470kwc1.com/clk.trk?CID=465853&AFID=430135&SID=3415259331988293675
18.190.20.10301 Moved Permanently 134 B URL User Request GET HTTP/1.1 470kwc1.com/clk.trk?CID=465853&AFID=430135&SID=3415259331988293675
IP 18.190.20.10:80
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /clk.trk?CID=465853&AFID=430135&SID=3415259331988293675 HTTP/1.1
Host: 470kwc1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Sat, 09 Dec 2023 00:04:54 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://470kwc1.com:443/clk.trk?CID=465853&AFID=430135&SID=3415259331988293675
470kwc1.com/clk.trk?CID=465853&AFID=430135&SID=3415259331988293675
3.142.154.0301 Moved Permanently 216 B URL User Request GET HTTP/1.1 470kwc1.com/clk.trk?CID=465853&AFID=430135&SID=3415259331988293675
IP 3.142.154.0:80
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash adb1d6f3c9621ad20c5d1b3cd850c18b
05aab25dc57916eb40b6c70fd0a6115709ec5e57
4aab7a6e4d485f63b1f7b9fe54e10ce9a1d92172af6d6447f0ce1b2817734e94
GET /clk.trk?CID=465853&AFID=430135&SID=3415259331988293675 HTTP/1.1
Host: 470kwc1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 09 Dec 2023 00:04:55 GMT
content-type: text/html; charset=utf-8
content-length: 216
location: https://pro.paradigm-press.info/m/2246202?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d
cache-control: private
server: Microsoft-IIS/10.0
p3p: policyref="/p3p/P3P.470kwc1.com.xml", CP="NOI DSP COR NID ADM DEV OUR STP OTC"
x-aspnet-version: 4.0.30319
set-cookie: LTTC6_465853=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d; expires=Sat, 16-Dec-2023 00:04:55 GMT; path=/; secure; SameSite=None
x-powered-by: ASP.NET
access-control-allow-origin: *
X-Firefox-Spdy: h2
pro.paradigm-press.info/m/2246202?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d
192.135.136.169301 Moved Permanently 253 B URL User Request GET HTTP/1.1 pro.paradigm-press.info/m/2246202?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d
IP 192.135.136.169:443
Certificate IssuerLet's Encrypt
Subjectordertracking6.pubsvs.com
Fingerprint5D:9B:A2:DC:1F:DA:F9:4F:9E:55:AD:AA:D5:50:57:BB:B7:C3:50:39
ValidityFri, 17 Nov 2023 17:49:52 GMT - Thu, 15 Feb 2024 17:49:51 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 9d2c3de1244691e6d3c197912b4a2a27
7a6a010740de0cf584fee27b4cc2c375f0bc7f9a
819dc2d696fe38919ecdc6462f73ee8d0007e0004556aa6f6f4927ea5e2beb4f
GET /m/2246202?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d HTTP/1.1
Host: pro.paradigm-press.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Date: Sat, 09 Dec 2023 00:04:55 GMT
Content-Length: 253
Set-Cookie: 2246202=2658340; expires=Fri, 29-Dec-2023 00:04:55 GMT; path=/; HttpOnly
BIGipServerIRIS_PROD_HTTPS_POOL=!tT7A2GkNwImGN1M0QCUGrw3uOK3bWSrjqmzhC966NNzVp2bRum8O3uYnEabk60HDmpkOrR7uKllUWGc=; path=/; Httponly; Secure
Strict-Transport-Security: max-age=63072000; includeSubDomains
click.thedailymoneytips.com/
104.21.33.211 143 B URL click.thedailymoneytips.com/
IP 104.21.33.211:0
File type HTML document text\012- HTML document, ASCII text
Hash f1fb042c62910c34be16ad91cbbd71fa
5bc7aceba9a8704ef4b1d427d7d08b140afcd866
9278d16ed2fdcd5dc651615b0b8adc6b55fb667a9d106a9891b861d4561d9a24
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: click.thedailymoneytips.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 09 Dec 2023 00:04:56 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 14 Nov 2023 15:41:05 GMT
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Vary: Accept-Encoding,User-Agent
Pragma: no-cache
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q5Gdf%2FLgaOYcbAJFZqFDcA9epZNdbe5UWuiHRFmbvv9JcwaO1nDuoMeeZBxVfzsvyclx3kyTieEHE1m5nDXNO27fYNIU7BLr63Vkvo2CMlttVNEP1xOuHmtawH178ZG6ggx1QDAGZhntUtGD6nc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8328fe58db9156b1-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
161.129.26.18200 OK 253 B URL User Request GET HTTP/1.1 pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
IP 161.129.26.18:443
Certificate IssuerLet's Encrypt
Subjectordertracking6.pubsvs.com
Fingerprint5D:9B:A2:DC:1F:DA:F9:4F:9E:55:AD:AA:D5:50:57:BB:B7:C3:50:39
ValidityFri, 17 Nov 2023 17:49:52 GMT - Thu, 15 Feb 2024 17:49:51 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 9d2c3de1244691e6d3c197912b4a2a27
7a6a010740de0cf584fee27b4cc2c375f0bc7f9a
819dc2d696fe38919ecdc6462f73ee8d0007e0004556aa6f6f4927ea5e2beb4f
GET /p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true HTTP/1.1
Host: pro.paradigmnewsletters.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Referrer-Policy: no-referrer-when-downgrade
Date: Sat, 09 Dec 2023 00:04:56 GMT
Content-Length: 253
Set-Cookie: BIGipServerIRIS_PROD_HTTP_POOL=!AvH53TJHn/S4/y80QCUGrw3uOK3bWU5ZqakMVrQb03HWiJpjiTVz+XkLJk9aoZFE9MtVSgyTElVWEJ8=; path=/; Httponly
pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
161.129.26.18200 OK 10 kB URL User Request GET HTTP/1.1 pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
IP 161.129.26.18:443
Certificate IssuerLet's Encrypt
Subjectordertracking6.pubsvs.com
Fingerprint5D:9B:A2:DC:1F:DA:F9:4F:9E:55:AD:AA:D5:50:57:BB:B7:C3:50:39
ValidityFri, 17 Nov 2023 17:49:52 GMT - Thu, 15 Feb 2024 17:49:51 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1672), with CRLF, LF line terminators
Hash 9d960526e07f0a821a44fc7e4585ee04
dff2c1e8c983aa92aa0506f26ea72e723f1d21bf
c3edff7e79587fb2cb94c141cde1f593befb25a44a8b7f12d4540fafb1dfb725
GET /p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true HTTP/1.1
Host: pro.paradigmnewsletters.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: BIGipServerIRIS_PROD_HTTP_POOL=!AvH53TJHn/S4/y80QCUGrw3uOK3bWU5ZqakMVrQb03HWiJpjiTVz+XkLJk9aoZFE9MtVSgyTElVWEJ8=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Date: Sat, 09 Dec 2023 00:04:57 GMT
Content-Length: 10535
Set-Cookie: LAWNZ985=; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
BIGipServerIRIS_PROD_HTTPS_POOL=!Fg058Sal3e+2YQo0QCUGrw3uOK3bWSnoljVHkZb4WAjzZxE3a0Qq0nacwlJXZmsy6ELKIyyQogcXiBU=; path=/; Httponly; Secure
Strict-Transport-Security: max-age=63072000; includeSubDomains
fast.wistia.com/assets/external/E-v1.js
151.101.130.132200 OK 129 kB URL GET HTTP/2 fast.wistia.com/assets/external/E-v1.js
IP 151.101.130.132:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type ASCII text, with very long lines (65474)
Size 129 kB (129063 bytes)
Hash 126858c9f3376ca1bc419aa2a2d0af28
51e06cde2e8cc415d06c63e144e6c36d2c95270d
78cf6679aa583fd97b9700d6dafa7e791d7861b72d173df807b5f8f27d246877
GET /assets/external/E-v1.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 18:55:59 GMT
etag: "2dfa35fa3c2d63da5bfe8edd5f3cb8df"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Sat, 09 Dec 2023 00:04:57 GMT
age: 487
x-served-by: cache-iad-kiad7000039-IAD, cache-bma1639-BMA
x-cache: HIT, HIT
x-cache-hits: 75, 17
