Report - go.goodlifestylenews.com/dummyarticleclickers_44950/ec55f96bdbee115719939c545d55f6bb/55/leadsource/2617/1610/ca3d1c910d8285fdc928a0b7af721c0c/mpmta/news/44950/17

Report Overview

Submitted URL
go.goodlifestylenews.com/dummyarticleclickers_44950/ec55f96bdbee115719939c545d55f6bb/55/leadsource/2617/1610/ca3d1c910d8285fdc928a0b7af721c0c/mpmta/news/44950/17
IP
104.21.30.61
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-08 11:40:50
Access
public
Website Title
Good Lifestyle News (MP) Flow
Final URL
subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
14

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-05-08	438 B	102 kB	142.250.74.168
verifiedwebpage.com	unknown	2022-03-23	2022-03-23	2024-04-18	620 B	1.0 kB	104.18.21.187
go.goodlifestylenews.com	unknown	2020-07-10	2022-06-02	2024-04-18	892 B	1.7 kB	104.21.30.61
subscribe.goodlifestylenews.com	unknown	2020-07-10	2023-01-18	2024-04-18	3.0 kB	95 kB	172.67.172.49
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2024-05-07	447 B	34 kB	142.250.74.170
cdn.jsdelivr.net	439	2012-05-16	2012-09-30	2024-05-07	1.0 kB	49 kB	151.101.1.229
verifiedsecure.org	unknown	2015-12-08	2016-04-06	2024-04-18	433 B	36 kB	104.26.8.206
s3.us-east-1.amazonaws.com	4041	2005-08-18	2017-11-22	2024-05-07	5.6 kB	2.0 MB	52.217.167.168
subscriberwelcome.com	unknown	2022-11-16	2022-11-16	2024-04-18	1.9 kB	2.9 MB	104.21.66.20
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-08	534 B	17 kB	142.250.74.99
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-07	444 B	2.8 kB	142.250.74.138

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-08	medium	goodlifestylenews.com	Sinkholed
2024-05-08	medium	goodlifestylenews.com	Sinkholed
2024-05-08	medium	goodlifestylenews.com	Sinkholed
2024-05-08	medium	goodlifestylenews.com	Sinkholed
2024-05-08	medium	goodlifestylenews.com	Sinkholed
2024-05-08	medium	goodlifestylenews.com	Sinkholed
2024-05-08	medium	goodlifestylenews.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3	152 B	2023-06-01	2024-05-18
Pretty URL subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3 IP 104.21.30.61 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-01 19:31:02 Last Seen2024-05-18 00:54:35 Times Seen337 Hash f428121d5a5fef65b4475cd12946bc04 ee95d8f82bdc0b8001fd8ffa74edd84d5640aa87 a27ebc0bf8c54f5e2c909f78d326d964e1555bae0254d575f6511b0dcc92ae12 Loading...

	ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js	96 kB	2023-03-07	2024-05-19
Pretty URL ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js IP 142.250.74.170 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:02 Last Seen2024-05-19 19:16:43 Times Seen48080 Hash 8101d596b2b8fa35fe3a634ea342d7c3 d6c1f41972de07b09bfa63d2e50f9ab41ec372bd 540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441 Loading...

	cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.min.js	60 kB	2023-03-08	2024-05-19
Pretty URL cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.min.js IP 151.101.1.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 20:35:41 Last Seen2024-05-19 08:12:19 Times Seen1418 Hash c5236e5d6a5d0ff97ff8c8e5102c6c03 6fbfdbddbe85c578de559adcc8d07cccbc16d514 87538c4b7e488f5a49d12f98d6a04afc61d00f26a790f319569799acd434eb65 Loading...

	subscribe.goodlifestylenews.com/jquery.caret.js	2.4 kB	2023-05-08	2024-05-18
Pretty URL subscribe.goodlifestylenews.com/jquery.caret.js IP 104.21.30.61 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-08 14:36:52 Last Seen2024-05-18 00:54:35 Times Seen640 Hash 35c3ec8db4ff6e862db42516436216a1 7d9d7731403868cc34edaad1d9e17311541a6f77 adef482d97f599ba0e720ecf2aba0581ea1591ba1bb1eb271f1d98b279ff81ba Loading...

	subscribe.goodlifestylenews.com/jquery.mobilePhoneNumber.js	26 kB	2023-05-08	2024-05-18
Pretty URL subscribe.goodlifestylenews.com/jquery.mobilePhoneNumber.js IP 104.21.30.61 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-08 14:36:52 Last Seen2024-05-18 00:54:35 Times Seen773 Hash 0dbbb5873b895ea3be425af219cf85de 7b9dba563376d7dbd1c5b9b7064ab87eadad5591 02cbbdeb2244fd2855c49ab964c15001bde126c21cc5890d176c537878d6152b Loading...

	subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3	194 B	2023-05-08	2024-05-18
Pretty URL subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3 IP 104.21.30.61 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-08 14:36:52 Last Seen2024-05-18 00:54:35 Times Seen385 Hash d7ae17d684ddcfa308369e402855826d d6da811e60cab233619e114e823ab9db7242bd5d e42a64d5a754498cd56f9079fd8e341c480ea2a15a6060e00924814586f8c44f Loading...

	subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3	641 B	2023-05-08	2024-05-18
Pretty URL subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3 IP 104.21.30.61 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-08 14:36:52 Last Seen2024-05-18 00:54:35 Times Seen385 Hash c2855664f7a14ee99090a0366d9d1e03 35ba8e0f5b5181a8df832c0e12774a761d465dda bf66df111d26d4ef5b3e5df0f4df141fe5d7632260cb83308bfed72caf323af0 Loading...

	subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3	1.3 kB	2024-05-08	2024-05-08
Pretty URL subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3 IP 104.21.30.61 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-08 13:40:51 Last Seen2024-05-08 13:40:51 Times Seen1 Hash 080a8d62d0cc2db53c8c43675eeac84d 17194903a5384d5cdab985442cc651cec9071862 411b7cbba2b74c33d38c98ac34da4bda509a0cec40dc0c5087ab2342bd149939 Loading...

	www.googletagmanager.com/gtag/js?id=G-WJJ5P9F2X8	305 kB	2024-05-08	2024-05-08
Pretty URL www.googletagmanager.com/gtag/js?id=G-WJJ5P9F2X8 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-08 13:40:51 Last Seen2024-05-08 13:40:51 Times Seen2 Hash 8c5dbd72f545ac6c03a9ef0a8f4199f6 8351b417a4f19c1152694221828f3912edf722f2 7b49ac3118f0067bed3042792ad7f7327ed52310961c1a34111e5c38e9f3dca1 Loading...

HTTP Transactions (29)

URL IP Response Size

go.goodlifestylenews.com/

104.21.30.61

143 B

URL
go.goodlifestylenews.com/
IP
104.21.30.61:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text
Size
143 B (143 bytes)
Hash
f1fb042c62910c34be16ad91cbbd71fa
5bc7aceba9a8704ef4b1d427d7d08b140afcd866
9278d16ed2fdcd5dc651615b0b8adc6b55fb667a9d106a9891b861d4561d9a24

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 11:40:26 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 14 Nov 2023 15:41:05 GMT
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Vary: Accept-Encoding,User-Agent
Pragma: no-cache
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pkZTRWyXptnqA3QLdIqtVLk42Tdx5U9ZOwv7T171YQrfqS3Vi0U%2Fv5TySOwO6LHIY4JRHyLtLlh2I%2BWQs9jSzsY19yIdT04bzn2Q9gISMUUlguZKRz6OBPSApIq4RmYGHbThPBz7BzI4kEo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 88092cc948ccb517-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17

172.67.172.49

31 kB

URL User Request GET
subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17
IP
172.67.172.49:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40
ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (393)
Size
31 kB (31085 bytes)
Hash
3327aeeb7e980aecc0084d12cf52c859
26b0b724d9e580354c9b6fc2f3edb6f921f6875b
50c1c2bcbaef1a6803e71df5654ccd11c7ae11b5ba0ceb7d34d224885a929e76

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17 HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Wed, 08 May 2024 11:40:28 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST
Access-Control-Allow-Headers: X-Requested-With
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=82a443dfbcc0b8c174ce535a9153b860; path=/
location: http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Vary: Accept-Encoding,User-Agent
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nJqEXAyfVJqgUpty%2Bx%2BPM6uKwQBBDcg9jS5Hi14UYvjcNjoZm7xnfzKXEvXE23JF%2BfQPqzyBSgsvnAJrkntZCmXyEJMPKRfVp2gyAMzmPg2QEJuA%2BG%2FN%2BeHxrPfeg2HT8nBf9yM%2BtZ63okESIA21hcm1"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 88092ccbeb3956b9-OSL
alt-svc: h2=":443"; ma=60

ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js

142.250.74.170

200 OK

33 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js
IP
142.250.74.170:443
ASN
#15169 GOOGLE

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
JavaScript source, ASCII text, with very long lines (32086)
Size
33 kB (33434 bytes)
Hash
8101d596b2b8fa35fe3a634ea342d7c3
d6c1f41972de07b09bfa63d2e50f9ab41ec372bd
540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441

HTTP Headers

GET /ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33434
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 19:54:46 GMT
expires: Fri, 02 May 2025 19:54:46 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 488743
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.min.js

151.101.1.229

200 OK

17 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.min.js
IP
151.101.1.229:443
ASN
#54113 FASTLY

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
JavaScript source, ASCII text, with very long lines (60201)
Size
17 kB (17366 bytes)
Hash
c5236e5d6a5d0ff97ff8c8e5102c6c03
6fbfdbddbe85c578de559adcc8d07cccbc16d514
87538c4b7e488f5a49d12f98d6a04afc61d00f26a790f319569799acd434eb65

HTTP Headers

GET /npm/bootstrap@5.2.2/dist/js/bootstrap.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.2.2
x-jsd-version-type: version
etag: W/"ec40-b7/b3b6FxXjeVZrcyNB8zLwW1RQ"
content-encoding: br
accept-ranges: bytes
date: Wed, 08 May 2024 11:40:29 GMT
age: 2801392
x-served-by: cache-fra-etou8220032-FRA, cache-hel1410032-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 17366
X-Firefox-Spdy: h2

verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png

104.26.8.206

200 OK

36 kB

URL GET HTTP/2
verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png
IP
104.26.8.206:443
ASN
#13335 CLOUDFLARENET

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerGoogle Trust Services LLC
Subjectverifiedsecure.org
FingerprintA0:39:56:47:2D:24:66:40:29:81:A2:DA:5B:19:04:77:07:A6:BA:B3
ValidityThu, 04 Apr 2024 23:26:29 GMT - Wed, 03 Jul 2024 23:26:28 GMT

File type
PNG image data, 3369 x 257, 8-bit/color RGBA, non-interlaced
Size
36 kB (35781 bytes)
Hash
724c1e2ab214eefe0271ee598af8749a
b99bb085dd791488b061c423223318345c590f24
bba2a6dbda4e6833f68c21d84c0f9a09180ae9595b238c982da300cf448ab78c

