Overview

URL funnelwebinar.biz/
IP104.16.12.194
ASNCLOUDFLARENET
Location
Report completed2022-09-11 05:20:06 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-11 2 funnelwebinar.biz/ Phishing
2022-09-11 2 funnelwebinar.biz/optin Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

URL ocsp.pki.goog/gts1c3
IP  142.250.74.3
Magic gzip compressed data, max compression\012- data
Size 1903
MD5 409ddd9a795ff387503afbda22de4ee6
SHA1 ff38f3196476f603181daebea800b6d0ed4f59ae
SHA256 70ac2374a52f95f01459deb9ebaace91185f82d52ec1caf44bb80af6130df33d
Analyzer Analysed Verdict Comment
VirusTotal 0/0
URL csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV (...)
IP  104.18.20.157
Magic gzip compressed data, max compression\012- data
Size 20006
MD5 56f5d7f608e25d64207135f045f988cb
SHA1 901eb59372ae330ae85e1384da93479b21ae1082
SHA256 1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
Analyzer Analysed Verdict Comment
VirusTotal 2022-06-17 23:01:02 0/56
URL csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV (...)
IP  104.18.20.157
Magic gzip compressed data, max compression\012- data
Size 15687
MD5 4738d969770682feba80f04bf171d65b
SHA1 be0e0ceb91bf5ed0c64b0f3f2cc2c99c6d4cd6b7
SHA256 1daca97cf9e8078299f94c50346e45fead45bf908ca97ded912f26986c1c4e9a
Analyzer Analysed Verdict Comment
VirusTotal 0/0


Passive DNS (57)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS ocsp.sca1b.amazontrust.com (1) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 143.204.42.156
mnemonic passive DNS i.vimeocdn.com (5) 3126 2014-03-27 22:24:57 UTC 2022-09-10 22:26:15 UTC 151.101.86.109
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-11 04:40:13 UTC 143.204.55.49
mnemonic passive DNS r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2022-09-11 04:30:20 UTC 95.101.11.115
mnemonic passive DNS 22vod-adaptive.akamaized.net (7) 133834 2019-09-12 20:30:15 UTC 2022-09-11 01:54:10 UTC 104.123.68.170
mnemonic passive DNS vars.hotjar.com (1) 1014 2020-11-05 10:13:14 UTC 2022-09-10 20:31:08 UTC 143.204.55.105
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-11 00:34:13 UTC 143.204.55.115
mnemonic passive DNS cdnjs.cloudflare.com (8) 235 2020-10-20 10:17:36 UTC 2022-09-10 05:28:10 UTC 104.17.25.14
mnemonic passive DNS csp-reporting.cloudflare.com (94) 8787 2022-01-10 16:52:27 UTC 2022-09-10 17:12:57 UTC 104.18.20.157
mnemonic passive DNS fonts.gstatic.com (4) 0 2014-08-29 13:43:22 UTC 2022-09-10 04:46:45 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS images.clickfunnel.com (1) 525844 2017-12-04 15:04:03 UTC 2022-09-10 09:24:52 UTC 172.67.72.165
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-11 04:55:37 UTC 44.237.163.41
mnemonic passive DNS cdn.segment.com (4) 1618 2016-02-25 21:39:56 UTC 2022-09-10 04:48:15 UTC 143.204.48.96
mnemonic passive DNS ocsp.starfieldtech.com (2) 6616 2012-06-22 18:08:50 UTC 2022-09-10 06:21:26 UTC 192.124.249.23
mnemonic passive DNS fresnel.vimeocdn.com (3) 3128 2014-12-13 09:04:00 UTC 2022-09-10 05:32:53 UTC 34.120.202.204
mnemonic passive DNS gum.criteo.com (2) 381 2015-01-22 10:58:57 UTC 2022-09-11 04:55:08 UTC 178.250.0.157
mnemonic passive DNS analytics.tiktok.com (3) 1182 2020-02-29 13:09:05 UTC 2022-09-10 06:37:27 UTC 2.22.31.216
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-10 04:30:10 UTC 34.120.237.76
mnemonic passive DNS dna8twue3dlxq.cloudfront.net (1) 0 2022-04-04 07:47:34 UTC 2022-09-11 02:45:44 UTC 54.230.111.96 Unknown ranking
mnemonic passive DNS bat.bing.com (1) 387 2014-04-08 09:23:16 UTC 2022-09-10 05:43:31 UTC 204.79.197.200
mnemonic passive DNS f.vimeocdn.com (4) 3234 2014-04-09 18:24:34 UTC 2022-09-10 06:32:40 UTC 151.101.86.109
mnemonic passive DNS statics.myclickfunnels.com (3) 408156 2022-03-17 11:58:47 UTC 2022-09-11 01:54:08 UTC 104.18.18.229
mnemonic passive DNS googleads.g.doubleclick.net (1) 42 2021-02-20 15:43:32 UTC 2022-09-10 21:25:58 UTC 142.250.74.162
mnemonic passive DNS popping-torch-9334.firebaseio.com (1) 759903 2016-03-09 11:09:24 UTC 2022-09-10 09:24:54 UTC 34.120.160.131
mnemonic passive DNS pixel.quantserve.com (1) 417 2018-04-06 01:24:19 UTC 2022-09-10 05:14:28 UTC 91.228.74.168
mnemonic passive DNS vc.hotjar.io (1) 2334 2019-04-16 10:33:25 UTC 2022-09-10 05:03:38 UTC 54.230.111.8
mnemonic passive DNS wsmcdn.audioeye.com (1) 28232 2020-03-27 11:30:12 UTC 2022-09-11 03:43:11 UTC 104.18.25.76
mnemonic passive DNS images.clickfunnels.com (4) 95357 2014-10-08 20:00:42 UTC 2022-09-11 02:02:53 UTC 104.16.16.194
mnemonic passive DNS ocsp.globalsign.com (1) 2075 2012-05-25 06:20:55 UTC 2022-09-10 05:14:59 UTC 104.18.21.226
mnemonic passive DNS static.cloudflareinsights.com (1) 1294 2019-09-24 14:34:56 UTC 2022-09-10 16:43:49 UTC 104.18.47.230
mnemonic passive DNS rules.quantcount.com (1) 877 2019-05-23 13:36:07 UTC 2022-09-10 07:42:30 UTC 54.230.111.4
mnemonic passive DNS s.pinimg.com (1) 732 2017-01-13 22:40:08 UTC 2022-09-10 17:13:33 UTC 2.18.172.195
mnemonic passive DNS gem.gbc.criteo.com (1) 6039 2019-02-06 06:21:41 UTC 2022-09-10 16:11:01 UTC 178.250.6.232
mnemonic passive DNS ocsp.digicert.com (6) 86 2012-05-21 07:02:23 UTC 2022-09-10 23:54:45 UTC 93.184.220.29
mnemonic passive DNS stats.g.doubleclick.net (1) 96 2013-06-02 22:47:44 UTC 2022-09-10 04:47:01 UTC 142.251.1.154
mnemonic passive DNS px.ads.linkedin.com (1) 522 2017-08-08 16:28:50 UTC 2022-09-10 14:40:32 UTC 13.107.42.14
mnemonic passive DNS 44vod-adaptive.akamaized.net (2) 112211 2019-10-02 08:08:58 UTC 2022-09-10 09:24:54 UTC 104.123.68.185
mnemonic passive DNS dnacdn.net (2) 3760 2019-09-02 15:07:45 UTC 2022-09-11 04:59:07 UTC 178.250.0.157
mnemonic passive DNS ocsp.pki.goog (13) 175 2017-06-14 07:23:31 UTC 2022-09-10 04:46:29 UTC 142.250.74.3
mnemonic passive DNS cmp.osano.com (1) 8763 2019-11-22 13:02:42 UTC 2022-09-11 04:40:16 UTC 143.204.55.21
mnemonic passive DNS use.fontawesome.com (2) 942 2017-01-30 04:43:25 UTC 2022-09-10 05:14:33 UTC 104.21.63.54
mnemonic passive DNS ct.pinterest.com (1) 852 2015-03-12 08:12:48 UTC 2022-09-10 06:33:29 UTC 2.18.172.195
mnemonic passive DNS cdn.cfptaddons.com (2) 237703 2020-10-09 14:11:19 UTC 2022-09-10 14:30:55 UTC 151.101.86.133
mnemonic passive DNS wsv3cdn.audioeye.com (2) 3722 2019-09-06 08:09:56 UTC 2022-09-11 03:43:11 UTC 104.18.24.76
mnemonic passive DNS cdn.jsdelivr.net (1) 439 2012-09-30 00:15:09 UTC 2022-09-10 04:49:17 UTC 151.101.85.229
mnemonic passive DNS player.vimeo.com (5) 1858 2013-09-26 03:16:08 UTC 2022-09-10 04:47:31 UTC 162.159.128.61
mnemonic passive DNS pxl.qccerttest.com (1) 0 2022-08-19 21:14:47 UTC 2022-09-10 22:57:41 UTC 143.204.55.93 Unknown ranking
mnemonic passive DNS app.clickfunnels.com (1) 34727 2015-03-12 08:40:23 UTC 2022-09-10 19:06:38 UTC 104.16.16.194
mnemonic passive DNS funnelwebinar.biz (2) 0 2020-07-15 00:42:35 UTC 2022-09-09 16:13:26 UTC 104.16.15.194 Unknown ranking
mnemonic passive DNS widget.wickedreports.com (1) 35709 2018-07-31 06:06:07 UTC 2022-09-11 01:54:10 UTC 54.230.111.69
mnemonic passive DNS script.hotjar.com (1) 887 2020-11-05 16:23:46 UTC 2022-09-11 04:57:02 UTC 143.204.55.68
mnemonic passive DNS ag.gbc.criteo.com (1) 5925 2018-12-17 13:17:41 UTC 2022-09-10 13:44:32 UTC 185.235.84.137
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-10 04:48:42 UTC 34.117.237.239
mnemonic passive DNS funnelwebinar.biz (2) 0 2020-07-15 00:42:35 UTC 2022-09-09 16:13:26 UTC 104.16.12.194 Unknown ranking
mnemonic passive DNS s3content.s3.amazonaws.com (1) 480129 2012-12-30 04:55:59 UTC 2022-09-10 09:24:52 UTC 54.231.114.211
mnemonic passive DNS www.clickfunnels.com (5) 51002 2014-10-08 20:01:35 UTC 2022-09-11 01:54:08 UTC 104.16.16.194
mnemonic passive DNS cdn.firebase.com (1) 61404 2012-12-21 18:09:50 UTC 2022-09-10 09:24:52 UTC 151.101.1.195


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 104.16.12.194

Date UQ / IDS / BL URL IP
2022-11-29 21:55:54 +0000
0 - 0 - 1 internettenpara.biz/ 104.16.12.194
2022-11-23 13:17:41 +0000
0 - 0 - 2 eco-innovation.info/primes-chauffage?utm_sour (...) 104.16.12.194
2022-11-22 00:50:51 +0000
0 - 0 - 5 www.safierussellcpa.com/fofg/?olJ82r7=/WYyZ8X (...) 104.16.12.194
2022-11-05 09:45:43 +0000
0 - 0 - 4 www.safierussellcpa.com/fofg/?8pqld=/WYyZ8XHr (...) 104.16.12.194
2022-11-01 02:33:28 +0000
0 - 0 - 1 fortmyerscoolsculpting.com/ 104.16.12.194

Last 5 reports on ASN: CLOUDFLARENET

Date UQ / IDS / BL URL IP
2022-12-07 00:22:33 +0000
0 - 0 - 1 marketviinted.2333333111.xyz/8adl2eih/switch- (...) 188.114.96.1
2022-12-07 00:22:11 +0000
0 - 0 - 2 delivery-vinteed.27777777845.xyz/8adl2eih/swi (...) 104.21.73.177
2022-12-07 00:21:52 +0000
0 - 0 - 2 shooping-infovjnted.1333333111.xyz/8adl2eih/s (...) 188.114.96.1
2022-12-07 00:20:17 +0000
0 - 0 - 1 crackeadoprogramas.com/ativador-office-2019 172.66.41.38
2022-12-07 00:16:47 +0000
0 - 0 - 7 tusachxinhxinh1.com/ 104.21.45.177

Last 1 reports on domain: funnelwebinar.biz

Date UQ / IDS / BL URL IP
2022-09-11 05:20:06 +0000
0 - 0 - 2 funnelwebinar.biz/ 104.16.12.194

Last 5 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-10-23 19:43:27 +0000
0 - 0 - 1 prometheusrobot.com/ 104.16.13.194
2022-10-23 18:22:24 +0000
0 - 0 - 1 releadengine.com/ 104.16.14.194
2022-10-23 16:53:28 +0000
0 - 0 - 1 sayikropsterapi.com/ 104.16.13.194
2022-10-23 02:49:27 +0000
0 - 0 - 1 jwteam.net/ 104.16.16.194
2022-10-22 23:48:24 +0000
0 - 0 - 1 pelvichealthhub.click/ 104.16.13.194


JavaScript

Executed Scripts (95)


Executed Evals (5)

#1 JavaScript::Eval (size: 77, repeated: 1) - SHA256: caa2ab907b4a61c5029ae3060485785164a8e9d8229883e94a733da6ba54d969

                                        (function() {
    var a = document.getElementByName("email").value;
    if (a) return a
})();
                                    

#2 JavaScript::Eval (size: 63, repeated: 1) - SHA256: 28ba4481533721710b0c78f3e273481791279590f1cd9253248a3b7c936c8d46

                                        (_vwo_s().f_n_b(_vwo_s().gC('subscription_package_plan_name')))
                                    