x-timer: S1702080297.285329,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
asset-version: cc9ded0077d16f0d56c3b38f358a76e310b0eefb
content-length: 129063
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
216.58.207.202200 OK 34 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
IP 216.58.207.202:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
File type ASCII text, with very long lines (32077)
Hash 4f252523d4af0b478c810c2547a63e19
5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb
668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404
GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:44:29 GMT
expires: Fri, 06 Dec 2024 15:44:29 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 116428
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pro.paradigmnewsletters.org/p/Scripts/Common.js
161.129.26.18200 OK 1.1 kB URL GET HTTP/1.1 pro.paradigmnewsletters.org/p/Scripts/Common.js
IP 161.129.26.18:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerLet's Encrypt
Subjectordertracking6.pubsvs.com
Fingerprint5D:9B:A2:DC:1F:DA:F9:4F:9E:55:AD:AA:D5:50:57:BB:B7:C3:50:39
ValidityFri, 17 Nov 2023 17:49:52 GMT - Thu, 15 Feb 2024 17:49:51 GMT
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 2fa1e7a35bfa376eff7f1426fc4a8afa
008b48dbd95a158542969743c18d0bc33e0a9384
857d94bd23b6437baa66255e1d507ad4a23d75ef9a271fb3e1303dc7dd0aced9
GET /p/Scripts/Common.js HTTP/1.1
Host: pro.paradigmnewsletters.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
DNT: 1
Connection: keep-alive
Cookie: BIGipServerIRIS_PROD_HTTP_POOL=!AvH53TJHn/S4/y80QCUGrw3uOK3bWU5ZqakMVrQb03HWiJpjiTVz+XkLJk9aoZFE9MtVSgyTElVWEJ8=; LAWNZ985=; BIGipServerIRIS_PROD_HTTPS_POOL=!Fg058Sal3e+2YQo0QCUGrw3uOK3bWSnoljVHkZb4WAjzZxE3a0Qq0nacwlJXZmsy6ELKIyyQogcXiBU=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 24 Jul 2023 13:39:44 GMT
Accept-Ranges: bytes
ETag: "a37f814e34bed91:0"
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Date: Sat, 09 Dec 2023 00:04:57 GMT
Content-Length: 1140
Strict-Transport-Security: max-age=63072000; includeSubDomains
pro.paradigmnewsletters.org/p/Scripts/HideContent.js
161.129.26.18200 OK 466 B URL GET HTTP/1.1 pro.paradigmnewsletters.org/p/Scripts/HideContent.js
IP 161.129.26.18:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerLet's Encrypt
Subjectordertracking6.pubsvs.com
Fingerprint5D:9B:A2:DC:1F:DA:F9:4F:9E:55:AD:AA:D5:50:57:BB:B7:C3:50:39
ValidityFri, 17 Nov 2023 17:49:52 GMT - Thu, 15 Feb 2024 17:49:51 GMT
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash cc54a637e514fddfe0be2e7c2d062e5b
a0f97813508d22d71f015b93cc8dfdcee65acdfd
580942b09dd77a53c0501f35a1d6c61cbcff1d504a6efb0dfa5d77cbdb1af741
GET /p/Scripts/HideContent.js HTTP/1.1
Host: pro.paradigmnewsletters.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
DNT: 1
Connection: keep-alive
Cookie: BIGipServerIRIS_PROD_HTTP_POOL=!AvH53TJHn/S4/y80QCUGrw3uOK3bWU5ZqakMVrQb03HWiJpjiTVz+XkLJk9aoZFE9MtVSgyTElVWEJ8=; LAWNZ985=; BIGipServerIRIS_PROD_HTTPS_POOL=!Fg058Sal3e+2YQo0QCUGrw3uOK3bWSnoljVHkZb4WAjzZxE3a0Qq0nacwlJXZmsy6ELKIyyQogcXiBU=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 24 Jul 2023 13:39:44 GMT
Accept-Ranges: bytes
ETag: "bbcd814e34bed91:0"
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Date: Sat, 09 Dec 2023 00:04:57 GMT
Content-Length: 466
Strict-Transport-Security: max-age=63072000; includeSubDomains
cdn.getblueshift.com/blueshift.js
54.230.111.60200 OK 2.8 kB URL GET HTTP/1.1 cdn.getblueshift.com/blueshift.js
IP 54.230.111.60:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerAmazon
Subject*.getblueshift.com
Fingerprint29:49:01:4C:AB:3A:C5:E4:F6:F2:67:75:BE:5B:FF:4B:F3:5C:EC:47
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 06 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (6564), with no line terminators
Hash 859d16b4786a243736a9b219445eae43
e6dd4c8dcac4df40615338f1e7ecfe50c54aa0d5
393483170bc4a2319e51ea073f4e13b85185948301acce471b482094d11af7c7
GET /blueshift.js HTTP/1.1
Host: cdn.getblueshift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 2805
Connection: keep-alive
Last-Modified: Tue, 21 Nov 2023 12:16:06 GMT
x-amz-server-side-encryption: AES256
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 08 Dec 2023 23:33:27 GMT
Cache-Control: max-age=3600
ETag: "e7a548f293fa4dad39c906cae250b1ed"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 4WhshoIRlktjWRo82YB06GYrWPlR8GusZ8p0OVhqd6sfpjJ6Vp9M5Q==
Age: 1890
fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUZiZQ.woff2
216.58.207.227200 OK 13 kB URL GET HTTP/2 fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUZiZQ.woff2
IP 216.58.207.227:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 12648, version 1.0\012- data
Hash 5e79fc3b5fbdec47c02942523ae2bdbd
fdb96db25dc07b7c0573bf5a66966d12dfbb41bd
6ecd2a103a7260474c3239da5f32a2f7cb999765d9ab12161f3e4abe3906316f
GET /s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUZiZQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12648
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 08 Dec 2023 14:46:39 GMT
expires: Sat, 07 Dec 2024 14:46:39 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 15 Aug 2023 18:38:40 GMT
content-type: font/woff2
age: 33498
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
216.58.207.227200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 216.58.207.227:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 05:00:58 GMT
expires: Fri, 06 Dec 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 155039
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
216.58.207.227200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 216.58.207.227:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 05:00:58 GMT
expires: Fri, 06 Dec 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 155039
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-P95MDDF
142.250.74.104200 OK 106 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-P95MDDF
IP 142.250.74.104:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (58522)
Size 106 kB (106389 bytes)
Hash de60626575e5697a0f1e1dc5f9c0669b
a51409fc52bae4643c46d1da9952c1d5313bdabe
1a8b38a1d431472178d9ebcfa730eaa1e961e5c33506cc1c4875306b15b4fe8d
GET /gtm.js?id=GTM-P95MDDF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 09 Dec 2023 00:04:57 GMT
expires: Sat, 09 Dec 2023 00:04:57 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 106389
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-NKRVP76
142.250.74.104200 OK 111 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NKRVP76
IP 142.250.74.104:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (56012)
Size 111 kB (111054 bytes)
Hash df2248ae60f8443821a7a076e3b338a6
e5c0e09048306fc0afbab8b1f619113ca0c3e5dd
6357c090c11715e9314d6e1b13c0c2af3e016105d7acc6af51e836ecc41739d1
GET /gtm.js?id=GTM-NKRVP76 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 09 Dec 2023 00:04:57 GMT
