| go.goodlifestylenews.com/ | 104.21.30.61 | | 143 B |
URL go.goodlifestylenews.com/ IP104.21.30.61:0
File typeHTML document, ASCII text Hashf1fb042c62910c34be16ad91cbbd71fa 5bc7aceba9a8704ef4b1d427d7d08b140afcd866 9278d16ed2fdcd5dc651615b0b8adc6b55fb667a9d106a9891b861d4561d9a24
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 27 Apr 2024 02:16:52 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 14 Nov 2023 15:41:05 GMT
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Vary: Accept-Encoding,User-Agent
Pragma: no-cache
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=haLDi8L3RZ84bQgKywisJgMKDOe330tFvB%2B7Omxj63QaR7Ku2H4ijHrTqZ5b0TKYcA4TF5hLlUgah%2FCQizrNGfSsF%2B8gVGudRulUGVcg1o7bYrTHQohhr8e5AYt4K%2FkQ9RVH%2FHz6sqyD9cA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87ab501caf13712a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab | 172.67.172.49 | 200 OK | 7.7 kB |
URL User Request GET HTTP/1.1subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab IP172.67.172.49:80
File typeHTML document, Unicode text, UTF-8 text, with very long lines (393) Hashc7557011dc60ea03b202a291a73b21d7 d8e903fbc0a0493b34a97a8e6f6081e7dbc838d9 b6a395c61b42dbab02f26243f875381032c315075b5f9c7b443009315d08878a
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=ea3f696cea80895eec23ca7208015e0c
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 27 Apr 2024 02:16:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST
Access-Control-Allow-Headers: X-Requested-With
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding,User-Agent
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a6F2P7ga3FojpzYAMRXu82MqWsd%2BnYFuvaFj50z2EJWEhygXeBLIoi3uon9z4maraxe3oPThxX1pMo2lZrqtZdKiujb7UXhJMQni47JQz5Gg8gCQwNz9mEM4HTJubDQnr2m6ocFIxhTrH49%2BH6JOiRhk"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87ab501f289b1c0e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| subscribe.goodlifestylenews.com/jquery.caret.js | 172.67.172.49 | 200 OK | 716 B |
URL GET HTTP/1.1subscribe.goodlifestylenews.com/jquery.caret.js IP172.67.172.49:80
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab
File typeJavaScript source, ASCII text, with CRLF line terminators Hash35c3ec8db4ff6e862db42516436216a1 7d9d7731403868cc34edaad1d9e17311541a6f77 adef482d97f599ba0e720ecf2aba0581ea1591ba1bb1eb271f1d98b279ff81ba
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /jquery.caret.js HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab
Cookie: PHPSESSID=ea3f696cea80895eec23ca7208015e0c
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 27 Apr 2024 02:16:53 GMT
Content-Type: application/javascript
Content-Length: 716
Connection: keep-alive
Last-Modified: Tue, 21 Feb 2023 09:39:45 GMT
Cache-Control: max-age=2592000
Expires: Mon, 27 May 2024 02:16:51 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 1
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DRkXJA9ZCXJVlULpttoeq3nFpg6zgIPFUv8xBRtyB%2BMDpuo1KI2eMdrvwDk7r1JdNo4UqJAv7HcMJ6u8DqNee7nngm95bL2o%2BzGHNif7Qd%2FqrT9oLzppSnrkR5QPKztTaym1gLOYcK2SiaKM0M0v5hKI"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87ab5027499f1c0e-OSL
alt-svc: h2=":443"; ma=60
|
|
| subscribe.goodlifestylenews.com/jquery.mobilePhoneNumber.js | 104.21.30.61 | 200 OK | 4.4 kB |
URL GET HTTP/1.1subscribe.goodlifestylenews.com/jquery.mobilePhoneNumber.js IP104.21.30.61:80
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab
File typeJavaScript source, ASCII text Hash0dbbb5873b895ea3be425af219cf85de 7b9dba563376d7dbd1c5b9b7064ab87eadad5591 02cbbdeb2244fd2855c49ab964c15001bde126c21cc5890d176c537878d6152b
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /jquery.mobilePhoneNumber.js HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab
Cookie: PHPSESSID=ea3f696cea80895eec23ca7208015e0c
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 27 Apr 2024 02:16:53 GMT
Content-Type: application/javascript
Content-Length: 4430
