| go.goodlifestylenews.com/ | 104.21.30.61 | | 143 B |
URL go.goodlifestylenews.com/ IP104.21.30.61:0
File typeHTML document, ASCII text Hashf1fb042c62910c34be16ad91cbbd71fa 5bc7aceba9a8704ef4b1d427d7d08b140afcd866 9278d16ed2fdcd5dc651615b0b8adc6b55fb667a9d106a9891b861d4561d9a24
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 00:35:41 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 14 Nov 2023 15:41:05 GMT
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Vary: Accept-Encoding,User-Agent
Pragma: no-cache
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WpMYGaixVnZmEbd%2BpSkWc6uPZ%2FBrkju3FzQ%2FKqI03H1Fpcc7ZpCEXyxzXysCp699x3nACasliUgY%2Fh%2B9bFNG7Ncgt9JZaAEy8yMLe8ORzQu8t3RuoIp9hzbpNT8PhKPm83ujrNTfygRanao%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87eca6e3dad01bfa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| verifiedwebpage.com/go?ehash=6d62df1aad0bf0b7348084ce0dcae63c&product=48088&ar=55&cid=2608&lid=1610&slhash=345599b9c81e1952060ac22c7b9cc293&redirect_id=44643&bid=17 | 104.18.20.187 | 302 Found | 38 kB |
URL User Request GET HTTP/2verifiedwebpage.com/go?ehash=6d62df1aad0bf0b7348084ce0dcae63c&product=48088&ar=55&cid=2608&lid=1610&slhash=345599b9c81e1952060ac22c7b9cc293&redirect_id=44643&bid=17 IP104.18.20.187:443
CertificateIssuerGoogle Trust Services LLC Subjectverifiedwebpage.com FingerprintB6:7C:0D:93:CD:D6:56:A3:74:B9:46:38:F0:C7:A5:31:BC:5F:AF:56 ValidityWed, 10 Apr 2024 21:43:08 GMT - Tue, 09 Jul 2024 21:43:07 GMT
Hashf758730923e2add7d6c6b7e526ed6ecb 25e5b0b37a5e3cf38b4d9e943efd41538229dfea eaa10133e0b9f0cbc2f6511dfcca3ba5fba2c3c4be99c8bf65288a71d319eb54
GET /go?ehash=6d62df1aad0bf0b7348084ce0dcae63c&product=48088&ar=55&cid=2608&lid=1610&slhash=345599b9c81e1952060ac22c7b9cc293&redirect_id=44643&bid=17 HTTP/1.1
Host: verifiedwebpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sun, 05 May 2024 00:35:39 GMT
content-type: text/html; charset=UTF-8
location: https://subscribe.goodlifestylenews.com?email=andy@globalcrane.net&redirect_id=44643&bid=17
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: User-Agent
cf-cache-status: DYNAMIC
set-cookie: PHPSESSID=576f72c64082735f3e464e8c388d3728; path=/
pixel_session_hash_48088=3415447649292417073; expires=Tue, 04-Jun-2024 00:35:38 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=None
bt_tracking_product_48088=144f56bcc23dd494e9abbfad2d01bb83ba0edaf30d8922c7e520117c570bc57d; expires=Tue, 07-May-2024 00:35:39 GMT; Max-Age=172800
__cf_bm=2nH0DyNv0fzUAXBbUZK9Ufhz84u19ppLXVF2.1QT6v4-1714869339-1.0.1.1-4LEz4YXAblkQqvyBJa6SVz9FBqVU.t1eM.bkbePgvwHjnKfR9UmhNpw79r4E7rSHZpF6_sWtcCqss8XQJLqCCQ; path=/; expires=Sun, 05-May-24 01:05:39 GMT; domain=.verifiedwebpage.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 87eca6d66f0f568a-OSL
X-Firefox-Spdy: h2
|
|
| subscribe.goodlifestylenews.com/jquery.caret.js | 104.21.30.61 | 200 OK | 716 B |
URL GET HTTP/1.1subscribe.goodlifestylenews.com/jquery.caret.js IP104.21.30.61:80
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c
File typeJavaScript source, ASCII text, with CRLF line terminators Hash35c3ec8db4ff6e862db42516436216a1 7d9d7731403868cc34edaad1d9e17311541a6f77 adef482d97f599ba0e720ecf2aba0581ea1591ba1bb1eb271f1d98b279ff81ba
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /jquery.caret.js HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c
Cookie: PHPSESSID=5e748122012668f6fad13ea3326d35d7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 00:35:42 GMT
Content-Type: application/javascript
Content-Length: 716
Connection: keep-alive
Last-Modified: Tue, 21 Feb 2023 09:39:45 GMT
Cache-Control: max-age=2592000
Expires: Sun, 02 Jun 2024 00:19:43 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 173758
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yUPGS5C4L1I5Wjlj7ggh1iqGp37ToPcE%2B9N%2BH7rSgksaNIKNX0B4RYgjYyYiarrrhg40dmMXIGp90BMqL8IPTyefHC8%2F5T23TvLdRJRC7GHu5XfHabbxq3jnUMqrQiXuQbWGx6L8DRE1yuCZ98ypnCE%2F"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87eca6f03da60b4d-OSL