#3 JavaScript::Eval (size: 61, repeated: 1) - SHA256: 24444e02c924076d6fe39a97d460c05be995e9d7e68814c0d33b5026fd524a96

                                        (_vwo_s().f_b(_vwo_s().gC('subscription_package_plan_name')))
                                    

#4 JavaScript::Eval (size: 158, repeated: 1) - SHA256: aca05ffb49ee720d7fe9a00189078febd4776d745854664c1975207c62005387

                                        (function() {
    try {
        return google_tag_manager["GTM-NNWVTGK"].macro(2).replace(/\/.*-app/, "//app")
    } catch (a) {
        return google_tag_manager["GTM-NNWVTGK"].macro(3)
    }
})();
                                    

#5 JavaScript::Eval (size: 158, repeated: 1) - SHA256: f723a4ed2f15538a005e58abf36a547b023c5723d2861b91cd2bfccd45906697

                                        (function() {
    try {
        return google_tag_manager["GTM-NNWVTGK"].macro(4).replace(/\/.*-app/, "//app")
    } catch (a) {
        return google_tag_manager["GTM-NNWVTGK"].macro(5)
    }
})();
                                    

Executed Writes (0)



HTTP Transactions (227)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 11 Sep 2022 05:07:18 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: lZCXY-Tpc1a2wDaK_MBkQNQHelqeTzdC830-qvfcSKOdbrcgewc4eg==
Age: 756


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    91dd975a7b17b2922dd23c0e49314e40
Sha1:   57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D16DE6CC9EB0E1297F53DC1137BB764BF5C21A7727BE32AD05AFEBD1FE9501ED"
Last-Modified: Sat, 10 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20453
Expires: Sun, 11 Sep 2022 11:00:47 GMT
Date: Sun, 11 Sep 2022 05:19:54 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.49
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 10 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: E4c8w_ShaAkscEpK4PcN2I3aHLn8nkbgCJXqXXATEOanUME2Ovx1dQ==
age: 79362
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    742edb4038f38bc533514982f3d2e861
Sha1:   cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
Sha256: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
                                        
                                            GET / HTTP/1.1 
Host: funnelwebinar.biz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         104.16.15.194
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Date: Sun, 11 Sep 2022 05:19:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://funnelwebinar.biz/optin
CF-Ray: 748df37be820b509-OSL
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store
Vary: Accept-Encoding
CF-Cache-Status: BYPASS
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
Access-Control-Request-Method: *
Pragma: no-cache
Status: 302 Found
X-Frame-Options: ALLOWALL
X-Powered-By: Phusion Passenger Enterprise 6.0.7
X-Rack-Cache: miss
X-Request-Id: 7db78fb76939854fc9b5e711ecbbc84d
X-Runtime: 0.173999
Set-Cookie: __cf_bm=Xe6X1ZwKmeidRwgFeqKjlcvGVQqz_TQUmPomFkBRKAs-1662873594-0-ARTwCnSTZz8EaIIfFygH079EQSR9pcAgs0Ghd17K585meMCumAbyfrfK4LSOYE1i6COnb3AlJQ81p3/8tSEZbPbt9GdNpyKFDKgTTa+ogVxd; path=/; expires=Sun, 11-Sep-22 05:49:54 GMT; domain=.funnelwebinar.biz; HttpOnly; SameSite=None
Server: cloudflare
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (462)
Size:   477
Md5:    d2196716e6cc72a6e797391c877f0935
Sha1:   7e5e51d071a6c602f199c15841c376fe1560eb9f
Sha256: cdc9615ec21cddb563bbb7f5f51fc0f89052c39f054ada6150286e694847b5fc

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 11 Sep 2022 05:19:54 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 11 Sep 2022 04:56:07 GMT
Expires: Sun, 11 Sep 2022 05:04:20 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ciu5thAUTcxjzOQY8nNTmaNpKGgYY5NENwtMgHlzJYgqod6_i2GGbQ==
Age: 1427


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4972
Cache-Control: 'max-age=158059'
Date: Sun, 11 Sep 2022 05:19:55 GMT
Last-Modified: Sun, 11 Sep 2022 03:57:03 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: sm4ZhUHrKtFLs+AVnOdCmg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         44.237.163.41
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: bkDsrgdDIu1K4P/4+G1hs5OMvzk=

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 518
Cache-Control: 'max-age=158059'
Date: Sun, 11 Sep 2022 05:19:56 GMT
Last-Modified: Sun, 11 Sep 2022 05:11:18 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.clickfunnels.com
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         104.17.25.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sun, 11 Sep 2022 05:19:56 GMT
content-length: 27958
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 8317300
expires: Fri, 01 Sep 2023 05:19:56 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zrj3xZVaVqb4wOuZHqdqYn%2B4oiHOyV%2BYj8CRrEgS5KZfzTQ9YcwloRNuZpHB3yTxqu1WzEc1p%2Fp82SmawMFN0A7WBEbt7Z2dhIgFriFRQZe1SiP%2BVeI6KcwTD%2FSD5HxrXUBsnETx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 748df38abda51c0e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   27958
Md5:    4b5f47439b640180cc3450f7de05d0d8
Sha1:   5a0dc9bcab80ddc409dd35fcb00a88fe6846fee2
Sha256: 1f85e8b327f42c17c025d69849914068536d9aa95412fe473ae90ffb2f4ebd82
                                        
                                            GET /ajax/libs/lazysizes/5.3.2/lazysizes.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         104.17.25.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sun, 11 Sep 2022 05:19:56 GMT
content-length: 3150
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "60641588-1ed1"
last-modified: Wed, 31 Mar 2021 06:24:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 609960
expires: Fri, 01 Sep 2023 05:19:56 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RPxvrm%2F3%2FFpYugFkJC%2Bahc3hlZUgd1a8b0YHej0eiaTIwlKYJ3T%2FgJzMV2QplUaolJ9RLwjspdVP61GvOrJE7j9faRi9MRAAz3PMp4tShhpM4PAjLgOCMsTpfWJ0wI0IVJOsKnNH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 748df38addc01c0e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7862)
Size:   3150
Md5:    69e8daa3e28b1ac6b1fc4f678b678787
Sha1:   99bc84bbab57fa3c0f00f73bd90866680c9c857d
Sha256: a347e631a0dff734a1e5878c81a016c73ab08c2d2ec6b83643c90006c0eff585
                                        
                                            GET /ajax/libs/fitvids/1.2.0/jquery.fitvids.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.clickfunnels.com
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         104.17.25.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sun, 11 Sep 2022 05:19:56 GMT
content-length: 658
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5c-724"
last-modified: Mon, 04 May 2020 16:10:04 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 8757235
expires: Fri, 01 Sep 2023 05:19:56 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ug78p39TFl4LL922tWLYkyanV%2F4tnS64uWUg9XrAmOmGrR05EHofE6JszUmjFywZ5WsiBvg8%2Fq4qq6YQz13lxIw4hanz8ufxoLXAKacWQJ%2FWkpjxU0bTctS3QEYSaxCmFaIYGvj3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 748df38addc11c0e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (1781)
Size:   658
Md5:    a3793fda68bf7dfa7e4bb860e8c64dcd
Sha1:   ea502f364e7fedeaf142eda0ebfe93dcbaeb04c9
Sha256: 7a6d7d82a342c5eb15937f2ce10f19e9d766b30eee0455071824d9172d4e0d4d
                                        
                                            GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.clickfunnels.com
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         104.17.25.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sun, 11 Sep 2022 05:19:56 GMT
content-length: 591
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-514"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 690577
expires: Fri, 01 Sep 2023 05:19:56 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FUckCU5rxqVndHbBOPGtlt3ush1CdRHC%2FbZVpWuLmRnLL6WWlS3r%2FPWEb0fKZyyDwSEt065%2Fa06M%2BucwmwpabyaKkPU1iHXtqQ5vjaV44D0Wyf4rwR9bFXwj6hiihsdanC90u7PJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 748df38aedce1c0e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1266)
Size:   591
Md5:    414869f16aa77a65b4928a018f7f1abb
Sha1:   cea521f7a2958a50239526ed6b068f0937527653
Sha256: afee364ce513c6517247b81cce5eb5eadb1dbbb35e439eb3fa97bbc15fac2cd3
                                        
                                            GET /ajax/libs/video.js/7.11.5/video.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.clickfunnels.com
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         104.17.25.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sun, 11 Sep 2022 05:19:56 GMT
content-length: 123694
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "601c4deb-831be"
last-modified: Thu, 04 Feb 2021 19:41:31 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 7458321
expires: Fri, 01 Sep 2023 05:19:56 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F4yJCrYIUNiJjGjbAaTPpOK7%2BRzCAnbYbjxuC42TvsXCt3uIm%2FUFLoxRaw4fHOj0g%2FjyBUnNpzJY8zHKSLJdBb1ITrAY0cJemkHWyDi4MGV2n9nSbptYXnVjAdCQ3mixur%2BmgAjU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 748df38b0ddc1c0e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (47843)
Size:   123694
Md5:    c8acd0c391c3dd83609a45e2bc68879f
Sha1:   ce69fbf230de77446a44e6ae3d98a31c7d115752
Sha256: fb5b82a028361d8c65c32de4fd1863da8402ef4c7ffe3cdf453592abed75c22d
                                        
                                            GET /ajax/libs/video.js/7.11.5/video-js.min.css HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.clickfunnels.com
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         104.17.25.14
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
date: Sun, 11 Sep 2022 05:19:56 GMT
content-length: 9062
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "601c4deb-9c87"
last-modified: Thu, 04 Feb 2021 19:41:31 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 17748559
expires: Fri, 01 Sep 2023 05:19:56 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ebpcvn8t%2B7DwBBhjV%2FGE8P9BfnW8cbKCOmQUF8ksh%2FLH1k6Pd8bGhqfCAH%2FfOK7vPcZg%2BMoPEv66TMC9ktydPpPdG4eHC6kgaUOOTjebSKGb62PuTjFdOZ6CoZrAlRCUM0eEicjh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 748df38b0dde1c0e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (40067), with no line terminators
Size:   9062
Md5:    3254f042ca0979d22645398fa80be3d7
Sha1:   97a5e5b18dd600268caee9e3f1d6e4d1e4cbc34e
Sha256: fa6e06ed2a55412af4d32d9c2a749896ecb4b8e2519102e8bc7897bbf7a05d39
                                        
                                            GET /ajax/libs/countup.js/1.9.3/countUp.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.17.25.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sun, 11 Sep 2022 05:19:56 GMT
content-length: 2161
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e2d-1eb4"
last-modified: Mon, 04 May 2020 16:09:17 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 8317768
expires: Fri, 01 Sep 2023 05:19:56 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1HTco2%2BiApjSkaJ1tYRhkDXGNyLAEMnPQzVe%2FNBtSFyZQeAjhOncePxcz2ESihC1lVWtfM0H0S4m2CeNVk76xcaI%2FLJo7%2BIWAbVyY2%2FdFg6ttSuxgs7vF1h%2Fd2dmAU6FZ2vmS6kT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 748df38b0e4bb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   2161
Md5:    58ff444b6681c773e4c9b054ecb6c553
Sha1:   768b55fa898cb4ee4b31d62a4b3a070dfac980bc
Sha256: a24f2ffb2c25a6fa16dd8501b1397980d45b471b3cb3a23d1d5ed49f2f353a6b
                                        
                                            GET /ajax/libs/bodymovin/5.5.3/lottie.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.17.25.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sun, 11 Sep 2022 05:19:56 GMT
content-length: 52781
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03d8b-3d0a4"
last-modified: Mon, 04 May 2020 16:06:35 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 3753161
expires: Fri, 01 Sep 2023 05:19:56 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QK2XimRndoccwBfNAfvbBog%2BpjS2HihVmgRgq7cgdeRT%2FWU2XbEnpwwbwF25CB%2FVD91jS3eHNF38hDft%2BIRubkGAZT90jhj6qq%2FtjPUuCSqY53qm8DvYS32TzJsf%2B9K7HJL%2Bv45c"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 748df38b2e5bb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   52781
Md5:    6d07992fb90763c5c19e9e5faf8c5099
Sha1:   a0db636fbfbe378969ff878d051a426dde2f8e6c
Sha256: 6e4e7973170ec4f623732b62421099d7ef14d5bdd8609c3bd737d77c7911f269
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5311
Cache-Control: 'max-age=158059'
Date: Sun, 11 Sep 2022 05:19:56 GMT
Last-Modified: Sun, 11 Sep 2022 03:51:25 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 11 Sep 2022 05:19:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15619
Expires: Sun, 11 Sep 2022 09:40:15 GMT
Date: Sun, 11 Sep 2022 05:19:56 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15619
Expires: Sun, 11 Sep 2022 09:40:15 GMT
Date: Sun, 11 Sep 2022 05:19:56 GMT
Connection: keep-alive

                                        
                                            GET /npm/@videojs/http-streaming@2.12.0/dist/videojs-http-streaming.min.js HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.clickfunnels.com
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.85.229
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 2.12.0
x-jsd-version-type: version
etag: W/"4c8e9-F+lCUr+TzLo2aUt7zzNc326ch7U"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 11 Sep 2022 05:19:56 GMT
age: 2269896
x-served-by: cache-fra19164-FRA, cache-bma1656-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 88151
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (60658)
Size:   88151
Md5:    dc70b0b42163413d9c50aef40270720c
Sha1:   b82549d46889dd272af72694dcbb37e8352a4141
Sha256: d5b327ecc0f569eb14e336b09ce630cea99f7320f0fb47df6949b39d83717df7
                                        