Connection: keep-alive
Last-Modified: Tue, 21 Feb 2023 09:39:45 GMT
Cache-Control: max-age=2592000
Expires: Mon, 27 May 2024 02:16:51 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 1
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HhQ3F4JRYywXmy7xMQbevykS2MuXH0l12lirJ28SKbVYpOuFJdlcFUQ4jnyRJDGZo3oC3l%2FPJh0928j4VOUyIGshAu4%2BTfT3zLGlb7DTVFPCYHL3WtALiq3vWGW4%2B2WRm%2B2yUxiRqBwuUuadBU91Knq4"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87ab50274beb1bfe-OSL
alt-svc: h2=":443"; ma=60
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.min.js | 151.101.1.229 | 200 OK | 17 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.min.js IP151.101.1.229:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text, with very long lines (60201) Hashc5236e5d6a5d0ff97ff8c8e5102c6c03 6fbfdbddbe85c578de559adcc8d07cccbc16d514 87538c4b7e488f5a49d12f98d6a04afc61d00f26a790f319569799acd434eb65
GET /npm/bootstrap@5.2.2/dist/js/bootstrap.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.2.2
x-jsd-version-type: version
etag: W/"ec40-b7/b3b6FxXjeVZrcyNB8zLwW1RQ"
content-encoding: br
accept-ranges: bytes
date: Sat, 27 Apr 2024 02:16:53 GMT
age: 1817175
x-served-by: cache-fra-etou8220032-FRA, cache-hel1410022-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 17366
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js | 216.58.207.234 | 200 OK | 33 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js IP216.58.207.234:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50 ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT
File typeJavaScript source, ASCII text, with very long lines (32086) Hash8101d596b2b8fa35fe3a634ea342d7c3 d6c1f41972de07b09bfa63d2e50f9ab41ec372bd 540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441
GET /ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33434
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:50:54 GMT
expires: Sat, 26 Apr 2025 05:50:54 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 73559
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css | 151.101.1.229 | 200 OK | 30 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css IP151.101.1.229:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeUnicode text, UTF-8 text, with very long lines (65305) Hash025df1ec88740cad5ff14bb3380da6dd 7abed070e37ce060c0a561575f1d41a7f248fc74 2143941c03dacda8b4f1016ced6e0c6f34e5c04585a3bcffe33c3c626c448a4a
GET /npm/bootstrap@5.2.2/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.2.2
x-jsd-version-type: version
etag: W/"2f955-er7QcON84GDApWFXXx1Bp/JI/HQ"
content-encoding: br
accept-ranges: bytes
date: Sat, 27 Apr 2024 02:16:53 GMT
age: 20829786
x-served-by: cache-fra-eddf8230072-FRA, cache-hel1410022-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 30336
X-Firefox-Spdy: h2
|
|
| verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png | 104.26.8.206 | 302 Found | 251 B |
URL GET HTTP/1.1verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png IP104.26.8.206:80
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab
File typeHTML document, ASCII text Hash73816d82cca56c187674258ec5b7bd5a cd989502a8b941226bb7e5ddc0ff0b62621e701f cc2b540f494c9f0eb7c7f31880eec48518729e92ffa9e7081eb70193baa985a5
GET /uploads/0.442373001673954581K_Sa3Nyg.png HTTP/1.1
Host: verifiedsecure.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Sat, 27 Apr 2024 02:16:53 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png
Cache-Control: max-age=14400
Expires: Sat, 27 Apr 2024 02:26:51 GMT
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hyto0TRxdpWXEIB9hJ4J3PYFlQ5vE8UqgeUIzITdGLG%2BPRelgG5moQ6eH8fF8Wd4MDL0NQbQHZdWyNI6lqJUlfVFUCGQtYNeXIm4pcNUgB7bSfvixtlmt3yDvC8u6cko%2FKhEIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87ab5027cdd9569a-OSL
alt-svc: h2=":443"; ma=60
|
|
| subscriberwelcome.com/uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg | 104.21.66.20 | 200 OK | 144 kB |
