go.goodlifestylenews.com/dummyarticleclickers_44949/ec55f96bdbee115719939c545d55f6bb/55/leadsource/2617/1610/ca3d1c910d8285fdc928a0b7af721c0c/mpmta/news/44949/17
104.21.30.61302 Found 11 kB URL User Request GET HTTP/2 go.goodlifestylenews.com/dummyarticleclickers_44949/ec55f96bdbee115719939c545d55f6bb/55/leadsource/2617/1610/ca3d1c910d8285fdc928a0b7af721c0c/mpmta/news/44949/17
IP 104.21.30.61:443
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40
ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3
Hash e469709e27896fdc7f8bb83fadd222e5
2c21894ac7448bdd49dcee19a85f3135e91651df
6df7f039a8baf4222bb3c22b895446df2f2c299e47527c0c5ae2d9f885d632da
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /dummyarticleclickers_44949/ec55f96bdbee115719939c545d55f6bb/55/leadsource/2617/1610/ca3d1c910d8285fdc928a0b7af721c0c/mpmta/news/44949/17 HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 08 May 2024 11:40:30 GMT
content-type: text/html; charset=UTF-8
location: https://verifiedwebpage.com/go?ehash=ec55f96bdbee115719939c545d55f6bb&product=48395&ar=55&cid=2617&lid=1610&slhash=ca3d1c910d8285fdc928a0b7af721c0c&redirect_id=44949&bid=17
cache-control: max-age=600
expires: Wed, 08 May 2024 11:50:29 GMT
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0InTllxrrNoUVrocE2un3VSz1Pg5Ot6DHNLiA%2Bns1LKfcTlCdpMNS2RZLxQy1AXFma66O8aOH6lqiIaejjfqJ121MvnZAIK%2FmxPK9dMIFs1oMwSpO0xNnzafrvS5eKKa%2FR%2BKBjlf12rECBI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88092cdcddc5712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
go.goodlifestylenews.com/
104.21.30.61 143 B URL go.goodlifestylenews.com/
IP 104.21.30.61:0
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40
ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
File type HTML document, ASCII text
Hash f1fb042c62910c34be16ad91cbbd71fa
5bc7aceba9a8704ef4b1d427d7d08b140afcd866
9278d16ed2fdcd5dc651615b0b8adc6b55fb667a9d106a9891b861d4561d9a24
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 11:40:32 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 14 Nov 2023 15:41:05 GMT
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Vary: Accept-Encoding,User-Agent
Pragma: no-cache
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b7D29rPd2Hc1cg3l%2BZNBAN7F%2Fv08CoOfwYgTc8FCFAqdOH2yHYGtdfu%2Fxyz6oStQIDL%2Fbvz3eM6DRAEevmbavi6KZpztGxZ%2FEy7lupXf5%2BBiAI21yCnshHoJr0cnz2ldwhm4KEl2HZcaXTQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 88092cef6fdab4f1-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
verifiedwebpage.com/go?ehash=ec55f96bdbee115719939c545d55f6bb&product=48395&ar=55&cid=2617&lid=1610&slhash=ca3d1c910d8285fdc928a0b7af721c0c&redirect_id=44949&bid=17
104.18.20.187302 Found 31 kB URL User Request GET HTTP/2 verifiedwebpage.com/go?ehash=ec55f96bdbee115719939c545d55f6bb&product=48395&ar=55&cid=2617&lid=1610&slhash=ca3d1c910d8285fdc928a0b7af721c0c&redirect_id=44949&bid=17
IP 104.18.20.187:443
Certificate IssuerGoogle Trust Services LLC
Subjectverifiedwebpage.com
FingerprintB6:7C:0D:93:CD:D6:56:A3:74:B9:46:38:F0:C7:A5:31:BC:5F:AF:56
ValidityWed, 10 Apr 2024 21:43:08 GMT - Tue, 09 Jul 2024 21:43:07 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (393)
Hash 791d0b3e0062b01ff437c350ff9da0a6
a496337f885ff9a591c8e9a7eae2ce26f24248ee
4eb43b0fed02d887af01022251a514f537b99e9d7c70ff0d0f69e3444ce8a24c
GET /go?ehash=ec55f96bdbee115719939c545d55f6bb&product=48395&ar=55&cid=2617&lid=1610&slhash=ca3d1c910d8285fdc928a0b7af721c0c&redirect_id=44949&bid=17 HTTP/1.1
Host: verifiedwebpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 08 May 2024 11:40:31 GMT
content-type: text/html; charset=UTF-8
location: https://subscribe.goodlifestylenews.com?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: User-Agent
cf-cache-status: DYNAMIC
set-cookie: PHPSESSID=be036cb63e771e2b5637678a9ab28c3a; path=/