                                            GET /js/client/2.3.1/firebase.js HTTP/1.1 
Host: cdn.firebase.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.1.195
HTTP/2 200 OK
content-type: application/javascript
                                        
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
access-control-allow-origin: *
cache-control: public,max-age=432000
content-encoding: br
etag: "c471381dd2e66f21f5e780deedd3ffc6848f71aa6dc8a275db39262d8f2145c7-br"
last-modified: Wed, 15 Jul 2020 22:46:44 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Sun, 11 Sep 2022 05:19:56 GMT
x-served-by: cache-bma1667-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1662873597.755463,VS0,VE1
vary: x-fh-requested-host, accept-encoding
content-length: 38932
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2251)
Size:   38932
Md5:    101041a14a95983b793e63058e1a9fe5
Sha1:   98b57a531cafd91792d04bd9e4a242003dd642aa
Sha256: 394397d4750bbed239d13fcfbb83f7968225445ec59a760264e4e7bbc7dd1bf5
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15619
Expires: Sun, 11 Sep 2022 09:40:15 GMT
Date: Sun, 11 Sep 2022 05:19:56 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F66c0f84d-aba2-4ce6-9e03-ee51e1c347be.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6889
x-amzn-requestid: c82ac543-90cd-4aeb-a65b-7e1bbbacc407
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YQ2UEE-3IAMFYBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d0419-427a29067c9c92ec0db6567f;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 21:39:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BPWrjstB3xKeYzHK9eQoJL8ORgRFsqjmNxu0j10epBANBtZCRU-m2g==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:43:06 GMT
age: 27410
etag: "7aa14fcd982a5cee38d58fc3c89edc4a8daf4c97"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6889
Md5:    57d797a1c3f6589746a1135bdb19f54f
Sha1:   7aa14fcd982a5cee38d58fc3c89edc4a8daf4c97
Sha256: ff8855ca951f53ed5f3886cc81a7f28384d41288edeca4fdc621250e4d01c6fe
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e82f3ab-3fe6-43bc-932c-936ec582e5cf.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7017
x-amzn-requestid: df5e57d7-e54c-4b5a-aa1b-a9aee889842e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YQ1k_Et0oAMFSjQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d02ec-50d15bba03579a935342e22f;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 21:34:36 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: YRgmbTGaMvU9Kf47U90cPYhgpXaYgoNVA8ut6LOUStK4UfWahpSqVA==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:41:08 GMT
age: 27528
etag: "c893d7475856809a59486e0bcebd6d662d1fc56f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7017
Md5:    fea5dfc4a6a5093fd81899ee4a79d446
Sha1:   c893d7475856809a59486e0bcebd6d662d1fc56f
Sha256: 915fb97690be97d97cb298fc60ceb4cf7c3ed8fb437836beb2d590a8e238363c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc91b46a1-040b-46aa-a7a1-af67f0058b83.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7519
x-amzn-requestid: bef8445b-1f8b-4c00-a9ad-b32fdefe3d13
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X3zXoHOhIAMFfNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6312ff63-1a6c3ef64362a4d052a761ae;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 07:16:51 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Pzv2DSpqnXB0UP3C5EF-YUzRmveFwmal_8YyRfEuHuhZ1FcUWgHocg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 14:09:01 GMT
age: 54655
etag: "b3491a6f12c97c8e1848a206a185fae29213c1e5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7519
Md5:    bb1a86dcf94db0a29a6ebe21866766d4
Sha1:   b3491a6f12c97c8e1848a206a185fae29213c1e5
Sha256: d05619e519fed6c0b6c0616cf540908006a68f127b25e38fb9d041dfe2546df4
                                        
                                            GET /2e07a442-7a52-4be0-b8a8-92e95fd3a29e.js HTTP/1.1 
Host: cdn.cfptaddons.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.86.133
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: Cowboy
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cache-control: max-age=300, public
etag: W/"d1bfa609954916a10a7203bfb3fb6b04"
x-request-id: 910be8dc-5868-4cd9-ab1b-1ace23154e9b
x-runtime: 0.013290
strict-transport-security: max-age=31536000; includeSubDomains
via: 1.1 vegur, 1.1 varnish
accept-ranges: bytes
date: Sun, 11 Sep 2022 05:19:56 GMT
age: 296
x-served-by: cache-bma1633-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1662873597.827645,VS0,VE0
content-length: 6887
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5487)
Size:   6887
Md5:    e46a53e92b5d5cece5aae6cf5fafbb01
Sha1:   327e77cef0ca824ae3c519d9031bf5d1c04123e6
Sha256: d1bfa609954916a10a7203bfb3fb6b04e12e35c4f65554665bb2f1a5f2030a97
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8092dc3d-1f2d-4e22-b40a-bf1c53ea42e6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10298
x-amzn-requestid: f2e2d57b-1f6f-401a-bf0d-ca5c05dd5e59
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YE-nmHBKIAMFrZg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63184496-52d1369463143fc94894e347;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 07:13:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: xW7Lli2tEVlm-nAL_JANbf0u4uZcPpslrE3rd2rWPoj_af_2WpiJ8Q==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:41:01 GMT
age: 27535
etag: "a9f77626875d68e1aea2516f78d491eba9969e37"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10298
Md5:    99bd16c51d8e4853d6ee542d2ec9fb22
Sha1:   a9f77626875d68e1aea2516f78d491eba9969e37
Sha256: b360c3c9fa12dc4f57fdbfc88fe820ecee1c049f2d43f44cd38b740513d8e9f8
                                        
                                            POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 11 Sep 2022 05:19:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "BB93FB122276AD837EA1545212BEDFE08BCEA0AA"
Expires: Sun, 11 Sep 2022 16:00:00 GMT
Last-Modified: Sun, 11 Sep 2022 04:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 3359
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 748df38c3e70b4ff-OSL


--- Additional Info ---
Magic:  data
Size:   1462
Md5:    9a6195d9df6e978851548500fafccb71
Sha1:   215328ed5506fd77691ff76e67dd6406f671e8eb
Sha256: ed07e9d9e5bd1179c19a088cb450a1bc45aa05ca0e5cc1fcf0f782279fe52109
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7a9494e-0e8b-451b-806d-72da68860cab.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 16983
x-amzn-requestid: ed588125-de1d-47ae-a5d5-81ab8c2a8105
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YRTpmH69oAMFYAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d330a-46ea16040beedf3903d87ec3;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 00:59:54 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: iBwfZ5Vm2pbcO9zLGNtT2c0n6oZ9u-JjgIvbG47d4s6049ehYmXZ4w==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 04:26:46 GMT
age: 3190
etag: "5ce0bc5b075b97639453d67d4f3cea61289b7698"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   16983
Md5:    4c65d6ae04a64d9d01439fb4fca3f017
Sha1:   5ce0bc5b075b97639453d67d4f3cea61289b7698
Sha256: eb48687a5974542d11882f854a86ff083528957b0fbc61c797167d8f04e0ffa9
                                        
                                            GET /aa046e33-79c9-4227-8293-6133f61d0583.js HTTP/1.1 
Host: cdn.cfptaddons.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.86.133
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: Cowboy
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cache-control: max-age=300, public
etag: W/"d9c52c303e94bce33ba7d552609b43de"
x-request-id: ca728fd8-c9a7-4d1e-917b-9c474123a0da
x-runtime: 0.012151
strict-transport-security: max-age=31536000; includeSubDomains
via: 1.1 vegur, 1.1 varnish
accept-ranges: bytes
date: Sun, 11 Sep 2022 05:19:56 GMT
age: 296
x-served-by: cache-bma1633-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1662873597.827634,VS0,VE1
content-length: 30663
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (29151)
Size:   30663
Md5:    f280e9965cfe103bfdd1b23672ed62cf
Sha1:   30f1f90fd55da3df8cb616a0765cc5ef69e59947
Sha256: d9c52c303e94bce33ba7d552609b43debdf4efad5607de866f51079c4d5b2c20
                                        
                                            POST /s/gts1d4/UuxGnyxiNDw HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 11 Sep 2022 05:19:56 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 11 Sep 2022 05:19:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.42.156
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 11 Sep 2022 05:19:56 GMT
Last-Modified: Sun, 11 Sep 2022 04:32:30 GMT
Server: ECS (nyb/1D19)
X-Cache: Miss from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: PThwRU4o7Z_5bUU1DLmzlx-KQJZ5qZ5gYRnh8QGxmRjERlUQpmK_XA==
Age: 2846

                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 500
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:56 GMT
server: cloudflare
cf-ray: 748df38d2f7bb4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 519
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:56 GMT
server: cloudflare
cf-ray: 748df38d1f72b4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   81833
Md5:    1cdff930b1ac5d436a3ad3d2871bb35c
Sha1:   769f5d070e9283e32c24e90d7a8193d3c3532918
Sha256: b81bc8c2c6caac515e296b0946a0e04d1a106daeee9ec9b001fc2fddb97f805b
                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 519
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:56 GMT
server: cloudflare
cf-ray: 748df38d2f80b4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            GET /6olhDSSVLPvv1DuK/f770cba2-81ec-46b9-abd2-dba51fbd162d/osano.js HTTP/1.1 
Host: cmp.osano.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.21
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
content-length: 54018
server: CloudFront
date: Sun, 11 Sep 2022 05:19:57 GMT
etag: "ed406efaeaefc60caeda9f14fb7dcf4a"
last-modified: Mon, 23 Aug 2021 15:33:47 GMT
content-encoding: br
cache-control: public, max-age=86400, s-maxage=86400, must-revalidate, proxy-revalidate, no-transform
strict-transport-security: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: mode=block
x-content-type-options: nosniff
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1bE1pfqET2g2g3-e5a9h-x91uy7BX9i-B-rrF4u6I8x5lcniFrVlzQ==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65413)
Size:   54018
Md5:    d146e29144f2598ce79123d53e6f48e2
Sha1:   f162e5a8af8abef4b66ac93ea01f2f24f1089fbc
Sha256: 3afd44ef8c3ad75bf8b6458e5af237ec2f003c82365aa8775662299f9c45e703
                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 507
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:56 GMT
server: cloudflare
cf-ray: 748df38d0f6bb4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            GET /clickfunnels/svg_image_data/funnelFlowImageData-v2.js HTTP/1.1 
Host: s3content.s3.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.231.114.211
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
x-amz-id-2: LbOdTIUYdaXPydPNpMmoTG3G+sIgG8hsoFcNGncrutIzwxSkH3Q1481AYfBpwQdyuJEQoarfFfs=
x-amz-request-id: X9GREM1VYXVHMBRA
Date: Sun, 11 Sep 2022 05:19:58 GMT
Last-Modified: Mon, 18 Nov 2019 19:08:11 GMT
ETag: "bd45b4e04f993d58db0a98b7f56f494b"
Cache-Control: max-age=86400
Accept-Ranges: bytes
Content-Length: 57132
Server: AmazonS3


--- Additional Info ---
Magic:  ASCII text, with very long lines (57030)
Size:   57132
Md5:    bd45b4e04f993d58db0a98b7f56f494b
Sha1:   3601aeae69f4428f63faebfa8a9e63a63e90d0e3
Sha256: 63c718b76be7b2dfbed15c1b7f277abe9e6493d46a61b64984c40171d247072f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 11 Sep 2022 05:19:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   3139
Md5:    47a2b5a6b6d38ac225b4b7cec679dc60
Sha1:   e159a3643fc2cfbb74d0854dda6dc53adf02a283
Sha256: 2f20aa03d1906882e8d1982299c3eb1cf11c90586296cfe3c1aa38da77bd1fc4
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 11 Sep 2022 05:19:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression\012- data
Size:   1903
Md5:    409ddd9a795ff387503afbda22de4ee6
Sha1:   ff38f3196476f603181daebea800b6d0ed4f59ae
Sha256: 70ac2374a52f95f01459deb9ebaace91185f82d52ec1caf44bb80af6130df33d

Alerts:
  File Analyzers:
    - virustotal: 0/0
                                        
                                            GET /s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.clickfunnels.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12924
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:26:57 GMT
expires: Thu, 07 Sep 2023 19:26:57 GMT
cache-control: public, max-age=31536000
age: 294780
last-modified: Wed, 27 Apr 2022 16:02:31 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 12924, version 1.0\012- data
Size:   12924
Md5:    4610010f425c140b99c88b6819ce1c02
Sha1:   a7e839aa0452ceeb6228de7c15062fe82cc6d1c3
Sha256: 7348a2eb48c9a681d6178433394c7037144d85b57ee33a11339d3a33fa1001a4
                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 504
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:56 GMT
server: cloudflare
cf-ray: 748df38d0f69b4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, from Unix\012- data
Size:   4941
Md5:    8b5d215527db30045f4032dd4e60a6f4
Sha1:   94d0381cd29f9b07b88f4353020aa61960bce876
Sha256: 36eeec486c04f6b5babac58bc344b3af115621eef853ba36a411816e2c4dde0f
                                        
                                            GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.clickfunnels.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Sep 2022 08:31:01 GMT
expires: Wed, 06 Sep 2023 08:31:01 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
age: 420536
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Size:   44856
Md5:    565ce506190ad3af920b40baf1794cec
Sha1:   ad3cba5d06100e09449a864d3b5e58403b478b3d
Sha256: 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 519
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:56 GMT
server: cloudflare
cf-ray: 748df38d0f6cb4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, from Unix\012- data
Size:   5028
Md5:    cd89afdc2286085a24d3a59d2ab0f64b
Sha1:   8e36ec0e6aabe0dbec49f9c131aadd0991e83e15
Sha256: 3b27caf10071945c7e62c2eaf59f56b297a4748f7fcd37f6b10b056e209efe1c
                                        