HTTP Headers

GET /uploads/0.442373001673954581K_Sa3Nyg.png HTTP/1.1
Host: verifiedsecure.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 08 May 2024 11:40:29 GMT
content-type: image/png
content-length: 35781
last-modified: Tue, 17 Jan 2023 11:23:01 GMT
cache-control: max-age=2592000
expires: Fri, 31 May 2024 00:22:16 GMT
cf-cache-status: HIT
age: 645492
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0aQgCJqHxUd7Zi7ZP3fUcDVETHouVz%2FqjjTYDQ3dOfG6YBVZYEXZ3oUXcVqdTLlZZ8jzxtO82%2FE1Jl9IF4VvgjVlQ2FVqXwkDEeLM9T5sJQXb5quCwG%2FqmpOMwlpejI2wCvFCA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88092cdcda0d56bf-OSL
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css

151.101.1.229

200 OK

30 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css
IP
151.101.1.229:443
ASN
#54113 FASTLY

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
Unicode text, UTF-8 text, with very long lines (65305)
Size
30 kB (30336 bytes)
Hash
025df1ec88740cad5ff14bb3380da6dd
7abed070e37ce060c0a561575f1d41a7f248fc74
2143941c03dacda8b4f1016ced6e0c6f34e5c04585a3bcffe33c3c626c448a4a

HTTP Headers

GET /npm/bootstrap@5.2.2/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.2.2
x-jsd-version-type: version
etag: W/"2f955-er7QcON84GDApWFXXx1Bp/JI/HQ"
content-encoding: br
accept-ranges: bytes
date: Wed, 08 May 2024 11:40:29 GMT
age: 21814002
x-served-by: cache-fra-eddf8230072-FRA, cache-hel1410032-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 30336
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=G-WJJ5P9F2X8

142.250.74.168

200 OK

102 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=G-WJJ5P9F2X8
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT

File type
JavaScript source, ASCII text, with very long lines (5955)
Size
102 kB (101583 bytes)
Hash
8c5dbd72f545ac6c03a9ef0a8f4199f6
8351b417a4f19c1152694221828f3912edf722f2
7b49ac3118f0067bed3042792ad7f7327ed52310961c1a34111e5c38e9f3dca1

HTTP Headers

GET /gtag/js?id=G-WJJ5P9F2X8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 11:40:29 GMT
expires: Wed, 08 May 2024 11:40:29 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 101583
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

s3.us-east-1.amazonaws.com/autonewsuploads/fat.jpg991af566c1ee84bedd4d69b160eda714171413146693f5245a9e9330e8b08f52b7d1bfe4eb

52.217.167.168

200 OK

30 kB

URL GET HTTP/1.1
s3.us-east-1.amazonaws.com/autonewsuploads/fat.jpg991af566c1ee84bedd4d69b160eda714171413146693f5245a9e9330e8b08f52b7d1bfe4eb
IP
52.217.167.168:443
ASN
#16509 AMAZON-02

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", progressive, precision 8, 1024x576, components 3
Size
30 kB (29726 bytes)
Hash
70d865b07b8d36b57aa63a0848015f8f
c8cead4fb3a6e64ac54759b48842b7a032f8286e
e94553c11550ae95dad8cadb8ee80592b54bb09cc6873ef01e14c7206ef8d688

HTTP Headers

GET /autonewsuploads/fat.jpg991af566c1ee84bedd4d69b160eda714171413146693f5245a9e9330e8b08f52b7d1bfe4eb HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: ngkePmPrj14MkldbjVLEAabR2y9Lo8+4IZjiP/7MSvycVp4g5QBrkuH0NU3cMDLhwSgxkgsLu90=
x-amz-request-id: J5N8JZ2MBQ76E62D
Date: Wed, 08 May 2024 11:40:30 GMT
Last-Modified: Fri, 26 Apr 2024 11:37:48 GMT
ETag: "70d865b07b8d36b57aa63a0848015f8f"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 29726

subscriberwelcome.com/uploads/0.204734001673521892LifeAfterUkraine.jpeg

104.21.66.20

200 OK

400 kB

URL GET HTTP/2
subscriberwelcome.com/uploads/0.204734001673521892LifeAfterUkraine.jpeg
IP
104.21.66.20:443
ASN
#13335 CLOUDFLARENET

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintC8:3F:88:99:86:9B:20:E9:77:44:04:5F:4D:C8:B8:D2:23:5F:C5:D2
ValidityMon, 06 May 2024 01:45:00 GMT - Sun, 04 Aug 2024 01:44:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2550x3300, components 3
Size
400 kB (400505 bytes)
Hash
b9a9621a927a5b9a9c71fdbb53bf8991
9c4cc398edb33da6a79e62701867cbf7fed4056d
d0342e1b39e1c9b80bfb574b18e0a5d9f9cf00e00ca7cf3b2ce1ded70f3bb9ab

HTTP Headers

GET /uploads/0.204734001673521892LifeAfterUkraine.jpeg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 11:40:29 GMT
content-type: image/jpeg
content-length: 400505
last-modified: Thu, 12 Jan 2023 11:11:32 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rZsWc3%2Bl4MKUYKb5IfeHa3boreMN%2Fzm7iJ26kxTz6NqGgdk0ho0zmtvU%2FCaPJ0JcsnZUFTGP%2BxhL%2F%2B%2FYHiHAaniRjm6ZQlO0%2BgS700NfuIAvZ%2BqU5KDD0na9mgwO921ebb8UatC%2BrXI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88092cdd1b8e5699-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

subscriberwelcome.com/uploads/0.1663680016738854302D2(1).jpg

104.21.66.20

200 OK

1.1 MB

URL GET HTTP/2
subscriberwelcome.com/uploads/0.1663680016738854302D2(1).jpg
IP
104.21.66.20:443
ASN
#13335 CLOUDFLARENET