URL GET HTTP/2subscriberwelcome.com/uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg IP104.21.66.20:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab CertificateIssuerGoogle Trust Services LLC Subjectsubscriberwelcome.com FingerprintDA:EE:DE:64:E3:D6:C6:7B:68:0D:DF:8D:B3:56:E9:59:2C:55:00:E1 ValidityFri, 08 Mar 2024 02:01:15 GMT - Thu, 06 Jun 2024 02:01:14 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 966x1449, components 3 Size144 kB (144253 bytes) Hashe7eb0da863b2d3ead5846cdc3263a233 138225ea3d8ff08f07b046b858bf46bf2bba2e96 ff19a64983ac2748d6b8361212f1fc41814e1acd0d157ee9c736bbd2a4a03180
GET /uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 02:16:53 GMT
content-type: image/jpeg
content-length: 144253
last-modified: Mon, 20 Feb 2023 15:41:11 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wF9FXexs9HjOxTXdezM4ArPkWaygv7ZttixBW2TFnclxpF1wE%2B2SR77f%2BDVt9xRd06fIAY6xu8cfJmr0wxoSCQx9mytTCau6fKMlXAo3g7MApkkZUQMZDhNG6olWzo8y2pG8qI9OS44%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ab50285d78b517-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| subscriberwelcome.com/uploads/0.204734001673521892LifeAfterUkraine.jpeg | 104.21.66.20 | 200 OK | 400 kB |
URL GET HTTP/2subscriberwelcome.com/uploads/0.204734001673521892LifeAfterUkraine.jpeg IP104.21.66.20:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab CertificateIssuerGoogle Trust Services LLC Subjectsubscriberwelcome.com FingerprintDA:EE:DE:64:E3:D6:C6:7B:68:0D:DF:8D:B3:56:E9:59:2C:55:00:E1 ValidityFri, 08 Mar 2024 02:01:15 GMT - Thu, 06 Jun 2024 02:01:14 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2550x3300, components 3 Size400 kB (400505 bytes) Hashb9a9621a927a5b9a9c71fdbb53bf8991 9c4cc398edb33da6a79e62701867cbf7fed4056d d0342e1b39e1c9b80bfb574b18e0a5d9f9cf00e00ca7cf3b2ce1ded70f3bb9ab
GET /uploads/0.204734001673521892LifeAfterUkraine.jpeg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 02:16:53 GMT
content-type: image/jpeg
content-length: 400505
last-modified: Thu, 12 Jan 2023 11:11:32 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SnS67Nii1ztGAsuV0J7n0tJtHAhrJg%2BbRhBPD6GUopZSm4VZ1K3CYbL6cbhd61zWn4%2BKEfSY%2FdGvqHeO9lYDQQouVIFEFjLByMGhxdB4PI2x5HtVe8suvncfcmBQUbUZtCPwkm81JtQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ab50284d77b517-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-WJJ5P9F2X8 | 142.250.74.168 | 200 OK | 100 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-WJJ5P9F2X8 IP142.250.74.168:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52 ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT
File typeJavaScript source, ASCII text, with very long lines (5945) Size100 kB (100534 bytes) Hash7780423252f71951671eaa50cf3a5e5d 90d770f861162477078a957a4518b2d47e5c5ca8 95b90cf52f3c0534bcf04865649eed4191a1e32f26809a955998472b19285703
GET /gtag/js?id=G-WJJ5P9F2X8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 27 Apr 2024 02:16:53 GMT
expires: Sat, 27 Apr 2024 02:16:53 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100534
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| subscriberwelcome.com/uploads/0.1663680016738854302D2(1).jpg | 104.21.66.20 | 200 OK | 1.1 MB |
URL GET HTTP/2subscriberwelcome.com/uploads/0.1663680016738854302D2(1).jpg IP104.21.66.20:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab CertificateIssuerGoogle Trust Services LLC Subjectsubscriberwelcome.com FingerprintDA:EE:DE:64:E3:D6:C6:7B:68:0D:DF:8D:B3:56:E9:59:2C:55:00:E1 ValidityFri, 08 Mar 2024 02:01:15 GMT - Thu, 06 Jun 2024 02:01:14 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Windows), datetime=2023:01:10 16:36:41], baseline, precision 8, 1800x2700, components 3 Size1.1 MB (1114284 bytes) Hashb02e84cdcd5a3e55ded5e64dfd307124 bfaad4b8b4b1b1fafffeda314b8868c94e7280c8 d67985993c18e2a7b22a4193c0613a65096b3376d64539feb646739798d2cf5c
GET /uploads/0.1663680016738854302D2(1).jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 02:16:53 GMT