                                            GET / HTTP/1.1 
Host: www.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         104.16.16.194
HTTP/2 200 OK
content-type: text/html;charset=UTF-8
                                        
date: Sun, 11 Sep 2022 05:19:56 GMT
cf-homepage: test
set-cookie: __cf_bm=ijDHxWSUEc..mGs0K56YLfFbRwoqvdnVY6A23caYu8M-1662873596-0-ARKN9mRAhn9sbyjKjj7lSI2TuuSuM6Oifpyw0YtyyQuzKW1+S0DWQro2nOgO+SMbtSysGwM5zqwtyeu7udcg/KZbG8GXiQR26SLrYK75WL9G; path=/; expires=Sun, 11-Sep-22 05:49:56 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK"}],"group":"cf-csp-endpoint","max_age":86400}
content-security-policy-report-only: script-src 'none'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK; report-to cf-csp-endpoint
vary: Accept-Encoding
server: cloudflare
cf-ray: 748df388dcea0b39-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Size:   50040
Md5:    5203926fc618aff84ff5de17bf0bdb72
Sha1:   bd0677b60b15cacfaf1fe5640fedaa4449795c68
Sha256: afa46a46ac47e15c4977b2b931e74c2bf8033e2cbbc3b28767229e40458328dc
                                        
                                            GET /s/caveat/v17/Wnz6HAc5bAfYB2Q7ZjYY.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.clickfunnels.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 73892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Sep 2022 05:41:36 GMT
expires: Fri, 08 Sep 2023 05:41:36 GMT
cache-control: public, max-age=31536000
age: 257901
last-modified: Fri, 24 Jun 2022 19:31:36 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 73892, version 1.0\012- data
Size:   73892
Md5:    635348e072c68e9688cc691f988eddd1
Sha1:   2a86c0cee213c342a68620bf3b3dde31b786637e
Sha256: 9a1f63454ea0b7caaecaeb0d801e866c6cb7d49a987d41e796976f4f00bed86a
                                        
                                            GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.clickfunnels.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:30:58 GMT
expires: Thu, 07 Sep 2023 19:30:58 GMT
cache-control: public, max-age=31536000
age: 294539
last-modified: Wed, 27 Apr 2022 16:11:40 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 7816, version 1.0\012- data
Size:   7816
Md5:    25b0e113ca7cce3770d542736db26368
Sha1:   cb726212d5d525021752a1d8470a0fb593e0c49e
Sha256: 9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 11 Sep 2022 05:19:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194 HTTP/1.1 
Host: static.cloudflareinsights.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.clickfunnels.com
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         104.18.47.230
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
                                        
date: Sun, 11 Sep 2022 05:19:56 GMT
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2021.12.0
last-modified: Thu, 09 Dec 2021 19:55:17 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 748df38bdb33b529-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   5518
Md5:    55b4bf2c6f0fe459c2c82619a89e8154
Sha1:   f03e47063ad6b47ed1a9df779d06cc3443f1c400
Sha256: f31f59fde09f1d0083c6a38d4fd755ae9bf3c91ef3c250380ec6a88af6f03f0f
                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 543
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:57 GMT
server: cloudflare
cf-ray: 748df38ec8cab4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, from Unix\012- data
Size:   5089
Md5:    37605c364433c91dc862f29104d92af0
Sha1:   fa81e9c285655c3bd5a91d2ae485fc70c74aa600
Sha256: cdccf6ace9b15f28ba4656ee6651b28b91b373bbae48042e26c70c25b75a91e6
                                        
                                            GET /cdn-cgi/image/f=auto,q=95/https://statics.myclickfunnels.com/image/1100/file/dda0b60b40bd555850fa292ec7288286.png HTTP/1.1 
Host: images.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Cookie: __cf_bm=ijDHxWSUEc..mGs0K56YLfFbRwoqvdnVY6A23caYu8M-1662873596-0-ARKN9mRAhn9sbyjKjj7lSI2TuuSuM6Oifpyw0YtyyQuzKW1+S0DWQro2nOgO+SMbtSysGwM5zqwtyeu7udcg/KZbG8GXiQR26SLrYK75WL9G; _gcl_au=1.1.915886899.1662873587
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         104.16.16.194
HTTP/2 200 OK
content-type: image/webp
                                        
date: Sun, 11 Sep 2022 05:19:57 GMT
content-length: 26148
cf-ray: 748df392490e0b39-OSL
accept-ranges: bytes
cache-control: public, max-age=16070400
etag: "cfEyP5rzty-WKDUCfuAlIA2w:b3114de69757a18d2f382ab4924f0a76"
last-modified: Mon, 24 Jan 2022 19:32:00 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:96,h2pri
cf-resized: internal=ok/m q=0 n=125 c=61 v=2022.8.0 l=26148
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
warning: cf-images 299 "AVIF rate limited"
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   26148
Md5:    c9731d8436921677ddbb8834a7b915fe
Sha1:   f6c9ca05b81f6ddbd4250404fc0b5b18d96e14f4
Sha256: 98ec702f28d9edd38ca35d6d5e3de45d9c8f276f9fb91b21e4c721bbd01df8c0
                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 482
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:57 GMT
server: cloudflare
cf-ray: 748df3928b79b4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)\012- data
Size:   3063
Md5:    57efbbeb3e1d23c82b677511c67c8b0e
Sha1:   f927ba115ef4be362694c22850ddbdd1c1b054d1
Sha256: 873b38d80c8ff1ffcac23ecdb7fb2d17413ae3c217236d8e1e24574b1c4707c6
                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 519
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:57 GMT
server: cloudflare
cf-ray: 748df38ff9b1b4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, max compression\012- data
Size:   20006
Md5:    56f5d7f608e25d64207135f045f988cb
Sha1:   901eb59372ae330ae85e1384da93479b21ae1082
Sha256: 1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29

Alerts:
  File Analyzers:
    - virustotal: 0/56
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 11 Sep 2022 05:19:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 11 Sep 2022 05:19:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /bat.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         204.79.197.200
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: private,max-age=1800
content-length: 11367
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=2118DFB596AA6B433C01CDA997FD6A3B; domain=.bing.com; expires=Fri, 06-Oct-2023 05:19:57 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E4614639714D48569FB0062552FFA25D Ref B: OSL30EDGE0411 Ref C: 2022-09-11T05:19:57Z
date: Sun, 11 Sep 2022 05:19:57 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Size:   11367
Md5:    293ae3e0fc8b0d5c143fdf9d8490228d
Sha1:   3976c659b908e70818a3a1ac71860b497fe2d1a9
Sha256: 04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2539
Cache-Control: 'max-age=158059'
Date: Sun, 11 Sep 2022 05:19:57 GMT
Last-Modified: Sun, 11 Sep 2022 04:37:38 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 519
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:57 GMT
server: cloudflare
cf-ray: 748df3926b65b4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 519
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:57 GMT
server: cloudflare
cf-ray: 748df3926b5cb4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, max compression\012- data
Size:   15687
Md5:    4738d969770682feba80f04bf171d65b
Sha1:   be0e0ceb91bf5ed0c64b0f3f2cc2c99c6d4cd6b7
Sha256: 1daca97cf9e8078299f94c50346e45fead45bf908ca97ded912f26986c1c4e9a

Alerts:
  File Analyzers:
    - virustotal: 0/0
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 11 Sep 2022 05:19:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 11 Sep 2022 05:19:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /ahoy/visits HTTP/1.1 
Host: www.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=utf-8
X-Requested-With: XMLHttpRequest
Content-Length: 282
Origin: https://www.clickfunnels.com
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Cookie: __cf_bm=ijDHxWSUEc..mGs0K56YLfFbRwoqvdnVY6A23caYu8M-1662873596-0-ARKN9mRAhn9sbyjKjj7lSI2TuuSuM6Oifpyw0YtyyQuzKW1+S0DWQro2nOgO+SMbtSysGwM5zqwtyeu7udcg/KZbG8GXiQR26SLrYK75WL9G; _gcl_au=1.1.915886899.1662873587; cfhoy_visit=b59896e9-585e-49dc-815e-c0c7e5b4e543; cfhoy_visitor=b47a860c-2957-45b7-866a-9c703d0bd096
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.16.194
HTTP/2 403 Forbidden
content-type: text/html; charset=UTF-8
                                        
date: Sun, 11 Sep 2022 05:19:57 GMT
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 748df39188920b39-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (531)
Size:   2797
Md5:    0d399d413c71c2f5e534ec8fd1cfad67
Sha1:   4629c6c518788638c1d63856495df4327806008a
Sha256: 75e61f5c9847fcde16b3cb4c7b8b8240d81030df32c2164e229769929ad8f8b7
                                        
                                            POST / HTTP/1.1 
Host: ocsp.starfieldtech.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         192.124.249.23
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Sucuri/Cloudproxy
Date: Sun, 11 Sep 2022 05:19:58 GMT
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 10 Sep 2022 21:40:32 GMT
Expires: Sun, 11 Sep 2022 21:40:32 GMT
ETag: "55abde6f22b98772b23d42b0ea28510c3cc5547b"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1845
Md5:    f01099c0a4b846eadd83886ce41cfc6d
Sha1:   55abde6f22b98772b23d42b0ea28510c3cc5547b
Sha256: ac04abbd139d99bbc9b9766c5d317d69bd391e03307144c4c60b3efde0c21d1a
                                        
                                            GET /p/4.10.0/css/player.css HTTP/1.1 
Host: f.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.86.109
HTTP/2 200 OK
content-type: text/css
                                        
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 11 Sep 2022 05:19:58 GMT
age: 211110
x-served-by: cache-iad-kcgs7200157-IAD, cache-bma1621-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 34265
x-timer: S1662873598.135426,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 20291
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65495)
Size:   20291
Md5:    4004ba0e2bb66b9aeaa32a8544f6eeab
Sha1:   5bf81fc199d0a7fcc805d154e33cdfc992a9689b
Sha256: 1bb8fbd867ab8d696b7ca95485fa59d154afb14213041f9d4d12bbff398da7fd
                                        
                                            GET /js_opt/modules/utils/vuid.min.js HTTP/1.1 
Host: f.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.86.109
HTTP/2 200 OK
content-type: application/javascript
                                        
content-encoding: gzip
cache-control: public, max-age=2592000
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 11 Sep 2022 05:19:58 GMT
age: 1857759
x-served-by: cache-iad-kiad7000127-IAD, cache-bma1621-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 264006
x-timer: S1662873598.158325,VS0,VE0
vary: Accept-Encoding,x-http-method-override
content-length: 997
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1839)
Size:   997
Md5:    0ad074ceab68348048a8100a67d36d2c
Sha1:   2a35d9429a411fd87aafd7e6c7fafe51cca82345
Sha256: 0445c9738353c896284236d8c98b5c8b5d7954621d4c4d2bd5cf138660d247aa
                                        
                                            GET /video/839073367-91d603ab6836f1cc5de583c5edc76437fc56c4e836eb953ca4a8bd4318ca1c25-d.jpg?mw=80&q=85 HTTP/1.1 
Host: i.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.86.109
HTTP/2 200 OK
content-type: image/jpeg
                                        
etag: 9da31d2dff3fdbd4d3edf08953489d9a
x-viewmaster-lossless-format: lossy
viewmaster-server: viewmaster-us-east1-dxms
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Sun, 11 Sep 2022 05:19:58 GMT
age: 393052
x-served-by: cache-dfw-kdfw8210110-DFW, cache-bma1621-BMA
x-cache: miss, HIT, HIT
x-cache-hits: 2, 1
x-timer: S1662873598.159574,VS0,VE1
content-length: 1938
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x45, components 3\012- data
Size:   1938
Md5:    9da31d2dff3fdbd4d3edf08953489d9a
Sha1:   a53a6d979e825a9738d18fbd225463e621a28e62
Sha256: 7cee1f0e7d154c3bfde85fb73a9663a5cce4ca214989249e530af89020c7268b
                                        
                                            GET /p/4.10.0/js/player.js HTTP/1.1 
Host: f.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.86.109
HTTP/2 200 OK
content-type: application/javascript
                                        
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 11 Sep 2022 05:19:58 GMT
age: 211111
x-served-by: cache-iad-kcgs7200061-IAD, cache-bma1621-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 25733
x-timer: S1662873598.158084,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
content-length: 212200
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64649)
Size:   212200
Md5:    1bf1cd7e4980bdcf6fc5f33823b2280e
Sha1:   3f9724f4a224915506d6ef7c96dc0564f2c51466
Sha256: 13d45c1b32674b0f6d60248713b74d4845ccbef7714b97799f76b3be286ca1d2
                                        
                                            POST / HTTP/1.1 
Host: ocsp.starfieldtech.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         192.124.249.23
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Sucuri/Cloudproxy
Date: Sun, 11 Sep 2022 05:19:58 GMT
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 10 Sep 2022 21:40:32 GMT
Expires: Sun, 11 Sep 2022 21:40:32 GMT
ETag: "55abde6f22b98772b23d42b0ea28510c3cc5547b"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1845
Md5:    f01099c0a4b846eadd83886ce41cfc6d
Sha1:   55abde6f22b98772b23d42b0ea28510c3cc5547b
Sha256: ac04abbd139d99bbc9b9766c5d317d69bd391e03307144c4c60b3efde0c21d1a
                                        