pixel_session_hash_48395=3415447649292455266; expires=Fri, 07-Jun-2024 11:40:30 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=None
bt_tracking_product_48395=64b87531e664d79e0a733c20467f11e1349808e87db80a2ebe5bbfb1c8bb6bbe; expires=Fri, 10-May-2024 11:40:30 GMT; Max-Age=172800
__cf_bm=v4le5f4cjkoAwzEvfTBfhcBjpItpHnDew.6yKCBV26s-1715168431-1.0.1.1-JoHfyrZs6xfWSe4BYlkhT1FbmHjzPUXAzqQTpcaDT5JqLd249oVej_ML_W6sx4EBpOOr8U8DW8xakkLD7YmWGA; path=/; expires=Wed, 08-May-24 12:10:31 GMT; domain=.verifiedwebpage.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 88092ce21edb1c12-OSL
X-Firefox-Spdy: h2
subscriberwelcome.com/uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg
172.67.155.79200 OK 144 kB URL GET HTTP/2 subscriberwelcome.com/uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg
IP 172.67.155.79:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintC8:3F:88:99:86:9B:20:E9:77:44:04:5F:4D:C8:B8:D2:23:5F:C5:D2
ValidityMon, 06 May 2024 01:45:00 GMT - Sun, 04 Aug 2024 01:44:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 966x1449, components 3
Size 144 kB (144253 bytes)
Hash e7eb0da863b2d3ead5846cdc3263a233
138225ea3d8ff08f07b046b858bf46bf2bba2e96
ff19a64983ac2748d6b8361212f1fc41814e1acd0d157ee9c736bbd2a4a03180
GET /uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 11:40:35 GMT
content-type: image/jpeg
content-length: 144253
last-modified: Mon, 20 Feb 2023 15:41:11 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GX87Qu3hxFhfaCCGpxyslQwt0BuXT1U%2BJeE8OB0Y7I6%2FgBDzLd%2BWk6vcL553oFmwQe%2FAcmm2Mh5FzaBsf7Ljws40WYN892T2ZBhXiQVocSIYchIW%2FwF5YhxhGnwecAQiIbnUjl7h9rk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88092d048ce37128-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css
151.101.1.229200 OK 30 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css
IP 151.101.1.229:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type Unicode text, UTF-8 text, with very long lines (65305)
Hash 025df1ec88740cad5ff14bb3380da6dd
7abed070e37ce060c0a561575f1d41a7f248fc74
2143941c03dacda8b4f1016ced6e0c6f34e5c04585a3bcffe33c3c626c448a4a
GET /npm/bootstrap@5.2.2/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.2.2
x-jsd-version-type: version
etag: W/"2f955-er7QcON84GDApWFXXx1Bp/JI/HQ"
content-encoding: br
accept-ranges: bytes
date: Wed, 08 May 2024 11:40:35 GMT
age: 21814008
x-served-by: cache-fra-eddf8230072-FRA, cache-hel1410023-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 30336
X-Firefox-Spdy: h2
subscriberwelcome.com/uploads/0.204734001673521892LifeAfterUkraine.jpeg
172.67.155.79200 OK 400 kB URL GET HTTP/2 subscriberwelcome.com/uploads/0.204734001673521892LifeAfterUkraine.jpeg
IP 172.67.155.79:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintC8:3F:88:99:86:9B:20:E9:77:44:04:5F:4D:C8:B8:D2:23:5F:C5:D2
ValidityMon, 06 May 2024 01:45:00 GMT - Sun, 04 Aug 2024 01:44:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2550x3300, components 3
Size 400 kB (400505 bytes)
Hash b9a9621a927a5b9a9c71fdbb53bf8991
9c4cc398edb33da6a79e62701867cbf7fed4056d
d0342e1b39e1c9b80bfb574b18e0a5d9f9cf00e00ca7cf3b2ce1ded70f3bb9ab
GET /uploads/0.204734001673521892LifeAfterUkraine.jpeg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 11:40:35 GMT
content-type: image/jpeg
content-length: 400505
last-modified: Thu, 12 Jan 2023 11:11:32 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wklsMSpNDWGs6EoWYIa%2F98RMtGI%2FRTgLBCUk6UyoOHesyXdVJ0FaPerYlbO0AX5f457AgLsdMo%2FcCs%2BMlW8G32155p634J2lEUj%2Bm%2BE7K2rICoBtGjDByn7hLuIQqjDSSxPXVtf51so%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88092d048ce67128-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.min.js
151.101.1.229200 OK 17 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.min.js
IP 151.101.1.229:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type JavaScript source, ASCII text, with very long lines (60201)
Hash c5236e5d6a5d0ff97ff8c8e5102c6c03