content-type: image/jpeg
content-length: 1114284
last-modified: Mon, 16 Jan 2023 16:10:30 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rey6coIrT2KqdZdOYashahi2USJfMxGwR4ZIAOU1qmjFOb54JIaq1AHW%2F12Qfhbs9kM0LwbYT8KPsn%2FbCE45SyG8CtHMK6ArDeSfXO8JqZ27UsxVO%2BJTEpZpHbOPS7aPaMPrUKVPuLE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ab50285d7ab517-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| subscriberwelcome.com/uploads/0.1721950016738853872D1(1).jpg | 104.21.66.20 | 200 OK | 1.3 MB |
URL GET HTTP/2subscriberwelcome.com/uploads/0.1721950016738853872D1(1).jpg IP104.21.66.20:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab CertificateIssuerGoogle Trust Services LLC Subjectsubscriberwelcome.com FingerprintDA:EE:DE:64:E3:D6:C6:7B:68:0D:DF:8D:B3:56:E9:59:2C:55:00:E1 ValidityFri, 08 Mar 2024 02:01:15 GMT - Thu, 06 Jun 2024 02:01:14 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Windows), datetime=2023:01:07 00:05:06], baseline, precision 8, 1800x2700, components 3 Size1.3 MB (1288007 bytes) Hash91e68c3d20f4e55b01fdbaa834b4e4e6 e54e4ea7f042d2124aa1be976a6fe9d708bb4f9f 3cab775e25b68c23b905d547373476f046b0101e7cfdbd6f016e302f5a429988
GET /uploads/0.1721950016738853872D1(1).jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 02:16:53 GMT
content-type: image/jpeg
content-length: 1288007
last-modified: Mon, 16 Jan 2023 16:09:47 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=llRVEFtEib9tS7nSOk0b4u5eSi0D3KcIselUHXMWjH98GqWi%2FTTc5z1NOCVoMpE72obVvMJco7MzkJ0CbKL4ggl330i4UcTldv1VA7PQ5N97JK9CzfHZfFIgNowVKcXLJDLgAJMR26s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ab50285d7db517-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png | 104.26.8.206 | 302 Found | 36 kB |
URL GET HTTP/1.1verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png IP104.26.8.206:80
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab
File typePNG image data, 3369 x 257, 8-bit/color RGBA, non-interlaced Hash724c1e2ab214eefe0271ee598af8749a b99bb085dd791488b061c423223318345c590f24 bba2a6dbda4e6833f68c21d84c0f9a09180ae9595b238c982da300cf448ab78c
GET /uploads/0.442373001673954581K_Sa3Nyg.png HTTP/1.1
Host: verifiedsecure.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://subscribe.goodlifestylenews.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 02:16:54 GMT
content-type: image/png
content-length: 35781
last-modified: Tue, 17 Jan 2023 11:23:01 GMT
cache-control: max-age=2592000
expires: Tue, 21 May 2024 23:01:10 GMT
cf-cache-status: HIT
age: 443744
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=huS5SVCVSl8h7532ywcaGfJUvnzs1YUSUoSEhjWoxxf3gLpYoLET7mbHB7K3r2p2cmdKSpddFQqSgwhHU70aJeRRHVCEM5Yq7nvX1dJ9C5NBssDSZ0aRdzoaBU53ssc4s90cjg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ab502af85856c9-OSL
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:02:10 GMT
expires: Sat, 26 Apr 2025 06:02:10 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 72884
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/silicon-valley-bank-svb-696x391.jpg40d86096b513af5fb6b62d4adc15f8551701260093ffc78a6207d8aade4d748dae6478fb31 | 16.182.106.72 | 200 OK | 69 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/silicon-valley-bank-svb-696x391.jpg40d86096b513af5fb6b62d4adc15f8551701260093ffc78a6207d8aade4d748dae6478fb31 IP16.182.106.72:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 696x391, components 3 Hashfa1f99e9ffb1cb56f6202d5bbf335f79 77864286b7c71b8670bf94f03134df6a009aabec 0fb64f41262e961a43e15d99a5461253cfcd4b57c554000678ed73aafd4edc6d
GET /autonewsuploads/silicon-valley-bank-svb-696x391.jpg40d86096b513af5fb6b62d4adc15f8551701260093ffc78a6207d8aade4d748dae6478fb31 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: AqYWkmLsoJQcvT77WjgJps/rRGclj3VxhIvZHWhSSufYctR2XCbnayIq263ZqEDCJT2uJJXdidw=
x-amz-request-id: EYHYE7SGR59DZVCT
Date: Sat, 27 Apr 2024 02:16:55 GMT
Last-Modified: Wed, 29 Nov 2023 12:14:52 GMT