                                            GET /image/12177/file/a0eb7ffcb38ca25afc4d3116085395d3.svg HTTP/1.1 
Host: statics.myclickfunnels.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.18.18.229
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 11 Sep 2022 05:19:57 GMT
x-amz-id-2: YcCKlHXZYdCiS/v6oN3oLrpeWh+FiQ5skLB1L2isy4sbLjf7O6ryug2IkrN/DD4tG3Qp45+UnK0=
x-amz-request-id: ZEFSPJK76BD9Q12S
last-modified: Thu, 04 Aug 2022 20:25:21 GMT
etag: W/"06dbf51e97cdca22ba5b01e5c8ce6be8"
content-disposition: inline; filename="clickfunnels-dark-logo.svg"; filename*=UTF-8''clickfunnels-dark-logo.svg
cf-cache-status: HIT
age: 721222
expires: Thu, 16 Mar 2023 05:19:57 GMT
cache-control: public, max-age=16070400
set-cookie: __cf_bm=9JyWAT.wrcVkDPc3weWy4Qc7..XAuIz2KoXKqkTJhGY-1662873597-0-AQ2dxZMoCZ7rxBCIwc/WAPGkYDdziPgYw497vbcVNdfuxowoOUreYv6YFtOWbfywKXX2GIIQdbHEoiC3QqQeOwM=; path=/; expires=Sun, 11-Sep-22 05:49:57 GMT; domain=.myclickfunnels.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 748df38e1d71b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (8643), with no line terminators
Size:   12699
Md5:    dee60ae7964fcb81c6b6aab0560a6c4d
Sha1:   9bb2ae479a8a0345a00866c67b02a5bff6c2d6ba
Sha256: e64be91bc6f53361b695a2c17914c39c278d398702e0ede4eb07be7c427cc841
                                        
                                            GET /video/839074679-099ceff63eb028c27564862ade8abd608468205b768772dd9ef1ee482ce65af4-d.jpg?mw=80&q=85 HTTP/1.1 
Host: i.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.86.109
HTTP/2 200 OK
content-type: image/jpeg
                                        
etag: c485a4d8571e77d6409f892cfab8146a
x-viewmaster-lossless-format: lossy
viewmaster-server: viewmaster-us-central1-hbrn
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Sun, 11 Sep 2022 05:19:58 GMT
age: 2135271
x-served-by: cache-dfw-kdfw8210029-DFW, cache-bma1621-BMA
x-cache: miss, HIT, HIT
x-cache-hits: 1, 1
x-timer: S1662873598.236466,VS0,VE1
content-length: 1613
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x45, components 3\012- data
Size:   1613
Md5:    c485a4d8571e77d6409f892cfab8146a
Sha1:   515b46f35993fb6433a6edfc5786a0a5b7dd87c5
Sha256: 3348263a50cf631967715e8c1feef67dc48a163b60f02dcd69365e44e668aa16
                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 437
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:58 GMT
server: cloudflare
cf-ray: 748df3958db2b4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 437
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:58 GMT
server: cloudflare
cf-ray: 748df395bdd0b4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 437
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:58 GMT
server: cloudflare
cf-ray: 748df395adccb4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ISO Media, AVIF Image\012- data
Size:   218204
Md5:    63a0fb69483ea04fbfe3a1e15bc0127c
Sha1:   defdb35181f699471f711632ad91868096bd3064
Sha256: 336503356bebefe6cb04bc16dce8180d3e58f58b689367108606edc5f6e197a9
                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 437
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:58 GMT
server: cloudflare
cf-ray: 748df395adc8b4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ISO Media, AVIF Image\012- data
Size:   38206
Md5:    844c277ee4767ad816da8094b60be301
Sha1:   555d2f276de3654c93edb6399b9b1c86ef313070
Sha256: 5a5991bfad6a0da9948fe5bbaa64927b8c3fd002b6ecdfebc837454db58d581b
                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 437
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:58 GMT
server: cloudflare
cf-ray: 748df395cde6b4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            POST /g/collect?v=2&tid=G-XJMXXSCP9Q&cid=900909468.1662873587&gtm=2oe970&aip=1 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.clickfunnels.com
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                         
                                         142.251.1.154
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://www.clickfunnels.com
date: Sun, 11 Sep 2022 05:19:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /video/839074679-099ceff63eb028c27564862ade8abd608468205b768772dd9ef1ee482ce65af4-d?mw=640&mh=360 HTTP/1.1 
Host: i.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.86.109
HTTP/2 200 OK
content-type: image/avif
                                        
etag: f5404fcf0c08be6790ffb19596465f27
x-viewmaster-lossless-format: automatic
viewmaster-server: viewmaster-us-central1-hp3x
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Sun, 11 Sep 2022 05:19:58 GMT
age: 1028513
x-served-by: cache-dfw-kdfw8210033-DFW, cache-bma1621-BMA
x-cache: miss, HIT, HIT
x-cache-hits: 1, 1
x-timer: S1662873599.805395,VS0,VE1
vary: Accept
content-length: 13098
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ISO Media, AVIF Image\012- data
Size:   13098
Md5:    f5404fcf0c08be6790ffb19596465f27
Sha1:   6ce9b4387df4b792eee691d4ce8c4e1a182adcbe
Sha256: 2d3adb6f16f0282d7d65ec70753f707e2d687affdb6a1ec1d47eed404d88f99f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 11 Sep 2022 05:19:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /p/4.10.0/js/module/sentry.js HTTP/1.1 
Host: f.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.86.109
HTTP/2 200 OK
content-type: application/javascript
                                        
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 11 Sep 2022 05:19:58 GMT
age: 211105
x-served-by: cache-iad-kiad7000062-IAD, cache-bma1621-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 4228
x-timer: S1662873599.871601,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
content-length: 18787
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (50848)
Size:   18787
Md5:    4dc70b9b557ca8c79f297fbfba442427
Sha1:   d96ad931b8f34a3af61241a7c8ecb18d42467658
Sha256: c8820405ee78804703fb058593abd91c3b9182efd4598d263f4235bb5140295b
                                        
                                            GET /collect?v=2&fmt=js&pid=537730&time=1662873587506&url=https%3A%2F%2Fwww.clickfunnels.com%2F&liSync=true HTTP/1.1 
Host: px.ads.linkedin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.clickfunnels.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.42.14
HTTP/2 200 OK
content-type: application/javascript
                                        
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure bcookie="v=2&f42c544c-9d29-49b3-8acb-26baf7db4bad"; domain=.linkedin.com; Path=/; Secure; Expires=Mon, 11-Sep-2023 05:19:58 GMT; SameSite=None lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2341:u=1:x=1:i=1662873598:t=1662959998:v=2:sig=AQEd5RSCZJdfLbd_DO_4oCwT4wjXeG2B"; Expires=Mon, 12 Sep 2022 05:19:58 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXoX+4r1/kC1hkI3XIpBA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 070C6D3C3BD74061B7F8028C72F569F2 Ref B: OSL30EDGE0111 Ref C: 2022-09-11T05:19:58Z
date: Sun, 11 Sep 2022 05:19:58 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /exp=1662877497~acl=%2F479b4e4b-70fb-4be5-a7fa-eb0fe9752e9d%2F%2A~hmac=149ab0d5aec26727738b77b093184c33d6841f147e41474ae78b0f834d4a374a/479b4e4b-70fb-4be5-a7fa-eb0fe9752e9d/sep/video/8b85d74b,7fc34c59,e0804459,9f9d0c89,303adf91/audio/0ebf24e1,32f5b81a/master.json?query_string_ranges=1&base64_init=1 HTTP/1.1 
Host: 22vod-adaptive.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         104.123.68.170
HTTP/1.1 200 OK
Content-Type: application/json
                                        
origin-retrieved-hour: 1658289600
Access-Control-Max-Age: 86400
timing-allow-origin: *
Content-Encoding: gzip
Content-Length: 4797
Aka-c-hit: cache-hit
Cache-Control: max-age=29304077
Date: Sun, 11 Sep 2022 05:19:59 GMT
Connection: keep-alive
Vary: Accept-Encoding
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
AK-REFERENCE-ID: 0.a6447b68.1662873599.6ed7a0d
X-VIM-CACHEBC: EP:H11,E:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 104.123.68.170
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (22441)
Size:   4797
Md5:    303a850b758cc938aecfe5da1b5f82c4
Sha1:   637ae1888c8852c8f4f0be6600502905d5f23e3a
Sha256: 0aff687cb804e0d9e4f5bfbcbf008e22322a21e9df5daa7c1b1f8bc75c5c9d0c
                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 664
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:57 GMT
server: cloudflare
cf-ray: 748df392dbbab4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            POST /s/gts1d4/5Ylu76wHhgo HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 11 Sep 2022 05:19:59 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /exp=1662877497~acl=%2F479b4e4b-70fb-4be5-a7fa-eb0fe9752e9d%2F%2A~hmac=149ab0d5aec26727738b77b093184c33d6841f147e41474ae78b0f834d4a374a/479b4e4b-70fb-4be5-a7fa-eb0fe9752e9d/sep/audio/e0804459/chop/segment-1.m4s?r=dXM%3D HTTP/1.1 
Host: 22vod-adaptive.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         104.123.68.170
HTTP/1.1 200 OK
Content-Type: video/mp4
                                        
Content-Length: 96272
using-starlord: true
origin-retrieved-hour: 1658610000
Access-Control-Max-Age: 86400
timing-allow-origin: *
Aka-c-hit: cache-hit
Cache-Control: max-age=31536000
Date: Sun, 11 Sep 2022 05:19:59 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
AK-REFERENCE-ID: 0.a6447b68.1662873599.6ed7a0e
X-VIM-CACHEBC: EP:H11,E:m,PE:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 104.123.68.170
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  data
Size:   96272
Md5:    59affa340baacb47f39f3c5cb1fdfc18
Sha1:   5e5266378cfdd3ac284a63f6bd977d3b06ea8084
Sha256: e25c8f8c200c6a2ca547a103f79d5ee97fdc60dd948b8de6bdb93f27d06f73a6
                                        
                                            GET /exp=1662877497~acl=%2Fab71b475-0e35-43da-b723-64893b792f2b%2F%2A~hmac=514f51388782357cc62d14ee71ae98f65c0b96f2b55e6c92decc74fa480a7816/ab71b475-0e35-43da-b723-64893b792f2b/sep/video/d9eabe33,30e8219e,a5b84d84,f0f3943f,ccfe2c94/master.json?base64_init=1 HTTP/1.1 
Host: 44vod-adaptive.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         104.123.68.185
HTTP/1.1 200 OK
Content-Type: application/json
                                        
origin-retrieved-hour: 1656165600
Access-Control-Max-Age: 86400
timing-allow-origin: *
Content-Encoding: gzip
Content-Length: 5897
Aka-c-hit: cache-hit
Cache-Control: max-age=27163362
Date: Sun, 11 Sep 2022 05:19:59 GMT
Connection: keep-alive
Vary: Accept-Encoding
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
AK-REFERENCE-ID: 0.b5447b68.1662873599.11d8d4b
X-VIM-CACHEBC: EP:H11,E:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 104.123.68.185
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (33971)
Size:   5897
Md5:    273ea4d49628854ef18f0e5a47014836
Sha1:   f138ef84192443aa051e0f30acb4b49296b13a8a
Sha256: 791838f3d748877785117a1a3d6bd982a0afe071f586ece8d82bbcd9026b20d1
                                        
                                            POST /add/player-test-impression?beacon=1 HTTP/1.1 
Host: fresnel.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 116
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.202.204
HTTP/2 200 OK
                                        
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
date: Sun, 11 Sep 2022 05:19:59 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            POST /add/player-stats?beacon=1&session-id=16b871cc043999f54f55e9d96821c2f20082f0d61662873597 HTTP/1.1 
Host: fresnel.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1435
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.202.204
HTTP/2 200 OK
                                        
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
date: Sun, 11 Sep 2022 05:19:59 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            GET /exp=1662877497~acl=%2F479b4e4b-70fb-4be5-a7fa-eb0fe9752e9d%2F%2A~hmac=149ab0d5aec26727738b77b093184c33d6841f147e41474ae78b0f834d4a374a/479b4e4b-70fb-4be5-a7fa-eb0fe9752e9d/parcel/video/7fc34c59.mp4?r=dXM%3D&range=1021-232868 HTTP/1.1 
Host: 22vod-adaptive.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         104.123.68.170
HTTP/1.1 200 OK
Content-Type: video/mp4
                                        
Accept-Ranges: bytes
Content-Length: 231848
Last-Modified: Thu, 15 Jul 2021 16:22:58 GMT
Server: parcel
Timing-Allow-Origin: *
Origin-Retrieved-Hour: 1626364800
Aka-c-hit: cache-hit
Cache-Control: private, max-age=25356320
Expires: Sat, 01 Jul 2023 16:45:19 GMT
Date: Sun, 11 Sep 2022 05:19:59 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
AK-REFERENCE-ID: 0.a6447b68.1662873599.6ed7a35
X-VIM-CACHEBC: EP:H11,E:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 104.123.68.170
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
Set-Cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:104.123.68.170~requestid:6ed7a35~time:1662873599~ghostforwardip:~edgecache:cache-hit~rtt:8~region:NO-; path=/; domain=.akamaized.net;


--- Additional Info ---
Magic:  data
Size:   231848
Md5:    8c3c933a50fa0a02c33c46d16e88e9fb
Sha1:   1bf6db0ad6191ace02472142bc89735f45ca5f4e
Sha256: 9628bc204b6681ff75d9f89fbb04278addc48b783d84935f9d41e476ba82952a
                                        