alt-svc: h2=":443"; ma=60
|
|
| subscribe.goodlifestylenews.com/jquery.mobilePhoneNumber.js | 104.21.30.61 | 200 OK | 4.4 kB |
URL GET HTTP/1.1subscribe.goodlifestylenews.com/jquery.mobilePhoneNumber.js IP104.21.30.61:80
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c
File typeJavaScript source, ASCII text Hash0dbbb5873b895ea3be425af219cf85de 7b9dba563376d7dbd1c5b9b7064ab87eadad5591 02cbbdeb2244fd2855c49ab964c15001bde126c21cc5890d176c537878d6152b
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /jquery.mobilePhoneNumber.js HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c
Cookie: PHPSESSID=5e748122012668f6fad13ea3326d35d7
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 00:35:42 GMT
Content-Type: application/javascript
Content-Length: 4430
Connection: keep-alive
Last-Modified: Tue, 21 Feb 2023 09:39:45 GMT
Cache-Control: max-age=2592000
Expires: Fri, 31 May 2024 00:22:16 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 346406
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YzB4aZG6wVUVsYWrIh3Z6qUrR7hfrB5Wev5GlLWylrq0cuftpUcfGxpVuFgEAR87kHHDQyVaIFepP88BWymXiVSZAX3h35DAz9yql7DlPQrpdgvFHmW3ZFErzZwbUmDJWKVTS6dgj8e0f5nuDEJwx%2BBV"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87eca6f03eac56be-OSL
alt-svc: h2=":443"; ma=60
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.min.js | 151.101.1.229 | 200 OK | 17 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.min.js IP151.101.1.229:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text, with very long lines (60201) Hashc5236e5d6a5d0ff97ff8c8e5102c6c03 6fbfdbddbe85c578de559adcc8d07cccbc16d514 87538c4b7e488f5a49d12f98d6a04afc61d00f26a790f319569799acd434eb65
GET /npm/bootstrap@5.2.2/dist/js/bootstrap.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.2.2
x-jsd-version-type: version
etag: W/"ec40-b7/b3b6FxXjeVZrcyNB8zLwW1RQ"
content-encoding: br
accept-ranges: bytes
date: Sun, 05 May 2024 00:35:42 GMT
age: 2502305
x-served-by: cache-fra-etou8220032-FRA, cache-hel1410022-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 17366
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css | 151.101.1.229 | 200 OK | 30 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css IP151.101.1.229:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeUnicode text, UTF-8 text, with very long lines (65305) Hash025df1ec88740cad5ff14bb3380da6dd 7abed070e37ce060c0a561575f1d41a7f248fc74 2143941c03dacda8b4f1016ced6e0c6f34e5c04585a3bcffe33c3c626c448a4a
GET /npm/bootstrap@5.2.2/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.2.2
x-jsd-version-type: version
etag: W/"2f955-er7QcON84GDApWFXXx1Bp/JI/HQ"
content-encoding: br
accept-ranges: bytes
date: Sun, 05 May 2024 00:35:42 GMT
age: 21514915
x-served-by: cache-fra-eddf8230072-FRA, cache-hel1410022-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 30336
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js | 142.250.74.42 | 200 OK | 33 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js IP142.250.74.42:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeJavaScript source, ASCII text, with very long lines (32086) Hash8101d596b2b8fa35fe3a634ea342d7c3 d6c1f41972de07b09bfa63d2e50f9ab41ec372bd 540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441
GET /ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33434
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:47:24 GMT
expires: Fri, 02 May 2025 01:47:24 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 254898
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png | 104.26.8.206 | 200 OK | 251 B |
URL GET HTTP/2verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png IP104.26.8.206:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c CertificateIssuerGoogle Trust Services LLC Subjectverifiedsecure.org FingerprintA0:39:56:47:2D:24:66:40:29:81:A2:DA:5B:19:04:77:07:A6:BA:B3 ValidityThu, 04 Apr 2024 23:26:29 GMT - Wed, 03 Jul 2024 23:26:28 GMT
