25734510f0&page_id=Q1lZbHdRMUhiekM2Ly9TaXU5MDVDdz09LS1mNlU0Sm80NlUzY3p3VTBhTzBJaWFRPT0%3D--ecf96a4bc79a2680b15f97737e43c2d9321f4eed&funnel_step_id=VUhISWpXdkVDWml6MmdyNGU3dkx6Zz09LS1DTmpsekt3MWdkZVUydkR0bFM4RzlRPT0%3D--5ec7fd5b4cd89b6bf8101cb23a2d7cacb472db56&user_id=NXJpZWdGdlFmWUJPcnFZaENoSU5QUT09LS1acUlhMEhVam0rNGhacW82MjVaUUJ3PT0%3D--affbb81e267d6e0efc5fa5b68ccb8534ee3a2dbe&account_id=QWs1LzZRM2R1YmdPSExFK0FQUWhGUT09LS10ZXFLR2wvV0NMaFRSWHJSRWoxbXBBPT0%3D--008f0e8c1379b61df0ee438b87a296b14574cf36&page_code=NTcwMTI3NTQ%3D&mode_id=1&time_zone=America%2FDetroit&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniqueVisitorsCreatedSummary&nonce=7dfd9470-812a-418a-aa7b-828248cdb597&url=http%3A%2F%2Falexsmarketingmaster.com%2F
202 Accepted 0 B URL HTTP/2 app.clickfunnels.com/userevents?funnel_id=T0pzMzRGVm8yU2hjb09BMDBWRFhRZz09LS1VM2VDM0oxUjczMmhNQjFTVmo5RlV3PT0%3D--6abaf842f2bc6d9f8589f0ead6f4db25734510f0&page_id=Q1lZbHdRMUhiekM2Ly9TaXU5MDVDdz09LS1mNlU0Sm80NlUzY3p3VTBhTzBJaWFRPT0%3D--ecf96a4bc79a2680b15f97737e43c2d9321f4eed&funnel_step_id=VUhISWpXdkVDWml6MmdyNGU3dkx6Zz09LS1DTmpsekt3MWdkZVUydkR0bFM4RzlRPT0%3D--5ec7fd5b4cd89b6bf8101cb23a2d7cacb472db56&user_id=NXJpZWdGdlFmWUJPcnFZaENoSU5QUT09LS1acUlhMEhVam0rNGhacW82MjVaUUJ3PT0%3D--affbb81e267d6e0efc5fa5b68ccb8534ee3a2dbe&account_id=QWs1LzZRM2R1YmdPSExFK0FQUWhGUT09LS10ZXFLR2wvV0NMaFRSWHJSRWoxbXBBPT0%3D--008f0e8c1379b61df0ee438b87a296b14574cf36&page_code=NTcwMTI3NTQ%3D&mode_id=1&time_zone=America%2FDetroit&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniqueVisitorsCreatedSummary&nonce=7dfd9470-812a-418a-aa7b-828248cdb597&url=http%3A%2F%2Falexsmarketingmaster.com%2F
IP
GET /userevents?funnel_id=T0pzMzRGVm8yU2hjb09BMDBWRFhRZz09LS1VM2VDM0oxUjczMmhNQjFTVmo5RlV3PT0%3D--6abaf842f2bc6d9f8589f0ead6f4db25734510f0&page_id=Q1lZbHdRMUhiekM2Ly9TaXU5MDVDdz09LS1mNlU0Sm80NlUzY3p3VTBhTzBJaWFRPT0%3D--ecf96a4bc79a2680b15f97737e43c2d9321f4eed&funnel_step_id=VUhISWpXdkVDWml6MmdyNGU3dkx6Zz09LS1DTmpsekt3MWdkZVUydkR0bFM4RzlRPT0%3D--5ec7fd5b4cd89b6bf8101cb23a2d7cacb472db56&user_id=NXJpZWdGdlFmWUJPcnFZaENoSU5QUT09LS1acUlhMEhVam0rNGhacW82MjVaUUJ3PT0%3D--affbb81e267d6e0efc5fa5b68ccb8534ee3a2dbe&account_id=QWs1LzZRM2R1YmdPSExFK0FQUWhGUT09LS10ZXFLR2wvV0NMaFRSWHJSRWoxbXBBPT0%3D--008f0e8c1379b61df0ee438b87a296b14574cf36&page_code=NTcwMTI3NTQ%3D&mode_id=1&time_zone=America%2FDetroit&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniqueVisitorsCreatedSummary&nonce=7dfd9470-812a-418a-aa7b-828248cdb597&url=http%3A%2F%2Falexsmarketingmaster.com%2F HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: http://alexsmarketingmaster.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Wed, 30 Nov 2022 04:48:28 GMT