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintC8:3F:88:99:86:9B:20:E9:77:44:04:5F:4D:C8:B8:D2:23:5F:C5:D2
ValidityMon, 06 May 2024 01:45:00 GMT - Sun, 04 Aug 2024 01:44:59 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Windows), datetime=2023:01:10 16:36:41], baseline, precision 8, 1800x2700, components 3
Size
1.1 MB (1114284 bytes)
Hash
b02e84cdcd5a3e55ded5e64dfd307124
bfaad4b8b4b1b1fafffeda314b8868c94e7280c8
d67985993c18e2a7b22a4193c0613a65096b3376d64539feb646739798d2cf5c

HTTP Headers

GET /uploads/0.1663680016738854302D2(1).jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 11:40:29 GMT
content-type: image/jpeg
content-length: 1114284
last-modified: Mon, 16 Jan 2023 16:10:30 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sdm0K7LsKic5PvWrYtmkoMBairvuMsaeRxWbtCh%2BzUuTcy9MMYiwspmSUCk7IqipN%2FTtG5PzhQfSJ%2FGIv8Fge0A9i32fzwrvgGLHAqs037lQ5lFu1stxvm5n8ak9n05K2Fukk4cGXoM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88092cdd1b8b5699-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

s3.us-east-1.amazonaws.com/autonewsuploads/lekovi.jpg0dc399b0f5e224039e01cdff3f66c20c1713267444861a436c4489fef7289234411f19fefe

52.217.167.168

200 OK

35 kB

URL GET HTTP/1.1
s3.us-east-1.amazonaws.com/autonewsuploads/lekovi.jpg0dc399b0f5e224039e01cdff3f66c20c1713267444861a436c4489fef7289234411f19fefe
IP
52.217.167.168:443
ASN
#16509 AMAZON-02

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 800x532, components 3
Size
35 kB (35107 bytes)
Hash
4d6d31dd9f7d5556daed4341d870111e
cbb963d55c8489fd0d5c05eab6be332efc73362b
c569daee115bec6a22a1729a82e16f21d75140c7af1e4f638cec73283b12962e

HTTP Headers

GET /autonewsuploads/lekovi.jpg0dc399b0f5e224039e01cdff3f66c20c1713267444861a436c4489fef7289234411f19fefe HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: u1UqTwXoUDfc9cRQTLlaG9m/cwbRIELLxY8vp9soV72H6aSQUOFBxR55bssUXe7QmeVmGY/1xKM=
x-amz-request-id: J5NAFB82RPEP85J8
Date: Wed, 08 May 2024 11:40:30 GMT
Last-Modified: Tue, 16 Apr 2024 11:37:27 GMT
ETag: "4d6d31dd9f7d5556daed4341d870111e"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 35107

s3.us-east-1.amazonaws.com/autonewsuploads/Dog.jpg373f79dd8e889828c567164a9976eb5e1708518205a9047877ce8a792924271d491c1cfade

52.217.167.168

200 OK

5.7 kB

URL GET HTTP/1.1
s3.us-east-1.amazonaws.com/autonewsuploads/Dog.jpg373f79dd8e889828c567164a9976eb5e1708518205a9047877ce8a792924271d491c1cfade
IP
52.217.167.168:443
ASN
#16509 AMAZON-02

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 251x201, components 3
Size
5.7 kB (5706 bytes)
Hash
1b14261d5910dd6d2c053f471cefbdc8
4c038b7b23227f71ce6de90ea5e23816b27e61d0
1440670bad97bfdb121adc3e25fe1125a8a037879dc27fbbc17889c3fbac8911

HTTP Headers

GET /autonewsuploads/Dog.jpg373f79dd8e889828c567164a9976eb5e1708518205a9047877ce8a792924271d491c1cfade HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: 7s9qpGkKIZKu+FOOeIQBPfRUDKw2CUsL3Z5/h8J77pDdtB4QIUHVsbs4g5Pqsa5OgNCs5Nz+vO4=
x-amz-request-id: J5NEY2S03PH6FYBA
Date: Wed, 08 May 2024 11:40:30 GMT
Last-Modified: Wed, 21 Feb 2024 12:23:27 GMT
ETag: "1b14261d5910dd6d2c053f471cefbdc8"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 5706

s3.us-east-1.amazonaws.com/autonewsuploads/0_xMIObdsLB7XPfX6M.jpg831e6c0cac9852ee802169b318eafcc21703851588ea1d7d0705a741428b565fef908b1c90

52.217.167.168

200 OK

130 kB

URL GET HTTP/1.1
s3.us-east-1.amazonaws.com/autonewsuploads/0_xMIObdsLB7XPfX6M.jpg831e6c0cac9852ee802169b318eafcc21703851588ea1d7d0705a741428b565fef908b1c90
IP
52.217.167.168:443
ASN
#16509 AMAZON-02

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 800x550, components 3
Size
130 kB (130538 bytes)
Hash
81ed4e278b514ede42a3fa0bc59ae812
79ea6edc5c2326a174f137cdb092754eafa20d3f
bc9da136ab9d91bdf0e1a667dd123f362fa5ab2dd7f2ee22c9aaff3ebd619588

HTTP Headers

GET /autonewsuploads/0_xMIObdsLB7XPfX6M.jpg831e6c0cac9852ee802169b318eafcc21703851588ea1d7d0705a741428b565fef908b1c90 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: ISVtVYft9mmcxTbnfQjs8CJFqvDxmtDScqmx7eIhFr0Gdpb9RZCalp5diWt49/81iLp7+Yc55M0=
x-amz-request-id: J5N3WJG26YAWMNFP
Date: Wed, 08 May 2024 11:40:30 GMT
Last-Modified: Fri, 29 Dec 2023 12:06:30 GMT
ETag: "81ed4e278b514ede42a3fa0bc59ae812"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 130538

subscriberwelcome.com/uploads/0.1721950016738853872D1(1).jpg

104.21.66.20

200 OK

1.3 MB

URL GET HTTP/2
subscriberwelcome.com/uploads/0.1721950016738853872D1(1).jpg
IP
104.21.66.20:443
ASN
#13335 CLOUDFLARENET