File typeHTML document, ASCII text Hash73816d82cca56c187674258ec5b7bd5a cd989502a8b941226bb7e5ddc0ff0b62621e701f cc2b540f494c9f0eb7c7f31880eec48518729e92ffa9e7081eb70193baa985a5
GET /uploads/0.442373001673954581K_Sa3Nyg.png HTTP/1.1
Host: verifiedsecure.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Sun, 05 May 2024 00:35:43 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png
Cache-Control: max-age=14400
Expires: Sun, 05 May 2024 00:45:23 GMT
CF-Cache-Status: HIT
Age: 19
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eDdP8FEh53kUBObhg%2FFgVDRfhzHP0Ik8PrSUxv%2Ft9ATulC84VINnFRkHHL50SMMoihZ1RV9SQ00%2ForrAhxzTL%2FZZAHlh98OJ1Pjj9NP36kgrid2AaK728Q4YmQCVlObR0RuIug%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87eca6f1ba79569d-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.googletagmanager.com/gtag/js?id=G-WJJ5P9F2X8 | 142.250.74.168 | 200 OK | 102 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-WJJ5P9F2X8 IP142.250.74.168:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Size102 kB (101559 bytes) Hash493418c472de628aac0a156e32494d4f b0e32f124f997ebf34cfd2722a20688ce0155a57 accbbd2e92d169e045c00b80eb0ee5b1fc8381d21a0e596399a17488b4f15422
GET /gtag/js?id=G-WJJ5P9F2X8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 May 2024 00:35:42 GMT
expires: Sun, 05 May 2024 00:35:42 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 101559
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| subscriberwelcome.com/uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg | 104.21.66.20 | 200 OK | 144 kB |
URL GET HTTP/2subscriberwelcome.com/uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg IP104.21.66.20:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c CertificateIssuerGoogle Trust Services LLC Subjectsubscriberwelcome.com FingerprintDA:EE:DE:64:E3:D6:C6:7B:68:0D:DF:8D:B3:56:E9:59:2C:55:00:E1 ValidityFri, 08 Mar 2024 02:01:15 GMT - Thu, 06 Jun 2024 02:01:14 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 966x1449, components 3 Size144 kB (144253 bytes) Hashe7eb0da863b2d3ead5846cdc3263a233 138225ea3d8ff08f07b046b858bf46bf2bba2e96 ff19a64983ac2748d6b8361212f1fc41814e1acd0d157ee9c736bbd2a4a03180
GET /uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:43 GMT
content-type: image/jpeg
content-length: 144253
last-modified: Mon, 20 Feb 2023 15:41:11 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QnEBoOA86XRg5j1Dlz8fMKH94%2B2BWGEhRYNJqlbULyDvNtU3qVnDjdPmrsUwWhMavYUFguIH03N5qPpkL7lvN7Y1KXTBeElrRbTCsxllUnQMf1YVivB31JEXbLdN6NBK5ZJ%2Bl%2BdXMTo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eca6f1f9fcb521-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| subscriberwelcome.com/uploads/0.204734001673521892LifeAfterUkraine.jpeg | 104.21.66.20 | 200 OK | 400 kB |
URL GET HTTP/2subscriberwelcome.com/uploads/0.204734001673521892LifeAfterUkraine.jpeg IP104.21.66.20:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c CertificateIssuerGoogle Trust Services LLC Subjectsubscriberwelcome.com FingerprintDA:EE:DE:64:E3:D6:C6:7B:68:0D:DF:8D:B3:56:E9:59:2C:55:00:E1 ValidityFri, 08 Mar 2024 02:01:15 GMT - Thu, 06 Jun 2024 02:01:14 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2550x3300, components 3 Size400 kB (400505 bytes) Hashb9a9621a927a5b9a9c71fdbb53bf8991 9c4cc398edb33da6a79e62701867cbf7fed4056d d0342e1b39e1c9b80bfb574b18e0a5d9f9cf00e00ca7cf3b2ce1ded70f3bb9ab
GET /uploads/0.204734001673521892LifeAfterUkraine.jpeg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:43 GMT
content-type: image/jpeg
content-length: 400505