ETag: "fa1f99e9ffb1cb56f6202d5bbf335f79"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 68794
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/0.099067001676806324SMRFedCtrl0223.jpg | 16.182.106.72 | 200 OK | 133 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/0.099067001676806324SMRFedCtrl0223.jpg IP16.182.106.72:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10], baseline, precision 8, 1024x771, components 3 Size133 kB (132852 bytes) Hash5687439e1978bd7fdad82d8d9b40589a caf45e2235d11748a944e68abdb2c797eaf1caf7 a612c05d44abfdec6f7a49b2848057039b7d4fb6b75178f0a228893cba3b4d04
GET /autonewsuploads/0.099067001676806324SMRFedCtrl0223.jpg HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 7wRnNIm+3XNdWaB3dNO0xA1LyY34sNzTCQu5xpqYoK3aDoZVZZp8L0c/8909GA+/wX3ceNUViHE=
x-amz-request-id: EYHMPBS6XZ3HEPNW
Date: Sat, 27 Apr 2024 02:16:55 GMT
Last-Modified: Wed, 08 Mar 2023 14:22:23 GMT
ETag: "5687439e1978bd7fdad82d8d9b40589a"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 132852
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/download%20(1).jpg298e50f742517900623f639efea37fd51708949598e017e1948fb38e4f29a8061aaba1ccec | 16.182.106.72 | 200 OK | 6.6 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/download%20(1).jpg298e50f742517900623f639efea37fd51708949598e017e1948fb38e4f29a8061aaba1ccec IP16.182.106.72:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 295x171, components 3 Hash18e107165669fa8cf612fefdf7621525 21380c0498c431005f59782afe92bc50aa68ef63 d20ed4fb179f7131ba314b7710e99334af069f3e45765152c24045aa68e09771
GET /autonewsuploads/download%20(1).jpg298e50f742517900623f639efea37fd51708949598e017e1948fb38e4f29a8061aaba1ccec HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: fWqI+0wmA+wf4DSW6zaGJ4XFwbUC58/A23kGo/+fChRGZ9yaStY0u0R54UpI4Sfi29taUhgDdbE=
x-amz-request-id: EYHMAQ0BZYV6YK1T
Date: Sat, 27 Apr 2024 02:16:55 GMT
Last-Modified: Mon, 26 Feb 2024 12:13:20 GMT
ETag: "18e107165669fa8cf612fefdf7621525"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 6633
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/arabia%20usa.pngb0ed32c65098ce22b30bb667b5cc036c1713269997c4b1f4e8a949202618a8b70ba3220078 | 16.182.106.72 | 200 OK | 352 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/arabia%20usa.pngb0ed32c65098ce22b30bb667b5cc036c1713269997c4b1f4e8a949202618a8b70ba3220078 IP16.182.106.72:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typePNG image data, 750 x 394, 8-bit/color RGBA, non-interlaced Size352 kB (351664 bytes) Hash23eeb8656d2d4f1f751c9ac7325b026d 93c54a0b2d11c5372eb46ccf5a7adcc55797b334 bbc434f9e9f658270d337d0eb636ccb4d141d5aee2d2536882062365fe88011b
GET /autonewsuploads/arabia%20usa.pngb0ed32c65098ce22b30bb667b5cc036c1713269997c4b1f4e8a949202618a8b70ba3220078 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: +soqkhx+ahy89Cz3OS3H6kMwNHFQ7eSndLFW2VfvM9O8IPkPl8oBU11DmErLZmYna6NPkBFz36I=
x-amz-request-id: EYHQKFA5SXJH4WAK
Date: Sat, 27 Apr 2024 02:16:55 GMT
Last-Modified: Tue, 16 Apr 2024 12:19:58 GMT
ETag: "23eeb8656d2d4f1f751c9ac7325b026d"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 351664
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/Old.jpg597cb160ad4a43f8278def869d96ff141707134240408329933c398aa2a78da76d330bdaa7 | 16.182.106.72 | 200 OK | 7.3 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/Old.jpg597cb160ad4a43f8278def869d96ff141707134240408329933c398aa2a78da76d330bdaa7 IP16.182.106.72:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 275x183, components 3 Hasha3cddc1cc13692364c751c44fd60c348 19ee46dd613a85e05e18de8d4df3065e2d88f6b7 029e5551fdf9a15bc17bdeba24d3cbc5a81963e37f784225bf32413cfc107faf
GET /autonewsuploads/Old.jpg597cb160ad4a43f8278def869d96ff141707134240408329933c398aa2a78da76d330bdaa7 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: jLE6ugJErqDWQhJMfLX6QBxvRSu0ThpI9ai31VqKmu3RJUpA55frkBSMKLT3GAThFJ8xq994WEM=