6fbfdbddbe85c578de559adcc8d07cccbc16d514
87538c4b7e488f5a49d12f98d6a04afc61d00f26a790f319569799acd434eb65
GET /npm/bootstrap@5.2.2/dist/js/bootstrap.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.2.2
x-jsd-version-type: version
etag: W/"ec40-b7/b3b6FxXjeVZrcyNB8zLwW1RQ"
content-encoding: br
accept-ranges: bytes
date: Wed, 08 May 2024 11:40:35 GMT
age: 2801398
x-served-by: cache-fra-etou8220032-FRA, cache-hel1410023-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 17366
X-Firefox-Spdy: h2
subscriberwelcome.com/uploads/0.1663680016738854302D2(1).jpg
172.67.155.79200 OK 1.1 MB URL GET HTTP/2 subscriberwelcome.com/uploads/0.1663680016738854302D2(1).jpg
IP 172.67.155.79:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintC8:3F:88:99:86:9B:20:E9:77:44:04:5F:4D:C8:B8:D2:23:5F:C5:D2
ValidityMon, 06 May 2024 01:45:00 GMT - Sun, 04 Aug 2024 01:44:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Windows), datetime=2023:01:10 16:36:41], baseline, precision 8, 1800x2700, components 3
Size 1.1 MB (1114284 bytes)
Hash b02e84cdcd5a3e55ded5e64dfd307124
bfaad4b8b4b1b1fafffeda314b8868c94e7280c8
d67985993c18e2a7b22a4193c0613a65096b3376d64539feb646739798d2cf5c
GET /uploads/0.1663680016738854302D2(1).jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 11:40:35 GMT
content-type: image/jpeg
content-length: 1114284
last-modified: Mon, 16 Jan 2023 16:10:30 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=olQeBjo3cIUOKzNLySerIusZAbDtqe6omt84osVAgDNAZvVx0rioO%2B97wnJT8yo6fudCjmdlf8%2FoF3Gbs2iM8jUH1m98jBGVQMwiUEvUpj6ofG4%2FgDxiaOtY2GeEb2pomnRnWcAxzl8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88092d048ce97128-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
subscriberwelcome.com/uploads/0.1721950016738853872D1(1).jpg
172.67.155.79200 OK 1.3 MB URL GET HTTP/2 subscriberwelcome.com/uploads/0.1721950016738853872D1(1).jpg
IP 172.67.155.79:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintC8:3F:88:99:86:9B:20:E9:77:44:04:5F:4D:C8:B8:D2:23:5F:C5:D2
ValidityMon, 06 May 2024 01:45:00 GMT - Sun, 04 Aug 2024 01:44:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Windows), datetime=2023:01:07 00:05:06], baseline, precision 8, 1800x2700, components 3
Size 1.3 MB (1288007 bytes)
Hash 91e68c3d20f4e55b01fdbaa834b4e4e6
e54e4ea7f042d2124aa1be976a6fe9d708bb4f9f
3cab775e25b68c23b905d547373476f046b0101e7cfdbd6f016e302f5a429988
GET /uploads/0.1721950016738853872D1(1).jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 11:40:35 GMT
content-type: image/jpeg
content-length: 1288007
last-modified: Mon, 16 Jan 2023 16:09:47 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2v2T84FxZWXK3bBwumM81Lufmp1INBhkGcKfP0HVsNHyP5MeWu%2FiwiHGcZrqzxSwYY5he0HL4ODMzLzC5jHMm55ETnXPDcqfKz%2BwkTVAoqroeaiJbLIM6sEq1TzQf%2FFMXKSNuui5ezQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88092d048cf27128-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js
142.250.74.170200 OK 33 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js
IP 142.250.74.170:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File type JavaScript source, ASCII text, with very long lines (32086)
Hash 8101d596b2b8fa35fe3a634ea342d7c3
d6c1f41972de07b09bfa63d2e50f9ab41ec372bd
540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441
GET /ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33434
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 19:54:46 GMT
expires: Fri, 02 May 2025 19:54:46 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 488750
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-WJJ5P9F2X8
142.250.74.168200 OK 102 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-WJJ5P9F2X8
IP 142.250.74.168:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (5955)
Size 102 kB (101559 bytes)
Hash 858ee975fc2fd9f1e80f1e4e365fb9e7
5f9ee9c8d24622f14677264f6a801b2f923540f1
24da6afb567621bf1b956692f659f87b8eab1c67eda2d7e93f7a61d383444f2b