last-modified: Thu, 12 Jan 2023 11:11:32 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A7c57K8vZe6oJ7TzF78WPdSltlGdaMO%2BaGaLuFztvJTKA2sUApvnUh6QPQjFqYvBdtTih4jjUL3PWaXfJceHSVVAHrjNgqznsVFK24XpXAydST1ERd%2F0bdr0BqFYL4q69B5ETXaZwTA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eca6f2aabfb521-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| subscriberwelcome.com/uploads/0.1721950016738853872D1(1).jpg | 104.21.66.20 | 200 OK | 1.3 MB |
URL GET HTTP/2subscriberwelcome.com/uploads/0.1721950016738853872D1(1).jpg IP104.21.66.20:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c CertificateIssuerGoogle Trust Services LLC Subjectsubscriberwelcome.com FingerprintDA:EE:DE:64:E3:D6:C6:7B:68:0D:DF:8D:B3:56:E9:59:2C:55:00:E1 ValidityFri, 08 Mar 2024 02:01:15 GMT - Thu, 06 Jun 2024 02:01:14 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Windows), datetime=2023:01:07 00:05:06], baseline, precision 8, 1800x2700, components 3 Size1.3 MB (1288007 bytes) Hash91e68c3d20f4e55b01fdbaa834b4e4e6 e54e4ea7f042d2124aa1be976a6fe9d708bb4f9f 3cab775e25b68c23b905d547373476f046b0101e7cfdbd6f016e302f5a429988
GET /uploads/0.1721950016738853872D1(1).jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:43 GMT
content-type: image/jpeg
content-length: 1288007
last-modified: Mon, 16 Jan 2023 16:09:47 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lkzidGb7UcWX%2B0AavvA%2Fq0B67mDHV%2B8khnE%2BDo6i87JYAvRtdMv3JNUt%2BBbN0eRXQKX0HXxQVH8CrdwXPO7j8TNKFhI9y7xxM8XK0pz1i%2FP9xdCsW%2FyiJOoqofcmJ%2BE1hQl5kZlx1CQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eca6f30b0ab521-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png | 104.26.8.206 | 200 OK | 36 kB |
URL GET HTTP/2verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png IP104.26.8.206:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c CertificateIssuerGoogle Trust Services LLC Subjectverifiedsecure.org FingerprintA0:39:56:47:2D:24:66:40:29:81:A2:DA:5B:19:04:77:07:A6:BA:B3 ValidityThu, 04 Apr 2024 23:26:29 GMT - Wed, 03 Jul 2024 23:26:28 GMT
File typePNG image data, 3369 x 257, 8-bit/color RGBA, non-interlaced Hash724c1e2ab214eefe0271ee598af8749a b99bb085dd791488b061c423223318345c590f24 bba2a6dbda4e6833f68c21d84c0f9a09180ae9595b238c982da300cf448ab78c
GET /uploads/0.442373001673954581K_Sa3Nyg.png HTTP/1.1
Host: verifiedsecure.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://subscribe.goodlifestylenews.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:43 GMT
content-type: image/png
content-length: 35781
last-modified: Tue, 17 Jan 2023 11:23:01 GMT
cache-control: max-age=2592000
expires: Fri, 31 May 2024 00:22:16 GMT
cf-cache-status: HIT
age: 346406
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lPya5%2BS6Em6hVieECW72K%2BywO4VjIw46PuFJLq3Fcq6PRNK8CQ0zSZzW80JFdDr2B3AwlyFtYAY1QLVYrkCvxXogWo%2BBujOUAyoErDXO%2B9FUL7A4kbXXatytdqaA8EC6vkQjpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eca6f4adec56b1-OSL
X-Firefox-Spdy: h2
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/lekovi.jpg0dc399b0f5e224039e01cdff3f66c20c1713267444861a436c4489fef7289234411f19fefe | 52.216.43.232 | 200 OK | 35 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/lekovi.jpg0dc399b0f5e224039e01cdff3f66c20c1713267444861a436c4489fef7289234411f19fefe IP52.216.43.232:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 800x532, components 3 Hash4d6d31dd9f7d5556daed4341d870111e cbb963d55c8489fd0d5c05eab6be332efc73362b c569daee115bec6a22a1729a82e16f21d75140c7af1e4f638cec73283b12962e
GET /autonewsuploads/lekovi.jpg0dc399b0f5e224039e01cdff3f66c20c1713267444861a436c4489fef7289234411f19fefe HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: u0RkDYJGvk7lNFLd0dBxmnCq/8NZVxwDuEz+cv5JU7wRydhvTj0qgta9UBUT/o331+5dI4YdLno=
x-amz-request-id: MBXGHYEYFYSESGCM
Date: Sun, 05 May 2024 00:35:44 GMT
Last-Modified: Tue, 16 Apr 2024 11:37:27 GMT
ETag: "4d6d31dd9f7d5556daed4341d870111e"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 35107