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintC8:3F:88:99:86:9B:20:E9:77:44:04:5F:4D:C8:B8:D2:23:5F:C5:D2
ValidityMon, 06 May 2024 01:45:00 GMT - Sun, 04 Aug 2024 01:44:59 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Windows), datetime=2023:01:07 00:05:06], baseline, precision 8, 1800x2700, components 3
Size
1.3 MB (1288007 bytes)
Hash
91e68c3d20f4e55b01fdbaa834b4e4e6
e54e4ea7f042d2124aa1be976a6fe9d708bb4f9f
3cab775e25b68c23b905d547373476f046b0101e7cfdbd6f016e302f5a429988

HTTP Headers

GET /uploads/0.1721950016738853872D1(1).jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 11:40:29 GMT
content-type: image/jpeg
content-length: 1288007
last-modified: Mon, 16 Jan 2023 16:09:47 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C3LExUlbuY2xalx7SFvvSFruacFSHBh%2BBON58dZ0vVIt7j5owIf%2F1jbrKHr%2BHPAS1dn59c6NNhODaE9po6sWVPw0xfqOjJMM31Rh2x1Sdkro9TVVScZX%2FOqTFsDrQWBhhQVk281rUbo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88092cdd2b915699-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

subscriberwelcome.com/uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg

104.21.66.20

200 OK

144 kB

URL GET HTTP/2
subscriberwelcome.com/uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg
IP
104.21.66.20:443
ASN
#13335 CLOUDFLARENET

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintC8:3F:88:99:86:9B:20:E9:77:44:04:5F:4D:C8:B8:D2:23:5F:C5:D2
ValidityMon, 06 May 2024 01:45:00 GMT - Sun, 04 Aug 2024 01:44:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 966x1449, components 3
Size
144 kB (144253 bytes)
Hash
e7eb0da863b2d3ead5846cdc3263a233
138225ea3d8ff08f07b046b858bf46bf2bba2e96
ff19a64983ac2748d6b8361212f1fc41814e1acd0d157ee9c736bbd2a4a03180

HTTP Headers

GET /uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 11:40:30 GMT
content-type: image/jpeg
content-length: 144253
last-modified: Mon, 20 Feb 2023 15:41:11 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rOMkszJJr%2FmzNP1%2BgQe4BhHJK5Wkr%2B%2FQULaYrplqs3%2Bs0JVIhevDeBn5fln3Z9plEOyiV8L5ubqWhjiYn6lj%2FRVmAwDADlogy8QLsDKJrokUZL5c59RYokeOlJklP%2Bp9WsGB7ZCiJj0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88092cdd2b905699-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

s3.us-east-1.amazonaws.com/autonewsuploads/ETakeOverVSL03241.jpg7a887b2a6b36cb6e24e3c0470d5db8b5171076417718420dd7c15c8c09f7e5ddcfa507ceb0

52.217.167.168

200 OK

114 kB

URL GET HTTP/1.1
s3.us-east-1.amazonaws.com/autonewsuploads/ETakeOverVSL03241.jpg7a887b2a6b36cb6e24e3c0470d5db8b5171076417718420dd7c15c8c09f7e5ddcfa507ceb0
IP
52.217.167.168:443
ASN
#16509 AMAZON-02

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=2], baseline, precision 8, 1024x683, components 3
Size
114 kB (114051 bytes)
Hash
cb0f0fd1b6b7280d78ee706cf402338b
d76f624b5302d28b47e310e47745347f31a00d91
77ed40a47bb2bb4be0588c71c877968401ed449a1e1c4aa85b8dd9a2203c8163

HTTP Headers

GET /autonewsuploads/ETakeOverVSL03241.jpg7a887b2a6b36cb6e24e3c0470d5db8b5171076417718420dd7c15c8c09f7e5ddcfa507ceb0 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: fO9/qNhITNg439TxHp2KkzItUQRtTLj2LvT7Y4RyzXp34OB60/YqozzO9SdsSkHaloSJfPjo97k=
x-amz-request-id: J5N3M77W6016D4DG
Date: Wed, 08 May 2024 11:40:30 GMT
Last-Modified: Mon, 18 Mar 2024 12:16:19 GMT
ETag: "cb0f0fd1b6b7280d78ee706cf402338b"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 114051

s3.us-east-1.amazonaws.com/autonewsuploads/HBloodPressure02232.jpgb93a93ed21ae4eca5aadaa8680b97f9e1686656575b2dca7f9dd2e5fc302ab6b67bd49d194

52.217.167.168

200 OK

30 kB

URL GET HTTP/1.1
s3.us-east-1.amazonaws.com/autonewsuploads/HBloodPressure02232.jpgb93a93ed21ae4eca5aadaa8680b97f9e1686656575b2dca7f9dd2e5fc302ab6b67bd49d194
IP
52.217.167.168:443
ASN
#16509 AMAZON-02

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 910x603, components 3
Size
30 kB (29512 bytes)
Hash
248ca831a36673a7eb9852980d350ba4
628017ad57b064d55427a308c7ec220e4926d2d3
54a74e4f40f9dd31c0b3731f6b8ca7678aaa002cd00e1fd7ab7c267c76dd84b6