x-amz-request-id: EYHJC473VQA8JCQH
Date: Sat, 27 Apr 2024 02:16:55 GMT
Last-Modified: Mon, 05 Feb 2024 11:57:22 GMT
ETag: "a3cddc1cc13692364c751c44fd60c348"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 7319
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/0_xMIObdsLB7XPfX6M.jpg831e6c0cac9852ee802169b318eafcc21703851588ea1d7d0705a741428b565fef908b1c90 | 16.182.106.72 | 200 OK | 130 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/0_xMIObdsLB7XPfX6M.jpg831e6c0cac9852ee802169b318eafcc21703851588ea1d7d0705a741428b565fef908b1c90 IP16.182.106.72:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 800x550, components 3 Size130 kB (130538 bytes) Hash81ed4e278b514ede42a3fa0bc59ae812 79ea6edc5c2326a174f137cdb092754eafa20d3f bc9da136ab9d91bdf0e1a667dd123f362fa5ab2dd7f2ee22c9aaff3ebd619588
GET /autonewsuploads/0_xMIObdsLB7XPfX6M.jpg831e6c0cac9852ee802169b318eafcc21703851588ea1d7d0705a741428b565fef908b1c90 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: mTJfcEgATkJTDpexctBCoYJzWVrTa+1Ck/8V1SahxHPnAho91Grbx1UizzVePSwA93XJHhUA3rI=
x-amz-request-id: EYHM33S3SJNHPG8T
Date: Sat, 27 Apr 2024 02:16:55 GMT
Last-Modified: Fri, 29 Dec 2023 12:06:30 GMT
ETag: "81ed4e278b514ede42a3fa0bc59ae812"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 130538
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/drinking-98618_1280.jpg64b9888da2f455dab6320067862a3aca17129195312d5cf1686f59b8fe0453612e08b8250c | 16.182.106.72 | 200 OK | 159 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/drinking-98618_1280.jpg64b9888da2f455dab6320067862a3aca17129195312d5cf1686f59b8fe0453612e08b8250c IP16.182.106.72:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 1280x1280, components 3 Size159 kB (158571 bytes) Hash7ce5ed9adc66e64ba075efb968d14738 6fdc90fa71a9caa1ab837ef5a1bf29abfbd0498d 1514eaed03038f21ece918a59349483f95ef337541818017d701c58d397fe326
GET /autonewsuploads/drinking-98618_1280.jpg64b9888da2f455dab6320067862a3aca17129195312d5cf1686f59b8fe0453612e08b8250c HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: oYwBMjHgucpZcu487ZhIbl+GEF8FFZ9WtgU0waxeMUcdEYtQAur64F7Puk82c0AohPSAfvJLwdY=
x-amz-request-id: EYHQNJDD2SDY6MK1
Date: Sat, 27 Apr 2024 02:16:55 GMT
Last-Modified: Fri, 12 Apr 2024 10:58:53 GMT
ETag: "7ce5ed9adc66e64ba075efb968d14738"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 158571
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/ChaosRally03243.jpg62be5442c92f7d2f253103bf43fbb876171197445843f099107fc97f09add12ee5cf73a0a4 | 16.182.106.72 | 200 OK | 931 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/ChaosRally03243.jpg62be5442c92f7d2f253103bf43fbb876171197445843f099107fc97f09add12ee5cf73a0a4 IP16.182.106.72:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, description=Charlottesville Candlelight Vigil at the White House, Washington, DC USA, manufacturer=SONY, model=ILCE-6300, xresolution=248, yresolution=256, resolutionunit=2, software=Adobe Photoshop Lightroom 6.12 (Macintosh), datetime=2017:08:13 21:53:35], baseline, precision 8, 2560x1449, components 3 Size931 kB (931429 bytes) Hashb55dae54d79509e222cf4536698350ab af4d10c9b5f99edfa0710eb9123500b358d999dc d67ad702f911cf9b22146c71f2413d566d81e23ce3d78fa68b9a876ad69283ad
GET /autonewsuploads/ChaosRally03243.jpg62be5442c92f7d2f253103bf43fbb876171197445843f099107fc97f09add12ee5cf73a0a4 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 0yC8lm1RzM3dqkaTWebbgUhehfgq1X2aeOpWd7I/nHDvi4Lmcy8TFsxcScASMGFTiAtBMZpDvxI=
x-amz-request-id: EYHHK9S7AM60TE29
Date: Sat, 27 Apr 2024 02:16:55 GMT
Last-Modified: Mon, 01 Apr 2024 12:27:42 GMT
ETag: "b55dae54d79509e222cf4536698350ab"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 931429
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/a97956e6-e061-426f-a7a8-6706072464b7.jpgb2b990f3eeadb1a83f38b3151b2268e417133527337283bfe96fb701d298505a3a3d1d11eb | 16.182.106.72 | 200 OK | 149 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/a97956e6-e061-426f-a7a8-6706072464b7.jpgb2b990f3eeadb1a83f38b3151b2268e417133527337283bfe96fb701d298505a3a3d1d11eb IP16.182.106.72:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 502x502, components 3 Size149 kB (149088 bytes) Hash9b5a32671e587b6c326be90e5f2bb93e d28f1f5b6442d88c61656701a826c75eef43e4e9 1a9272061de5359a43103b089713a9b3e207a00698b44b928952f9be418f4ad3
GET /autonewsuploads/a97956e6-e061-426f-a7a8-6706072464b7.jpgb2b990f3eeadb1a83f38b3151b2268e417133527337283bfe96fb701d298505a3a3d1d11eb HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: byH8kYV7x5EVGU3wloZkf75R72epublQIxpMtXrU3J+1k314wJ/9tBSeIcH2ocAQnBzNczxC8ss=
x-amz-request-id: EYHQ3N9EGSRV0491
Date: Sat, 27 Apr 2024 02:16:55 GMT
Last-Modified: Wed, 17 Apr 2024 11:18:55 GMT
ETag: "9b5a32671e587b6c326be90e5f2bb93e"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 149088
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/czNmcy1wcml2YXRlL3Jhd3BpeGVsX2ltYWdlcy93ZWJzaXRlX2NvbnRlbnQvbHIvc2s4MDQ4LWltYWdlLWt3dnVreG9tLmpwZw.jpge7f332881ff283b6829e94415993a95d17132665016cdca8a23789d4b3362512373eef3417 | 16.182.106.72 | 200 OK | 74 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/czNmcy1wcml2YXRlL3Jhd3BpeGVsX2ltYWdlcy93ZWJzaXRlX2NvbnRlbnQvbHIvc2s4MDQ4LWltYWdlLWt3dnVreG9tLmpwZw.jpge7f332881ff283b6829e94415993a95d17132665016cdca8a23789d4b3362512373eef3417 IP16.182.106.72:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1000x668, components 3 Hash7fe2d33d531815585c8c1d4c5867d4a3 35500f4fa795b49f47137c0532ab07e600d82f8c e295b46a6cabf7a1d9a053ad5cd21a7a610c44cfaf7eee8b46638a554fc27b73
GET /autonewsuploads/czNmcy1wcml2YXRlL3Jhd3BpeGVsX2ltYWdlcy93ZWJzaXRlX2NvbnRlbnQvbHIvc2s4MDQ4LWltYWdlLWt3dnVreG9tLmpwZw.jpge7f332881ff283b6829e94415993a95d17132665016cdca8a23789d4b3362512373eef3417 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: paDkayZwj2uBvPxEG3G4BzPBDx2o5b++e6Aq1MHjWN1Qv/zmviK3kAUeL0syL5OIvF0KNkqSX60=
x-amz-request-id: EYHQGRHBMDFSA5NG
Date: Sat, 27 Apr 2024 02:16:55 GMT
Last-Modified: Tue, 16 Apr 2024 11:21:44 GMT
ETag: "7fe2d33d531815585c8c1d4c5867d4a3"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 73918
|
|
| subscribe.goodlifestylenews.com/favicon.ico | 104.21.30.61 | 404 Not Found | 238 B |
URL GET HTTP/1.1subscribe.goodlifestylenews.com/favicon.ico IP104.21.30.61:80
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab
Cookie: PHPSESSID=ea3f696cea80895eec23ca7208015e0c; _ga_WJJ5P9F2X8=GS1.1.1714184214.1.0.1714184214.0.0.0; _ga=GA1.1.261752965.1714184214
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Sat, 27 Apr 2024 02:16:55 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oN%2BYXx9G8F2ehZOd%2FUmsnGiPhLUjm6VTAVqdbgzJ7sFL8GJi5bZfvvbazcYSFG151AZv7b%2FUPGCIVGvvtcsSCAObvswdUAPmFgovqLgdE6f7iyUIq%2F77lF7rwP8Re6M%2FC7fHxhpo1H99kfgi6%2BvSk8FL"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87ab50300d2b1bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| verifiedwebpage.com/go?ehash=ec55f96bdbee115719939c545d55f6bb&product=47349&ar=55&cid=2586&lid=1610&slhash=71675dba60516d3bfd427ea3e97034d3&redirect_id=43915&bid=17 | 104.18.20.187 | 302 Found | 0 B |
URL User Request GET HTTP/2verifiedwebpage.com/go?ehash=ec55f96bdbee115719939c545d55f6bb&product=47349&ar=55&cid=2586&lid=1610&slhash=71675dba60516d3bfd427ea3e97034d3&redirect_id=43915&bid=17 IP104.18.20.187:443
CertificateIssuerGoogle Trust Services LLC Subjectverifiedwebpage.com FingerprintB6:7C:0D:93:CD:D6:56:A3:74:B9:46:38:F0:C7:A5:31:BC:5F:AF:56 ValidityWed, 10 Apr 2024 21:43:08 GMT - Tue, 09 Jul 2024 21:43:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go?ehash=ec55f96bdbee115719939c545d55f6bb&product=47349&ar=55&cid=2586&lid=1610&slhash=71675dba60516d3bfd427ea3e97034d3&redirect_id=43915&bid=17 HTTP/1.1
Host: verifiedwebpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 27 Apr 2024 02:16:50 GMT
content-type: text/html; charset=UTF-8
location: https://subscribe.goodlifestylenews.com?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: User-Agent
cf-cache-status: DYNAMIC
set-cookie: PHPSESSID=e8eff8ceba3a735267c6d5d5e9a3d44d; path=/
pixel_session_hash_47349=3415447649292326325; expires=Mon, 27-May-2024 02:16:48 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=None
bt_tracking_product_47349=0c02b74a6dc6c6e49c9b6a4717ed96a3724df785f11159d279e46d2c69dec03a; expires=Mon, 29-Apr-2024 02:16:49 GMT; Max-Age=172800
__cf_bm=rfE.qxlA8eQndkE82HtJpBTdxoR80k5IAPyxu.Kadu4-1714184210-1.0.1.1-GR8F56WQ94r.ki_JHvvwnBO3Ewh6bZ9siVv_j3xwORiu5DqOeiiOazXtP0aL5sP.A5nKdqDUxkb3UFF0jXks6A; path=/; expires=Sat, 27-Apr-24 02:46:50 GMT; domain=.verifiedwebpage.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 87ab500d0ad9b4f1-OSL
X-Firefox-Spdy: h2
|
|
| go.goodlifestylenews.com/dummyarticleclickers_43915/ec55f96bdbee115719939c545d55f6bb/55/leadsource/2586/1610/71675dba60516d3bfd427ea3e97034d3/mpmta/news/43915/17 | 104.21.30.61 | 302 Found | 0 B |
URL User Request GET HTTP/2go.goodlifestylenews.com/dummyarticleclickers_43915/ec55f96bdbee115719939c545d55f6bb/55/leadsource/2586/1610/71675dba60516d3bfd427ea3e97034d3/mpmta/news/43915/17 IP104.21.30.61:443
CertificateIssuerGoogle Trust Services LLC Subjectgoodlifestylenews.com FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40 ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /dummyarticleclickers_43915/ec55f96bdbee115719939c545d55f6bb/55/leadsource/2586/1610/71675dba60516d3bfd427ea3e97034d3/mpmta/news/43915/17 HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 27 Apr 2024 02:16:49 GMT
content-type: text/html; charset=UTF-8
location: https://verifiedwebpage.com/go?ehash=ec55f96bdbee115719939c545d55f6bb&product=47349&ar=55&cid=2586&lid=1610&slhash=71675dba60516d3bfd427ea3e97034d3&redirect_id=43915&bid=17
cache-control: max-age=600
expires: Sat, 27 Apr 2024 02:26:48 GMT
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1S6jPCrEz2%2B2RWuYNgcyo6Qaek9qmuXmR9wJRXtpJoV3LJa8yhizEKJPeqXntKslWpjES%2BKiQRVuDfajn4bHO9ogB9fn1bmtlCeTgLGQiTKCFG98NVvH7oLc3yk7DodE3WQqpQ4BAlxue3I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ab500aab72b50b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17 | 104.21.30.61 | 302 Found | 0 B |
URL User Request GET HTTP/3subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17 IP104.21.30.61:443
CertificateIssuerGoogle Trust Services LLC Subjectgoodlifestylenews.com FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40 ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17 HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Sat, 27 Apr 2024 02:16:51 GMT
content-type: text/html; charset=UTF-8
location: https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=ea3f696cea80895eec23ca7208015e0c; path=/
vary: Accept-Encoding,User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1xx%2Bn6MJeEUl3bX1TEO%2FWnAzmcF%2FlLEncZ9i69iW3m1kOWUGLDtOlyYjPSb6Xq9ByYYGkHRDKV758a1jbbsRjbsMY4tF0IJYBkMEuPl8YcAUsZpjkunNVkySr2IE1GPr2%2BUJHC%2FzE5r%2B4hyQ2Mas3Kc9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ab5012ddd856b1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css?family=Roboto | 142.250.74.106 | 200 OK | 2.2 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto IP142.250.74.106:443
Requested byhttp://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43915&bid=17&ses_id=03d3974f75d244cd5cbe1d9dd3d071ab CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50 ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT
File typeASCII text, with very long lines (2218), with no line terminators Hash807b0cff287eb02fda9eb3a87e2746a5 34a0af77abd82f106052590a0e624b2803a6572d 35c288796da2ba3b90a7a7ef7e75a5e7eb55cad381d227beda8c5e400a04caff
GET /css?family=Roboto HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 27 Apr 2024 02:16:53 GMT
date: Sat, 27 Apr 2024 02:16:53 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|