GET /gtag/js?id=G-WJJ5P9F2X8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 11:40:36 GMT
expires: Wed, 08 May 2024 11:40:36 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 101559
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png
172.67.74.20200 OK 36 kB URL GET HTTP/2 verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png
IP 172.67.74.20:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerGoogle Trust Services LLC
Subjectverifiedsecure.org
FingerprintA0:39:56:47:2D:24:66:40:29:81:A2:DA:5B:19:04:77:07:A6:BA:B3
ValidityThu, 04 Apr 2024 23:26:29 GMT - Wed, 03 Jul 2024 23:26:28 GMT
File type PNG image data, 3369 x 257, 8-bit/color RGBA, non-interlaced
Hash 724c1e2ab214eefe0271ee598af8749a
b99bb085dd791488b061c423223318345c590f24
bba2a6dbda4e6833f68c21d84c0f9a09180ae9595b238c982da300cf448ab78c
GET /uploads/0.442373001673954581K_Sa3Nyg.png HTTP/1.1
Host: verifiedsecure.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 11:40:36 GMT
content-type: image/png
content-length: 35781
last-modified: Tue, 17 Jan 2023 11:23:01 GMT
cache-control: max-age=2592000
expires: Fri, 31 May 2024 00:22:16 GMT
cf-cache-status: HIT
age: 645499
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YX5IxN8p7I5uOcRimmQdCn9q9ioGq1l4xGaYKpyp%2FPrBJnK80%2BAO5w90kw%2Fzd5bLIwTknCcovc3af86oFpZNZlunPU5ZwXZxNpWJu%2BnHT55Qw9GUfVRhDFjKiyU9aLigZhsA8g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88092d08e8877129-OSL
X-Firefox-Spdy: h2
subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
104.21.30.61200 OK 8.0 kB URL User Request GET HTTP/3 subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
IP 104.21.30.61:443
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40
ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (393)
Hash 791d0b3e0062b01ff437c350ff9da0a6
a496337f885ff9a591c8e9a7eae2ce26f24248ee
4eb43b0fed02d887af01022251a514f537b99e9d7c70ff0d0f69e3444ce8a24c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: PHPSESSID=61790750e63f3fd97b2914e7f328546a
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 11:40:35 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding,User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D7TqQgSeLaZPz%2B7PKmQehS7X2H9zYdegas8IRsSNt9esbVGYOgfAm27KGJN5EAHM8aNmA3tLwAitR1EDDsmMQKTg1AoShQh5b6waFu2E0LM5fNjB7O%2B4jHfHsrasWU6%2FEOUCArCou%2FNI6XF5kBYjeQij"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88092cfb09c4b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
s3.us-east-1.amazonaws.com/autonewsuploads/Dog.jpg373f79dd8e889828c567164a9976eb5e1708518205a9047877ce8a792924271d491c1cfade
16.182.100.48200 OK 5.7 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/Dog.jpg373f79dd8e889828c567164a9976eb5e1708518205a9047877ce8a792924271d491c1cfade
IP 16.182.100.48:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 251x201, components 3
Hash 1b14261d5910dd6d2c053f471cefbdc8
4c038b7b23227f71ce6de90ea5e23816b27e61d0
1440670bad97bfdb121adc3e25fe1125a8a037879dc27fbbc17889c3fbac8911
GET /autonewsuploads/Dog.jpg373f79dd8e889828c567164a9976eb5e1708518205a9047877ce8a792924271d491c1cfade HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: Teitq7Hvo5V4MjatXYwhAmygtEVXY/NF5su8kQxjYGhO9b+xIBNJ7llL9doUt7jujB1niyMamH0=
x-amz-request-id: XN1SWEW8GSTMMV3T
Date: Wed, 08 May 2024 11:40:37 GMT
Last-Modified: Wed, 21 Feb 2024 12:23:27 GMT
ETag: "1b14261d5910dd6d2c053f471cefbdc8"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 5706
s3.us-east-1.amazonaws.com/autonewsuploads/ETakeOverVSL03241.jpg7a887b2a6b36cb6e24e3c0470d5db8b5171076417718420dd7c15c8c09f7e5ddcfa507ceb0
16.182.100.48200 OK 114 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/ETakeOverVSL03241.jpg7a887b2a6b36cb6e24e3c0470d5db8b5171076417718420dd7c15c8c09f7e5ddcfa507ceb0
IP 16.182.100.48:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=2], baseline, precision 8, 1024x683, components 3