HTTP Headers

GET /autonewsuploads/HBloodPressure02232.jpgb93a93ed21ae4eca5aadaa8680b97f9e1686656575b2dca7f9dd2e5fc302ab6b67bd49d194 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: TDKFnpkhfv4fj+5sbMsLk5p3rt4qL1l1Ru4mADNmyczCPhXM/F39jSis82Cgeux4jgpweJ/TeOw=
x-amz-request-id: JNGMB3RCXJ3QT39J
Date: Wed, 08 May 2024 11:40:31 GMT
Last-Modified: Tue, 13 Jun 2023 11:42:57 GMT
ETag: "248ca831a36673a7eb9852980d350ba4"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 29512

s3.us-east-1.amazonaws.com/autonewsuploads/Doomsday07231.jpg3299e99b7e66ba7bebade79da4d83ca51689679479727a12f1453aa468691d60b4dd73073d

52.217.167.168

200 OK

433 kB

URL GET HTTP/1.1
s3.us-east-1.amazonaws.com/autonewsuploads/Doomsday07231.jpg3299e99b7e66ba7bebade79da4d83ca51689679479727a12f1453aa468691d60b4dd73073d
IP
52.217.167.168:443
ASN
#16509 AMAZON-02

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, description=Convoys of armed US Army (USA) High-Mobility Multipurpose Wheeled Vehicles (HMMWV) merge on the location as USA 101st Airborne , orientation=upper-left, xresolution=563, yresolution=571, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2003:11:20 08:18:15], baseline, precision 8, 1024x672, components 3
Size
433 kB (432585 bytes)
Hash
6e58f72ac11c012924af9bde04584b81
4ee205efa682b8cbb93ccfb0b355d1c0ed4a5faf
96fb5e8a70b47dab13fd7ce3cb597fdea465c43436eaaee2754c9d61ec648195

HTTP Headers

GET /autonewsuploads/Doomsday07231.jpg3299e99b7e66ba7bebade79da4d83ca51689679479727a12f1453aa468691d60b4dd73073d HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: HLtnlmFQw3cSYZUAMc+bfNXc9nuSCBt7F2VTwtWIIpsyEgKbQOPYCIWHg5lFqV0dzYofsU7wTGI=
x-amz-request-id: J5NCT30H55J3HVWC
Date: Wed, 08 May 2024 11:40:30 GMT
Last-Modified: Tue, 18 Jul 2023 11:24:40 GMT
ETag: "6e58f72ac11c012924af9bde04584b81"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 432585

s3.us-east-1.amazonaws.com/autonewsuploads/brain.jpg9d9229a2bf51f9d8a0adbdd30bd79b2d17141297609ec026998eb164a87c6d588761732ec1

52.217.167.168

200 OK

131 kB

URL GET HTTP/1.1
s3.us-east-1.amazonaws.com/autonewsuploads/brain.jpg9d9229a2bf51f9d8a0adbdd30bd79b2d17141297609ec026998eb164a87c6d588761732ec1
IP
52.217.167.168:443
ASN
#16509 AMAZON-02

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x800, components 3
Size
131 kB (131373 bytes)
Hash
4202bcc818bc37c8109abbc2d88a292c
0a648b5d892c119527aef492c864c7e1f9bf4b72
4b0ddaba2103853ea42cd2b2f4f78008c0ac890c91d5767dd8c045d37a469c78

HTTP Headers

GET /autonewsuploads/brain.jpg9d9229a2bf51f9d8a0adbdd30bd79b2d17141297609ec026998eb164a87c6d588761732ec1 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: haqPm8+vSEEPx7M0k+4JiBJDWsCYSZljcAD1u0B0totYRrocYR7qMj+6JSaxUW1sUW0IP1W3/n4=
x-amz-request-id: J5N6JY453NFPZGXQ
Date: Wed, 08 May 2024 11:40:30 GMT
Last-Modified: Fri, 26 Apr 2024 11:09:22 GMT
ETag: "4202bcc818bc37c8109abbc2d88a292c"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 131373

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

142.250.74.99

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 06:08:19 GMT
expires: Sat, 03 May 2025 06:08:19 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 451931
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

s3.us-east-1.amazonaws.com/autonewsuploads/japan-tokyo-smiling-japanese-preview.jpg1a9582aa4a63cc08817a0cfff62a33061712922269d8875572ab96948a055dbb9bd8ad15a2

52.217.167.168

200 OK

241 kB

URL GET HTTP/1.1
s3.us-east-1.amazonaws.com/autonewsuploads/japan-tokyo-smiling-japanese-preview.jpg1a9582aa4a63cc08817a0cfff62a33061712922269d8875572ab96948a055dbb9bd8ad15a2
IP
52.217.167.168:443
ASN
#16509 AMAZON-02

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 728x546, components 3
Size
241 kB (240904 bytes)
Hash
c244168e5dad5adc38d41e380f3c098a
49f8f57ca5034d0f1a29c702da40613f253a2c59
4b10773797809f8dac15519b4b37aa794835a1fc38b3badd97a04e1c793f93d6

HTTP Headers

GET /autonewsuploads/japan-tokyo-smiling-japanese-preview.jpg1a9582aa4a63cc08817a0cfff62a33061712922269d8875572ab96948a055dbb9bd8ad15a2 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: TRRGoXZWuzLhX+yAlTOHYWu7lJ6KGFz2dYjS1sT5gARB36mkX0lMED/y6tNHArYyIZ9HvrYWVxs=
x-amz-request-id: JNGKSVWM0J0BQADC
Date: Wed, 08 May 2024 11:40:31 GMT
Last-Modified: Fri, 12 Apr 2024 11:44:31 GMT
ETag: "c244168e5dad5adc38d41e380f3c098a"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 240904

s3.us-east-1.amazonaws.com/autonewsuploads/1920px-US_Navy_080904-N-5319A-008_The_Pentagon_Memorial_honoring_the_184_people_killed_at_the_Pentagon_and_on_American_Airlines_flight_77.jpg3299f6cbb96f820d455e6441d6c9261216971996016bc768fbc08e0167162011e11cc78c83