expires: Sat, 09 Dec 2023 00:04:57 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 111054
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
d2z65klgtz99km.cloudfront.net/AWN/awn_doomsday_0623/awn_doomsday_bg_01.jpg
54.230.241.140200 OK 62 kB URL GET HTTP/2 d2z65klgtz99km.cloudfront.net/AWN/awn_doomsday_0623/awn_doomsday_bg_01.jpg
IP 54.230.241.140:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Hash 1dc38080d6c9b9fd76a40a2c8c3f39fc
074548f7b26d805b2ce1a4806e8797285fee469d
4d48aae29e189eb89524b397fce6b1ae961719ea407b5409f612955baca8e69d
GET /AWN/awn_doomsday_0623/awn_doomsday_bg_01.jpg HTTP/1.1
Host: d2z65klgtz99km.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 61582
server: nginx
date: Thu, 06 Jul 2023 22:34:12 GMT
last-modified: Mon, 26 Jun 2023 15:02:24 GMT
cache-control: max-age=31536000
expires: Fri, 05 Jul 2024 22:34:12 GMT
etag: "6499a880-f08e"
x-powered-by: PleskLin
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TMh6jyrYDo4PVrb8xR_BL_lpf8v8t9K65mXf4ahcKscOpBJa7gM_bg==
age: 13397446
X-Firefox-Spdy: h2
d2z65klgtz99km.cloudfront.net/AWN/exit-pop/exitpop-play-icon.png
54.230.241.140200 OK 318 B URL GET HTTP/2 d2z65klgtz99km.cloudfront.net/AWN/exit-pop/exitpop-play-icon.png
IP 54.230.241.140:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type PNG image data, 31 x 39, 8-bit/color RGBA, non-interlaced\012- data
Hash 120ca7c31817e6e137e2a807ddcddbe0
254f6b23b9b2d4c040decf505eac8b6a9296a1c6
dd5f84c4b871b07d787fe2709d47cdc18eee536bb2560c6f889256dd59c61b48
GET /AWN/exit-pop/exitpop-play-icon.png HTTP/1.1
Host: d2z65klgtz99km.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 318
server: nginx
date: Mon, 18 Sep 2023 18:05:07 GMT
x-frame-options: sameorigin
x-accel-version: 0.01
last-modified: Fri, 15 Sep 2023 16:23:24 GMT
etag: "13e-6056836372650"
accept-ranges: bytes
cache-control: max-age=31536000
expires: Tue, 17 Sep 2024 18:05:07 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: SAMEORIGIN
x-powered-by: PleskLin
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7iMrwhMOgPsHm_eecf1I2sAT8QgIEmWGjlUcZfC3pVoG6dim5f3Lvw==
age: 7019991
X-Firefox-Spdy: h2
d2z65klgtz99km.cloudfront.net/AWN/exit-pop/exitpop-warning-icon.png
54.230.241.140200 OK 1.7 kB URL GET HTTP/2 d2z65klgtz99km.cloudfront.net/AWN/exit-pop/exitpop-warning-icon.png
IP 54.230.241.140:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type PNG image data, 73 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash 40a8475cba41b161c3b142acc36b79e5
0da3639ed848b44a4efd71189e742a94b29280d4
186053f58f065437b88bc7ab02d4d48d7f203c61d615f81aa457b5f755d5a061
GET /AWN/exit-pop/exitpop-warning-icon.png HTTP/1.1
Host: d2z65klgtz99km.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 1716
server: nginx
date: Wed, 04 Oct 2023 13:28:12 GMT
last-modified: Fri, 15 Sep 2023 16:23:26 GMT
cache-control: max-age=31536000
expires: Thu, 03 Oct 2024 13:28:12 GMT
etag: "650484fe-6b4"
x-powered-by: PleskLin
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wYKwa0qgK4OdTYWfcgjAp7qQWvGSuhAxxkEXzsu_jColziy-PiOCZQ==
age: 5654206
X-Firefox-Spdy: h2
d2z65klgtz99km.cloudfront.net/AWN/exit-pop/exitpop-transcript-icon.png
54.230.241.140200 OK 1.5 kB URL GET HTTP/2 d2z65klgtz99km.cloudfront.net/AWN/exit-pop/exitpop-transcript-icon.png
IP 54.230.241.140:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type PNG image data, 50 x 53, 8-bit/color RGBA, non-interlaced\012- data
Hash c94eaaf8ec2941b35a23421f193b8c2e
156681cbd7cf2836598e47d3eec86f7a9772bde8
5fea6317f0aeb6da5271e9a104032ab162521148ec32b93df3c77129fa39fe97
GET /AWN/exit-pop/exitpop-transcript-icon.png HTTP/1.1
Host: d2z65klgtz99km.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 1484
server: nginx
date: Mon, 18 Sep 2023 18:05:07 GMT
last-modified: Fri, 15 Sep 2023 16:23:23 GMT
cache-control: max-age=31536000
expires: Tue, 17 Sep 2024 18:05:07 GMT
etag: "650484fb-5cc"
x-powered-by: PleskLin
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UZChEZ3ajggIQwfAfd47Pam5Pk5cMfWSH0y4nCYw55Ams1OO9KnoUQ==
age: 7019991
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-BYN6DTYEFQ&l=dataLayer&cx=c
142.250.74.104200 OK 93 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-BYN6DTYEFQ&l=dataLayer&cx=c
IP 142.250.74.104:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (5955)
Hash aa8740979a1a2efe297d6b2d2def1496
5597c3917999f0e7818da74814e73fed2f2c8eef
0c5f18102e1e64a2ec0064b306eb2e842570ec3dba7e16814dc04656bc5ee9eb
GET /gtag/js?id=G-BYN6DTYEFQ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 09 Dec 2023 00:04:58 GMT
expires: Sat, 09 Dec 2023 00:04:58 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 92742
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
s.yimg.com/wi/ytc.js
87.248.119.251200 OK 6.3 kB IP 87.248.119.251:443
ASN #203220 Yahoo! UK Services Limited
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (18187), with no line terminators
Hash 5c6ed25dce803fd84288922b8928409e
3ccc10546ae12f160bacac1e9e422af091ea4a41
480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: 3npYCpt08UYkk/w+AzxLKhggKpai2325+xzGgyW9IuAbA8EGdl8q9bfVw3njTG7mN5a9bMlNxrM=
x-amz-request-id: 6QP5X5AKC1QFYZKX
date: Fri, 08 Dec 2023 23:30:21 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "5c6ed25dce803fd84288922b8928409e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 2078
content-encoding: gzip
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
87.248.119.251200 OK 6.3 kB IP 87.248.119.251:443
ASN #203220 Yahoo! UK Services Limited
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (18187), with no line terminators
Hash 5c6ed25dce803fd84288922b8928409e
3ccc10546ae12f160bacac1e9e422af091ea4a41
480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: 3npYCpt08UYkk/w+AzxLKhggKpai2325+xzGgyW9IuAbA8EGdl8q9bfVw3njTG7mN5a9bMlNxrM=
x-amz-request-id: 6QP5X5AKC1QFYZKX
date: Fri, 08 Dec 2023 23:30:21 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "5c6ed25dce803fd84288922b8928409e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 2078
content-encoding: gzip
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
87.248.119.251200 OK 6.3 kB IP 87.248.119.251:443
ASN #203220 Yahoo! UK Services Limited
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (18187), with no line terminators
Hash 5c6ed25dce803fd84288922b8928409e
3ccc10546ae12f160bacac1e9e422af091ea4a41
480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: 3npYCpt08UYkk/w+AzxLKhggKpai2325+xzGgyW9IuAbA8EGdl8q9bfVw3njTG7mN5a9bMlNxrM=
x-amz-request-id: 6QP5X5AKC1QFYZKX
date: Fri, 08 Dec 2023 23:30:21 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "5c6ed25dce803fd84288922b8928409e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 2078
content-encoding: gzip
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
87.248.119.251200 OK 6.3 kB IP 87.248.119.251:443
ASN #203220 Yahoo! UK Services Limited
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (18187), with no line terminators
Hash 5c6ed25dce803fd84288922b8928409e
3ccc10546ae12f160bacac1e9e422af091ea4a41
480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: 3npYCpt08UYkk/w+AzxLKhggKpai2325+xzGgyW9IuAbA8EGdl8q9bfVw3njTG7mN5a9bMlNxrM=
x-amz-request-id: 6QP5X5AKC1QFYZKX
date: Fri, 08 Dec 2023 23:30:21 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "5c6ed25dce803fd84288922b8928409e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 2078
content-encoding: gzip
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
paradigmpressgroup.com/favicons/favicon-16x16.png
18.214.111.198200 OK 587 B URL GET HTTP/2 paradigmpressgroup.com/favicons/favicon-16x16.png
IP 18.214.111.198:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerLet's Encrypt
Subjectparadigmpressgroup.com
FingerprintAE:B7:D7:11:15:BA:76:70:3D:73:D7:75:77:C9:E5:A6:E2:9B:6F:5F
ValidityFri, 10 Nov 2023 14:51:26 GMT - Thu, 08 Feb 2024 14:51:25 GMT
File type PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Hash 2bb2efaa073e4987ba1867aff02ab3ac
ea05acee8f408e3f86830b5f2da0616ced013006
6b712b83f2054506208f4243b57e7bd48fa0dcf3a10c0ff609bfc5ea8398ddc6
GET /favicons/favicon-16x16.png HTTP/1.1
Host: paradigmpressgroup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 00:04:58 GMT
content-type: image/png
content-length: 587
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Tue, 26 Jul 2022 19:40:44 GMT
etag: W/"24b-1823c06a3cc"
x-powered-by: PleskLin
X-Firefox-Spdy: h2
paradigmpressgroup.com/favicons/apple-touch-icon.png
18.214.111.198200 OK 3.0 kB URL GET HTTP/2 paradigmpressgroup.com/favicons/apple-touch-icon.png
IP 18.214.111.198:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerLet's Encrypt
Subjectparadigmpressgroup.com
FingerprintAE:B7:D7:11:15:BA:76:70:3D:73:D7:75:77:C9:E5:A6:E2:9B:6F:5F
ValidityFri, 10 Nov 2023 14:51:26 GMT - Thu, 08 Feb 2024 14:51:25 GMT
File type PNG image data, 180 x 180, 8-bit grayscale, non-interlaced\012- data
Hash dd470648114adaceb47d36a18ad41d9d
c93c69021ab4e381b4715938bed3732b132852b3
49dd5241fadc6a69795935a795804ed7206efb39f6dc6b5a0588f92d80775ad4
GET /favicons/apple-touch-icon.png HTTP/1.1
Host: paradigmpressgroup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 00:04:58 GMT
content-type: image/png
content-length: 3017
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Tue, 26 Jul 2022 19:40:44 GMT
etag: W/"bc9-1823c06a3cb"
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BYN6DTYEFQ&cid=1706201029.1702080305>m=45je3bt0v9122066590z878323495&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1209571056
142.250.74.163200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BYN6DTYEFQ&cid=1706201029.1702080305>m=45je3bt0v9122066590z878323495&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1209571056
IP 142.250.74.163:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
FingerprintDB:33:6A:DD:DA:72:55:0D:55:09:60:6E:D1:5B:40:D8:2B:9B:4F:3C
ValidityMon, 20 Nov 2023 08:12:16 GMT - Mon, 12 Feb 2024 08:12:15 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BYN6DTYEFQ&cid=1706201029.1702080305>m=45je3bt0v9122066590z878323495&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1209571056 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 09 Dec 2023 00:04:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/proaejvpra.json
151.101.130.132200 OK 1.6 kB URL GET HTTP/2 fast.wistia.com/embed/medias/proaejvpra.json
IP 151.101.130.132:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type JSON data\012- , ASCII text, with very long lines (5720), with no line terminators
Hash 0644b7c382c45a8887328bfbde6b73bc
a070e171ff3fc2fd2e926f16357776a2becd0789
f29a3a51bfad4a83dafa173a81e120332ef93744f25b10db3f1e7be080242e2e
GET /embed/medias/proaejvpra.json HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json; charset=utf-8
server: envoy
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, no-cache
etag: W/"f29a3a51bfad4a83dafa173a81e12033"
x-request-id: 7cccc2ca-2419-44dc-af51-bdff732793f8
x-runtime: 0.065141
content-encoding: br
x-envoy-upstream-service-time: 67
via: 1.1 a075746ea1824aa1c02a5e26a9e968e4.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish
x-amz-cf-pop: IAD89-C3
x-amz-cf-id: pAk-WnN7h-53MyjzsnKK2EN4Nb7lKbVV91I0MM6bLPZ8BHz-C5d1EA==
accept-ranges: bytes
date: Sat, 09 Dec 2023 00:04:58 GMT
age: 6563
x-served-by: cache-iad-kcgs7200105-IAD, cache-bma1672-BMA
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 16, 2
x-timer: S1702080299.630525,VS0,VE0
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 1648
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10082412.json
87.248.119.251200 OK 2 B URL GET HTTP/2 s.yimg.com/wi/config/10082412.json
IP 87.248.119.251:443
ASN #203220 Yahoo! UK Services Limited
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10082412.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: 0Z2A40F66YCV7BA1
x-amz-id-2: HMbuOP7GSFi/ScY5kLr4jW439eY0jZD242w1nf0Lg2Ry4IvFo2FRDSNpIuduAesGtcRfwjm7g9/OyHlgJzHBHEcgkINWQcMgxgGP/olTS3E=
content-type: application/json
date: Fri, 08 Dec 2023 23:53:43 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 675
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10091245.json
87.248.119.251200 OK 2 B URL GET HTTP/2 s.yimg.com/wi/config/10091245.json
IP 87.248.119.251:443
ASN #203220 Yahoo! UK Services Limited
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10091245.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: FGAWHKDQBSNQPFPM
x-amz-id-2: c0R6w6PDWoTyQhXAyxFUSf9rrwHdUQh2y6Dej+tckoCULH91LtcKlcnCqKxOVP1uUYAF4w0VVD8=
content-type: application/json
date: Fri, 08 Dec 2023 23:40:07 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 1492
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10114794.json
87.248.119.251200 OK 2 B URL GET HTTP/2 s.yimg.com/wi/config/10114794.json
IP 87.248.119.251:443
ASN #203220 Yahoo! UK Services Limited
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10114794.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: 4VN58YZ3HQYME05B
x-amz-id-2: LEWlbCa2LRLKVwhMN4Ffw77dBsF6QohtWqU+wtiOM16kkKbqntPX6eiff67ATPxJINhiAv03TJ0=
content-type: application/json
date: Fri, 08 Dec 2023 23:51:13 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 825
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10125189.json
87.248.119.251200 OK 2 B URL GET HTTP/2 s.yimg.com/wi/config/10125189.json
IP 87.248.119.251:443
ASN #203220 Yahoo! UK Services Limited
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10125189.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: Q96V1RPXVCR7PCTK
x-amz-id-2: HRDTwWAW320EbsGEjqcyjggqY0rYHpaDdRn7e0kWTpaU/bEZoUcCR4xIq/9LeEtPU+4zSHm1NoCGU+8umK9CYg==
content-type: application/json
date: Fri, 08 Dec 2023 23:58:30 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 389
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/googleAnalytics4.js
151.101.130.132200 OK 4.2 kB URL GET HTTP/2 fast.wistia.com/assets/external/googleAnalytics4.js
IP 151.101.130.132:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type ASCII text, with very long lines (16541)
Hash 9bbbdbdad3d0da00881800f39ed6ad8b
03563b32521b2a04dc6e7ba8b5f1fe21181be7f0
f47b95dbf3f004a7305cfe6c6b107d76dac597a4c50a52e3f33240f76e4598d5
GET /assets/external/googleAnalytics4.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 18:55:59 GMT
etag: "79bd690906b70d00bf740332ef800755"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Sat, 09 Dec 2023 00:04:58 GMT
age: 648
x-served-by: cache-iad-kcgs7200086-IAD, cache-bma1639-BMA
x-cache: HIT, HIT
x-cache-hits: 56, 1
x-timer: S1702080299.809305,VS0,VE13
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
asset-version: cc9ded0077d16f0d56c3b38f358a76e310b0eefb
content-length: 4152
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/playPauseLoadingControl.js
151.101.130.132200 OK 21 kB URL GET HTTP/2 fast.wistia.com/assets/external/playPauseLoadingControl.js
IP 151.101.130.132:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type ASCII text, with very long lines (65455)
Hash 31f0b908fbd5fc16bf6737c637b83178
26f5effe6525ca16ceb9815cb26776a8ac36f81c
863614886d87b0fbc5b99b2c002a8e382ab9161cacc1290006ea02e428e09747
GET /assets/external/playPauseLoadingControl.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Thu, 07 Dec 2023 18:55:59 GMT
etag: "b09d2ef450c9011369afee5fc7a5a161"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Sat, 09 Dec 2023 00:04:58 GMT
age: 490
x-served-by: cache-iad-kjyo7100036-IAD, cache-bma1672-BMA
x-cache: HIT, HIT
x-cache-hits: 68, 5
x-timer: S1702080299.849926,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
asset-version: cc9ded0077d16f0d56c3b38f358a76e310b0eefb
content-length: 21129
X-Firefox-Spdy: h2
d2z65klgtz99km.cloudfront.net/AWN/awn_doomsday_0623/AWN_Doomsday_CTP_Biden_0723.gif
54.230.241.140200 OK 2.9 MB URL GET HTTP/2 d2z65klgtz99km.cloudfront.net/AWN/awn_doomsday_0623/AWN_Doomsday_CTP_Biden_0723.gif
IP 54.230.241.140:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type GIF image data, version 89a, 600 x 338\012- data
Size 2.9 MB (2862760 bytes)
Hash 560bb02b025c2be2be5e9dcdaa23b5a0
4be02d05ff68bfe008c6e3ad5f78e82df6ab5298
01459ccd649575e13bb099d789b906dede95e3569445e0877ad8ec57243f5449
GET /AWN/awn_doomsday_0623/AWN_Doomsday_CTP_Biden_0723.gif HTTP/1.1
Host: d2z65klgtz99km.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 2862760
server: nginx
date: Tue, 08 Aug 2023 13:59:48 GMT
last-modified: Mon, 10 Jul 2023 19:21:21 GMT
cache-control: max-age=31536000
expires: Wed, 07 Aug 2024 13:59:48 GMT
etag: "64ac5a31-2baea8"
x-powered-by: PleskLin
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BHkPVLvOH_ixeHgwfdFNkyrB2DSE9e6jeH0SfCrkdz16P5sm_ge13g==
age: 10577110
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702080304523&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1706201029.1702080305&ul=en-us&sr=1280x1024&_s=1&sid=1702080305&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145422847_90701651-8fbf-482e-9dfb-86905eee032d%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2117
216.239.32.36204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702080304523&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1706201029.1702080305&ul=en-us&sr=1280x1024&_s=1&sid=1702080305&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145422847_90701651-8fbf-482e-9dfb-86905eee032d%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2117
IP 216.239.32.36:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702080304523&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1706201029.1702080305&ul=en-us&sr=1280x1024&_s=1&sid=1702080305&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145422847_90701651-8fbf-482e-9dfb-86905eee032d%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2117 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Sat, 09 Dec 2023 00:04:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z8811578897&_p=1702080304523&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1706201029.1702080305&ul=en-us&sr=1280x1024&_s=3&sid=1702080305&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145422847_90701651-8fbf-482e-9dfb-86905eee032d%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=Click%20Report&tfd=2145
216.239.32.36204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z8811578897&_p=1702080304523&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1706201029.1702080305&ul=en-us&sr=1280x1024&_s=3&sid=1702080305&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145422847_90701651-8fbf-482e-9dfb-86905eee032d%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=Click%20Report&tfd=2145
IP 216.239.32.36:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z8811578897&_p=1702080304523&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1706201029.1702080305&ul=en-us&sr=1280x1024&_s=3&sid=1702080305&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145422847_90701651-8fbf-482e-9dfb-86905eee032d%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=Click%20Report&tfd=2145 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Sat, 09 Dec 2023 00:04:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702080304523&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1706201029.1702080305&ul=en-us&sr=1280x1024&_s=4&sid=1702080305&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145422847_90701651-8fbf-482e-9dfb-86905eee032d%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=awn_aware&_c=1&tfd=2145
216.239.32.36204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702080304523&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1706201029.1702080305&ul=en-us&sr=1280x1024&_s=4&sid=1702080305&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145422847_90701651-8fbf-482e-9dfb-86905eee032d%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=awn_aware&_c=1&tfd=2145
IP 216.239.32.36:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702080304523&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1706201029.1702080305&ul=en-us&sr=1280x1024&_s=4&sid=1702080305&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145422847_90701651-8fbf-482e-9dfb-86905eee032d%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=awn_aware&_c=1&tfd=2145 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Sat, 09 Dec 2023 00:04:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702080304523&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1706201029.1702080305&ul=en-us&sr=1280x1024&_s=2&sid=1702080305&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145422847_90701651-8fbf-482e-9dfb-86905eee032d%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=Click%20Report&tfd=2136
216.239.32.36204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702080304523&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1706201029.1702080305&ul=en-us&sr=1280x1024&_s=2&sid=1702080305&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145422847_90701651-8fbf-482e-9dfb-86905eee032d%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=Click%20Report&tfd=2136
IP 216.239.32.36:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702080304523&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1706201029.1702080305&ul=en-us&sr=1280x1024&_s=2&sid=1702080305&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145422847_90701651-8fbf-482e-9dfb-86905eee032d%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=Click%20Report&tfd=2136 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Sat, 09 Dec 2023 00:04:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/engines/hls_video.js
151.101.130.132200 OK 118 kB URL GET HTTP/2 fast.wistia.com/assets/external/engines/hls_video.js
IP 151.101.130.132:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 118 kB (117668 bytes)
Hash 6e1e307293f078c95c07db8660ce607a
2a08bcf1166c9707485e568102f7c96e1f933b36
f0150171f993137d09210b10e0629ea4d57a465046ba791adb4bf4a2da978357
GET /assets/external/engines/hls_video.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Thu, 07 Dec 2023 18:55:59 GMT
etag: "5258bd9b9f222d0dd6df0056cd2b7524"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Sat, 09 Dec 2023 00:04:59 GMT
age: 569
x-served-by: cache-iad-kcgs7200099-IAD, cache-bma1672-BMA
x-cache: HIT, HIT
x-cache-hits: 64, 6
x-timer: S1702080299.085956,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
asset-version: cc9ded0077d16f0d56c3b38f358a76e310b0eefb
content-length: 117668
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/proaejvpra.m3u8
151.101.130.132200 OK 758 B URL GET HTTP/2 fast.wistia.com/embed/medias/proaejvpra.m3u8
IP 151.101.130.132:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
Hash 2a4e4559920c8263242d644b386e01d6
f00611eb21e5ec80125bf94a5232aaa236174810
22c3966347173e619aed810217d2ceb48d595b8ad49f391b3fec84e1400a0590
GET /embed/medias/proaejvpra.m3u8 HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/x-mpegURL
server: envoy
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, no-cache
etag: W/"22c3966347173e619aed810217d2ceb4"
x-request-id: 84ffbd28-b1d0-4c64-8dc4-ad2aa7c4ab3d
x-runtime: 0.036313
x-envoy-upstream-service-time: 38
via: 1.1 10a9e9969f05a75cc05e6f70b8499f7e.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish
x-amz-cf-pop: IAD89-C3
x-amz-cf-id: TZjyRT8N69dHN38Zd--VAm6gynfIFk9p3VbjrNPsDS8o3_jljXHmeg==
accept-ranges: bytes
date: Sat, 09 Dec 2023 00:04:59 GMT
age: 302
x-served-by: cache-iad-kjyo7100127-IAD, cache-bma1672-BMA
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 1754, 1
x-timer: S1702080299.250092,VS0,VE1
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 758
X-Firefox-Spdy: h2
fast.wistia.com/assets/images/blank.gif
151.101.130.132200 OK 1.2 kB URL GET HTTP/2 fast.wistia.com/assets/images/blank.gif
IP 151.101.130.132:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type GIF image data, version 89a, 100 x 100\012- data
Hash fbdc4ed9a1e2ee4917a265306927bcf1
6d177725d8230df0457e72004080f712e26fe624
a78759ea185fd0fa42ca9be1fc5bca4d3167a2836dc6c85e479a19dbf57fe2c2
GET /assets/images/blank.gif HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Wed, 10 May 2023 19:48:54 GMT
etag: "fbdc4ed9a1e2ee4917a265306927bcf1"
x-amz-server-side-encryption: AES256
content-type: image/gif
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Sat, 09 Dec 2023 00:04:59 GMT
age: 2093
x-served-by: cache-iad-kcgs7200077-IAD, cache-bma1639-BMA
x-cache: HIT, HIT
x-cache-hits: 37, 24
x-timer: S1702080299.259875,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 1214
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-9JTVKL1Z3C
142.250.74.104200 OK 84 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-9JTVKL1Z3C
IP 142.250.74.104:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (7711)
Hash 9a309e8af5a26fa62643fcb70f6c5686
52f7d230325278abf2f677a108aa1ac3ccb529d2
93ef39a8b90ed683ffb10b2fbbfd2b7cb1fafd3d2b2733c74d37b769f3df896d
GET /gtag/js?id=G-9JTVKL1Z3C HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 09 Dec 2023 00:04:59 GMT
expires: Sat, 09 Dec 2023 00:04:59 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 84033
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=G-9JTVKL1Z3C&l=dataLayer&cx=c
142.250.74.104200 OK 84 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-9JTVKL1Z3C&l=dataLayer&cx=c
IP 142.250.74.104:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (7711)
Hash f8ca321407eb2a4892273a2a3163071a
f0ff3467866dc0c62f3dd4b33a10d8a3c2d80189
b64879af695b202fdd64f0b9454f44ece3703f26a7372be262f4c946119da631
GET /gtag/js?id=G-9JTVKL1Z3C&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 09 Dec 2023 00:04:59 GMT
expires: Sat, 09 Dec 2023 00:04:59 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 84067
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
embed-cloudfront.wistia.com/deliveries/e8b37c064b8df38997baabe74e65450d89db6493.m3u8
143.204.55.103200 OK 114 kB URL GET HTTP/2 embed-cloudfront.wistia.com/deliveries/e8b37c064b8df38997baabe74e65450d89db6493.m3u8
IP 143.204.55.103:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerAmazon
Subject*.wistia.com
FingerprintD8:FE:AD:15:AC:4F:2E:60:82:4B:4E:8A:6C:51:6D:3D:60:A2:67:03
ValidityTue, 31 Jan 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT
Size 114 kB (114053 bytes)
Hash fbad419048953b789daaf102ea77c1f0
45da563a39aefb49dee084da889a3a53ba8c669f
b2802e5f5180830c1fe9a32ad28a872d171466f13f47562d7e275ac3dd556a4d
GET /deliveries/e8b37c064b8df38997baabe74e65450d89db6493.m3u8 HTTP/1.1
Host: embed-cloudfront.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/vnd.apple.mpegurl
content-length: 114053
server: envoy
date: Tue, 05 Dec 2023 07:41:57 GMT
expires: Wed, 04 Dec 2024 07:41:57 GMT
cache-control: max-age=31536000
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: e8b37c064b8df38997baabe74e65450d89db6493-hls-segment
surrogate-key: e8b37c064b8df38997baabe74e65450d89db6493-hls-segment
accept-ranges: bytes
x-envoy-upstream-service-time: 335
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: V-gPe2bD4QcF-ehm_e2Nkppi21bXRM9yiwzljD6wgposAgUV6fBhxQ==
age: 318182
x-cdn: cloudfront
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range,x-cdn
X-Firefox-Spdy: h2
embed-cloudfront.wistia.com/deliveries/e8b37c064b8df38997baabe74e65450d89db6493.m3u8/seg-1-v1-a1.ts
143.204.55.103200 OK 927 kB URL GET HTTP/2 embed-cloudfront.wistia.com/deliveries/e8b37c064b8df38997baabe74e65450d89db6493.m3u8/seg-1-v1-a1.ts
IP 143.204.55.103:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerAmazon
Subject*.wistia.com
FingerprintD8:FE:AD:15:AC:4F:2E:60:82:4B:4E:8A:6C:51:6D:3D:60:A2:67:03
ValidityTue, 31 Jan 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT
File type MPEG transport stream data\012- data
Size 927 kB (926840 bytes)
Hash e456fd001793139e55bdc0b5ac5d13f0
44708eac468a0d809ee890e27bf732e480d25886
ff62073afa299b289e96fcc74d92a3cfe50bef680f4c700237f3bdc65e823d57
GET /deliveries/e8b37c064b8df38997baabe74e65450d89db6493.m3u8/seg-1-v1-a1.ts HTTP/1.1
Host: embed-cloudfront.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: video/MP2T
content-length: 926840
server: envoy
date: Tue, 05 Dec 2023 12:23:49 GMT
expires: Wed, 04 Dec 2024 12:23:49 GMT
cache-control: max-age=31536000
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: e8b37c064b8df38997baabe74e65450d89db6493-hls-segment
surrogate-key: e8b37c064b8df38997baabe74e65450d89db6493-hls-segment
accept-ranges: bytes
x-envoy-upstream-service-time: 818
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wz0FXYv1QGQswjDvkEkr-18j1aqKxXl9GKmgECJ5YVwKqaig6AxapA==
age: 301270
x-cdn: cloudfront
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range,x-cdn
X-Firefox-Spdy: h2
pipedream.wistia.com/mput?topic=metrics
143.204.55.103200 OK 2 B URL POST HTTP/2 pipedream.wistia.com/mput?topic=metrics
IP 143.204.55.103:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerAmazon
Subject*.wistia.com
FingerprintD8:FE:AD:15:AC:4F:2E:60:82:4B:4E:8A:6C:51:6D:3D:60:A2:67:03
ValidityTue, 31 Jan 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 987
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 2
date: Sat, 09 Dec 2023 00:04:59 GMT
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
x-envoy-upstream-service-time: 1
server: envoy
x-cache: Miss from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: j3N6XyJrG9qDmLxy9ucw0tPLaDM-oVE-fvI1lVFWeGcNFQhjkJa8jA==
X-Firefox-Spdy: h2
embed-cloudfront.wistia.com/deliveries/d96b0bae11894fc5bf01f51d8f529473a4f00828.m3u8
143.204.55.103200 OK 114 kB URL GET HTTP/2 embed-cloudfront.wistia.com/deliveries/d96b0bae11894fc5bf01f51d8f529473a4f00828.m3u8
IP 143.204.55.103:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerAmazon
Subject*.wistia.com
FingerprintD8:FE:AD:15:AC:4F:2E:60:82:4B:4E:8A:6C:51:6D:3D:60:A2:67:03
ValidityTue, 31 Jan 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT
Size 114 kB (114053 bytes)
Hash e50cb06a3110b4ed76e6c7b787b0f222
3308e3525bcc516eab01e940cd843ec6be44da84
215c947becd470b83177ac24212e467a3e0a4764e46ce3671332b546ae6ccde4
GET /deliveries/d96b0bae11894fc5bf01f51d8f529473a4f00828.m3u8 HTTP/1.1
Host: embed-cloudfront.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/vnd.apple.mpegurl
content-length: 114053
server: envoy
date: Tue, 05 Dec 2023 07:41:23 GMT
expires: Wed, 04 Dec 2024 07:41:23 GMT
cache-control: max-age=31536000
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: d96b0bae11894fc5bf01f51d8f529473a4f00828-hls-segment
surrogate-key: d96b0bae11894fc5bf01f51d8f529473a4f00828-hls-segment
accept-ranges: bytes
x-envoy-upstream-service-time: 307
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eb0jK_eSv5BgVord54w2SOFoHjdvDkCOq2gxgxEX2U5NFQlbveqY5Q==
age: 318216
x-cdn: cloudfront
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range,x-cdn
X-Firefox-Spdy: h2
distillery.wistia.com/x
54.230.111.67204 No Content 0 B IP 54.230.111.67:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerAmazon
Subjectstats-tap-production-cloudfront-app-cname.wistia.com
Fingerprint37:C6:AB:79:1C:DF:9B:5E:3A:B8:3E:F1:0C:1D:48:BF:89:2D:1F:40
ValidityWed, 13 Sep 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x HTTP/1.1
Host: distillery.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1846
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 09 Dec 2023 00:04:59 GMT
access-control-allow-origin: *
cache-control: max-age=0, private, must-revalidate
server: envoy
x-envoy-upstream-service-time: 2
x-cache: Miss from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: p5E6Z9pAMdmSEN7KsfxYIsXM4bt4ri3AcQZyYeD0AuDydnhkU4FB8w==
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/allIntegrations.js
151.101.130.132200 OK 5.8 kB URL GET HTTP/2 fast.wistia.com/assets/external/allIntegrations.js
IP 151.101.130.132:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type ASCII text, with very long lines (23371)
Hash 9a9248fb8178a9640de37511b065850f
086459b7f718251f753b82cee05f51c6ca2d3a84
fb7f597f64e9b0c17f7f99fb577f164c36f93f13ffda2ccb736b786e4e705d12
GET /assets/external/allIntegrations.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Thu, 07 Dec 2023 18:55:59 GMT
etag: "2de48c3cd29dd8ca8c43042875b49727"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Sat, 09 Dec 2023 00:04:59 GMT
age: 490
x-served-by: cache-iad-kcgs7200101-IAD, cache-bma1672-BMA
x-cache: HIT, HIT
x-cache-hits: 65, 4
x-timer: S1702080300.909137,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
asset-version: cc9ded0077d16f0d56c3b38f358a76e310b0eefb
content-length: 5774
X-Firefox-Spdy: h2
pipedream.wistia.com/mput?topic=metrics
143.204.55.103200 OK 2 B URL POST HTTP/2 pipedream.wistia.com/mput?topic=metrics
IP 143.204.55.103:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerAmazon
Subject*.wistia.com
FingerprintD8:FE:AD:15:AC:4F:2E:60:82:4B:4E:8A:6C:51:6D:3D:60:A2:67:03
ValidityTue, 31 Jan 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1530
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 2
date: Sat, 09 Dec 2023 00:04:59 GMT
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
x-envoy-upstream-service-time: 1
server: envoy
x-cache: Miss from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EAa97rXrrGJ2xzSQ6amEGCV8jzOOvYszpDyBG9qsRDiJXeR8QM5mOA==
X-Firefox-Spdy: h2
api.getblueshift.com/unity.gif?t=1702080306&e=pageload&r=&z=22836&x=59976d352f424c4b27d325518576b9b2&k=f32ad326-eb6a-b086-0113-911aee918730&u=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145422847_90701651-8fbf-482e-9dfb-86905eee032d%26h%3Dtrue
44.226.101.178200 OK 42 B URL GET HTTP/2 api.getblueshift.com/unity.gif?t=1702080306&e=pageload&r=&z=22836&x=59976d352f424c4b27d325518576b9b2&k=f32ad326-eb6a-b086-0113-911aee918730&u=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145422847_90701651-8fbf-482e-9dfb-86905eee032d%26h%3Dtrue
IP 44.226.101.178:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerAmazon
Subject*.getblueshift.com
Fingerprint53:0D:6B:AE:94:24:EE:BE:0F:BD:6E:C6:61:2F:FD:37:71:D2:21:0F
ValidityThu, 09 Mar 2023 00:00:00 GMT - Sat, 06 Apr 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /unity.gif?t=1702080306&e=pageload&r=&z=22836&x=59976d352f424c4b27d325518576b9b2&k=f32ad326-eb6a-b086-0113-911aee918730&u=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145422847_90701651-8fbf-482e-9dfb-86905eee032d%26h%3Dtrue HTTP/1.1
Host: api.getblueshift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 00:05:00 GMT
content-type: image/gif
content-length: 42
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: etag
access-control-allow-origin: https://pro.paradigmnewsletters.org
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702080304523&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1706201029.1702080305&ul=en-us&sr=1280x1024&sid=1702080305&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145422847_90701651-8fbf-482e-9dfb-86905eee032d%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&_s=5&tfd=7510
216.239.32.36204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702080304523&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1706201029.1702080305&ul=en-us&sr=1280x1024&sid=1702080305&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145422847_90701651-8fbf-482e-9dfb-86905eee032d%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&_s=5&tfd=7510
IP 216.239.32.36:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702080304523&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1706201029.1702080305&ul=en-us&sr=1280x1024&sid=1702080305&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145422847_90701651-8fbf-482e-9dfb-86905eee032d%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&_s=5&tfd=7510 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 173
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Sat, 09 Dec 2023 00:05:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702080304523&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1706201029.1702080305&ul=en-us&sr=1280x1024&_s=6&sid=1702080305&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145422847_90701651-8fbf-482e-9dfb-86905eee032d%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=Engagement&tfd=11983
216.239.32.36 0 B URL region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702080304523&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1706201029.1702080305&ul=en-us&sr=1280x1024&_s=6&sid=1702080305&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145422847_90701651-8fbf-482e-9dfb-86905eee032d%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=Engagement&tfd=11983
IP 216.239.32.36:0
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702080304523&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1706201029.1702080305&ul=en-us&sr=1280x1024&_s=6&sid=1702080305&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145422847_90701651-8fbf-482e-9dfb-86905eee032d%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=Engagement&tfd=11983 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Sat, 09 Dec 2023 00:05:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.googleapis.com/css2?family=Open+Sans:wght@400;700&family=Oswald:wght@700&display=swap
142.250.74.106200 OK 7.7 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Open+Sans:wght@400;700&family=Oswald:wght@700&display=swap
IP 142.250.74.106:443
Requested by https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145422847_90701651-8fbf-482e-9dfb-86905eee032d&h=true
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
File type ASCII text, with very long lines (7911), with no line terminators
Hash 36f9778b3a89940407bb2ece5494ed01
53ca22dd5e7c4a5ed44ba8db1a9928e27198f082
ed657c2fe5946726b5d3cc3ff56445ff4341254066069b1c65560b456714ba12
GET /css2?family=Open+Sans:wght@400;700&family=Oswald:wght@700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 09 Dec 2023 00:04:57 GMT
date: Sat, 09 Dec 2023 00:04:57 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
verifiedwebpage.com/go?ehash=b9fbce86162ef34d582eb84a13dcfe28&product=32827&ar=48&cid=139350&lid=6957ba18feb5c33b553f6ad514ca900e&slhash=63293&mtaid=[s7]&cid2=[s8]
188.114.97.1302 Found 0 B URL User Request GET HTTP/2 verifiedwebpage.com/go?ehash=b9fbce86162ef34d582eb84a13dcfe28&product=32827&ar=48&cid=139350&lid=6957ba18feb5c33b553f6ad514ca900e&slhash=63293&mtaid=[s7]&cid2=[s8]
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectverifiedwebpage.com
Fingerprint0D:F8:EF:F4:23:CD:FB:7E:DE:C7:29:3C:B4:F7:A4:CE:6A:FB:89:AB
ValiditySat, 14 Oct 2023 13:52:56 GMT - Fri, 12 Jan 2024 13:52:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go?ehash=b9fbce86162ef34d582eb84a13dcfe28&product=32827&ar=48&cid=139350&lid=6957ba18feb5c33b553f6ad514ca900e&slhash=63293&mtaid=[s7]&cid2=[s8] HTTP/1.1
Host: verifiedwebpage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 09 Dec 2023 00:04:54 GMT
content-type: text/html; charset=UTF-8
location: http://470kwc1.com/clk.trk?CID=465853&AFID=430135&SID=3415259331988293675
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=d62080073741d2ef87c6184e237d23e9; path=/
pixel_session_hash_32827=3415259331988293675; expires=Mon, 08-Jan-2024 00:04:53 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=None
bt_tracking_product_32827=bf1761e14a818c3ca5477fdf9d7968508fb92bef9de68c274317a4f7713db21f; expires=Mon, 11-Dec-2023 00:04:53 GMT; Max-Age=172800
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NIAGX5yLDPd%2FT02QTjgNS20I03yNIJispt2I6pbguxGYT6SERblfKvYzrHpegie9t834LrWCDzFFYTXm37G79FJ61QubVvsvzDdcOXj1NIXQtt0psJ0jISyHkrEdl2D3rZxvAM9G"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8328fe4adfbcb512-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
click.thedailymoneytips.com/sadoomsday6mf1023/b9fbce86162ef34d582eb84a13dcfe28/48/1990834045/139350/6957ba18feb5c33b553f6ad514ca900e/63293
172.67.166.218302 Found 0 B URL User Request GET HTTP/2 click.thedailymoneytips.com/sadoomsday6mf1023/b9fbce86162ef34d582eb84a13dcfe28/48/1990834045/139350/6957ba18feb5c33b553f6ad514ca900e/63293
IP 172.67.166.218:443
Certificate IssuerLet's Encrypt
Subjectthedailymoneytips.com
Fingerprint79:EC:85:19:05:49:AD:6B:8A:A1:90:4E:B9:8D:91:79:4B:F6:6C:79
ValidityWed, 25 Oct 2023 16:41:13 GMT - Tue, 23 Jan 2024 16:41:12 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sadoomsday6mf1023/b9fbce86162ef34d582eb84a13dcfe28/48/1990834045/139350/6957ba18feb5c33b553f6ad514ca900e/63293 HTTP/1.1
Host: click.thedailymoneytips.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 09 Dec 2023 00:04:53 GMT
content-type: text/html; charset=UTF-8
location: https://verifiedwebpage.com/go?ehash=b9fbce86162ef34d582eb84a13dcfe28&product=32827&ar=48&cid=139350&lid=6957ba18feb5c33b553f6ad514ca900e&slhash=63293&mtaid=[s7]&cid2=[s8]
cache-control: max-age=600
expires: Sat, 09 Dec 2023 00:14:52 GMT
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9mxvgE2AKfzjQMthbuTJQtze6425KJYlDYNw1RqUEtT%2BUaQj3defEyYXLKBupG9I24Y7vAr8cWmTSpju92itTkfpNzE2kl4Nz7FxHA2KeN2xMZctS9Q%2FnnognPcEMFRyagk63Rx7Ok0f5Zl9HYg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8328fe466831b521-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2