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/CMZMicro03247.jpga4ba562e97b92f0ec05568f3afc9e006171024593670422e6c2210c61598399d4f90df3143 | 52.216.43.232 | 200 OK | 76 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/CMZMicro03247.jpga4ba562e97b92f0ec05568f3afc9e006171024593670422e6c2210c61598399d4f90df3143 IP52.216.43.232:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, baseline, precision 8, 799x500, components 3 Hasha7b24482ca3f544647daaf17c1a5c47d b80c28033269ae7e141c9576b38f1188cd4e7171 210545c1ed4b8d168f2a7ff5edc52e575ba0b4cc74b06779a3129ba2def05321
GET /autonewsuploads/CMZMicro03247.jpga4ba562e97b92f0ec05568f3afc9e006171024593670422e6c2210c61598399d4f90df3143 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: p+Z/Sb/sD85c3oa+GCJOAcRx15TR97u9on2uDcXmTIYndIW+zZ7nk/NO6oOYMktoLSPfL7/kNeY=
x-amz-request-id: MBXVK744A1KYBZ62
Date: Sun, 05 May 2024 00:35:44 GMT
Last-Modified: Tue, 12 Mar 2024 12:18:58 GMT
ETag: "a7b24482ca3f544647daaf17c1a5c47d"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 75907
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/374708380_01b22b681f_c.jpg5030d67155948a6adde2256b3cfedb171713783444888d861bf558254ce11f713e2a634678 | 52.216.43.232 | 200 OK | 70 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/374708380_01b22b681f_c.jpg5030d67155948a6adde2256b3cfedb171713783444888d861bf558254ce11f713e2a634678 IP52.216.43.232:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=2], baseline, precision 8, 800x552, components 3 Hash1315a672f5789f5e2c8e2a72dd4780ba 667b1f68ab61a481d6188ba94cb79e1525bbee89 32b41b96b79b04f4d301de05953738881ba0e5b8e4fe145aea39385ce00907d6
GET /autonewsuploads/374708380_01b22b681f_c.jpg5030d67155948a6adde2256b3cfedb171713783444888d861bf558254ce11f713e2a634678 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: hZeJJMSMBnpAQh7njArz49fSWnBZ3mczoBZFcdZS37qPdwTWVqkX6lG9zw6F3fMuKlpKOjwZMq0=
x-amz-request-id: MBXNHYEQE99VZW45
Date: Sun, 05 May 2024 00:35:44 GMT
Last-Modified: Mon, 22 Apr 2024 10:57:26 GMT
ETag: "1315a672f5789f5e2c8e2a72dd4780ba"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 70531
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/001.jpg8efd64f154d5a865edb6b61de1c52c1e17139558777602c0bdce567552e7ca9183b1e71fb4 | 52.216.43.232 | 200 OK | 13 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/001.jpg8efd64f154d5a865edb6b61de1c52c1e17139558777602c0bdce567552e7ca9183b1e71fb4 IP52.216.43.232:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 267x189, components 3 Hashd98cec28948d259f191e9a5b731a7005 296bd25887b2e5e8a11dd080ec88438273e81092 8a9c4fa4d0fab283c9f8a2c1ba50bc12b0f643f2cb8d7137949f35333054d22a
GET /autonewsuploads/001.jpg8efd64f154d5a865edb6b61de1c52c1e17139558777602c0bdce567552e7ca9183b1e71fb4 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: NN/+Fk4xjm6bmaViecuswuBoPMKh949h50SIGRiLwAEsK4tQpzDhvsRQzr6xgXdKZFXEf4YDTTQ=
x-amz-request-id: MBXJ8RA1QCNRQXNX
Date: Sun, 05 May 2024 00:35:44 GMT
Last-Modified: Wed, 24 Apr 2024 10:51:19 GMT
ETag: "d98cec28948d259f191e9a5b731a7005"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 13409
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 May 2024 09:28:37 GMT
expires: Sun, 04 May 2025 09:28:37 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 54426
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/ETakeOverVSL03241.jpg7a887b2a6b36cb6e24e3c0470d5db8b5171076417718420dd7c15c8c09f7e5ddcfa507ceb0 | 52.216.43.232 | 200 OK | 114 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/ETakeOverVSL03241.jpg7a887b2a6b36cb6e24e3c0470d5db8b5171076417718420dd7c15c8c09f7e5ddcfa507ceb0 IP52.216.43.232:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=2], baseline, precision 8, 1024x683, components 3 Size114 kB (114051 bytes) Hashcb0f0fd1b6b7280d78ee706cf402338b d76f624b5302d28b47e310e47745347f31a00d91 77ed40a47bb2bb4be0588c71c877968401ed449a1e1c4aa85b8dd9a2203c8163
GET /autonewsuploads/ETakeOverVSL03241.jpg7a887b2a6b36cb6e24e3c0470d5db8b5171076417718420dd7c15c8c09f7e5ddcfa507ceb0 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 1tK/lt0CKbIkQFLekj/Oqs2iLuPS0mQjZNYxm/MfGvXt5f1mcefYzSQds4Y/Au9OIzubPXgUods=