content-type: text/html
cf-ray: 7720f3701ee90b06-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: 179b765642fc0135f8c54b5d045f5f89
x-runtime: 0.035696
set-cookie: __cf_bm=2tJs.HPxgurq8xwfycUOidMWb7b88IWQ_Y5TqEJaa6Q-1669783708-0-Ad1eVOIPhn3W49r8RFX9zYjkrdcFIWZiH1X7CAVkiEL9QiQgSs1lBy9zhpmHOJUvKeL0eHlJvWnLBLHOOlHY6vxL5qO9SRiHtNMMeV+JJmXI; path=/; expires=Wed, 30-Nov-22 05:18:28 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
app.clickfunnels.com/mailcheck.min.js
200 OK 0 B URL HTTP/2 app.clickfunnels.com/mailcheck.min.js
IP
GET /mailcheck.min.js HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alexsmarketingmaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:48:27 GMT
content-type: application/x-javascript
cf-ray: 7720f36b1d690b06-OSL
access-control-allow-origin: *
age: 6811
etag: W/"637bf173-a8d"
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
set-cookie: __cf_bm=RaVdEOEQb7zHaKBxqBivVVVTW0z99AflFZvNxrkD2m0-1669783707-0-AVx5eUCe7pRb7Bad8meIoQXGUITz+fcKfMICXetBkVwjOULtQP5W61+YH2IZfG58357xgM0Wv2KXDFZoikBeMvp9ZzYGGEacrFmEE6SxyBib; path=/; expires=Wed, 30-Nov-22 05:18:27 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.9.0/css/v4-shims.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.9.0/css/v4-shims.css
IP
GET /releases/v5.9.0/css/v4-shims.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alexsmarketingmaster.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:48:27 GMT
content-type: text/css
x-amz-id-2: HpuDfuJOnoRBIn1oGWh6kpnFISyPAhBcUuSh2sgaSOixf+diILYpFUsoF1uDkiR93wgKGECAn7k=
x-amz-request-id: F0PPGVAN5CXAHSGM
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"e140a7d32f343530f016095df3cc2ae4"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 315400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=st3kHNNhrBcIwdob1T8qC84Dn3LaZmm95qOxdrc7jGpJ0qgPbCqVj0SGl21HtFJYy%2BCvKSxy2pTVDRHbHvt9Mhv63Zc8qppeRVMsIAVBUMDtMD%2FP1q2%2FjqUNiYvW%2FWiMGdjs%2FJZ4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7720f36b6e26887f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
app.clickfunnels.com/userevents?funnel_id=T0pzMzRGVm8yU2hjb09BMDBWRFhRZz09LS1VM2VDM0oxUjczMmhNQjFTVmo5RlV3PT0%3D--6abaf842f2bc6d9f8589f0ead6f4db25734510f0&page_id=Q1lZbHdRMUhiekM2Ly9TaXU5MDVDdz09LS1mNlU0Sm80NlUzY3p3VTBhTzBJaWFRPT0%3D--ecf96a4bc79a2680b15f97737e43c2d9321f4eed&funnel_step_id=VUhISWpXdkVDWml6MmdyNGU3dkx6Zz09LS1DTmpsekt3MWdkZVUydkR0bFM4RzlRPT0%3D--5ec7fd5b4cd89b6bf8101cb23a2d7cacb472db56&user_id=NXJpZWdGdlFmWUJPcnFZaENoSU5QUT09LS1acUlhMEhVam0rNGhacW82MjVaUUJ3PT0%3D--affbb81e267d6e0efc5fa5b68ccb8534ee3a2dbe&account_id=QWs1LzZRM2R1YmdPSExFK0FQUWhGUT09LS10ZXFLR2wvV0NMaFRSWHJSRWoxbXBBPT0%3D--008f0e8c1379b61df0ee438b87a296b14574cf36&page_code=NTcwMTI3NTQ%3D&mode_id=1&time_zone=America%2FDetroit&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniquePageviewsCreatedSummary&nonce=2a67a435-24e2-4bc0-a21d-ce2b2d2ef9ad&url=http%3A%2F%2Falexsmarketingmaster.com%2F