Size 114 kB (114051 bytes)
Hash cb0f0fd1b6b7280d78ee706cf402338b
d76f624b5302d28b47e310e47745347f31a00d91
77ed40a47bb2bb4be0588c71c877968401ed449a1e1c4aa85b8dd9a2203c8163
GET /autonewsuploads/ETakeOverVSL03241.jpg7a887b2a6b36cb6e24e3c0470d5db8b5171076417718420dd7c15c8c09f7e5ddcfa507ceb0 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: o7VcN8oH5jfGvs04RC0++IKVg5CwIosvlcLhWA8t8lwQe7NBhT+rFuhjEQbCX7/CoyVnOgceXV0=
x-amz-request-id: XN1V03MYCETT5Y7B
Date: Wed, 08 May 2024 11:40:37 GMT
Last-Modified: Mon, 18 Mar 2024 12:16:19 GMT
ETag: "cb0f0fd1b6b7280d78ee706cf402338b"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 114051
s3.us-east-1.amazonaws.com/autonewsuploads/0_xMIObdsLB7XPfX6M.jpg831e6c0cac9852ee802169b318eafcc21703851588ea1d7d0705a741428b565fef908b1c90
16.182.100.48200 OK 130 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/0_xMIObdsLB7XPfX6M.jpg831e6c0cac9852ee802169b318eafcc21703851588ea1d7d0705a741428b565fef908b1c90
IP 16.182.100.48:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 800x550, components 3
Size 130 kB (130538 bytes)
Hash 81ed4e278b514ede42a3fa0bc59ae812
79ea6edc5c2326a174f137cdb092754eafa20d3f
bc9da136ab9d91bdf0e1a667dd123f362fa5ab2dd7f2ee22c9aaff3ebd619588
GET /autonewsuploads/0_xMIObdsLB7XPfX6M.jpg831e6c0cac9852ee802169b318eafcc21703851588ea1d7d0705a741428b565fef908b1c90 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: B81YE2Q2kmPb+TK7fRKBKzhlgftoiKk+JcYFH2ZJG5iXVHZXoCPSGBjopfuF7ggad5M5rRRk0kc=
x-amz-request-id: XN1K3BWWKV70TXVH
Date: Wed, 08 May 2024 11:40:37 GMT
Last-Modified: Fri, 29 Dec 2023 12:06:30 GMT
ETag: "81ed4e278b514ede42a3fa0bc59ae812"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 130538
s3.us-east-1.amazonaws.com/autonewsuploads/brain.jpg9d9229a2bf51f9d8a0adbdd30bd79b2d17141297609ec026998eb164a87c6d588761732ec1
16.182.100.48200 OK 131 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/brain.jpg9d9229a2bf51f9d8a0adbdd30bd79b2d17141297609ec026998eb164a87c6d588761732ec1
IP 16.182.100.48:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x800, components 3
Size 131 kB (131373 bytes)
Hash 4202bcc818bc37c8109abbc2d88a292c
0a648b5d892c119527aef492c864c7e1f9bf4b72
4b0ddaba2103853ea42cd2b2f4f78008c0ac890c91d5767dd8c045d37a469c78
GET /autonewsuploads/brain.jpg9d9229a2bf51f9d8a0adbdd30bd79b2d17141297609ec026998eb164a87c6d588761732ec1 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: AhDZZ7qqrTCk+OFLFNCNH/OnU7FY56AIf5WGdPbWzNUr6QOoMYHyczOXa2HTa1CUtnz3o9E/HKA=
x-amz-request-id: XN1SDA38K6668BYE
Date: Wed, 08 May 2024 11:40:37 GMT
Last-Modified: Fri, 26 Apr 2024 11:09:22 GMT
ETag: "4202bcc818bc37c8109abbc2d88a292c"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 131373
s3.us-east-1.amazonaws.com/autonewsuploads/lekovi.jpg0dc399b0f5e224039e01cdff3f66c20c1713267444861a436c4489fef7289234411f19fefe
16.182.100.48200 OK 35 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/lekovi.jpg0dc399b0f5e224039e01cdff3f66c20c1713267444861a436c4489fef7289234411f19fefe
IP 16.182.100.48:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 800x532, components 3
Hash 4d6d31dd9f7d5556daed4341d870111e
cbb963d55c8489fd0d5c05eab6be332efc73362b
c569daee115bec6a22a1729a82e16f21d75140c7af1e4f638cec73283b12962e
GET /autonewsuploads/lekovi.jpg0dc399b0f5e224039e01cdff3f66c20c1713267444861a436c4489fef7289234411f19fefe HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: k0pEyaBP7k1spC8wL28IiCJ6/u7AqwR/OLAI14sOoV4nQRm1T/2VbE1xBwxZ8HFQrMREVJ2EEC4=
x-amz-request-id: XN1VPPQFQMT28QW0
Date: Wed, 08 May 2024 11:40:37 GMT
Last-Modified: Tue, 16 Apr 2024 11:37:27 GMT
ETag: "4d6d31dd9f7d5556daed4341d870111e"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 35107
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.99200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.99:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 06:08:19 GMT