52.217.167.168

200 OK

821 kB

URL GET HTTP/1.1
s3.us-east-1.amazonaws.com/autonewsuploads/1920px-US_Navy_080904-N-5319A-008_The_Pentagon_Memorial_honoring_the_184_people_killed_at_the_Pentagon_and_on_American_Airlines_flight_77.jpg3299f6cbb96f820d455e6441d6c9261216971996016bc768fbc08e0167162011e11cc78c83
IP
52.217.167.168:443
ASN
#16509 AMAZON-02

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, description=080904-N-5319A-008.WASHINGTON (Sept. 4, 2008) The Pentagon Memorial honoring the 184 people killed at the Pentagon and on Ameri, xresolution=584, yresolution=592, resolutionunit=2], baseline, precision 8, 1920x1277, components 3
Size
821 kB (821039 bytes)
Hash
7184f186cfd51da8559a56f5a7e5164c
d9b1172c47b82d6849daec72442894c3a8c0243a
2b6d8566da4ef1d7a5c9d6215a4132e1b8679013904237f994f611eb2aa4665b

HTTP Headers

GET /autonewsuploads/1920px-US_Navy_080904-N-5319A-008_The_Pentagon_Memorial_honoring_the_184_people_killed_at_the_Pentagon_and_on_American_Airlines_flight_77.jpg3299f6cbb96f820d455e6441d6c9261216971996016bc768fbc08e0167162011e11cc78c83 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: cXEsLHoMF8sEQ2FvkW8gANyTcQm6NtmxA3BiQWaEFj/UxIs15nYzLiimUKpwZv1H5Mxm8mDEynY=
x-amz-request-id: JNGWV2SM9Q4DDW84
Date: Wed, 08 May 2024 11:40:31 GMT
Last-Modified: Fri, 13 Oct 2023 12:20:02 GMT
ETag: "7184f186cfd51da8559a56f5a7e5164c"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 821039

verifiedwebpage.com/go?ehash=ec55f96bdbee115719939c545d55f6bb&product=48396&ar=55&cid=2617&lid=1610&slhash=ca3d1c910d8285fdc928a0b7af721c0c&redirect_id=44950&bid=17

104.18.21.187

302 Found

0 B

URL User Request GET HTTP/2
verifiedwebpage.com/go?ehash=ec55f96bdbee115719939c545d55f6bb&product=48396&ar=55&cid=2617&lid=1610&slhash=ca3d1c910d8285fdc928a0b7af721c0c&redirect_id=44950&bid=17
IP
104.18.21.187:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectverifiedwebpage.com
FingerprintB6:7C:0D:93:CD:D6:56:A3:74:B9:46:38:F0:C7:A5:31:BC:5F:AF:56
ValidityWed, 10 Apr 2024 21:43:08 GMT - Tue, 09 Jul 2024 21:43:07 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /go?ehash=ec55f96bdbee115719939c545d55f6bb&product=48396&ar=55&cid=2617&lid=1610&slhash=ca3d1c910d8285fdc928a0b7af721c0c&redirect_id=44950&bid=17 HTTP/1.1
Host: verifiedwebpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Wed, 08 May 2024 11:40:25 GMT
content-type: text/html; charset=UTF-8
location: https://subscribe.goodlifestylenews.com?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: User-Agent
cf-cache-status: DYNAMIC
set-cookie: PHPSESSID=aaf7d74ff26d97607b993027c2c6208a; path=/
pixel_session_hash_48396=3415447649292455265; expires=Fri, 07-Jun-2024 11:40:24 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=None
bt_tracking_product_48396=809cdc10c9112fc3a69b0d6b5c47b53da389fe0aff0eef093c87bc5de251b22c; expires=Fri, 10-May-2024 11:40:24 GMT; Max-Age=172800
__cf_bm=q.bQ0ggg93U0sLuEOl.jO02rLE.iLyThN1TO5dwccYw-1715168425-1.0.1.1-Kt4MHymEKAYTgr2Tjx0Px5bahLRBAt6JwYP3_NI5UMlSWKuvPlhIOGPZbacIVEReVfz34DwtdMYbPACRyXLmbw; path=/; expires=Wed, 08-May-24 12:10:25 GMT; domain=.verifiedwebpage.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 88092cbbab7356c1-OSL
X-Firefox-Spdy: h2

subscribe.goodlifestylenews.com/favicon.ico

104.21.30.61

404 Not Found

315 B

URL GET HTTP/3
subscribe.goodlifestylenews.com/favicon.ico
IP
104.21.30.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40
ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT

File type
HTML document, ASCII text, with very long lines (326), with no line terminators
Size
315 B (315 bytes)
Hash
97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Cookie: PHPSESSID=82a443dfbcc0b8c174ce535a9153b860; _ga_WJJ5P9F2X8=GS1.1.1715168429.1.0.1715168429.0.0.0; _ga=GA1.1.717990286.1715168430
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Wed, 08 May 2024 11:40:31 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j%2B3Q%2FsIzCWM7Itml3PhtODxPh5yDcEplfZHiJf74ECQVIvQ2TNcy8bCrsckchM9eBaR9INEv9gl%2FxKmHjDF1y5TPdnMk4VoP5kP52X9a9INAH00p5w4UyY2CNVsG%2FyLSokrXhh92Uz57SOBO1R7ne9rd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88092ce4bbb2b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3

104.21.30.61

200 OK

31 kB

URL User Request GET HTTP/3
subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
IP
104.21.30.61:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40
ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT

File type

Size
31 kB (31085 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3 HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: PHPSESSID=82a443dfbcc0b8c174ce535a9153b860
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 11:40:29 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding,User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7EsEg0IKIg5NMW%2B8iHJPa8cKQB0tpoXhlQNW%2FFvgMfGrCf8qbSJfb3x5jYOj9oi5gV1RSjPqMhvrPdP0gSiqdyF3t34IF7xC0w95%2FR6VfUjG04RRg6wnE6mb%2BT5d2%2B6Bvmb%2Bvuprz1XlNh4FWuaCsZvu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88092cd40d90b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

go.goodlifestylenews.com/dummyarticleclickers_44950/ec55f96bdbee115719939c545d55f6bb/55/leadsource/2617/1610/ca3d1c910d8285fdc928a0b7af721c0c/mpmta/news/44950/17

104.21.30.61

302 Found

0 B

URL User Request GET HTTP/2
go.goodlifestylenews.com/dummyarticleclickers_44950/ec55f96bdbee115719939c545d55f6bb/55/leadsource/2617/1610/ca3d1c910d8285fdc928a0b7af721c0c/mpmta/news/44950/17
IP
104.21.30.61:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40
ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /dummyarticleclickers_44950/ec55f96bdbee115719939c545d55f6bb/55/leadsource/2617/1610/ca3d1c910d8285fdc928a0b7af721c0c/mpmta/news/44950/17 HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Wed, 08 May 2024 11:40:24 GMT
content-type: text/html; charset=UTF-8
location: https://verifiedwebpage.com/go?ehash=ec55f96bdbee115719939c545d55f6bb&product=48396&ar=55&cid=2617&lid=1610&slhash=ca3d1c910d8285fdc928a0b7af721c0c&redirect_id=44950&bid=17
cache-control: max-age=600
expires: Wed, 08 May 2024 11:50:23 GMT
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2L3sr3tANGPvAiE5IJMUgn955i6rhVsZAhBdlMOfrJqfho6XDDaT5YIrfakPQeJJEP6B8J2w9E1g5c9j5MNocRZ7WfmJZTQlr65upCrA4Tjz7BoJApAwj7UjcaKevQSkeKz934wwCRwa3ZU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88092cb6ede6569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

subscribe.goodlifestylenews.com/jquery.caret.js

104.21.30.61

200 OK

2.4 kB

URL GET HTTP/3
subscribe.goodlifestylenews.com/jquery.caret.js
IP
104.21.30.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40
ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT

File type
JavaScript source, ASCII text, with very long lines (2608), with no line terminators
Size
2.4 kB (2449 bytes)
Hash
e3af742c5c11bc0da0caf3c7fcaca5de
8bb2dc61b393afafa0457215226b85d45b8a0c28
4d724445feaf2d4ed5482509c52e3752fc12bf4c043a434f317a38695b1d537d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /jquery.caret.js HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Cookie: PHPSESSID=82a443dfbcc0b8c174ce535a9153b860
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 11:40:29 GMT
content-type: application/javascript
last-modified: Tue, 21 Feb 2023 09:39:45 GMT
cache-control: max-age=2592000
expires: Thu, 06 Jun 2024 22:53:22 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 46026
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P8jn3LkPgHsFcFdJLtx4VRrqdWeecnEH0gsDYqP1gb7iQnkAKksMSHB6t2W7G2iBFpHPyE6ISPDCYKKRs65EafSynnJblfLP8f0oHveMsWAPme697n%2B2fR%2FnvucNtz4JdxA5OCM3Wg43aTxlfeDOjE%2FX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88092cdc3932b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.googleapis.com/css?family=Roboto

142.250.74.138

200 OK

2.2 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto
IP
142.250.74.138:443
ASN
#15169 GOOGLE

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
ASCII text, with very long lines (2218), with no line terminators
Size
2.2 kB (2162 bytes)
Hash
807b0cff287eb02fda9eb3a87e2746a5
34a0af77abd82f106052590a0e624b2803a6572d
35c288796da2ba3b90a7a7ef7e75a5e7eb55cad381d227beda8c5e400a04caff

HTTP Headers

GET /css?family=Roboto HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 11:40:29 GMT
date: Wed, 08 May 2024 11:40:29 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

subscribe.goodlifestylenews.com/jquery.mobilePhoneNumber.js

104.21.30.61

200 OK

26 kB

URL GET HTTP/3
subscribe.goodlifestylenews.com/jquery.mobilePhoneNumber.js
IP
104.21.30.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Certificate
IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40
ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT

File type
JavaScript source, ASCII text
Size
26 kB (26061 bytes)
Hash
0dbbb5873b895ea3be425af219cf85de
7b9dba563376d7dbd1c5b9b7064ab87eadad5591
02cbbdeb2244fd2855c49ab964c15001bde126c21cc5890d176c537878d6152b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /jquery.mobilePhoneNumber.js HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44950&bid=17&ses_id=a3789eea778a5827ab32ae4c5ed268b3
Cookie: PHPSESSID=82a443dfbcc0b8c174ce535a9153b860
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 11:40:29 GMT
content-type: application/javascript
last-modified: Tue, 21 Feb 2023 09:39:45 GMT
cache-control: max-age=2592000
expires: Thu, 06 Jun 2024 22:53:22 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 46026
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=beyEtI2XUH%2FcFMot8RKB6lLR671IV%2B1rARJjAA1IpIox9Xh%2FIIkqRrAQNFGW18y9uXWE5%2FWFy%2FD%2BKLW%2Fy%2FuyH%2FG0%2Br7aff4fZwFzXJ3DScFCjpC5QB2bbS8qjVhQzvk8jA1RGKpjqhcvsKBxrMzt27Mp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88092cdc3936b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML