| go.goodlifestylenews.com/ | 104.21.30.61 | | 143 B |
URL go.goodlifestylenews.com/ IP104.21.30.61:0
File typeHTML document, ASCII text Hashf1fb042c62910c34be16ad91cbbd71fa 5bc7aceba9a8704ef4b1d427d7d08b140afcd866 9278d16ed2fdcd5dc651615b0b8adc6b55fb667a9d106a9891b861d4561d9a24
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 11 May 2024 01:17:41 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 14 Nov 2023 15:41:05 GMT
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Vary: Accept-Encoding,User-Agent
Pragma: no-cache
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hPZkw7SEt39wRanZofoPvn0nk67xtm9EtoS0DmH%2Be4kaGT5AADVTDFl3vdcMNiotDxmkX7uKWnsEFpuyOGSa66bL%2FNINp4HG1OIUtmulfsIHoYTROOkVXY6lPDzBeTR2DLi6oI7l03GH%2FT4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 881e54b0285c5696-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17 | 104.21.30.61 | | 31 kB |
URL User Request GET subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17 IP104.21.30.61:0
CertificateIssuerGoogle Trust Services LLC Subjectgoodlifestylenews.com FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40 ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (393) Hashe255bcc839f7a8163017b8f683445441 f14adbc51b5584f562b1a7f96383b451841f86e6 5c0f69231094dc32f0514fcb4263b1b7d6620b4281b3bdd9e7ef4a219f3a9506
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17 HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Sat, 11 May 2024 01:17:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST
Access-Control-Allow-Headers: X-Requested-With
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=70d1b32d721b1843c6ece6fc3456e7b9; path=/
location: http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81
Vary: Accept-Encoding,User-Agent
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H0E5hhSRXVTpT%2B58mEqRxerQuybmFgUtQidPiUbUtEd8yzXnOzN8aNadybCPWaoL3AYnV1nARo%2FoE7NQKQg2Z8qy8x8Acez35KLoHy6oYSEJ%2B4A0%2BaoaNa7cKV9Fjt2TOUA0%2FEyyU%2BNF5R%2FnRya89opa"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 881e54b3af82568b-OSL
alt-svc: h2=":443"; ma=60
|
|
| subscribe.goodlifestylenews.com/jquery.mobilePhoneNumber.js | 172.67.172.49 | 200 OK | 4.4 kB |
URL GET HTTP/3subscribe.goodlifestylenews.com/jquery.mobilePhoneNumber.js IP172.67.172.49:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerGoogle Trust Services LLC Subjectgoodlifestylenews.com FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40 ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
File typeJavaScript source, ASCII text Hash0dbbb5873b895ea3be425af219cf85de 7b9dba563376d7dbd1c5b9b7064ab87eadad5591 02cbbdeb2244fd2855c49ab964c15001bde126c21cc5890d176c537878d6152b
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /jquery.mobilePhoneNumber.js HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81
Cookie: PHPSESSID=70d1b32d721b1843c6ece6fc3456e7b9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 11 May 2024 01:17:44 GMT
content-type: application/javascript
content-length: 4430
last-modified: Tue, 21 Feb 2023 09:39:45 GMT
cache-control: max-age=2592000
expires: Thu, 06 Jun 2024 22:53:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
cf-cache-status: HIT
age: 267861
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W3MPVL%2BXT3L8jH%2F%2BC8QQaCg3ZP3VoXoZPgkQY4%2B6CcSnqvIuiYiVUAXG9b6xsstjitn86fqQ3Q8FoSiNNK3qaAindLzxbdFoWnkzQOq%2F3uOZvzpPwYmn%2FgLTN5HbkdshxWxE%2F2ueEKio5ou0IzmS4Ozd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e54c3eea11c06-OSL
alt-svc: h3=":443"; ma=86400
|
|
| subscriberwelcome.com/uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg | 104.21.66.20 | 200 OK | 144 kB |
URL GET HTTP/2subscriberwelcome.com/uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg IP104.21.66.20:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerGoogle Trust Services LLC Subjectsubscriberwelcome.com FingerprintC8:3F:88:99:86:9B:20:E9:77:44:04:5F:4D:C8:B8:D2:23:5F:C5:D2 ValidityMon, 06 May 2024 01:45:00 GMT - Sun, 04 Aug 2024 01:44:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 966x1449, components 3 Size144 kB (144253 bytes) Hashe7eb0da863b2d3ead5846cdc3263a233 138225ea3d8ff08f07b046b858bf46bf2bba2e96 ff19a64983ac2748d6b8361212f1fc41814e1acd0d157ee9c736bbd2a4a03180
GET /uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:17:45 GMT
content-type: image/jpeg
content-length: 144253
last-modified: Mon, 20 Feb 2023 15:41:11 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tyNbsZ%2Bx5LP7%2FFLtw7QsDJfaxTBbNK0sVqoI%2FRK3x0ltCwKz9F7zgCJIjWxhKMSMIFfgfo%2FlkyPxCyWFMjbuL8BzbSE4DtNoSb0do3kYPlOMMWdEobMqYiN8tEaitprpWSkoVg%2FLgus%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881e54c438615691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| subscriberwelcome.com/uploads/0.204734001673521892LifeAfterUkraine.jpeg | 104.21.66.20 | 200 OK | 400 kB |
URL GET HTTP/2subscriberwelcome.com/uploads/0.204734001673521892LifeAfterUkraine.jpeg IP104.21.66.20:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerGoogle Trust Services LLC Subjectsubscriberwelcome.com FingerprintC8:3F:88:99:86:9B:20:E9:77:44:04:5F:4D:C8:B8:D2:23:5F:C5:D2 ValidityMon, 06 May 2024 01:45:00 GMT - Sun, 04 Aug 2024 01:44:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2550x3300, components 3 Size400 kB (400505 bytes) Hashb9a9621a927a5b9a9c71fdbb53bf8991 9c4cc398edb33da6a79e62701867cbf7fed4056d d0342e1b39e1c9b80bfb574b18e0a5d9f9cf00e00ca7cf3b2ce1ded70f3bb9ab
GET /uploads/0.204734001673521892LifeAfterUkraine.jpeg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:17:45 GMT
content-type: image/jpeg
content-length: 400505
last-modified: Thu, 12 Jan 2023 11:11:32 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AP%2FDo9g85DqFv2HIDsTwLwbzOta29O5M2XzGLEXfqDdDArJtb9JAXH2I%2FA7wGACGeR01m3eTz%2By95Pm51HajLvPPcb%2BDanB7gq4GaKC5FZpfgT5ntfrYNGiewBgi1DjK%2BWcvyyOwK9k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881e54c438635691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| subscribe.goodlifestylenews.com/jquery.caret.js | 172.67.172.49 | 200 OK | 716 B |
URL GET HTTP/3subscribe.goodlifestylenews.com/jquery.caret.js IP172.67.172.49:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerGoogle Trust Services LLC Subjectgoodlifestylenews.com FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40 ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash35c3ec8db4ff6e862db42516436216a1 7d9d7731403868cc34edaad1d9e17311541a6f77 adef482d97f599ba0e720ecf2aba0581ea1591ba1bb1eb271f1d98b279ff81ba
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /jquery.caret.js HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81
Cookie: PHPSESSID=70d1b32d721b1843c6ece6fc3456e7b9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 11 May 2024 01:17:45 GMT
content-type: application/javascript
content-length: 716
last-modified: Tue, 21 Feb 2023 09:39:45 GMT
cache-control: max-age=2592000
expires: Mon, 10 Jun 2024 01:17:43 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
cf-cache-status: HIT
age: 0
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vCW79Wj1t25Wo7sO0MtGSGZ1Q%2Fw8UFyDMtLADDg6FGKbd9MllhTKgi%2BwNc41hhstepIUYRe1MbP5E0iaJbUiyt0C%2BHXMVh%2BQR8L64%2Bgm46TMFX6cvCkUl8d%2BmYed1z6Tk1ofHseDnRKuPYHeYM%2FP7enl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e54c3eea01c06-OSL
alt-svc: h3=":443"; ma=86400
|
|
| subscriberwelcome.com/uploads/0.1721950016738853872D1(1).jpg | 104.21.66.20 | 200 OK | 1.3 MB |
URL GET HTTP/2subscriberwelcome.com/uploads/0.1721950016738853872D1(1).jpg IP104.21.66.20:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerGoogle Trust Services LLC Subjectsubscriberwelcome.com FingerprintC8:3F:88:99:86:9B:20:E9:77:44:04:5F:4D:C8:B8:D2:23:5F:C5:D2 ValidityMon, 06 May 2024 01:45:00 GMT - Sun, 04 Aug 2024 01:44:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Windows), datetime=2023:01:07 00:05:06], baseline, precision 8, 1800x2700, components 3 Size1.3 MB (1288007 bytes) Hash91e68c3d20f4e55b01fdbaa834b4e4e6 e54e4ea7f042d2124aa1be976a6fe9d708bb4f9f 3cab775e25b68c23b905d547373476f046b0101e7cfdbd6f016e302f5a429988
GET /uploads/0.1721950016738853872D1(1).jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:17:45 GMT
content-type: image/jpeg
content-length: 1288007
last-modified: Mon, 16 Jan 2023 16:09:47 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kHqnxBNhiEqzlUyfPlldHqiErLruGzMUigepqdlnVq5UVMi6zQeRzHkXAHGdbeUP8B0QRaXCYUS6HRi411nmoWH0L2n2NDXqTzrKjAU4RBeSuBbf2taRCLvGyqff2mqEK0zQGr4FO4I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881e54c438625691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| subscriberwelcome.com/uploads/0.1663680016738854302D2(1).jpg | 104.21.66.20 | 200 OK | 1.1 MB |
URL GET HTTP/2subscriberwelcome.com/uploads/0.1663680016738854302D2(1).jpg IP104.21.66.20:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerGoogle Trust Services LLC Subjectsubscriberwelcome.com FingerprintC8:3F:88:99:86:9B:20:E9:77:44:04:5F:4D:C8:B8:D2:23:5F:C5:D2 ValidityMon, 06 May 2024 01:45:00 GMT - Sun, 04 Aug 2024 01:44:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Windows), datetime=2023:01:10 16:36:41], baseline, precision 8, 1800x2700, components 3 Size1.1 MB (1114284 bytes) Hashb02e84cdcd5a3e55ded5e64dfd307124 bfaad4b8b4b1b1fafffeda314b8868c94e7280c8 d67985993c18e2a7b22a4193c0613a65096b3376d64539feb646739798d2cf5c
GET /uploads/0.1663680016738854302D2(1).jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:17:45 GMT
content-type: image/jpeg
content-length: 1114284
last-modified: Mon, 16 Jan 2023 16:10:30 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BPQH6JIYF3%2FD%2FraxUrIBf10cVfO%2FA4OjlyDsSttEt1ya3OFf7rTRIcWAuptNX0PR4dI2W2pZ8%2F2wJZNZT1Oq8w69B9KgOTm57MXToen9h7fcQ5AxObT2d%2BoNrzI1G774LKZhRjtxp4Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881e54c438645691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css | 151.101.1.229 | 200 OK | 30 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css IP151.101.1.229:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeUnicode text, UTF-8 text, with very long lines (65305) Hash025df1ec88740cad5ff14bb3380da6dd 7abed070e37ce060c0a561575f1d41a7f248fc74 2143941c03dacda8b4f1016ced6e0c6f34e5c04585a3bcffe33c3c626c448a4a
GET /npm/bootstrap@5.2.2/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.2.2
x-jsd-version-type: version
etag: W/"2f955-er7QcON84GDApWFXXx1Bp/JI/HQ"
content-encoding: br
accept-ranges: bytes
date: Sat, 11 May 2024 01:17:45 GMT
age: 22035838
x-served-by: cache-fra-eddf8230072-FRA, cache-hel1410024-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 30336
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.min.js | 151.101.1.229 | 200 OK | 17 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.min.js IP151.101.1.229:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text, with very long lines (60201) Hashc5236e5d6a5d0ff97ff8c8e5102c6c03 6fbfdbddbe85c578de559adcc8d07cccbc16d514 87538c4b7e488f5a49d12f98d6a04afc61d00f26a790f319569799acd434eb65
GET /npm/bootstrap@5.2.2/dist/js/bootstrap.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.2.2
x-jsd-version-type: version
etag: W/"ec40-b7/b3b6FxXjeVZrcyNB8zLwW1RQ"
content-encoding: br
accept-ranges: bytes
date: Sat, 11 May 2024 01:17:45 GMT
age: 3023228
x-served-by: cache-fra-etou8220032-FRA, cache-hel1410024-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 17366
X-Firefox-Spdy: h2
|
|
| verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png | 172.67.74.20 | 200 OK | 36 kB |
URL GET HTTP/2verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png IP172.67.74.20:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerGoogle Trust Services LLC Subjectverifiedsecure.org FingerprintA0:39:56:47:2D:24:66:40:29:81:A2:DA:5B:19:04:77:07:A6:BA:B3 ValidityThu, 04 Apr 2024 23:26:29 GMT - Wed, 03 Jul 2024 23:26:28 GMT
File typePNG image data, 3369 x 257, 8-bit/color RGBA, non-interlaced Hash724c1e2ab214eefe0271ee598af8749a b99bb085dd791488b061c423223318345c590f24 bba2a6dbda4e6833f68c21d84c0f9a09180ae9595b238c982da300cf448ab78c
GET /uploads/0.442373001673954581K_Sa3Nyg.png HTTP/1.1
Host: verifiedsecure.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:17:45 GMT
content-type: image/png
content-length: 35781
last-modified: Tue, 17 Jan 2023 11:23:01 GMT
cache-control: max-age=2592000
expires: Mon, 10 Jun 2024 01:17:44 GMT
cf-cache-status: HIT
age: 0
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BVMLAUJEQr29%2FvCiSAZ2P1DcnAqsgybzbLu23Aw5AjUBfDU2mxp%2BjZDBqeL%2BaTr37CSWp4L2dDx%2BFHCZ7uB3VVB9qoZCVLpC2eHAwR3JFWK6P%2BwM8SIGzhtxCsAGIldRVb7rlQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881e54c7bb24b523-OSL
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-WJJ5P9F2X8 | 142.250.74.168 | 200 OK | 102 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-WJJ5P9F2X8 IP142.250.74.168:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Size102 kB (102185 bytes) Hashdeea13f87535b4df31e1f7cac68d4f67 13c953ae5472c1b0d131d1f5f9e9e68a3ee266d2 3496c55cca76fb6a9fcbd5be9bdcdb6641fcf481db7b2ff1e27d6c8742c135fe
GET /gtag/js?id=G-WJJ5P9F2X8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 11 May 2024 01:17:45 GMT
expires: Sat, 11 May 2024 01:17:45 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 102185
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js | 142.250.74.42 | 200 OK | 33 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js IP142.250.74.42:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeJavaScript source, ASCII text, with very long lines (32086) Hash8101d596b2b8fa35fe3a634ea342d7c3 d6c1f41972de07b09bfa63d2e50f9ab41ec372bd 540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441
GET /ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33434
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 05 May 2024 09:25:34 GMT
expires: Mon, 05 May 2025 09:25:34 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 489131
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto | 142.250.74.106 | 200 OK | 2.0 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto IP142.250.74.106:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hash5b6dedfa58c36f2bb9b27ac1d045e3c5 13e5dc134e6a8a09abb048f08f59adc0611b7d5e 47b9e1a508662e30bcd0574321bdec50e612deff48c39214cd38a485bf96af4c
GET /css?family=Roboto HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 11 May 2024 01:17:45 GMT
date: Sat, 11 May 2024 01:17:45 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/ETakeOverVSL03241.jpg7a887b2a6b36cb6e24e3c0470d5db8b5171076417718420dd7c15c8c09f7e5ddcfa507ceb0 | 52.217.123.240 | 200 OK | 114 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/ETakeOverVSL03241.jpg7a887b2a6b36cb6e24e3c0470d5db8b5171076417718420dd7c15c8c09f7e5ddcfa507ceb0 IP52.217.123.240:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=2], baseline, precision 8, 1024x683, components 3 Size114 kB (114051 bytes) Hashcb0f0fd1b6b7280d78ee706cf402338b d76f624b5302d28b47e310e47745347f31a00d91 77ed40a47bb2bb4be0588c71c877968401ed449a1e1c4aa85b8dd9a2203c8163
GET /autonewsuploads/ETakeOverVSL03241.jpg7a887b2a6b36cb6e24e3c0470d5db8b5171076417718420dd7c15c8c09f7e5ddcfa507ceb0 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: OBwaZl7bnmmOtm6Q8MpD226VNhKamwuOAxxAL/2KFjIXcKhy1Gub7IHgqzCpaO3BeqOuMbr43wM=
x-amz-request-id: 16QWA24YT1NYN8PP
Date: Sat, 11 May 2024 01:17:46 GMT
Last-Modified: Mon, 18 Mar 2024 12:16:19 GMT
ETag: "cb0f0fd1b6b7280d78ee706cf402338b"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 114051
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/czNmcy1wcml2YXRlL3Jhd3BpeGVsX2ltYWdlcy93ZWJzaXRlX2NvbnRlbnQvbHIvc2s4MDQ4LWltYWdlLWt3dnVreG9tLmpwZw.jpge7f332881ff283b6829e94415993a95d17132665016cdca8a23789d4b3362512373eef3417 | 52.217.123.240 | 200 OK | 74 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/czNmcy1wcml2YXRlL3Jhd3BpeGVsX2ltYWdlcy93ZWJzaXRlX2NvbnRlbnQvbHIvc2s4MDQ4LWltYWdlLWt3dnVreG9tLmpwZw.jpge7f332881ff283b6829e94415993a95d17132665016cdca8a23789d4b3362512373eef3417 IP52.217.123.240:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1000x668, components 3 Hash7fe2d33d531815585c8c1d4c5867d4a3 35500f4fa795b49f47137c0532ab07e600d82f8c e295b46a6cabf7a1d9a053ad5cd21a7a610c44cfaf7eee8b46638a554fc27b73
GET /autonewsuploads/czNmcy1wcml2YXRlL3Jhd3BpeGVsX2ltYWdlcy93ZWJzaXRlX2NvbnRlbnQvbHIvc2s4MDQ4LWltYWdlLWt3dnVreG9tLmpwZw.jpge7f332881ff283b6829e94415993a95d17132665016cdca8a23789d4b3362512373eef3417 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: oGWFituF/zOa2ryiTvqnfgz/g47kzno++PeqkEO1l9PFkfSYnNtOK75JY6SshtZbvnVAftmjZKA=
x-amz-request-id: 16QTX6C0D2GDZPYY
Date: Sat, 11 May 2024 01:17:46 GMT
Last-Modified: Tue, 16 Apr 2024 11:21:44 GMT
ETag: "7fe2d33d531815585c8c1d4c5867d4a3"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 73918
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/oil%20stockkk.jpg0f79d7c6521fdc129b15c3b9aa1c3496168441041164a5612a54233b64b4245e271fc79d2c | 52.217.123.240 | 200 OK | 204 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/oil%20stockkk.jpg0f79d7c6521fdc129b15c3b9aa1c3496168441041164a5612a54233b64b4245e271fc79d2c IP52.217.123.240:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 1406x874, components 3 Size204 kB (203815 bytes) Hash6a6adfe1bedc4da72b469a28d4e46116 3de5b170433f48069754754669399303541edd93 78072f4da7459db2a9a896a335a876ccf2b0cbc20b4cd06674bf8ceacf41e499
GET /autonewsuploads/oil%20stockkk.jpg0f79d7c6521fdc129b15c3b9aa1c3496168441041164a5612a54233b64b4245e271fc79d2c HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: SrV03ev4cfej3MhWq7NthI6pDX6rWKWUqjEtfxJZxVC0qIptL+ogqfGe7Wj4PYHVqZliz58pJJk=
x-amz-request-id: 16QZZBBJDJPTYCB8
Date: Sat, 11 May 2024 01:17:46 GMT
Last-Modified: Thu, 18 May 2023 11:46:53 GMT
ETag: "6a6adfe1bedc4da72b469a28d4e46116"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 203815
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/brain.jpg9d9229a2bf51f9d8a0adbdd30bd79b2d17141297609ec026998eb164a87c6d588761732ec1 | 52.217.123.240 | 200 OK | 131 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/brain.jpg9d9229a2bf51f9d8a0adbdd30bd79b2d17141297609ec026998eb164a87c6d588761732ec1 IP52.217.123.240:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x800, components 3 Size131 kB (131373 bytes) Hash4202bcc818bc37c8109abbc2d88a292c 0a648b5d892c119527aef492c864c7e1f9bf4b72 4b0ddaba2103853ea42cd2b2f4f78008c0ac890c91d5767dd8c045d37a469c78
GET /autonewsuploads/brain.jpg9d9229a2bf51f9d8a0adbdd30bd79b2d17141297609ec026998eb164a87c6d588761732ec1 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: Kli3bVqtAGrkyDdLFyrA8GTyBgYtQSiL7Lr1KOUsQGdg9FvQcmpLaYsCLGQ5ude4qU0RMSVYSco=
x-amz-request-id: W2NZA2J9215G6JFK
Date: Sat, 11 May 2024 01:17:47 GMT
Last-Modified: Fri, 26 Apr 2024 11:09:22 GMT
ETag: "4202bcc818bc37c8109abbc2d88a292c"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 131373
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/Dog.jpg373f79dd8e889828c567164a9976eb5e1708518205a9047877ce8a792924271d491c1cfade | 52.217.123.240 | 200 OK | 5.7 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/Dog.jpg373f79dd8e889828c567164a9976eb5e1708518205a9047877ce8a792924271d491c1cfade IP52.217.123.240:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 251x201, components 3 Hash1b14261d5910dd6d2c053f471cefbdc8 4c038b7b23227f71ce6de90ea5e23816b27e61d0 1440670bad97bfdb121adc3e25fe1125a8a037879dc27fbbc17889c3fbac8911
GET /autonewsuploads/Dog.jpg373f79dd8e889828c567164a9976eb5e1708518205a9047877ce8a792924271d491c1cfade HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 8Vawhmga9VhNFYMovZoqasWFoU53Gvwd86LVutnjnaKYMCtxVHnO7qK+SyCPnLpieGtcHP9GOSc=
x-amz-request-id: W2NMCV0ADQAZ19FB
Date: Sat, 11 May 2024 01:17:47 GMT
Last-Modified: Wed, 21 Feb 2024 12:23:27 GMT
ETag: "1b14261d5910dd6d2c053f471cefbdc8"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 5706
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/goldmineee.png86aba4f8725a91fb9d4b86350a30b8c31710245718947df273c9e88260016da3c2127120f7 | 52.217.123.240 | 200 OK | 561 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/goldmineee.png86aba4f8725a91fb9d4b86350a30b8c31710245718947df273c9e88260016da3c2127120f7 IP52.217.123.240:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typePNG image data, 614 x 409, 8-bit/color RGBA, non-interlaced Size561 kB (560765 bytes) Hashf91ad7273b5b81f89f8ecc79a36b224e 44ec7da7950214e8ba92598b16d327b554c94e7f 8cb22c0d6a2c9fca9a86bcf99986cceb1c1982963db42c2c2b119ed36111113a
GET /autonewsuploads/goldmineee.png86aba4f8725a91fb9d4b86350a30b8c31710245718947df273c9e88260016da3c2127120f7 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: SS3xxFsrzNqR8du452KSUTlPrrBSHc9FeFY7jWDra2CTfzmR53E1f5Btzbzdzir0Tm2IeJgzKUA=
x-amz-request-id: 16QMP0ARA9693R4D
Date: Sat, 11 May 2024 01:17:46 GMT
Last-Modified: Tue, 12 Mar 2024 12:15:20 GMT
ETag: "f91ad7273b5b81f89f8ecc79a36b224e"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 560765
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/GetProstate04241.jpgf9bd27c6822b16f3cf3eb5876817433717126620945e56b623fe4588d7c712cf74455271ae | 52.217.123.240 | 200 OK | 433 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/GetProstate04241.jpgf9bd27c6822b16f3cf3eb5876817433717126620945e56b623fe4588d7c712cf74455271ae IP52.217.123.240:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=3744, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=5616], baseline, precision 8, 1800x1200, components 3 Size433 kB (433442 bytes) Hash60a563642150e1af4e00ec3c3f677b66 d04eed6d68a0e8aea757663d9592009091908458 e1df1121dabe998035ed22ef8f116559971e300a2819918b92db1f0352c570ad
GET /autonewsuploads/GetProstate04241.jpgf9bd27c6822b16f3cf3eb5876817433717126620945e56b623fe4588d7c712cf74455271ae HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: CIfaORmkPnPTkJWnKuDKBL+nz4WMFzs9EDnDMhknUGrWsJlhGYcBacU240VR0UOzhvdQ3GcTgm8=
x-amz-request-id: 16QR9EQ0SQZPMBJV
Date: Sat, 11 May 2024 01:17:46 GMT
Last-Modified: Tue, 09 Apr 2024 11:28:16 GMT
ETag: "60a563642150e1af4e00ec3c3f677b66"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 433442
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/Doomsday07231.jpg3299e99b7e66ba7bebade79da4d83ca51689679479727a12f1453aa468691d60b4dd73073d | 52.217.123.240 | 200 OK | 433 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/Doomsday07231.jpg3299e99b7e66ba7bebade79da4d83ca51689679479727a12f1453aa468691d60b4dd73073d IP52.217.123.240:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, description=Convoys of armed US Army (USA) High-Mobility Multipurpose Wheeled Vehicles (HMMWV) merge on the location as USA 101st Airborne , orientation=upper-left, xresolution=563, yresolution=571, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2003:11:20 08:18:15], baseline, precision 8, 1024x672, components 3 Size433 kB (432585 bytes) Hash6e58f72ac11c012924af9bde04584b81 4ee205efa682b8cbb93ccfb0b355d1c0ed4a5faf 96fb5e8a70b47dab13fd7ce3cb597fdea465c43436eaaee2754c9d61ec648195
GET /autonewsuploads/Doomsday07231.jpg3299e99b7e66ba7bebade79da4d83ca51689679479727a12f1453aa468691d60b4dd73073d HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: rEX8HgfWz4TgxiXzZvrQ5QEVlYQYII3yjM0UJkqCINd50eEk0sS4r2uePuwnCKy/uX8A8+AxoUA=
x-amz-request-id: 16QN6Y382C072G5R
Date: Sat, 11 May 2024 01:17:46 GMT
Last-Modified: Tue, 18 Jul 2023 11:24:40 GMT
ETag: "6e58f72ac11c012924af9bde04584b81"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 432585
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/0_xMIObdsLB7XPfX6M.jpg831e6c0cac9852ee802169b318eafcc21703851588ea1d7d0705a741428b565fef908b1c90 | 52.217.123.240 | 200 OK | 130 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/0_xMIObdsLB7XPfX6M.jpg831e6c0cac9852ee802169b318eafcc21703851588ea1d7d0705a741428b565fef908b1c90 IP52.217.123.240:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 800x550, components 3 Size130 kB (130538 bytes) Hash81ed4e278b514ede42a3fa0bc59ae812 79ea6edc5c2326a174f137cdb092754eafa20d3f bc9da136ab9d91bdf0e1a667dd123f362fa5ab2dd7f2ee22c9aaff3ebd619588
GET /autonewsuploads/0_xMIObdsLB7XPfX6M.jpg831e6c0cac9852ee802169b318eafcc21703851588ea1d7d0705a741428b565fef908b1c90 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: UmiKTxAj0ywF30uWxjqKWIVuxL0IccNW9O0X18JwJnG4OD3IBLIGGsWpgnYkkqRtRb9hfs0WSlA=
x-amz-request-id: W2NKFNVZ318T2W8P
Date: Sat, 11 May 2024 01:17:47 GMT
Last-Modified: Fri, 29 Dec 2023 12:06:30 GMT
ETag: "81ed4e278b514ede42a3fa0bc59ae812"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 130538
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 May 2024 09:28:37 GMT
expires: Sun, 04 May 2025 09:28:37 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 575349
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| s3.us-east-1.amazonaws.com/autonewsuploads/arterija.jpg52585c6f4e583dd3dae9dbdb2798c58817129217683395c39f10c9b74f8261e3093eee70c0 | 52.217.123.240 | 200 OK | 861 kB |
URL GET HTTP/1.1s3.us-east-1.amazonaws.com/autonewsuploads/arterija.jpg52585c6f4e583dd3dae9dbdb2798c58817129217683395c39f10c9b74f8261e3093eee70c0 IP52.217.123.240:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x1080, components 3 Size861 kB (861058 bytes) Hash93ba295ab9f1b311005f4e5c501bebdf 4340fdded8ea94dd6cdcdc0e3854ea8cf2c7caa5 e45e10264719ae534a99dd25131ef893ac6577ef70d25f2ebe3e6690e56d33b0
GET /autonewsuploads/arterija.jpg52585c6f4e583dd3dae9dbdb2798c58817129217683395c39f10c9b74f8261e3093eee70c0 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: t03JkztSpfNdkm0L0rClShebiDZpE/HaCvSG0e3niho06fFqYvJFVZb9h0Eh1rBc0j6ozAzGIpk=
x-amz-request-id: W2NNGN62K7CT140D
Date: Sat, 11 May 2024 01:17:47 GMT
Last-Modified: Fri, 12 Apr 2024 11:36:10 GMT
ETag: "93ba295ab9f1b311005f4e5c501bebdf"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 861058
|
|
| go.goodlifestylenews.com/dummyarticleclickers_45317/ec55f96bdbee115719939c545d55f6bb/55/leadsource/2626/1610/6fa59e7be255fd2bcdcd31e102cefbd0/mpmta/news/45317/17 | 172.67.172.49 | 302 Found | 0 B |
URL User Request GET HTTP/2go.goodlifestylenews.com/dummyarticleclickers_45317/ec55f96bdbee115719939c545d55f6bb/55/leadsource/2626/1610/6fa59e7be255fd2bcdcd31e102cefbd0/mpmta/news/45317/17 IP172.67.172.49:443
CertificateIssuerGoogle Trust Services LLC Subjectgoodlifestylenews.com FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40 ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /dummyarticleclickers_45317/ec55f96bdbee115719939c545d55f6bb/55/leadsource/2626/1610/6fa59e7be255fd2bcdcd31e102cefbd0/mpmta/news/45317/17 HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 11 May 2024 01:17:39 GMT
content-type: text/html; charset=UTF-8
location: https://verifiedwebpage.com/go?ehash=ec55f96bdbee115719939c545d55f6bb&product=48768&ar=55&cid=2626&lid=1610&slhash=6fa59e7be255fd2bcdcd31e102cefbd0&redirect_id=45317&bid=17
cache-control: max-age=600
expires: Sat, 11 May 2024 01:27:38 GMT
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1Z81Ndq0hirLdsmx0Rf8WIseou%2FMCj05vhkhJyKj5SEXxFABFKHi6fjPGkUr1yWy5Q%2FIl2xJM5ztMGTcro9kMMqKFuiVfncJMkyonJMXYAQsrFvUhswr%2BSoIYEN%2BSIZ568Oade5S4%2Fk6nbE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e549dbff80b59-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| subscribe.goodlifestylenews.com/favicon.ico | 172.67.172.49 | 404 Not Found | 315 B |
URL GET HTTP/3subscribe.goodlifestylenews.com/favicon.ico IP172.67.172.49:443
Requested byhttps://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 CertificateIssuerGoogle Trust Services LLC Subjectgoodlifestylenews.com FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40 ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
File typeHTML document, ASCII text, with very long lines (326), with no line terminators Hash97ef40509b73c101d6815511c3adf98d a4242322497ea630ea72e26ba297a95a2bbe5ccd 322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81
Cookie: PHPSESSID=70d1b32d721b1843c6ece6fc3456e7b9; _ga_WJJ5P9F2X8=GS1.1.1715390266.1.0.1715390266.0.0.0; _ga=GA1.1.1169757475.1715390266
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sat, 11 May 2024 01:17:46 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WLJ9v2z75c%2FcF7EhEL2SPHBPt6m938AEy6gg22prN%2BaYthLu8Eb3F2bBzITkNAKNJWKLz5d70yKFt4AuKccw4PpVnWgsz06fj%2FpDlN7a1xWc9X7wn8ESeX%2BBzreK2ktn2v1JJFtv6R%2BNJlki3B%2FVMPLW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881e54cf8ab71c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| verifiedwebpage.com/go?ehash=ec55f96bdbee115719939c545d55f6bb&product=48768&ar=55&cid=2626&lid=1610&slhash=6fa59e7be255fd2bcdcd31e102cefbd0&redirect_id=45317&bid=17 | 104.18.21.187 | 302 Found | 0 B |
URL User Request GET HTTP/2verifiedwebpage.com/go?ehash=ec55f96bdbee115719939c545d55f6bb&product=48768&ar=55&cid=2626&lid=1610&slhash=6fa59e7be255fd2bcdcd31e102cefbd0&redirect_id=45317&bid=17 IP104.18.21.187:443
CertificateIssuerGoogle Trust Services LLC Subjectverifiedwebpage.com FingerprintB6:7C:0D:93:CD:D6:56:A3:74:B9:46:38:F0:C7:A5:31:BC:5F:AF:56 ValidityWed, 10 Apr 2024 21:43:08 GMT - Tue, 09 Jul 2024 21:43:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go?ehash=ec55f96bdbee115719939c545d55f6bb&product=48768&ar=55&cid=2626&lid=1610&slhash=6fa59e7be255fd2bcdcd31e102cefbd0&redirect_id=45317&bid=17 HTTP/1.1
Host: verifiedwebpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 11 May 2024 01:17:40 GMT
content-type: text/html; charset=UTF-8
location: https://subscribe.goodlifestylenews.com?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: User-Agent
cf-cache-status: DYNAMIC
set-cookie: PHPSESSID=3de5f6c7fad6d67a4bcbc6e35fbbc2b2; path=/
pixel_session_hash_48768=3415485580010593782; expires=Mon, 10-Jun-2024 01:17:39 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=None
bt_tracking_product_48768=9ec246cdfb289cbea9e067b087a56f22a4e7005bf34e59efa24a3560c743ddc8; expires=Mon, 13-May-2024 01:17:39 GMT; Max-Age=172800
__cf_bm=VlKDLwY7ElFOAcz5xI1YkX.b1_rU4fMFSyNgEGlsjtA-1715390260-1.0.1.1-ao1AEvDBzYxNLO9OiN3OrX.l1JfBL3CFLnK1TFg3Sq2UdmsUNzwbcVlCyD6TnRDrlV4VW0qQjjU3AwAkvs9q9w; path=/; expires=Sat, 11-May-24 01:47:40 GMT; domain=.verifiedwebpage.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 881e54a34abfb515-OSL
X-Firefox-Spdy: h2
|
|
| subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 | 172.67.172.49 | 200 OK | 31 kB |
URL User Request GET HTTP/3subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 IP172.67.172.49:443
CertificateIssuerGoogle Trust Services LLC Subjectgoodlifestylenews.com FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40 ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /?email=tammy.j.lanctot@abc12.com&redirect_id=45317&bid=17&ses_id=914c91d1ccf4eec417ddfe5537674b81 HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: PHPSESSID=70d1b32d721b1843c6ece6fc3456e7b9
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 11 May 2024 01:17:44 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding,User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1kaYEVDWqESDJ2eFIuLmTybwza3mF3lc0LN%2BundT4r8TXMcCEs9yGJpRcNEMikzE1jtTtisCIuIP3nt5smL%2F5py1dYo%2BBJPR%2FO0v9b2ewNmAwz8xOfdDjcvAmSJfCGlAhVr2ZEbmq9QaKWuUKRGJbvLk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e54bbbc391c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|