expires: Sat, 03 May 2025 06:08:19 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 451937
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s3.us-east-1.amazonaws.com/autonewsuploads/HBloodPressure02232.jpgb93a93ed21ae4eca5aadaa8680b97f9e1686656575b2dca7f9dd2e5fc302ab6b67bd49d194
16.182.100.48200 OK 30 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/HBloodPressure02232.jpgb93a93ed21ae4eca5aadaa8680b97f9e1686656575b2dca7f9dd2e5fc302ab6b67bd49d194
IP 16.182.100.48:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 910x603, components 3
Hash 248ca831a36673a7eb9852980d350ba4
628017ad57b064d55427a308c7ec220e4926d2d3
54a74e4f40f9dd31c0b3731f6b8ca7678aaa002cd00e1fd7ab7c267c76dd84b6
GET /autonewsuploads/HBloodPressure02232.jpgb93a93ed21ae4eca5aadaa8680b97f9e1686656575b2dca7f9dd2e5fc302ab6b67bd49d194 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: H6WZjtxNOE+RC2OGXJOlX2vmZWQklYKwZ9CzXUXACftlMX+E0vJNjgIxtzcASwZMqeYUN7UBLZc=
x-amz-request-id: XN1VQ8JRQFABTAD4
Date: Wed, 08 May 2024 11:40:37 GMT
Last-Modified: Tue, 13 Jun 2023 11:42:57 GMT
ETag: "248ca831a36673a7eb9852980d350ba4"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 29512
s3.us-east-1.amazonaws.com/autonewsuploads/fat.jpg991af566c1ee84bedd4d69b160eda714171413146693f5245a9e9330e8b08f52b7d1bfe4eb
16.182.100.48200 OK 30 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/fat.jpg991af566c1ee84bedd4d69b160eda714171413146693f5245a9e9330e8b08f52b7d1bfe4eb
IP 16.182.100.48:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", progressive, precision 8, 1024x576, components 3
Hash 70d865b07b8d36b57aa63a0848015f8f
c8cead4fb3a6e64ac54759b48842b7a032f8286e
e94553c11550ae95dad8cadb8ee80592b54bb09cc6873ef01e14c7206ef8d688
GET /autonewsuploads/fat.jpg991af566c1ee84bedd4d69b160eda714171413146693f5245a9e9330e8b08f52b7d1bfe4eb HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: sYCA7fhDCOCgLtv0oTb5CheD+T+qe8wyDlxIRglCRPpwfDKcR02kDqvk9I4Xv20+FvIC1uS2u7w=
x-amz-request-id: XN1N36A2X2PYFG5T
Date: Wed, 08 May 2024 11:40:37 GMT
Last-Modified: Fri, 26 Apr 2024 11:37:48 GMT
ETag: "70d865b07b8d36b57aa63a0848015f8f"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 29726
s3.us-east-1.amazonaws.com/autonewsuploads/Doomsday07231.jpg3299e99b7e66ba7bebade79da4d83ca51689679479727a12f1453aa468691d60b4dd73073d
16.182.100.48200 OK 433 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/Doomsday07231.jpg3299e99b7e66ba7bebade79da4d83ca51689679479727a12f1453aa468691d60b4dd73073d
IP 16.182.100.48:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, description=Convoys of armed US Army (USA) High-Mobility Multipurpose Wheeled Vehicles (HMMWV) merge on the location as USA 101st Airborne , orientation=upper-left, xresolution=563, yresolution=571, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2003:11:20 08:18:15], baseline, precision 8, 1024x672, components 3
Size 433 kB (432585 bytes)
Hash 6e58f72ac11c012924af9bde04584b81
4ee205efa682b8cbb93ccfb0b355d1c0ed4a5faf
96fb5e8a70b47dab13fd7ce3cb597fdea465c43436eaaee2754c9d61ec648195
GET /autonewsuploads/Doomsday07231.jpg3299e99b7e66ba7bebade79da4d83ca51689679479727a12f1453aa468691d60b4dd73073d HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: NYzvTMMGTcU1wFJGE7eRc/KnZzPelmy4eFoFgAmgqfdN+RzPzhPqKeVcXFMs66HqRsTFOoW7MFo=
x-amz-request-id: KV8AWATXKZSCDD4V
Date: Wed, 08 May 2024 11:40:38 GMT
Last-Modified: Tue, 18 Jul 2023 11:24:40 GMT
ETag: "6e58f72ac11c012924af9bde04584b81"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 432585
s3.us-east-1.amazonaws.com/autonewsuploads/1920px-US_Navy_080904-N-5319A-008_The_Pentagon_Memorial_honoring_the_184_people_killed_at_the_Pentagon_and_on_American_Airlines_flight_77.jpg3299f6cbb96f820d455e6441d6c9261216971996016bc768fbc08e0167162011e11cc78c83
16.182.100.48200 OK 821 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/1920px-US_Navy_080904-N-5319A-008_The_Pentagon_Memorial_honoring_the_184_people_killed_at_the_Pentagon_and_on_American_Airlines_flight_77.jpg3299f6cbb96f820d455e6441d6c9261216971996016bc768fbc08e0167162011e11cc78c83
IP 16.182.100.48:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, description=080904-N-5319A-008.WASHINGTON (Sept. 4, 2008) The Pentagon Memorial honoring the 184 people killed at the Pentagon and on Ameri, xresolution=584, yresolution=592, resolutionunit=2], baseline, precision 8, 1920x1277, components 3
Size 821 kB (821039 bytes)
Hash 7184f186cfd51da8559a56f5a7e5164c
d9b1172c47b82d6849daec72442894c3a8c0243a
2b6d8566da4ef1d7a5c9d6215a4132e1b8679013904237f994f611eb2aa4665b
GET /autonewsuploads/1920px-US_Navy_080904-N-5319A-008_The_Pentagon_Memorial_honoring_the_184_people_killed_at_the_Pentagon_and_on_American_Airlines_flight_77.jpg3299f6cbb96f820d455e6441d6c9261216971996016bc768fbc08e0167162011e11cc78c83 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: RJ8bj09HMCpgYSmREz+FvQpi8SD2OPPpLNh7CemU+kdydv5E2+MVr73zFHmBEWW1e+yxcSLr2hM=
x-amz-request-id: XN1YPT34XBBVQM5F
Date: Wed, 08 May 2024 11:40:37 GMT
Last-Modified: Fri, 13 Oct 2023 12:20:02 GMT
ETag: "7184f186cfd51da8559a56f5a7e5164c"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 821039
s3.us-east-1.amazonaws.com/autonewsuploads/japan-tokyo-smiling-japanese-preview.jpg1a9582aa4a63cc08817a0cfff62a33061712922269d8875572ab96948a055dbb9bd8ad15a2
16.182.100.48200 OK 241 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/japan-tokyo-smiling-japanese-preview.jpg1a9582aa4a63cc08817a0cfff62a33061712922269d8875572ab96948a055dbb9bd8ad15a2
IP 16.182.100.48:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 728x546, components 3
Size 241 kB (240904 bytes)
Hash c244168e5dad5adc38d41e380f3c098a
49f8f57ca5034d0f1a29c702da40613f253a2c59
4b10773797809f8dac15519b4b37aa794835a1fc38b3badd97a04e1c793f93d6
GET /autonewsuploads/japan-tokyo-smiling-japanese-preview.jpg1a9582aa4a63cc08817a0cfff62a33061712922269d8875572ab96948a055dbb9bd8ad15a2 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: fco++mmm3agpTfkWRhczWdcy0Ohcdv3wHEdlQLbER9FaBVX1ZG8kPWan6R8DipYX5pBFm3MAwWI=
x-amz-request-id: XN1W1R79P515Z62B
Date: Wed, 08 May 2024 11:40:37 GMT
Last-Modified: Fri, 12 Apr 2024 11:44:31 GMT
ETag: "c244168e5dad5adc38d41e380f3c098a"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 240904
subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17
0.0.0.0 0 B URL User Request GET subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17
IP 0.0.0.0:0
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40
ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17 HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
subscribe.goodlifestylenews.com/jquery.caret.js
104.21.30.61200 OK 2.4 kB URL GET HTTP/3 subscribe.goodlifestylenews.com/jquery.caret.js
IP 104.21.30.61:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40
ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
File type JavaScript source, ASCII text, with very long lines (2608), with no line terminators
Hash e3af742c5c11bc0da0caf3c7fcaca5de
8bb2dc61b393afafa0457215226b85d45b8a0c28
4d724445feaf2d4ed5482509c52e3752fc12bf4c043a434f317a38695b1d537d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /jquery.caret.js HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Cookie: PHPSESSID=61790750e63f3fd97b2914e7f328546a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 11:40:35 GMT
content-type: application/javascript
last-modified: Tue, 21 Feb 2023 09:39:45 GMT
cache-control: max-age=2592000
expires: Thu, 06 Jun 2024 22:53:22 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 46032
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hjT5qk%2FohGukgS2PkM5F8L2zwKof6M%2BM29vlFtzwcD2LgUpAmSDXPVHe0d5jw1OXAv8%2BXzTd%2BzT73fYseY8sM9GPMnRRs6iAgTgDpeWaP2ADwt2AKaEwL5bogeNVrG0eVqH5wnU%2BP0PIU1WC82epTCLd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88092d03fe81b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