202 Accepted 0 B URL HTTP/2 app.clickfunnels.com/userevents?funnel_id=T0pzMzRGVm8yU2hjb09BMDBWRFhRZz09LS1VM2VDM0oxUjczMmhNQjFTVmo5RlV3PT0%3D--6abaf842f2bc6d9f8589f0ead6f4db25734510f0&page_id=Q1lZbHdRMUhiekM2Ly9TaXU5MDVDdz09LS1mNlU0Sm80NlUzY3p3VTBhTzBJaWFRPT0%3D--ecf96a4bc79a2680b15f97737e43c2d9321f4eed&funnel_step_id=VUhISWpXdkVDWml6MmdyNGU3dkx6Zz09LS1DTmpsekt3MWdkZVUydkR0bFM4RzlRPT0%3D--5ec7fd5b4cd89b6bf8101cb23a2d7cacb472db56&user_id=NXJpZWdGdlFmWUJPcnFZaENoSU5QUT09LS1acUlhMEhVam0rNGhacW82MjVaUUJ3PT0%3D--affbb81e267d6e0efc5fa5b68ccb8534ee3a2dbe&account_id=QWs1LzZRM2R1YmdPSExFK0FQUWhGUT09LS10ZXFLR2wvV0NMaFRSWHJSRWoxbXBBPT0%3D--008f0e8c1379b61df0ee438b87a296b14574cf36&page_code=NTcwMTI3NTQ%3D&mode_id=1&time_zone=America%2FDetroit&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniquePageviewsCreatedSummary&nonce=2a67a435-24e2-4bc0-a21d-ce2b2d2ef9ad&url=http%3A%2F%2Falexsmarketingmaster.com%2F
IP
GET /userevents?funnel_id=T0pzMzRGVm8yU2hjb09BMDBWRFhRZz09LS1VM2VDM0oxUjczMmhNQjFTVmo5RlV3PT0%3D--6abaf842f2bc6d9f8589f0ead6f4db25734510f0&page_id=Q1lZbHdRMUhiekM2Ly9TaXU5MDVDdz09LS1mNlU0Sm80NlUzY3p3VTBhTzBJaWFRPT0%3D--ecf96a4bc79a2680b15f97737e43c2d9321f4eed&funnel_step_id=VUhISWpXdkVDWml6MmdyNGU3dkx6Zz09LS1DTmpsekt3MWdkZVUydkR0bFM4RzlRPT0%3D--5ec7fd5b4cd89b6bf8101cb23a2d7cacb472db56&user_id=NXJpZWdGdlFmWUJPcnFZaENoSU5QUT09LS1acUlhMEhVam0rNGhacW82MjVaUUJ3PT0%3D--affbb81e267d6e0efc5fa5b68ccb8534ee3a2dbe&account_id=QWs1LzZRM2R1YmdPSExFK0FQUWhGUT09LS10ZXFLR2wvV0NMaFRSWHJSRWoxbXBBPT0%3D--008f0e8c1379b61df0ee438b87a296b14574cf36&page_code=NTcwMTI3NTQ%3D&mode_id=1&time_zone=America%2FDetroit&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents%3A%3AUniquePageviewsCreatedSummary&nonce=2a67a435-24e2-4bc0-a21d-ce2b2d2ef9ad&url=http%3A%2F%2Falexsmarketingmaster.com%2F HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: http://alexsmarketingmaster.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Wed, 30 Nov 2022 04:48:28 GMT
content-type: text/html
cf-ray: 7720f3701eeb0b06-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: e65ce3b7eccb1a5f4c4b472ed3144a9f
x-runtime: 0.031767
set-cookie: __cf_bm=XcOQQ6agYaYTb9i93lc2HwDgA2RpNY.fZ_voZt.AaEg-1669783708-0-AWP1lYSgo+fwQeXZqQhFXt6udpoUpmEY52iHZj/cc7t+Ym964rPG+Wr67TOdMuOJlnXsBjV++M3vKOnuXGiuVII3crmZpmW52ooBQB0lSG3g; path=/; expires=Wed, 30-Nov-22 05:18:28 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
104.21.78.125
104.16.12.194
151.101.2.137
95.101.11.115
93.184.220.29