                                            POST /s/gts1d4/5Ylu76wHhgo HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 11 Sep 2022 05:19:59 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /releases/v5.15.0/css/v4-shims.css HTTP/1.1 
Host: use.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.63.54
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 11 Sep 2022 05:19:56 GMT
x-amz-id-2: pBSZOIz4kemlF3iq8efSyg7fP8QGc9TN6z+9pjC1Y8lM4PacF5rS5f8Kh8VWbjnY1AjDuLqoWi0=
x-amz-request-id: 6K450HJ2Q7CRBYEX
last-modified: Wed, 30 Jun 2021 15:40:08 GMT
etag: W/"5a9dcb2fa7b210eac0921a39b90798e4"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 559924
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gAotiq%2FoEi1yvE4mbEr7BHguGtf3Ar8VXSRypfecYGGhrQ61ztqa3WeR81ai9i8we7qD142NbMuCtgeIcoVjcvAYy8k1o93aAZyrS3Gj7XOYoAbYC9IAmOTlQsHI67yGoPfgZmHx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 748df38a6d54b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (26516)
Size:   4208
Md5:    e69df300ef196d33af1d69a2a4d328a1
Sha1:   7e6d47e29dea3c983d63960070cbc3f2dcf44448
Sha256: cae2e41e2d7adc4166b40f9544014247a49df619d3f1cb1c6ab1c0949b008e27
                                        
                                            POST /add/player-stats?beacon=1&session-id=ad93ff96ff40cc6bfe91485c11aa6b0a24a6cdd51662873597 HTTP/1.1 
Host: fresnel.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1437
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.120.202.204
HTTP/2 200 OK
                                        
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
date: Sun, 11 Sep 2022 05:19:59 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            GET /v2/4420/wr-051bb36b7693c10a1a1d5ce2dc1a4f6e.js HTTP/1.1 
Host: widget.wickedreports.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.69
HTTP/2 200 OK
content-type: text/javascript
                                        
content-length: 423
last-modified: Wed, 31 Aug 2022 15:52:21 GMT
accept-ranges: bytes
server: AmazonS3
date: Sun, 11 Sep 2022 04:33:25 GMT
etag: "052fee2b15ba47b2bd07e94d738bb3f0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SiNipZxex1ZvlqCIQXh_Y5UvvWzxhMU4CG--5iYdSNETkH_hgBJOSA==
age: 6243
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (423), with no line terminators
Size:   423
Md5:    052fee2b15ba47b2bd07e94d738bb3f0
Sha1:   49301d210d1ba78608ba4a9a97a23d1ac3c53f84
Sha256: e374368491681e74bcfa0243db9e7e55d58561351db134fdda588ed58cab5ea7
                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 437
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:59 GMT
server: cloudflare
cf-ray: 748df39c3a03b4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 743
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:59 GMT
server: cloudflare
cf-ray: 748df39be9d2b4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8AFF352AFB32799FBDA9F9FF8229C717EDE2A308FB32DB19C5FD0E31115A46C1"
Last-Modified: Fri, 09 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5310
Expires: Sun, 11 Sep 2022 06:48:29 GMT
Date: Sun, 11 Sep 2022 05:19:59 GMT
Connection: keep-alive

                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 437
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:59 GMT
server: cloudflare
cf-ray: 748df39c4a06b4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            GET /ba/09a7a0cb2a11e8a233973e775a70ad/sound-on3.png HTTP/1.1 
Host: images.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Cookie: __cf_bm=ijDHxWSUEc..mGs0K56YLfFbRwoqvdnVY6A23caYu8M-1662873596-0-ARKN9mRAhn9sbyjKjj7lSI2TuuSuM6Oifpyw0YtyyQuzKW1+S0DWQro2nOgO+SMbtSysGwM5zqwtyeu7udcg/KZbG8GXiQR26SLrYK75WL9G; _gcl_au=1.1.915886899.1662873587; _ga_XJMXXSCP9Q=GS1.1.1662873587.1.0.1662873587.60.0.0; _ga=GA1.2.900909468.1662873587; _gid=GA1.2.1655502218.1662873588; _gat_UA-36443564-3=1; _vwo_uuid_v2=D097F0C86FD1266ACCE71ABA9185414A5|61d1af4bb26be8bf5a0c5735037c2522
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         104.16.16.194
HTTP/2 200 OK
content-type: image/webp
                                        
date: Sun, 11 Sep 2022 05:19:59 GMT
content-length: 26710
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=45005
content-disposition: inline; filename="sound-on3.webp"
etag: "037de615230e760f15d259ee8fc8bd81"
last-modified: Mon, 08 Oct 2018 18:48:27 GMT
vary: Accept
x-amz-id-2: AY13bmpsu7fKQtdBvvj0uxJgcEBUC+kIO0WixI3OnIL3RFtGD3HegT3+Rxm+nWXrUaFQJw7xaFQ=
x-amz-request-id: 2FGDGYWH8FY2PMND
cf-cache-status: HIT
age: 4163
expires: Wed, 05 Oct 2022 05:19:59 GMT
cache-control: public, max-age=2073600
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=WNTrltoca8.y2Qzt0iZ4XP6lC7Wjjj9.xIbeTBsy3MY-1662873599-0-AZsaVSy2HC68YIrcNv3pXMKZD5HhP4zshi_4IJLNz8V1bqqPbcDogZeaHdo8MA0UQQmdiRA3sKi_XZnezB6e3CBEFZSds5zTQwg3kQp-eER4"}],"group":"cf-csp-endpoint","max_age":86400}
content-security-policy-report-only: script-src 'none'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=WNTrltoca8.y2Qzt0iZ4XP6lC7Wjjj9.xIbeTBsy3MY-1662873599-0-AZsaVSy2HC68YIrcNv3pXMKZD5HhP4zshi_4IJLNz8V1bqqPbcDogZeaHdo8MA0UQQmdiRA3sKi_XZnezB6e3CBEFZSds5zTQwg3kQp-eER4; report-to cf-csp-endpoint
server: cloudflare
cf-ray: 748df39dde7e0b39-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   26710
Md5:    bf9d0de75ae0f56af789ee3aa2bcc0e8
Sha1:   2da00f177db4c310c12580c1cc2fef77b48cd19b
Sha256: cb1f55132ced515c970a40afc57933d0d1d986a8f6a0de4485368711dc791adf
                                        
                                            GET /e0/641cd0cb3611e8a5efdf0f4d679b5f/playbutton.png HTTP/1.1 
Host: images.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Cookie: __cf_bm=ijDHxWSUEc..mGs0K56YLfFbRwoqvdnVY6A23caYu8M-1662873596-0-ARKN9mRAhn9sbyjKjj7lSI2TuuSuM6Oifpyw0YtyyQuzKW1+S0DWQro2nOgO+SMbtSysGwM5zqwtyeu7udcg/KZbG8GXiQR26SLrYK75WL9G; _gcl_au=1.1.915886899.1662873587; _ga_XJMXXSCP9Q=GS1.1.1662873587.1.0.1662873587.60.0.0; _ga=GA1.2.900909468.1662873587; _gid=GA1.2.1655502218.1662873588; _gat_UA-36443564-3=1; _vwo_uuid_v2=D097F0C86FD1266ACCE71ABA9185414A5|61d1af4bb26be8bf5a0c5735037c2522
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         104.16.16.194
HTTP/2 200 OK
content-type: image/webp
                                        
date: Sun, 11 Sep 2022 05:19:59 GMT
content-length: 53878
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=81347
content-disposition: inline; filename="playbutton.webp"
etag: "a1ef531f738bfbbb3f8e9ea289308b05"
last-modified: Mon, 08 Oct 2018 20:15:25 GMT
vary: Accept
x-amz-id-2: WYcuw63/5N7VwDfdUL3qX4E6W3nC34chluvdXAW0riTTXICQBLpXDiNdhC3PnW0EyEdA3ih3IV4=
x-amz-request-id: 7ZXQPSN7ME3QQ1KX
cf-cache-status: HIT
age: 4163
expires: Wed, 05 Oct 2022 05:19:59 GMT
cache-control: public, max-age=2073600
accept-ranges: bytes
server: cloudflare
cf-ray: 748df39dde800b39-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   53878
Md5:    722b100ec6f80eab4222d751e1a0a8b7
Sha1:   875c1efd3e19ddbee05ac83f4ab2b47dd256df23
Sha256: 5eadc9edf663f153cd1ad927276f2a9409c0b88f0b34f6cc64465412a9089d03
                                        
                                            GET /35/663790d4c411e899cbf7997697a31b/big-play-button.png HTTP/1.1 
Host: images.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Cookie: __cf_bm=ijDHxWSUEc..mGs0K56YLfFbRwoqvdnVY6A23caYu8M-1662873596-0-ARKN9mRAhn9sbyjKjj7lSI2TuuSuM6Oifpyw0YtyyQuzKW1+S0DWQro2nOgO+SMbtSysGwM5zqwtyeu7udcg/KZbG8GXiQR26SLrYK75WL9G; _gcl_au=1.1.915886899.1662873587; _ga_XJMXXSCP9Q=GS1.1.1662873587.1.0.1662873587.60.0.0; _ga=GA1.2.900909468.1662873587; _gid=GA1.2.1655502218.1662873588; _gat_UA-36443564-3=1; _vwo_uuid_v2=D097F0C86FD1266ACCE71ABA9185414A5|61d1af4bb26be8bf5a0c5735037c2522
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         104.16.16.194
HTTP/2 200 OK
content-type: image/webp
                                        
date: Sun, 11 Sep 2022 05:19:59 GMT
content-length: 16730
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=20462
content-disposition: inline; filename="big-play-button.webp"
etag: "357cc44bc52f2f52c2e6ee3b32b64e62"
last-modified: Sat, 20 Oct 2018 23:59:43 GMT
vary: Accept
x-amz-id-2: JeNaROzka16JmlTzF7RsPc06qpzIkEWk0RfgNohEYjkC3kODFhlm/bxmnqVxdBkwFwHeH4e9K4s=
x-amz-request-id: 87ZZ8RVA295RWY33
cf-cache-status: HIT
age: 4163
expires: Wed, 05 Oct 2022 05:19:59 GMT
cache-control: public, max-age=2073600
accept-ranges: bytes
server: cloudflare
cf-ray: 748df39dee8f0b39-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   16730
Md5:    cb31a00146496569d0dd2a9f55600743
Sha1:   3a01412644c32b929c0e48d2838cf9ba48bb85c6
Sha256: c8665200581de312ee71061fa11d45817b2fb16f92e28d717032a7a15e07a99b
                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 619
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:59 GMT
server: cloudflare
cf-ray: 748df39c9a3ab4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   6685
Md5:    62249962b60f415fb12b887ea9478dc4
Sha1:   8aced83aabb7722eba937e80b7bac6d3769b510b
Sha256: 808f487f52ad72e801d1292f23d50c91c03efb8398f8b0be27d0e2590517aaae
                                        
                                            GET /video/512712952?muted=1&autoplay=1&&title=0&byline=0&wmode=transparent&autopause=0 HTTP/1.1 
Host: player.vimeo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         162.159.128.61
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Sun, 11 Sep 2022 05:19:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-xss-protection: 1; mode=block
content-security-policy: script-src 'self' 'unsafe-inline' blob: resource: https://f.vimeocdn.com https://vimeo.com https://js-agent.newrelic.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://bam.nr-data.net https://src.litix.io https://www.gstatic.com https://cdn.streamroot.io https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.tv https://f.vimeocdn.com; style-src 'self' 'unsafe-inline' https://f.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://f.vimeocdn.com; connect-src 'self' ws: wss: https://vimeo.com https://vimeo.dev https://api.vimeo.com https://api.vimeo.dev https://*.ci.vimeows.com https://csi.gstatic.com https://fresnel-player-staging.vimeows.com https://fresnel-event-staging.vimeows.com https://player-telemetry.vimeo.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://netflux.cloud.vimeo.com https://lic.staging.drmtoday.com https://lic.drmtoday.com https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://sentry.io https://*.ingest.sentry.io https://storage.googleapis.com https://bam.nr-data.net https://live-api.cloud.vimeo.com https://live-api-dev.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://backend.dna-delivery.com https://mimir.cloud.vimeo.com https://*.wirewax.com https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://live-api-dev.cloud.vimeo.com https://devcaptions.cloud.vimeo.com/; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; default-src 'none'; font-src https://edge-assets.wirewax.com https://player.vimeo.com https://fonts.gstatic.com; img-src 'self' data: https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://player.vimeo.com https://*.ci.vimeows.com https://videoapi-sprites.vimeocdn.com https://i.vimeocdn.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://edge-assets.wirewax.com https://maps.googleapis.com https://f.vimeocdn.com; frame-src 'self' https://*; report-uri /_csp
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
link: <https://i.vimeocdn.com>; rel=preconnect; crossorigin, <https://f.vimeocdn.com>; rel=preconnect; crossorigin, <https://fresnel.vimeocdn.com>; rel=preconnect; crossorigin
p3p: CP="This is not a P3P policy! See https://vimeo.com/privacy"
expires: Sun, 11 Sep 2022 05:29:44 GMT
x-host: player-54c6bcb9bc-gxsdq
via: 1.1 varnish, 1.1 varnish
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
x-varnish-cache: 1
x-vserver: playproxy-rollout-prod-varnish-3
x-backend-proxy: playproxy4
x-bapp-server: player-54c6bcb9bc-gxsdq
Age: 0
X-Served-By: cache-bma1647-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1662873600.603773,VS0,VE122
Vary: Accept-Encoding
X-Player-Backend: p
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=pvg1yEhRmj.C49pyCrJ2n61ZUppilY37pjLimcGF3u8-1662873599-0-AVfMEZNicSjMYcwXiknaYhmd4AmpAP4IqV+W7uwragTTcADBnU8CzxRjcPL7TodB9BW8PdmU33NzyE+SsGU5Vgo=; path=/; expires=Sun, 11-Sep-22 05:49:59 GMT; domain=.vimeo.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 748df39d6f3ab529-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (15602)
Size:   4949
Md5:    417dea95791b0e285b68500e1bd24184
Sha1:   2b3a4885d32afa5f26896a5fd8fe960dff5e7b13
Sha256: 9ac80f4b494e97a28b8331a5c9506fc9bf6d468c9c26501e31c928a449196dcb
                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 437
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:59 GMT
server: cloudflare
cf-ray: 748df39d2a8ab4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, from Unix\012- data
Size:   5256
Md5:    dc8760207e6a287006cc0423a50f4187
Sha1:   4f4700caebb8280dd551469e595ec42cec9ebddd
Sha256: 62ed55bcafbd35cd7798dc920077aba62d9e99a03213e53f895f5ab2f06c6235
                                        
                                            GET /video/379117028?autoplay=0&title=0&byline=0&wmode=transparent&autopause=0 HTTP/1.1 
Host: player.vimeo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         162.159.128.61
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Sun, 11 Sep 2022 05:19:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-xss-protection: 1; mode=block
content-security-policy: script-src 'self' 'unsafe-inline' blob: resource: https://f.vimeocdn.com https://vimeo.com https://js-agent.newrelic.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://bam.nr-data.net https://src.litix.io https://www.gstatic.com https://cdn.streamroot.io https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.tv https://f.vimeocdn.com; style-src 'self' 'unsafe-inline' https://f.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://f.vimeocdn.com; connect-src 'self' ws: wss: https://vimeo.com https://vimeo.dev https://api.vimeo.com https://api.vimeo.dev https://*.ci.vimeows.com https://csi.gstatic.com https://fresnel-player-staging.vimeows.com https://fresnel-event-staging.vimeows.com https://player-telemetry.vimeo.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://netflux.cloud.vimeo.com https://lic.staging.drmtoday.com https://lic.drmtoday.com https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://sentry.io https://*.ingest.sentry.io https://storage.googleapis.com https://bam.nr-data.net https://live-api.cloud.vimeo.com https://live-api-dev.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://backend.dna-delivery.com https://mimir.cloud.vimeo.com https://*.wirewax.com https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://live-api-dev.cloud.vimeo.com https://devcaptions.cloud.vimeo.com/; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; default-src 'none'; font-src https://edge-assets.wirewax.com https://player.vimeo.com https://fonts.gstatic.com; img-src 'self' data: https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://player.vimeo.com https://*.ci.vimeows.com https://videoapi-sprites.vimeocdn.com https://i.vimeocdn.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://edge-assets.wirewax.com https://maps.googleapis.com https://f.vimeocdn.com; frame-src 'self' https://*; report-uri /_csp
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
link: <https://i.vimeocdn.com>; rel=preconnect; crossorigin, <https://f.vimeocdn.com>; rel=preconnect; crossorigin, <https://fresnel.vimeocdn.com>; rel=preconnect; crossorigin
p3p: CP="This is not a P3P policy! See https://vimeo.com/privacy"
expires: Sun, 11 Sep 2022 05:26:55 GMT
x-host: player-54c6bcb9bc-rpk48
via: 1.1 varnish, 1.1 varnish
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
x-varnish-cache: 1
x-vserver: playproxy-rollout-prod-varnish-8
x-backend-proxy: playproxy9
x-bapp-server: player-54c6bcb9bc-rpk48
Age: 0
X-Served-By: cache-bma1674-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1662873600.631978,VS0,VE119
Vary: Accept-Encoding
X-Player-Backend: p
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=zuvGIT5ucn.hY48FV7vRyC6FjREReij2B0Bid8GDXds-1662873599-0-AfCcb3jDGAy5Azp2E9gwl+COCZPlPn/wXkKqu7TA69BhukYkvmXMJiEyDOApHqFNwVgO1CHQIbEwBLsi5ggP7k0=; path=/; expires=Sun, 11-Sep-22 05:49:59 GMT; domain=.vimeo.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 748df39d9d03b524-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (16553)
Size:   5089
Md5:    439772135ff6f42911b9a7d56a088d60
Sha1:   0cdc4665e5397852a5a9de953ddd4a29b11f044a
Sha256: 869c47678d0da959b734336d9d9c685c29c3a42018ad4f23b6b53063a0f9a6e8
                                        
                                            GET /images/closemodal.png HTTP/1.1 
Host: www.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Cookie: __cf_bm=ijDHxWSUEc..mGs0K56YLfFbRwoqvdnVY6A23caYu8M-1662873596-0-ARKN9mRAhn9sbyjKjj7lSI2TuuSuM6Oifpyw0YtyyQuzKW1+S0DWQro2nOgO+SMbtSysGwM5zqwtyeu7udcg/KZbG8GXiQR26SLrYK75WL9G; _gcl_au=1.1.915886899.1662873587; cfhoy_visit=b59896e9-585e-49dc-815e-c0c7e5b4e543; cfhoy_visitor=b47a860c-2957-45b7-866a-9c703d0bd096; _ga_XJMXXSCP9Q=GS1.1.1662873587.1.0.1662873587.60.0.0; _ga=GA1.2.900909468.1662873587; _gid=GA1.2.1655502218.1662873588; _gat_UA-36443564-3=1; _vwo_uuid_v2=D097F0C86FD1266ACCE71ABA9185414A5|61d1af4bb26be8bf5a0c5735037c2522
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.16.194
HTTP/2 200 OK
content-type: image/webp
                                        
date: Sun, 11 Sep 2022 05:19:59 GMT
cf-ray: 748df39dbe720b39-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 217151
cache-control: public, max-age=2678400
content-disposition: inline; filename="closemodal.webp"
etag: "630e9cfc-314"
expires: Wed, 12 Oct 2022 05:19:59 GMT
last-modified: Tue, 30 Aug 2022 23:27:56 GMT
strict-transport-security: max-age=0
vary: Accept, Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=788
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   984
Md5:    aa512e4e3ed1c06e7cce0e7d04751683
Sha1:   42a1d1855fe0adcc36ce8ab36251d239b7d0fe3d
Sha256: 628b04a68df98e53d007336d05f26348e3ff01bba5995c94bd1121f3bc418f02
                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 437
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:59 GMT
server: cloudflare
cf-ray: 748df39e6b7bb4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            GET /rules-p-dpL093h0ZQn38.js HTTP/1.1 
Host: rules.quantcount.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.4
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 209
last-modified: Sat, 27 Aug 2022 06:04:57 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
date: Sun, 11 Sep 2022 05:19:59 GMT
cache-control: max-age=3600
etag: "04ccc208270bcd67f4a4c9b82ea0001f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Q_uztD7GXf_YaMy9JLPp3wSJO3admlvl_T2wllFbKHU7kTthxnWnNw==
age: 2025
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   209
Md5:    04ccc208270bcd67f4a4c9b82ea0001f
Sha1:   2093658087b9691a2bc54027ba2d241a49a63bac
Sha256: 931d82d8750b9e643a4dacfda4106e23f95617e6d7c7efac434471eca89941bb
                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 437
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:58 GMT
server: cloudflare
cf-ray: 748df3966e34b4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            GET /pagead/viewthroughconversion/949856492/?random=1662873587624&cv=9&fst=1662873587624&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg970&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fwww.clickfunnels.com%2F&tiba=ClickFunnels%E2%84%A2%20-%20Marketing%20Funnels%20Made%20Easy&auid=915886899.1662873587&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.162
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 11 Sep 2022 05:19:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1037
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 11-Sep-2022 05:34:59 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2266), with no line terminators
Size:   1037
Md5:    d3fb0e87008ea1bdc237d411f36a3a4d
Sha1:   9eb57b5d096b99a9e0aee34a7419ba35a840f91c
Sha256: 59cd5178706b68cbe45145b9d6a28cc36efd38c17f796b5584c4e701960ba7d9
                                        
                                            GET /ct/lib/main.55e552f9.js HTTP/1.1 
Host: s.pinimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         2.18.172.195
HTTP/2 200 OK
content-type: application/javascript
                                        
etag: "84c1602180f73853dc1e35f7296bdf7d"
content-encoding: gzip
accept-ranges: bytes
content-length: 18601
cache-control: max-age=1209600
vary: Accept-Encoding, Origin
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (54284), with no line terminators
Size:   18601
Md5:    84c1602180f73853dc1e35f7296bdf7d
Sha1:   40aea44ea928e8d539381759b791f5c70f6d4c82
Sha256: 6b2faea09b5d5015a36ab4300e1034e1907895b40249e5fd11b42a66fbd21dac
                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 437
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:59 GMT
server: cloudflare
cf-ray: 748df39e6b77b4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 437
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:58 GMT
server: cloudflare
cf-ray: 748df3955d8db4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            GET /pixel?r=1425996619;fpan=1;fpa=P0-919690084-1662873589562;pbc=;ns=0;ce=1;qjs=1;qv=087c24cc-20220902090643;ref=;cm=;gdpr=0;d=clickfunnels.com;dst=0;et=1662873589562;tzo=0;url=https%3A%2F%2Fwww.clickfunnels.com%2F;ogl=type.website%2Curl.https%3A%2F%2Ffunnels%252Eclickfunnels%252Ecom%2Fhome%2Ctitle.%20%20ClickFunnels%E2%84%A2%20-%20Marketing%20Funnels%20Made%20Easy%2Cdescription.%20%20ClickFunnels%20Gives%20You%20EVERYTHING%20You%20Need%20To%20Market%252C%20Sell%252C%20and%20Deliver%20Your%20P%2Cimage.%20%20https%3A%2F%2Fstatics%252Emyclickfunnels%252Ecom%2Fimage%2F3150%2Ffile%2F3ccb93633e4a94ffc062178f819 HTTP/1.1 
Host: pxl.qccerttest.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.93
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 35
last-modified: Thu, 04 Aug 2022 16:01:04 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 11 Sep 2022 02:29:20 GMT
etag: "55d25e9dc950d5db4d53a3b195c046c6"
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: fEcE7Okm01coBRnqpvc6zUPRvzdOHgtklp9kjZFEJMv6jPj3C7KFRQ==
age: 10241
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   35
Md5:    55d25e9dc950d5db4d53a3b195c046c6
Sha1:   75e91ae3e549dab12ed1c9787ade9131aef1c981
Sha256: a0d3a0aff7dc3bf32d2176fc3dcda6e7aba2867c4f4d1f7af6355d2cfc6c44f8
                                        
                                            GET /.ws?v=5 HTTP/1.1 
Host: popping-torch-9334.firebaseio.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.clickfunnels.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: AGX3KHW7VJAz5xXkm2GKYQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         34.120.160.131
HTTP/1.1 101 Switching Protocols
                                        
Server: nginx
Date: Sun, 11 Sep 2022 05:20:00 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: RStU1LuomIPWkKqIRLCniwXJcMs=
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload

                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 666
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:20:00 GMT
server: cloudflare
cf-ray: 748df3a09d2ab4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pixel;r=648182961;source=gtm;rf=0;a=p-dpL093h0ZQn38;url=https%3A%2F%2Fwww.clickfunnels.com%2F;uht=2;fpan=0;fpa=P0-919690084-1662873589562;pbc=;ns=0;ce=1;qjs=1;qv=087c24cc-20220902090643;cm=;gdpr=0;ref=;d=clickfunnels.com;dst=0;et=1662873589564;tzo=0;ogl=type.website%2Curl.https%3A%2F%2Ffunnels%252Eclickfunnels%252Ecom%2Fhome%2Ctitle.%20%20ClickFunnels%E2%84%A2%20-%20Marketing%20Funnels%20Made%20Easy%2Cdescription.%20%20ClickFunnels%20Gives%20You%20EVERYTHING%20You%20Need%20To%20Market%252C%20Sell%252C%20and%20Deliver%20Your%20P%2Cimage.%20%20https%3A%2F%2Fstatics%252Emyclickfunnels%252Ecom%2Fimage%2F3150%2Ffile%2F3ccb93633e4a94ffc062178f819;ses=8755ff14-deeb-4657-baca-1aea2b216ffb HTTP/1.1 
Host: pixel.quantserve.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         91.228.74.168
HTTP/2 200 OK
content-type: image/gif
                                        
date: Sun, 11 Sep 2022 05:20:00 GMT
content-length: 35
cache-control: private, no-cache, no-store, proxy-revalidate
expires: Fri, 04 Aug 1978 12:00:00 GMT
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
pragma: no-cache
set-cookie: mc=631d7000-2edb1-615f7-a50bf; expires=Thu, 12-Oct-2023 05:20:00 GMT; path=/; domain=.quantserve.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   35
Md5:    55d25e9dc950d5db4d53a3b195c046c6
Sha1:   75e91ae3e549dab12ed1c9787ade9131aef1c981
Sha256: a0d3a0aff7dc3bf32d2176fc3dcda6e7aba2867c4f4d1f7af6355d2cfc6c44f8
                                        
                                            GET /analytics-next/bundles/870.bundle.323974846b6d45afb45e.js HTTP/1.1 
Host: cdn.segment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         143.204.48.96
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sat, 27 Aug 2022 01:38:35 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Fri, 26 Aug 2022 03:04:21 GMT
etag: W/"d471f2a8b801a51bbc09c91b3f90b749"
cache-control: public,max-age=31536000,immutable
x-amz-version-id: qltndKW7QqDrf8ZSZrei2HuGEvEC2x.O
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: uXI-j2OLcpcxWHcMXu8nv_GMW9iRMKkBiwUk2lCrSHeWzM-Un1ub5Q==
age: 1309286
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (16955)
Size:   5205
Md5:    f01861e37d69826a87ff10066dc7b2c7
Sha1:   3c53ff451b21e1d58389aec33919b291ee9acd93
Sha256: 50af28cbd6bebb16dc3df854e3ff796d2f96c443bf3a81eb73917fc0c899b279
                                        
                                            GET /v3/?tid=2614147906150&pd=%7B%22np%22%3A%22gtm%22%2C%22gtm_aem_configs%22%3A%5B%22em%22%5D%2C%22md_frequency%22%3A1%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.clickfunnels.com%2F%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2255e552f9%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1662873589799 HTTP/1.1 
Host: ct.pinterest.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         2.18.172.195
HTTP/2 200 OK
content-type: image/gif
                                        
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-length: 35
access-control-allow-origin: *
x-envoy-upstream-service-time: 2
referrer-policy: origin
x-pinterest-rid: 5247387883547915
date: Sun, 11 Sep 2022 05:20:00 GMT
akamai-grn: 0.540a655f.1662873600.13c5df81
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   35
Md5:    9b8d19f4310c758344e40bf17fbc7e85
Sha1:   2290ef058812d5f5e398736e2316cba8cf8093cf
Sha256: 37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
                                        
                                            GET /video/839073367-91d603ab6836f1cc5de583c5edc76437fc56c4e836eb953ca4a8bd4318ca1c25-d?mw=700&mh=394 HTTP/1.1 
Host: i.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.86.109
HTTP/2 200 OK
content-type: image/avif
                                        
etag: 822e22501395ff75ca3f7d512c40b4b1
x-viewmaster-lossless-format: automatic
viewmaster-server: viewmaster-us-east1-k0q5
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Sun, 11 Sep 2022 05:20:00 GMT
age: 248956
x-served-by: cache-dfw-kdfw8210115-DFW, cache-bma1621-BMA
x-cache: miss, HIT, HIT
x-cache-hits: 1, 1
x-timer: S1662873601.554806,VS0,VE1
vary: Accept
content-length: 43246
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ISO Media, AVIF Image\012- data
Size:   43246
Md5:    822e22501395ff75ca3f7d512c40b4b1
Sha1:   9410092b54a73ed3e190a5907d54f39569a137d0
Sha256: 6f04c3b496975379eeeceb32f2a033b0020460203280235ddafe50fb4b4db3b2
                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 694
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:20:00 GMT
server: cloudflare
cf-ray: 748df3a2eefab4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)\012- data
Size:   323
Md5:    b49b45b63051915a8c657060651eb07f
Sha1:   acaddf8021f220d0e4d30e7c8b3d8330ff781af9
Sha256: 4b00fbca5db49c6e4b29a0c873c43671880bcea1b7b3007655183382a318c2dc
                                        
                                            GET /video/839074679-099ceff63eb028c27564862ade8abd608468205b768772dd9ef1ee482ce65af4-d?mw=800&mh=451 HTTP/1.1 
Host: i.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.86.109
HTTP/2 200 OK
content-type: image/avif
                                        
etag: c3efd811a142c2a77a02566476048da2
x-viewmaster-lossless-format: automatic
viewmaster-server: viewmaster-us-central1-f6p6
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Sun, 11 Sep 2022 05:20:00 GMT
age: 2240462
x-served-by: cache-dfw-kdfw8210065-DFW, cache-bma1621-BMA
x-cache: miss, HIT, HIT
x-cache-hits: 1, 1
x-timer: S1662873601.708781,VS0,VE1
vary: Accept
content-length: 16827
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ISO Media, AVIF Image\012- data
Size:   16827
Md5:    c3efd811a142c2a77a02566476048da2
Sha1:   625941fe3113cbbc8f728223d36dcfca65f83a60
Sha256: 2eecf381f1c91040016db807bbb8d319d2b2ecc63eec00f156a31187e77d4416
                                        
                                            GET /exp=1662877499~acl=%2F479b4e4b-70fb-4be5-a7fa-eb0fe9752e9d%2F%2A~hmac=89b10035c75433e68319fa8676e67aae87511f81abd72024a4ab50d47fbfaa35/479b4e4b-70fb-4be5-a7fa-eb0fe9752e9d/sep/video/8b85d74b,7fc34c59,e0804459,9f9d0c89,303adf91/audio/0ebf24e1,32f5b81a/master.json?query_string_ranges=1&base64_init=1 HTTP/1.1 
Host: 22vod-adaptive.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         104.123.68.170
HTTP/1.1 200 OK
Content-Type: application/json
                                        
origin-retrieved-hour: 1658289600
Access-Control-Max-Age: 86400
timing-allow-origin: *
Content-Encoding: gzip
Content-Length: 4797
Aka-c-hit: cache-hit
Cache-Control: max-age=29304076
Date: Sun, 11 Sep 2022 05:20:00 GMT
Connection: keep-alive
Vary: Accept-Encoding
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
AK-REFERENCE-ID: 0.a6447b68.1662873600.6ed7a3f
X-VIM-CACHEBC: EP:H11,E:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 104.123.68.170
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (22441)
Size:   4797
Md5:    303a850b758cc938aecfe5da1b5f82c4
Sha1:   637ae1888c8852c8f4f0be6600502905d5f23e3a
Sha256: 0aff687cb804e0d9e4f5bfbcbf008e22322a21e9df5daa7c1b1f8bc75c5c9d0c
                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 437
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:19:58 GMT
server: cloudflare
cf-ray: 748df3955d89b4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   96272
Md5:    59affa340baacb47f39f3c5cb1fdfc18
Sha1:   5e5266378cfdd3ac284a63f6bd977d3b06ea8084
Sha256: e25c8f8c200c6a2ca547a103f79d5ee97fdc60dd948b8de6bdb93f27d06f73a6
                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 437
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:20:00 GMT
server: cloudflare
cf-ray: 748df3a5189eb4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   231848
Md5:    8c3c933a50fa0a02c33c46d16e88e9fb
Sha1:   1bf6db0ad6191ace02472142bc89735f45ca5f4e
Sha256: 9628bc204b6681ff75d9f89fbb04278addc48b783d84935f9d41e476ba82952a
                                        
                                            GET /box-69edcc3187336f9b0a3fbb4c73be9fe6.html HTTP/1.1 
Host: vars.hotjar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.105
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 1044
date: Wed, 07 Sep 2022 09:17:07 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "f6a9ca04b0687ea3c0d98e8430c8c77b"
last-modified: Wed, 07 Sep 2022 09:16:57 GMT
strict-transport-security: max-age=604800; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zaF5CO3Q5j6IY6kFrREFPu-NJgM9fRw6PPZUKW13N6DUz1WlCUa3jA==
age: 331374
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2431), with no line terminators
Size:   1044
Md5:    f6a9ca04b0687ea3c0d98e8430c8c77b
Sha1:   35503b2deb23091a9a9c6c68d4020dbdf879588e
Sha256: 8e4328ecb6b395499567369e3c227231dbdaf361f43ce315934d7a2a3abbed41
                                        
                                            GET /api/player.js HTTP/1.1 
Host: player.vimeo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         162.159.128.61
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=utf-8
                                        
Date: Sun, 11 Sep 2022 05:20:01 GMT
Content-Length: 6136
Connection: keep-alive
x-xss-protection: 1; mode=block
content-security-policy: default-src 'none'; style-src 'unsafe-inline'
x-content-type-options: nosniff
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
p3p: CP="This is not a P3P policy! See https://vimeo.com/privacy"
expires: Sun, 11 Sep 2022 05:23:42 GMT
x-host: player-54c6bcb9bc-2wmt9
via: 1.1 varnish, 1.1 varnish
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
x-varnish-cache: 0
x-vserver: playproxy-rollout-prod-varnish-6
x-backend-proxy: playproxy7
x-bapp-server: player-54c6bcb9bc-2wmt9
Accept-Ranges: bytes
Age: 1579
X-Served-By: cache-bma1682-BMA
X-Cache: HIT
X-Cache-Hits: 908
X-Timer: S1662873601.353336,VS0,VE0
Vary: Accept-Encoding
X-Player-Backend: p
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=ouaxr.3pSzz8VtAKSYmv1rhpWnRRasoREWFyivsEQs0-1662873601-0-AV+p93JxmhVQWLpKwyXW8cYo9h8huiRrmKNNKVEySBPx5xf4p9BJWMrEHgcgMXAxHNk/yoSla/Grv1RKqm55fXg=; path=/; expires=Sun, 11-Sep-22 05:50:01 GMT; domain=.vimeo.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 748df3a86bb6b4f3-OSL


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (20390)
Size:   6136
Md5:    517096278768b4afc862e5816d65a0cd
Sha1:   efb337f1d1c369be5b5fa5fb34c3742d54dcb87d
Sha256: e39f4bcf8422e05cf4600c00ec36a02ee3ef772f947874272456534c6bffbe13
                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 437
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:20:01 GMT
server: cloudflare
cf-ray: 748df3a85ac9b4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, from Unix\012- data
Size:   6136
Md5:    517096278768b4afc862e5816d65a0cd
Sha1:   efb337f1d1c369be5b5fa5fb34c3742d54dcb87d
Sha256: e39f4bcf8422e05cf4600c00ec36a02ee3ef772f947874272456534c6bffbe13
                                        
                                            GET /syncframe?topUrl=www.clickfunnels.com&origin=onetag HTTP/1.1 
Host: gum.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         178.250.0.157
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
date: Sun, 11 Sep 2022 05:20:00 GMT
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=169613b6-2823-4bb5-bc4f-cfa024fd237e; expires=Fri, 06 Oct 2023 05:20:00 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 525869
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   5320
Md5:    7857f8e583606d4e3cd217f996e2ca0f
Sha1:   74b07dbbeaa3f8ecdd70c808adc7d7c279b497ad
Sha256: 16a6b3aae5d88a125b4775891c8ca16b4c2965af0747e2d0608f8ab05e8b8d8b
                                        
                                            GET /analytics-next/bundles/ajs-destination.bundle.35a8f6f19959bf2f455f.js HTTP/1.1 
Host: cdn.segment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         143.204.48.96
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Thu, 01 Sep 2022 06:12:31 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Tue, 30 Aug 2022 21:47:48 GMT
etag: W/"e0f89f667fb8d2b50aa8e29a86a4c9b1"
cache-control: public,max-age=31536000,immutable
x-amz-version-id: 1ps0Y.cQfeUJnD6vrqu.rtfMUGfr8v9x
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WC2ZjcUHRHjhpTOng8O1_NrH56H0ulMsFfxH76nO9Z0B_YPun3sNpA==
age: 860849
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (10259)
Size:   98258
Md5:    d6fb89030ddf5e1ba7e331cacd5d2802
Sha1:   5649a38f445560ffa1bcb344cea92051f2320079
Sha256: 03cb3f4e7af8356f40cf721f91611e12ad587ea7beed1482755add1d6715d487
                                        
                                            GET /dna HTTP/1.1 
Host: dnacdn.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         178.250.0.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:20:00 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=ADYTuF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVKMmJ2cEklMkJEQ1NzdyUyQnNIeEhoR3p5eUtteUI4MkVnUndkNGdtM1NvcVhi; expires=Fri, 06 Oct 2023 05:20:01 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 250700
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2

                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 437
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:20:01 GMT
server: cloudflare
cf-ray: 748df3a82a92b4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   209771
Md5:    c6b754893014a45c0a198c8794da90f1
Sha1:   49c4689471fea264fdddddc669cef0cbfd045716
Sha256: 9ad3461c1dc17147262325bc5d6af9571f86db9d32b5ee4b3b92746e4d8cf0e6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2906
Cache-Control: 'max-age=158059'
Date: Sun, 11 Sep 2022 05:20:01 GMT
Last-Modified: Sun, 11 Sep 2022 04:31:35 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 313

                                        
                                            GET /modules.448392d04fd1e15c100a.js HTTP/1.1 
Host: script.hotjar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.68
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 65486
date: Wed, 07 Sep 2022 10:58:07 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "dda0289b22368ab84a40f8dab68ddb9e"
last-modified: Wed, 07 Sep 2022 10:57:54 GMT
strict-transport-security: max-age=604800; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nRBKUL-pwaTExRXcOZ6kIYjtyRCDXWm2au0cbrZkpPYY8-hv43G6_Q==
age: 325314
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (48714)
Size:   65486
Md5:    dda0289b22368ab84a40f8dab68ddb9e
Sha1:   bef03b9e4930e3fddeee2dbd16f79fb04a78e11d
Sha256: 114cd1432d8d08eb7625146120b27b7046f5c3f841c25ff7889bd56ab1cd19ff
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2906
Cache-Control: 'max-age=158059'
Date: Sun, 11 Sep 2022 05:20:01 GMT
Last-Modified: Sun, 11 Sep 2022 04:31:35 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 313

                                        
                                            POST /cdn-cgi/script_monitor/report?m=e9KIzBFAJUEBGV7xiJ2eN9Sjixry6ozTi60zAxW6LJU-1662873596-0-AeTcDes0qNSuUy2vH0UqfecYA5Duujc_WBo3nHs2hicJlpcjNZrFOdfOTs_4CSDdhW6BukofddtXwHNLV7qNscraZPVKUmYxFv0mxIgJ5UCK HTTP/1.1 
Host: csp-reporting.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 611
Origin: https://www.clickfunnels.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.20.157
HTTP/2 200 OK
                                        
date: Sun, 11 Sep 2022 05:20:01 GMT
server: cloudflare
cf-ray: 748df3a89af0b4fa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            GET /video/512712952?title=0&byline=0&wmode=transparent&autopause=0&autoplay=1&muted=1 HTTP/1.1 
Host: player.vimeo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.clickfunnels.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site