x-amz-request-id: MBXVHFDRFWG2RMNK
Date: Sun, 05 May 2024 00:35:44 GMT
Last-Modified: Mon, 18 Mar 2024 12:16:19 GMT
ETag: "cb0f0fd1b6b7280d78ee706cf402338b"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 114051
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/Dog.jpg373f79dd8e889828c567164a9976eb5e1708518205a9047877ce8a792924271d491c1cfade | 52.216.43.232 | 200 OK | 5.7 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/Dog.jpg373f79dd8e889828c567164a9976eb5e1708518205a9047877ce8a792924271d491c1cfade IP52.216.43.232:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 251x201, components 3 Hash1b14261d5910dd6d2c053f471cefbdc8 4c038b7b23227f71ce6de90ea5e23816b27e61d0 1440670bad97bfdb121adc3e25fe1125a8a037879dc27fbbc17889c3fbac8911
GET /autonewsuploads/Dog.jpg373f79dd8e889828c567164a9976eb5e1708518205a9047877ce8a792924271d491c1cfade HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: EF3nsae9Cq8a91NQwOP3GADowWzyUJH4sGu4AMZn53JdHGMi1pfqUpENuF7myNYj/2stBjhK/V8=
x-amz-request-id: MBXRFSPF6YC36E0Y
Date: Sun, 05 May 2024 00:35:44 GMT
Last-Modified: Wed, 21 Feb 2024 12:23:27 GMT
ETag: "1b14261d5910dd6d2c053f471cefbdc8"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 5706
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/BRKOil032313.jpgd4075ab0aa0fa71dfd1489a70bf099b51707223020e6c56153312407d9516ace1922625efa | 52.216.43.232 | 200 OK | 107 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/BRKOil032313.jpgd4075ab0aa0fa71dfd1489a70bf099b51707223020e6c56153312407d9516ace1922625efa IP52.216.43.232:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1024x655, components 3 Size107 kB (106915 bytes) Hash8d4149f00ff379592d882fe78b393c24 4ad9fab291fb6f5630f2f5189b4eb58d52a6aab3 801ae0938d117a8316d954a91bf5fb7dfc07c76fd7f394946571160baab44d3b
GET /autonewsuploads/BRKOil032313.jpgd4075ab0aa0fa71dfd1489a70bf099b51707223020e6c56153312407d9516ace1922625efa HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: q1/KYBhlk5Vekz4eLzzNsPiEbll9rjLXbaY/NHH8YOta0iDnVaYa6Hia9guxexZTxoHoAI1AQqI=
x-amz-request-id: MBXJT3D40SG2KWS1
Date: Sun, 05 May 2024 00:35:44 GMT
Last-Modified: Tue, 06 Feb 2024 12:37:02 GMT
ETag: "8d4149f00ff379592d882fe78b393c24"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 106915
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/brain-3439067_1280.jpg1f7b62c0157bfe175bd08b2a717b59071714131840bb7a604ae461f6b2fbf21fdc1364bb5f | 52.216.43.232 | 200 OK | 92 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/brain-3439067_1280.jpg1f7b62c0157bfe175bd08b2a717b59071714131840bb7a604ae461f6b2fbf21fdc1364bb5f IP52.216.43.232:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x704, components 3 Hash20d31f7756b41de696671cb78f7ce21c a13f809e51cd626448a424b365fe7389a3e50169 d944248901372ee9a00a0d16025b43f10b58f332694d5ef7309202c4533947eb
GET /autonewsuploads/brain-3439067_1280.jpg1f7b62c0157bfe175bd08b2a717b59071714131840bb7a604ae461f6b2fbf21fdc1364bb5f HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: eU1qNOJXnCdXXEohV7w/GVJkArCXdUAlPLhYfhRt/AYfwqipsoff/FMRvp8evC2mr/8ULjH/ijg=
x-amz-request-id: MBXG45ZS8XDQRHE3
Date: Sun, 05 May 2024 00:35:44 GMT
Last-Modified: Fri, 26 Apr 2024 11:44:02 GMT
ETag: "20d31f7756b41de696671cb78f7ce21c"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 91471
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/nvidiia.jpgf125f8bb1c73a755837a22425d9e756616984047246205b5b2402f868f1c303a3b0b9a78dc | 52.216.43.232 | 200 OK | 185 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/nvidiia.jpgf125f8bb1c73a755837a22425d9e756616984047246205b5b2402f868f1c303a3b0b9a78dc IP52.216.43.232:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 885x868, components 3 Size185 kB (184782 bytes) Hashfc14e044f466a185e92c152d507092f9 8bc9b68e97b6e5d54293d4ef7e04083c4cbfbb29 f566bf1273da0c7d9e24d33f2a29bab745c934cddb930fb3dc245bde78af3fb6