subscribe.goodlifestylenews.com/jquery.mobilePhoneNumber.js
104.21.30.61200 OK 26 kB URL GET HTTP/3 subscribe.goodlifestylenews.com/jquery.mobilePhoneNumber.js
IP 104.21.30.61:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40
ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
File type JavaScript source, ASCII text
Hash 0dbbb5873b895ea3be425af219cf85de
7b9dba563376d7dbd1c5b9b7064ab87eadad5591
02cbbdeb2244fd2855c49ab964c15001bde126c21cc5890d176c537878d6152b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /jquery.mobilePhoneNumber.js HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Cookie: PHPSESSID=61790750e63f3fd97b2914e7f328546a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 11:40:35 GMT
content-type: application/javascript
last-modified: Tue, 21 Feb 2023 09:39:45 GMT
cache-control: max-age=2592000
expires: Thu, 06 Jun 2024 22:53:22 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 46032
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yH588DA29ybJ51vOAMFVyQiH5LN8bYB7PUYcZJQl2YwORWKr3DHTgiZ5foceVe%2F46CJc6k5E3fSVvUni99K1q1KpOXAV2AO3mYIFF%2FkzdJFtYdh093xWUF%2BWV8bxxggq7Qm13h2dLzXXDWG6jGadm9g2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88092d040e8ab500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
subscribe.goodlifestylenews.com/favicon.ico
104.21.30.61404 Not Found 315 B URL GET HTTP/3 subscribe.goodlifestylenews.com/favicon.ico
IP 104.21.30.61:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40
ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
File type HTML document, ASCII text, with very long lines (326), with no line terminators
Hash 97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Cookie: PHPSESSID=61790750e63f3fd97b2914e7f328546a; _ga_WJJ5P9F2X8=GS1.1.1715168436.1.0.1715168436.0.0.0; _ga=GA1.1.1097758039.1715168437
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 08 May 2024 11:40:37 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MOfGhYlKFPcwshcLl4%2BE26VcHT2E%2BwHP8uhf8tsUOwbb%2Bk%2BAjVi%2FN8uVGb83tf%2BqRS4ZsDqrnCoY%2BkVUT2sLY8GQu30esupMuK%2FwzAHHE%2BkgjyggpsLqNGqaYmumL6epp%2FnloeGtAu7OSasA6cdM8H%2BH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88092d0e0d24b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Roboto
142.250.74.138200 OK 2.2 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto
IP 142.250.74.138:443
Requested by https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File type ASCII text, with very long lines (2218), with no line terminators
Hash 807b0cff287eb02fda9eb3a87e2746a5
34a0af77abd82f106052590a0e624b2803a6572d
35c288796da2ba3b90a7a7ef7e75a5e7eb55cad381d227beda8c5e400a04caff
GET /css?family=Roboto HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 11:40:36 GMT
date: Wed, 08 May 2024 11:40:36 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17
172.67.172.49302 Found 31 kB URL User Request GET HTTP/1.1 subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17
IP 172.67.172.49:80
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17 HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Wed, 08 May 2024 11:40:34 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST
Access-Control-Allow-Headers: X-Requested-With
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=61790750e63f3fd97b2914e7f328546a; path=/
location: http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=44949&bid=17&ses_id=d46edc8e297d9fabd16a8ed09af4147b
Vary: Accept-Encoding,User-Agent
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nk7rclH7625ZnBV6x4NyfPw3DUrESDIkhtj9bmLGAjE5t2tckeN2oA3YX6gT65jfGKq1vDUuyYt28ynXEL8ko2vhy5M%2FJbAaJ1pYn%2BDKrwO2L%2FkPajT5LOr7gl8%2FSKenQepyklIREWfYt%2FUiviDTDM8b"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 88092cf2d8e1b51e-OSL
alt-svc: h2=":443"; ma=60