GET /autonewsuploads/nvidiia.jpgf125f8bb1c73a755837a22425d9e756616984047246205b5b2402f868f1c303a3b0b9a78dc HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: WUk/bAsaqwN2HGnNYUHkLfLe8OvkqpkMdG8xpFSHt3Mu0L6GZPWD9yoNFKquN59UGaFin7Ed/LQ=
x-amz-request-id: MBXW14Y70N1E8CF4
Date: Sun, 05 May 2024 00:35:44 GMT
Last-Modified: Fri, 27 Oct 2023 11:05:24 GMT
ETag: "fc14e044f466a185e92c152d507092f9"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 184782
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/0.099067001676806324SMRFedCtrl0223.jpg | 52.216.43.232 | 200 OK | 133 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/0.099067001676806324SMRFedCtrl0223.jpg IP52.216.43.232:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10], baseline, precision 8, 1024x771, components 3 Size133 kB (132852 bytes) Hash5687439e1978bd7fdad82d8d9b40589a caf45e2235d11748a944e68abdb2c797eaf1caf7 a612c05d44abfdec6f7a49b2848057039b7d4fb6b75178f0a228893cba3b4d04
GET /autonewsuploads/0.099067001676806324SMRFedCtrl0223.jpg HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: adPaI+jaQf8Z31vzeGKwHgGkw3G21UiW3TfxKcuPent27IpeoRhTHX69Am9ehpUPgeDIzMwBrcU=
x-amz-request-id: MBXYRN165FM42GPW
Date: Sun, 05 May 2024 00:35:44 GMT
Last-Modified: Wed, 08 Mar 2023 14:22:23 GMT
ETag: "5687439e1978bd7fdad82d8d9b40589a"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 132852
|
|
| subscribe.goodlifestylenews.com/favicon.ico | 104.21.30.61 | 404 Not Found | 238 B |
URL GET HTTP/1.1subscribe.goodlifestylenews.com/favicon.ico IP104.21.30.61:80
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c
Cookie: PHPSESSID=5e748122012668f6fad13ea3326d35d7; _ga_WJJ5P9F2X8=GS1.1.1714869343.1.0.1714869343.0.0.0; _ga=GA1.1.1818361538.1714869343
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Sun, 05 May 2024 00:35:44 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 19
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bm8taI4BDViMzj0UDNVyBydg6kE04oEI%2BUZZ1r412L6hVPikhBiBXdHPcsEgRptQh6lq7yZKP%2BNXjHRF69IwzNby4ycIBqTSvrcsbpF7MnZgMl7oQ7TAy58JeUx1gs%2F%2BImk6UIf8FhN0Gjz%2BQA%2B3gHLw"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87eca6f81b1756be-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| fonts.googleapis.com/css?family=Roboto | 142.250.74.106 | 200 OK | 2.2 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto IP142.250.74.106:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (2218), with no line terminators Hash807b0cff287eb02fda9eb3a87e2746a5 34a0af77abd82f106052590a0e624b2803a6572d 35c288796da2ba3b90a7a7ef7e75a5e7eb55cad381d227beda8c5e400a04caff
GET /css?family=Roboto HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 May 2024 00:35:42 GMT
date: Sun, 05 May 2024 00:35:42 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17 | 172.67.172.49 | 302 Found | 0 B |
URL User Request GET HTTP/3subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17 IP172.67.172.49:443
CertificateIssuerGoogle Trust Services LLC Subjectgoodlifestylenews.com FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40 ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /?email=andy@globalcrane.net&redirect_id=44643&bid=17 HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Sun, 05 May 2024 00:35:41 GMT
content-type: text/html; charset=UTF-8
location: https://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=5e748122012668f6fad13ea3326d35d7; path=/
vary: Accept-Encoding,User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=syYNorD78KbDRaRPABAvc7Pt4T6xIcSy8qHfkbwc%2FSrWrZg3LkR4JBWE9xQ%2BnWIprwRHuiZZ9vtE%2FR4NeVEURAhEZQoj%2FOVBQw5gyXW8gHbXzO4MCezTICeJ7w1Tx66NkebDsRLmoQ9fBuLQohKAIsMO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eca6dc7a5a5687-OSL
alt-svc: h3=":443"; ma=86400
|
|
| subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c | 104.21.30.61 | 200 OK | 31 kB |
URL User Request GET HTTP/1.1subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c IP104.21.30.61:80
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=5e748122012668f6fad13ea3326d35d7
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 00:35:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST
Access-Control-Allow-Headers: X-Requested-With
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding,User-Agent
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GCwLb2jC6qHHGVfk78ZqQBc6xks3%2FFkHNEUhDFaQOhYUn57eAy2uoy%2F9I1lQg%2BahMzXXP8n6NIk0ZNiNBAxSEkmUTyGcqAmlCGAvdmWcfSiuSKvC9G1pTN30Itkf%2BQ3zmcbGNZtTg42vjsMVcdEik60y"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87eca6e7cb970b4d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| go.goodlifestylenews.com/dummyarticleclickers_44643/6d62df1aad0bf0b7348084ce0dcae63c/55/leadsource/2608/1610/345599b9c81e1952060ac22c7b9cc293/mpmta/news/44643/17 | 172.67.172.49 | 302 Found | 0 B |
URL User Request GET HTTP/2go.goodlifestylenews.com/dummyarticleclickers_44643/6d62df1aad0bf0b7348084ce0dcae63c/55/leadsource/2608/1610/345599b9c81e1952060ac22c7b9cc293/mpmta/news/44643/17 IP172.67.172.49:443
CertificateIssuerGoogle Trust Services LLC Subjectgoodlifestylenews.com FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40 ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /dummyarticleclickers_44643/6d62df1aad0bf0b7348084ce0dcae63c/55/leadsource/2608/1610/345599b9c81e1952060ac22c7b9cc293/mpmta/news/44643/17 HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sun, 05 May 2024 00:35:38 GMT
content-type: text/html; charset=UTF-8
location: https://verifiedwebpage.com/go?ehash=6d62df1aad0bf0b7348084ce0dcae63c&product=48088&ar=55&cid=2608&lid=1610&slhash=345599b9c81e1952060ac22c7b9cc293&redirect_id=44643&bid=17
cache-control: max-age=600
expires: Sun, 05 May 2024 00:45:37 GMT
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fdAYUrtFsqDX12BlMH5GRzLdA%2F3zQG7IMqT0QXolZyMrQKL66jI7vnkaepTOnFDZ8egQOu6%2FQXZikasjVAj97YQv3E2GdvYLuU0DYDBB13a0LdHeBQ5aJBLfPOb6Iy3UqjbZxGEy7RXJncA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eca6d1acdbb4f1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c | 0.0.0.0 | | 0 B |
URL User Request GET subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c IP0.0.0.0:0
CertificateIssuerGoogle Trust Services LLC Subjectgoodlifestylenews.com FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40 ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=5e748122012668f6fad13ea3326d35d7
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| subscriberwelcome.com/uploads/0.1663680016738854302D2(1).jpg | 104.21.66.20 | 200 OK | 786 kB |
URL GET HTTP/2subscriberwelcome.com/uploads/0.1663680016738854302D2(1).jpg IP104.21.66.20:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=andy@globalcrane.net&redirect_id=44643&bid=17&ses_id=73b619c2275a4263b9eab40acb8e226c CertificateIssuerGoogle Trust Services LLC Subjectsubscriberwelcome.com FingerprintDA:EE:DE:64:E3:D6:C6:7B:68:0D:DF:8D:B3:56:E9:59:2C:55:00:E1 ValidityFri, 08 Mar 2024 02:01:15 GMT - Thu, 06 Jun 2024 02:01:14 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Windows), datetime=2023:01:10 16:36:41], baseline, precision 8, 1800x2700, components 3 Size786 kB (786432 bytes) Hashe809f047bed959d07a3034b3631b4084 452453517ac9bf9c23f3d347a20f4d4c979e45f2 7a26abefd71ecce011abc43df6dc7e915cab6e8f14759c155a1d5977a81ade9b
GET /uploads/0.1663680016738854302D2(1).jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:43 GMT
content-type: image/jpeg
content-length: 1114284
last-modified: Mon, 16 Jan 2023 16:10:30 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9GPm77sf4iwRQbOvE2VkChiSDtV2Rhynb2RfT2hqVithutdceILJX1q8MPB7cxAevvu9qwIDUD0vLlebwlWD46UE1cnS2Dfz6Vx3PuEPoSzP7Z9XXpyDNO4vO89AyYDWQ3Dy2FYGx2Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eca6f2baddb521-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|